jaredandClaude Opus 5.5
e32499b7f6
Lint / Python (flake8) (pull_request) Successful in 2m6s
Lint / JS (eslint) (pull_request) Successful in 18s
Lint / Notify on failure (pull_request) Skipped
Lint / Deploy (pull_request) Skipped
Security / Python Security (bandit) (pull_request) Successful in 2m11s
Test / Python Tests (pytest) (pull_request) Successful in 2m20s
Lint / JS (eslint) (push) Successful in 10s
Lint / Python (flake8) (push) Successful in 1m58s
Lint / Notify on failure (push) Skipped
Security / Python Security (bandit) (push) Successful in 1m58s
Lint / Deploy (push) Successful in 4s
Test / Python Tests (pytest) (push) Successful in 58s
Modem and WAN: - Poll the BGW320 status pages read-only for light levels, PON and WAN state, with a WAN / Fiber panel, 7-day Rx trend, and alerts on WAN down, optical limits, and Rx drift - Read WAN outages and Smart Power restarts from the UniFi system log, since outages can be over between 5 minute polls Device pages: - Add device search to the dashboard and a page per host, switch, router, AP, PDU, or modem - Move all Link Debug data into expandable rows there; /links redirects - Collect UDM ports and UniFi device details (firmware, load, WAN, outlets) - Reorder the dashboard Monitoring fixes: - Alert when a configured host stops reporting: its series disappear rather than reporting down, so a dead host never raised an alert - Alert on Prometheus outages instead of blanking the dashboard - Treat a failed Pulse ping as unknown rather than host unreachable - Stop new switch ports reporting lifetime bytes as one interval's rate - Run database sessions in UTC: other server time zones shifted displayed ages and timed suppression expiries Also log every avatar 404 reason, add a favicon, and correct the WAN link labels (1G on Port 9, not 10G SFP+). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1505 lines
66 KiB
Python
1505 lines
66 KiB
Python
#!/usr/bin/env python3
|
||
"""Gandalf network monitor daemon.
|
||
|
||
Polls Prometheus (node_exporter) and the UniFi controller for network
|
||
interface and device state. Creates tickets in Tinker Tickets when issues
|
||
are detected, with deduplication and suppression support.
|
||
|
||
Run as a separate systemd service alongside the Flask web app.
|
||
"""
|
||
import json
|
||
import logging
|
||
import re
|
||
import shlex
|
||
import statistics
|
||
import time
|
||
from datetime import datetime, timezone
|
||
from typing import Dict, List, Optional
|
||
from urllib.parse import urlparse
|
||
|
||
import requests
|
||
from urllib3.exceptions import InsecureRequestWarning
|
||
|
||
import db
|
||
import modem as modem_api
|
||
|
||
|
||
logging.basicConfig(
|
||
level=logging.INFO,
|
||
format='%(asctime)s %(levelname)s %(name)s %(message)s',
|
||
)
|
||
logger = logging.getLogger('gandalf.monitor')
|
||
|
||
# --------------------------------------------------------------------------
|
||
# Interface filtering
|
||
# --------------------------------------------------------------------------
|
||
_SKIP_PREFIXES = (
|
||
'lo', 'veth', 'tap', 'fwbr', 'fwln', 'fwpr',
|
||
'docker', 'dummy', 'br-', 'virbr', 'vmbr',
|
||
)
|
||
_VLAN_SUFFIX = re.compile(r'\.\d+$')
|
||
|
||
|
||
def is_physical_interface(name: str) -> bool:
|
||
"""Return True for physical/bond interfaces worth monitoring."""
|
||
if any(name.startswith(p) for p in _SKIP_PREFIXES):
|
||
return False
|
||
if _VLAN_SUFFIX.search(name):
|
||
return False
|
||
return True
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# Prometheus client
|
||
# --------------------------------------------------------------------------
|
||
class PrometheusClient:
|
||
def __init__(self, url: str):
|
||
self.url = url.rstrip('/')
|
||
|
||
def _fetch(self, promql: str) -> Optional[list]:
|
||
"""Return query results, or None if the query itself failed."""
|
||
try:
|
||
resp = requests.get(
|
||
f'{self.url}/api/v1/query',
|
||
params={'query': promql},
|
||
timeout=15,
|
||
)
|
||
resp.raise_for_status()
|
||
data = resp.json()
|
||
if data.get('status') == 'success':
|
||
return data['data']['result']
|
||
logger.error(f'Prometheus query unsuccessful ({promql!r}): {data}')
|
||
except Exception as e:
|
||
logger.error(f'Prometheus query failed ({promql!r}): {e}')
|
||
return None
|
||
|
||
def query(self, promql: str) -> list:
|
||
return self._fetch(promql) or []
|
||
|
||
def get_interface_states(self) -> Optional[Dict[str, Dict[str, bool]]]:
|
||
"""Return {instance: {device: is_up}} for physical interfaces.
|
||
|
||
Returns None when Prometheus can't answer or has no series at all, so
|
||
callers can tell "we can't see anything" apart from "this host is gone".
|
||
"""
|
||
results = self._fetch('node_network_up')
|
||
if not results:
|
||
return None
|
||
hosts: Dict[str, Dict[str, bool]] = {}
|
||
for r in results:
|
||
instance = r['metric'].get('instance', '')
|
||
device = r['metric'].get('device', '')
|
||
if not is_physical_interface(device):
|
||
continue
|
||
hosts.setdefault(instance, {})[device] = (r['value'][1] == '1')
|
||
return hosts
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# UniFi client
|
||
# --------------------------------------------------------------------------
|
||
class UnifiClient:
|
||
# Devices whose port tables are collected: switches and the gateway/router
|
||
_PORT_DEVICE_TYPES = ('usw', 'udm', 'ugw', 'uxg')
|
||
_SYSTEM_LOG_MAX_PAGES = 10
|
||
|
||
def __init__(self, cfg: dict):
|
||
self.base_url = cfg['controller']
|
||
self.site_id = cfg.get('site_id', 'default')
|
||
self.session = requests.Session()
|
||
self.session.verify = cfg.get('verify_ssl', True)
|
||
if not self.session.verify:
|
||
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
|
||
self.headers = {
|
||
'X-API-KEY': cfg['api_key'],
|
||
'Accept': 'application/json',
|
||
}
|
||
|
||
def get_device_details(self) -> Optional[Dict[str, dict]]:
|
||
"""Return firmware, load, WAN, and outlet details per device name.
|
||
|
||
Uses the v1 stat API, the only one that includes these fields.
|
||
"""
|
||
try:
|
||
url = f'{self.base_url}/proxy/network/api/s/{self.site_id}/stat/device'
|
||
resp = self.session.get(url, headers=self.headers, timeout=15)
|
||
resp.raise_for_status()
|
||
return {
|
||
d.get('name') or d.get('mac', 'unknown'): self._device_detail(d)
|
||
for d in resp.json().get('data', [])
|
||
}
|
||
except Exception as e:
|
||
logger.error(f'UniFi device detail error: {e}')
|
||
return None
|
||
|
||
@staticmethod
|
||
def _device_detail(d: dict) -> dict:
|
||
def number(raw) -> Optional[float]:
|
||
try:
|
||
return float(raw)
|
||
except (TypeError, ValueError):
|
||
return None
|
||
|
||
stats = d.get('system-stats') or {}
|
||
wan = {}
|
||
for key in ('wan1', 'wan2'):
|
||
w = d.get(key) or {}
|
||
if w:
|
||
wan[key] = {
|
||
'up': w.get('up'), 'speed_mbps': w.get('speed'),
|
||
'latency_ms': w.get('latency'), 'availability': w.get('availability'),
|
||
}
|
||
return {
|
||
'firmware': d.get('version', ''),
|
||
'uptime_s': d.get('uptime'),
|
||
'cpu_pct': number(stats.get('cpu')),
|
||
'mem_pct': number(stats.get('mem')),
|
||
'clients': d.get('num_sta'),
|
||
'temps': [
|
||
{'name': t.get('name', ''), 'value_c': number(t.get('value'))}
|
||
for t in d.get('temperatures') or []
|
||
],
|
||
'wan': wan,
|
||
'power_w': number(d.get('outlet_ac_power_consumption')),
|
||
'outlets': [
|
||
{
|
||
'index': o.get('index'),
|
||
'name': o.get('name', ''),
|
||
'on': o.get('relay_state'),
|
||
'auto_power_cycle': o.get('cycle_enabled'),
|
||
'power_w': number(o.get('outlet_power')),
|
||
'current_a': number(o.get('outlet_current')),
|
||
}
|
||
for o in d.get('outlet_table') or []
|
||
],
|
||
}
|
||
|
||
def get_system_events(self, since_ms: int, keys: tuple) -> Optional[List[dict]]:
|
||
"""Return system log entries with the given keys, or None if the log is unavailable."""
|
||
url = f'{self.base_url}/proxy/network/v2/api/site/{self.site_id}/system-log/all'
|
||
found: List[dict] = []
|
||
try:
|
||
for page in range(self._SYSTEM_LOG_MAX_PAGES):
|
||
resp = self.session.post(
|
||
url, headers=self.headers, timeout=20,
|
||
json={
|
||
'timestampFrom': since_ms, 'timestampTo': int(time.time() * 1000),
|
||
'pageNumber': page, 'pageSize': 200,
|
||
},
|
||
)
|
||
resp.raise_for_status()
|
||
items = resp.json().get('data') or []
|
||
if not items:
|
||
break
|
||
for e in items:
|
||
if e.get('key') in keys and e.get('timestamp', 0) >= since_ms:
|
||
params = e.get('parameters') or {}
|
||
found.append({
|
||
'key': e['key'], 'ts': e['timestamp'] / 1000,
|
||
'device': (params.get('DEVICE') or {}).get('name', ''),
|
||
'wan': (params.get('WAN_ID') or {}).get('name', '')
|
||
or str((params.get('WAN_ID') or {}).get('id', '')),
|
||
})
|
||
return found
|
||
except Exception as e:
|
||
logger.error(f'UniFi system log error: {e}')
|
||
return None
|
||
|
||
def get_devices(self) -> Optional[List[dict]]:
|
||
"""Return list of UniFi devices, or None if the controller is unreachable."""
|
||
try:
|
||
url = f'{self.base_url}/proxy/network/v2/api/site/{self.site_id}/device'
|
||
resp = self.session.get(url, headers=self.headers, timeout=15)
|
||
resp.raise_for_status()
|
||
data = resp.json()
|
||
devices = []
|
||
for d in data.get('network_devices', []):
|
||
state = d.get('state', 1)
|
||
devices.append({
|
||
'name': d.get('name') or d.get('mac', 'unknown'),
|
||
'mac': d.get('mac', ''),
|
||
'ip': d.get('ip', ''),
|
||
'type': d.get('type', 'unknown'),
|
||
'model': d.get('model', ''),
|
||
'state': state,
|
||
'connected': state == 1,
|
||
})
|
||
return devices
|
||
except Exception as e:
|
||
logger.error(f'UniFi API error: {e}')
|
||
return None
|
||
|
||
def get_switch_ports(self) -> Optional[Dict[str, dict]]:
|
||
"""Return per-port stats for UniFi switches and routers, keyed by device name.
|
||
|
||
Uses the v1 stat API which includes full port_table data.
|
||
Returns {switch_name: {'ip': str, 'model': str, 'ports': {port_name: {...}}}}.
|
||
"""
|
||
try:
|
||
url = f'{self.base_url}/proxy/network/api/s/{self.site_id}/stat/device'
|
||
resp = self.session.get(url, headers=self.headers, timeout=15)
|
||
resp.raise_for_status()
|
||
devices = resp.json().get('data', [])
|
||
result: Dict[str, dict] = {}
|
||
for dev in devices:
|
||
if dev.get('type', '').lower() not in self._PORT_DEVICE_TYPES:
|
||
continue
|
||
sw_name = dev.get('name') or dev.get('mac', 'unknown')
|
||
sw_ip = dev.get('ip', '')
|
||
sw_model = dev.get('model', '')
|
||
ports: Dict[str, dict] = {}
|
||
# Build LLDP neighbor map (keyed by port_idx)
|
||
lldp_map: Dict[int, dict] = {}
|
||
for entry in dev.get('lldp_table', []):
|
||
pidx = entry.get('lldp_port_idx')
|
||
if pidx is not None:
|
||
lldp_map[int(pidx)] = {
|
||
'chassis_id': entry.get('chassis_id', ''),
|
||
'system_name': entry.get('system_name', ''),
|
||
'port_id': entry.get('port_id', ''),
|
||
'port_desc': entry.get('port_desc', ''),
|
||
'mgmt_ips': entry.get('management_ips', []),
|
||
}
|
||
for port in dev.get('port_table', []):
|
||
idx = port.get('port_idx', 0)
|
||
pname = port.get('name') or f'Port {idx}'
|
||
raw_poe = port.get('poe_power')
|
||
raw_poe_max = port.get('poe_max_power')
|
||
ports[pname] = {
|
||
'port_idx': idx,
|
||
'switch_ip': sw_ip,
|
||
'up': port.get('up', False),
|
||
'speed_mbps': port.get('speed', 0),
|
||
'full_duplex': port.get('full_duplex', False),
|
||
'autoneg': port.get('autoneg', False),
|
||
'is_uplink': port.get('is_uplink', False),
|
||
'media': port.get('media', ''),
|
||
'poe_power': float(raw_poe) if raw_poe is not None else None,
|
||
'poe_class': port.get('poe_class'),
|
||
'poe_max_power': float(raw_poe_max) if raw_poe_max is not None else None,
|
||
'poe_mode': port.get('poe_mode', ''),
|
||
'lldp': lldp_map.get(idx),
|
||
'tx_bytes': port.get('tx_bytes', 0),
|
||
'rx_bytes': port.get('rx_bytes', 0),
|
||
'tx_errors': port.get('tx_errors', 0),
|
||
'rx_errors': port.get('rx_errors', 0),
|
||
'tx_dropped': port.get('tx_dropped', 0),
|
||
'rx_dropped': port.get('rx_dropped', 0),
|
||
}
|
||
if ports:
|
||
result[sw_name] = {'ip': sw_ip, 'model': sw_model, 'ports': ports}
|
||
return result
|
||
except Exception as e:
|
||
logger.error(f'UniFi switch port stats error: {e}')
|
||
return None
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# Ticket client
|
||
# --------------------------------------------------------------------------
|
||
class TicketClient:
|
||
def __init__(self, cfg: dict):
|
||
self.url = cfg.get('url', '')
|
||
self.api_key = cfg.get('api_key', '')
|
||
|
||
def create(self, title: str, description: str, priority: str = '2') -> Optional[str]:
|
||
if not self.api_key or not self.url:
|
||
logger.warning('Ticket API not configured – skipping ticket creation')
|
||
return None
|
||
try:
|
||
resp = requests.post(
|
||
self.url,
|
||
json={
|
||
'title': title,
|
||
'description': description,
|
||
'status': 'Open',
|
||
'priority': priority,
|
||
'category': 'Network',
|
||
'type': 'Issue',
|
||
},
|
||
headers={'Authorization': f'Bearer {self.api_key}'},
|
||
timeout=15,
|
||
)
|
||
resp.raise_for_status()
|
||
data = resp.json()
|
||
if data.get('success'):
|
||
tid = data.get('ticket_id')
|
||
if not tid:
|
||
logger.warning(f'Ticket API success but no ticket_id in response: {data}')
|
||
return None
|
||
logger.info(f'Created ticket #{tid}: {title}')
|
||
return tid
|
||
if data.get('existing_ticket_id'):
|
||
logger.info(f'Duplicate suppressed by API – existing #{data["existing_ticket_id"]}')
|
||
return data['existing_ticket_id']
|
||
logger.warning(f'Unexpected ticket API response: {data}')
|
||
except Exception as e:
|
||
logger.error(f'Ticket creation failed: {e}')
|
||
return None
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# Pulse HTTP client (delegates SSH commands to Pulse worker)
|
||
# --------------------------------------------------------------------------
|
||
class PulseClient:
|
||
"""Submit a command to a Pulse worker via the internal M2M API and poll for result."""
|
||
|
||
def __init__(self, cfg: dict):
|
||
p = cfg.get('pulse', {})
|
||
self.url = p.get('url', '').rstrip('/')
|
||
self.api_key = p.get('api_key', '')
|
||
self.worker_id = p.get('worker_id', '')
|
||
self.timeout = p.get('timeout', 45)
|
||
self.last_execution_id: Optional[str] = None
|
||
self.session = requests.Session()
|
||
self.session.headers.update({
|
||
'X-Gandalf-API-Key': self.api_key,
|
||
'Content-Type': 'application/json',
|
||
})
|
||
|
||
def run_command(self, command: str, _retry: bool = True) -> Optional[str]:
|
||
"""Submit *command* to Pulse, poll until done, return stdout or None.
|
||
|
||
Retries once automatically on transient submit failures or timeouts.
|
||
"""
|
||
self.last_execution_id = None
|
||
if not self.url or not self.api_key or not self.worker_id:
|
||
return None
|
||
|
||
# Submit
|
||
try:
|
||
resp = self.session.post(
|
||
f'{self.url}/api/internal/command',
|
||
json={'worker_id': self.worker_id, 'command': command},
|
||
timeout=10,
|
||
)
|
||
resp.raise_for_status()
|
||
execution_id = resp.json().get('execution_id')
|
||
if not execution_id:
|
||
logger.error('Pulse submit response missing execution_id')
|
||
return None
|
||
self.last_execution_id = execution_id
|
||
except Exception as e:
|
||
logger.error(f'Pulse command submit failed: {e}')
|
||
if _retry:
|
||
logger.info('Retrying Pulse command submit in 5s...')
|
||
time.sleep(5)
|
||
return self.run_command(command, _retry=False)
|
||
return None
|
||
|
||
# Poll
|
||
deadline = time.time() + self.timeout
|
||
while time.time() < deadline:
|
||
time.sleep(2)
|
||
try:
|
||
r = self.session.get(
|
||
f'{self.url}/api/internal/executions/{execution_id}',
|
||
timeout=10,
|
||
)
|
||
r.raise_for_status()
|
||
data = r.json()
|
||
status = data.get('status')
|
||
if status == 'completed':
|
||
logs = data.get('logs', [])
|
||
for entry in logs:
|
||
if entry.get('action') == 'command_result':
|
||
return entry.get('stdout', '')
|
||
return ''
|
||
if status in ('failed', 'timed_out', 'cancelled'):
|
||
logger.error(
|
||
f'Pulse execution {execution_id} ended with status={status!r}; '
|
||
f'view at {self.url}/executions/{execution_id}'
|
||
)
|
||
if _retry and status != 'cancelled':
|
||
logger.info('Retrying failed Pulse command in 5s...')
|
||
time.sleep(5)
|
||
return self.run_command(command, _retry=False)
|
||
return None
|
||
except Exception as e:
|
||
logger.error(f'Pulse poll failed for {execution_id}: {e}')
|
||
|
||
logger.warning(
|
||
f'Pulse command timed out after {self.timeout}s '
|
||
f'(execution_id={execution_id}); '
|
||
f'view at {self.url}/executions/{execution_id}'
|
||
)
|
||
if _retry:
|
||
logger.info('Retrying timed-out Pulse command in 5s...')
|
||
time.sleep(5)
|
||
return self.run_command(command, _retry=False)
|
||
return None
|
||
|
||
def ping(self, ip: str, count: int = 3, timeout: int = 2) -> Optional[bool]:
|
||
"""Ping *ip* via the Pulse worker.
|
||
|
||
Returns True/False for the host's reachability, or None if Pulse itself
|
||
couldn't run the check, which says nothing about the host.
|
||
"""
|
||
ip_q = shlex.quote(ip)
|
||
output = self.run_command(
|
||
f'ping -c {count} -W {timeout} {ip_q} >/dev/null 2>&1 && echo REACHABLE || echo UNREACHABLE'
|
||
)
|
||
if output is None:
|
||
return None
|
||
return output.strip() == 'REACHABLE'
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# Link stats collector (ethtool + Prometheus traffic metrics)
|
||
# --------------------------------------------------------------------------
|
||
class LinkStatsCollector:
|
||
"""Collects detailed per-interface statistics via SSH (ethtool) and Prometheus,
|
||
plus per-port stats from UniFi switches."""
|
||
|
||
def __init__(self, cfg: dict, prom: 'PrometheusClient',
|
||
unifi: Optional['UnifiClient'] = None):
|
||
self.cfg = cfg
|
||
self.prom = prom
|
||
self.pulse = PulseClient(cfg)
|
||
self.unifi = unifi
|
||
# State for UniFi rate calculation (previous snapshot + timestamp)
|
||
self._prev_unifi: Dict[str, dict] = {}
|
||
self._prev_unifi_time: float = 0.0
|
||
|
||
# ------------------------------------------------------------------
|
||
# SSH collection (via Pulse worker)
|
||
# ------------------------------------------------------------------
|
||
def _ssh_batch(self, ip: str, ifaces: List[str]) -> Dict[str, dict]:
|
||
"""
|
||
Delegate one SSH session to the Pulse worker to collect ethtool + SFP DOM
|
||
data for all *ifaces*. Returns {iface: {speed_mbps, duplex, ..., sfp: {...}}}.
|
||
"""
|
||
if not ifaces or not self.pulse.url:
|
||
return {}
|
||
|
||
# Validate interface names (kernel names: [a-zA-Z0-9_.-], max 15 chars per IFNAMSIZ)
|
||
safe_ifaces = [i for i in ifaces if re.match(r'^[a-zA-Z0-9_.-]{1,15}$', i)]
|
||
if not safe_ifaces:
|
||
return {}
|
||
|
||
# Build a single shell command: for each iface output ethtool + -m with sentinels
|
||
parts = []
|
||
for iface in safe_ifaces:
|
||
q = shlex.quote(iface)
|
||
parts.append(
|
||
f'echo "___IFACE:{iface}___";'
|
||
f' ethtool {q} 2>/dev/null;'
|
||
f' echo "___DOM:{iface}___";'
|
||
f' ethtool -m {q} 2>/dev/null;'
|
||
f' echo "___END___"'
|
||
)
|
||
shell_cmd = ' '.join(parts)
|
||
|
||
ssh_cmd = (
|
||
f'ssh -o StrictHostKeyChecking=accept-new -o ConnectTimeout=5 '
|
||
f'-o BatchMode=yes -o LogLevel=ERROR '
|
||
f'-o ServerAliveInterval=10 -o ServerAliveCountMax=2 '
|
||
f'root@{ip} {shlex.quote(shell_cmd)}'
|
||
)
|
||
output = self.pulse.run_command(ssh_cmd)
|
||
if output is None:
|
||
logger.error(f'Pulse ethtool collection returned None for {ip}')
|
||
return {}
|
||
|
||
return self._parse_ssh_output(output)
|
||
|
||
@staticmethod
|
||
def _parse_ssh_output(output: str) -> Dict[str, dict]:
|
||
result: Dict[str, dict] = {}
|
||
current_iface: Optional[str] = None
|
||
current_section: Optional[str] = None
|
||
buf: List[str] = []
|
||
|
||
def flush(iface, section, lines):
|
||
if not iface or not lines:
|
||
return
|
||
text = '\n'.join(lines)
|
||
if section == 'ethtool':
|
||
result.setdefault(iface, {}).update(
|
||
LinkStatsCollector._parse_ethtool(text)
|
||
)
|
||
elif section == 'dom':
|
||
sfp = LinkStatsCollector._parse_ethtool_m(text)
|
||
if sfp:
|
||
result.setdefault(iface, {})['sfp'] = sfp
|
||
|
||
for line in output.splitlines():
|
||
if line.startswith('___IFACE:') and line.endswith('___'):
|
||
flush(current_iface, current_section, buf)
|
||
current_iface = line[9:-3]
|
||
current_section = 'ethtool'
|
||
buf = []
|
||
elif line.startswith('___DOM:') and line.endswith('___'):
|
||
flush(current_iface, current_section, buf)
|
||
current_iface = line[7:-3]
|
||
current_section = 'dom'
|
||
buf = []
|
||
elif line == '___END___':
|
||
flush(current_iface, current_section, buf)
|
||
current_iface = None
|
||
current_section = None
|
||
buf = []
|
||
else:
|
||
buf.append(line)
|
||
|
||
flush(current_iface, current_section, buf)
|
||
return result
|
||
|
||
@staticmethod
|
||
def _parse_ethtool(output: str) -> dict:
|
||
data: dict = {}
|
||
for line in output.splitlines():
|
||
if ':' not in line:
|
||
continue
|
||
key, _, val = line.partition(':')
|
||
key = key.strip()
|
||
val = val.strip()
|
||
if key == 'Speed':
|
||
m = re.match(r'(\d+)Mb/s', val)
|
||
if m:
|
||
data['speed_mbps'] = int(m.group(1))
|
||
elif key == 'Duplex':
|
||
data['duplex'] = val.lower()
|
||
elif key == 'Port':
|
||
data['port_type'] = val
|
||
elif key == 'Auto-negotiation':
|
||
data['auto_neg'] = (val.lower() == 'on')
|
||
elif key == 'Link detected':
|
||
data['link_detected'] = (val.lower() == 'yes')
|
||
return data
|
||
|
||
@staticmethod
|
||
def _parse_ethtool_m(output: str) -> dict:
|
||
"""Parse ethtool -m (SFP DOM / digital optical monitoring) output."""
|
||
if not output:
|
||
return {}
|
||
# Skip if module diagnostics unsupported
|
||
lower = output.lower()
|
||
if 'cannot get' in lower or 'not supported' in lower or 'no sfp' in lower:
|
||
return {}
|
||
|
||
data: dict = {}
|
||
for line in output.splitlines():
|
||
if ':' not in line:
|
||
continue
|
||
key, _, val = line.partition(':')
|
||
key = key.strip()
|
||
val = val.strip()
|
||
|
||
if key == 'Vendor name':
|
||
data['vendor'] = val
|
||
elif key == 'Vendor PN':
|
||
data['part_no'] = val
|
||
elif key == 'Identifier':
|
||
m = re.search(r'\((.+?)\)', val)
|
||
if m:
|
||
data['sfp_type'] = m.group(1)
|
||
elif key == 'Connector':
|
||
m = re.search(r'\((.+?)\)', val)
|
||
if m:
|
||
data['connector'] = m.group(1)
|
||
elif key == 'Laser wavelength':
|
||
m = re.match(r'(\d+)', val)
|
||
if m:
|
||
data['wavelength_nm'] = int(m.group(1))
|
||
elif key == 'Laser bias current':
|
||
# e.g. "4.340 mA"
|
||
m = re.match(r'([\d.]+)\s+mA', val)
|
||
if m:
|
||
data['bias_ma'] = float(m.group(1))
|
||
elif key == 'Laser output power':
|
||
# e.g. "0.1234 mW / -9.09 dBm"
|
||
m = re.search(r'/\s*([-\d.]+)\s*dBm', val)
|
||
if m:
|
||
try:
|
||
data['tx_power_dbm'] = float(m.group(1))
|
||
except ValueError:
|
||
pass
|
||
elif 'receiver' in key.lower() and ('power' in key.lower() or 'optical' in key.lower()):
|
||
m = re.search(r'/\s*([-\d.]+)\s*dBm', val)
|
||
if m:
|
||
try:
|
||
data['rx_power_dbm'] = float(m.group(1))
|
||
except ValueError:
|
||
pass
|
||
elif key == 'Module temperature':
|
||
# e.g. "36.00 degrees C / 96.80 degrees F"
|
||
m = re.match(r'([\d.]+)\s+degrees', val)
|
||
if m:
|
||
data['temp_c'] = float(m.group(1))
|
||
elif key == 'Module voltage':
|
||
# e.g. "3.3180 V"
|
||
m = re.match(r'([\d.]+)\s+V', val)
|
||
if m:
|
||
data['voltage_v'] = float(m.group(1))
|
||
|
||
return data
|
||
|
||
# ------------------------------------------------------------------
|
||
# Prometheus traffic / error metrics
|
||
# ------------------------------------------------------------------
|
||
def _collect_prom_metrics(self) -> Dict[str, Dict[str, dict]]:
|
||
"""Return {instance: {device: {tx_bytes_rate, rx_bytes_rate, ...}}}."""
|
||
metrics: Dict[str, Dict[str, dict]] = {}
|
||
|
||
queries = [
|
||
('tx_bytes_rate', 'rate(node_network_transmit_bytes_total[5m])'),
|
||
('rx_bytes_rate', 'rate(node_network_receive_bytes_total[5m])'),
|
||
('tx_errs_rate', 'rate(node_network_transmit_errs_total[5m])'),
|
||
('rx_errs_rate', 'rate(node_network_receive_errs_total[5m])'),
|
||
('tx_drops_rate', 'rate(node_network_transmit_drop_total[5m])'),
|
||
('rx_drops_rate', 'rate(node_network_receive_drop_total[5m])'),
|
||
('carrier_changes', 'node_network_carrier_changes_total'),
|
||
]
|
||
|
||
for field, promql in queries:
|
||
for r in self.prom.query(promql):
|
||
instance = r['metric'].get('instance', '')
|
||
device = r['metric'].get('device', '')
|
||
if not is_physical_interface(device):
|
||
continue
|
||
raw = r['value'][1]
|
||
try:
|
||
val: Optional[float] = float(raw)
|
||
if val != val: # NaN
|
||
val = None
|
||
except (ValueError, TypeError):
|
||
val = None
|
||
metrics.setdefault(instance, {}).setdefault(device, {})[field] = val
|
||
|
||
return metrics
|
||
|
||
# ------------------------------------------------------------------
|
||
# Main collection entry point
|
||
# ------------------------------------------------------------------
|
||
def collect(self, instance_map: Dict[str, str]) -> dict:
|
||
"""
|
||
Collect full link stats for all Prometheus-monitored hosts.
|
||
|
||
*instance_map*: ``{'10.10.10.2:9100': 'large1', ...}``
|
||
|
||
Returns a dict suitable for ``db.set_state('link_stats', ...)``.
|
||
"""
|
||
prom_metrics = self._collect_prom_metrics()
|
||
result_hosts: Dict[str, Dict[str, dict]] = {}
|
||
exclude_ips = set(self.cfg.get('monitor', {}).get('links_exclude_ips', []))
|
||
|
||
for instance, iface_metrics in prom_metrics.items():
|
||
host_ip = instance.split(':')[0]
|
||
if host_ip in exclude_ips:
|
||
continue
|
||
host = instance_map.get(instance, host_ip)
|
||
ifaces = list(iface_metrics.keys())
|
||
|
||
# SSH ethtool collection via Pulse worker — only for explicitly configured
|
||
# hosts (instance_map keys). Hosts like postgresql/matrix may report
|
||
# node_exporter metrics to Prometheus but don't need link diagnostics.
|
||
ethtool_data: Dict[str, dict] = {}
|
||
if self.pulse.url and ifaces and instance in instance_map:
|
||
try:
|
||
ethtool_data = self._ssh_batch(host_ip, ifaces)
|
||
except Exception as e:
|
||
logger.warning(f'ethtool collection failed for {host} ({host_ip}): {e}')
|
||
|
||
# Merge Prometheus metrics + ethtool data per interface
|
||
merged: Dict[str, dict] = {}
|
||
for iface in ifaces:
|
||
d: dict = {'host_ip': host_ip}
|
||
d.update(iface_metrics.get(iface, {}))
|
||
eth = ethtool_data.get(iface, {})
|
||
for k, v in eth.items():
|
||
if k != 'sfp':
|
||
d[k] = v
|
||
if 'sfp' in eth:
|
||
d['sfp'] = eth['sfp']
|
||
merged[iface] = d
|
||
|
||
result_hosts[host] = merged
|
||
|
||
# Collect UniFi switch port stats
|
||
unifi_switches: dict = {}
|
||
if self.unifi:
|
||
try:
|
||
raw = self.unifi.get_switch_ports()
|
||
if raw is not None:
|
||
now = time.time()
|
||
unifi_switches = self._compute_unifi_rates(raw, now)
|
||
self._prev_unifi = raw
|
||
self._prev_unifi_time = now
|
||
except Exception as e:
|
||
logger.warning(f'UniFi switch port collection failed: {e}')
|
||
|
||
unifi_devices = (self.unifi.get_device_details() or {}) if self.unifi else {}
|
||
|
||
return {
|
||
'hosts': result_hosts,
|
||
'unifi_switches': unifi_switches,
|
||
'unifi_devices': unifi_devices,
|
||
'updated': datetime.now(timezone.utc).strftime('%Y-%m-%d %H:%M:%S UTC'),
|
||
}
|
||
|
||
def _compute_unifi_rates(self, raw: Dict[str, dict], now: float) -> Dict[str, dict]:
|
||
"""Compute per-port byte/error rates from delta against previous snapshot."""
|
||
dt = now - self._prev_unifi_time if self._prev_unifi_time > 0 else 0
|
||
|
||
def rate(new_val: int, old_val: Optional[int]) -> Optional[float]:
|
||
# No earlier reading (first poll, or a new/renamed port) means no rate,
|
||
# not "all bytes since boot arrived in this one interval".
|
||
if dt <= 0 or old_val is None:
|
||
return None
|
||
return max(0.0, (new_val - old_val) / dt)
|
||
|
||
result: Dict[str, dict] = {}
|
||
for sw_name, sw_data in raw.items():
|
||
prev_ports = self._prev_unifi.get(sw_name, {}).get('ports', {})
|
||
merged_ports: Dict[str, dict] = {}
|
||
for pname, d in sw_data['ports'].items():
|
||
entry = dict(d)
|
||
prev = prev_ports.get(pname, {})
|
||
entry['tx_bytes_rate'] = rate(d['tx_bytes'], prev.get('tx_bytes'))
|
||
entry['rx_bytes_rate'] = rate(d['rx_bytes'], prev.get('rx_bytes'))
|
||
entry['tx_errs_rate'] = rate(d['tx_errors'], prev.get('tx_errors'))
|
||
entry['rx_errs_rate'] = rate(d['rx_errors'], prev.get('rx_errors'))
|
||
entry['tx_drops_rate'] = rate(d['tx_dropped'], prev.get('tx_dropped'))
|
||
entry['rx_drops_rate'] = rate(d['rx_dropped'], prev.get('rx_dropped'))
|
||
merged_ports[pname] = entry
|
||
result[sw_name] = {'ip': sw_data['ip'], 'model': sw_data['model'],
|
||
'ports': merged_ports}
|
||
return result
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# Helpers
|
||
# --------------------------------------------------------------------------
|
||
def _now_utc() -> str:
|
||
return datetime.now(timezone.utc).strftime('%Y-%m-%d %H:%M:%S UTC')
|
||
|
||
|
||
# --------------------------------------------------------------------------
|
||
# Monitor
|
||
# --------------------------------------------------------------------------
|
||
CLUSTER_NAME = 'proxmox-cluster'
|
||
|
||
|
||
class NetworkMonitor:
|
||
def __init__(self):
|
||
with open('config.json') as f:
|
||
self.cfg = json.load(f)
|
||
|
||
prom_url = self.cfg['prometheus']['url']
|
||
self.prom = PrometheusClient(prom_url)
|
||
self.unifi = UnifiClient(self.cfg['unifi'])
|
||
self.tickets = TicketClient(self.cfg.get('ticket_api', {}))
|
||
self.link_stats = LinkStatsCollector(self.cfg, self.prom, self.unifi)
|
||
self.pulse = self.link_stats.pulse # convenience alias
|
||
|
||
mon = self.cfg.get('monitor', {})
|
||
self.poll_interval = mon.get('poll_interval', 120)
|
||
self.fail_thresh = mon.get('failure_threshold', 2)
|
||
# UniFi gear (switches/APs) can take several minutes to rejoin after a
|
||
# firmware-update reboot, much longer than a Proxmox host link flap.
|
||
# Use a separate, more forgiving threshold so those momentary reboots
|
||
# don't cut tickets, while still catching genuine device failures.
|
||
self.unifi_fail_thresh = mon.get('unifi_failure_threshold', self.fail_thresh)
|
||
self.cluster_thresh = mon.get('cluster_threshold', 3)
|
||
self.cluster_name = mon.get('cluster_name', CLUSTER_NAME)
|
||
|
||
# Optional WAN modem (AT&T BGW-series); see modem.py
|
||
modem_cfg = self.cfg.get('modem') or {}
|
||
self.modem = modem_api.ModemClient(modem_cfg) if modem_cfg.get('url') else None
|
||
self.modem_name = modem_cfg.get('name', 'att-modem')
|
||
# Modem reboots (including AT&T's automatic firmware updates) take a few
|
||
# minutes, so this can be raised independently of failure_threshold.
|
||
self.modem_fail_thresh = modem_cfg.get('failure_threshold', self.fail_thresh)
|
||
self.rx_drift_db = modem_cfg.get('rx_drift_db', 3.0)
|
||
self.rx_drift_min_samples = modem_cfg.get('rx_drift_min_samples', 288)
|
||
self.modem_lan_ip = urlparse(modem_cfg['url']).hostname if modem_cfg.get('url') else ''
|
||
self._prev_modem_counters: Optional[dict] = None
|
||
self._prev_modem_time = 0.0
|
||
if self.modem:
|
||
try:
|
||
db.ensure_modem_schema()
|
||
except Exception as e:
|
||
logger.error(f'Could not create modem history table: {e}')
|
||
|
||
# Last good Prometheus result, shown (as unknown) during a Prometheus outage
|
||
self._last_iface_states: Dict[str, Dict[str, bool]] = {}
|
||
|
||
# Build Prometheus instance → hostname lookup
|
||
self._instance_map: Dict[str, str] = {
|
||
h['prometheus_instance']: h['name']
|
||
for h in self.cfg.get('hosts', [])
|
||
if 'prometheus_instance' in h
|
||
}
|
||
|
||
def _hostname(self, instance: str) -> str:
|
||
return self._instance_map.get(instance, instance.split(':')[0])
|
||
|
||
# ------------------------------------------------------------------
|
||
# Interface monitoring (Prometheus)
|
||
# ------------------------------------------------------------------
|
||
def _process_interfaces(self, states: Dict[str, Dict[str, bool]], suppressions: list) -> None:
|
||
baseline = db.get_baseline()
|
||
new_baseline = {k: dict(v) for k, v in baseline.items()}
|
||
# Only count hosts with genuine regressions (UP→DOWN) toward cluster threshold
|
||
hosts_with_regression: List[str] = []
|
||
|
||
for instance, ifaces in states.items():
|
||
if instance not in self._instance_map:
|
||
continue # skip unconfigured Prometheus instances
|
||
host = self._hostname(instance)
|
||
new_baseline.setdefault(host, {})
|
||
host_has_regression = False
|
||
|
||
for iface, is_up in ifaces.items():
|
||
prev = baseline.get(host, {}).get(iface) # 'up', 'initial_down', or None
|
||
|
||
if is_up:
|
||
new_baseline[host][iface] = 'up'
|
||
db.resolve_event('interface_down', host, iface)
|
||
else:
|
||
if prev is None:
|
||
# First observation is down – could be unused port, don't alert
|
||
new_baseline[host][iface] = 'initial_down'
|
||
|
||
elif prev == 'initial_down':
|
||
# Persistently down since first observation – no alert
|
||
pass
|
||
|
||
else: # prev == 'up'
|
||
# Regression: was UP, now DOWN
|
||
host_has_regression = True
|
||
sup = (
|
||
db.check_suppressed(suppressions, 'interface', host, iface) or
|
||
db.check_suppressed(suppressions, 'host', host)
|
||
)
|
||
event_id, is_new, consec, ticket_id = db.upsert_event(
|
||
'interface_down', 'critical', 'prometheus',
|
||
host, iface,
|
||
f'Interface {iface} on {host} went link-down ({_now_utc()})',
|
||
)
|
||
if not sup and consec >= self.fail_thresh and not ticket_id:
|
||
self._ticket_interface(event_id, host, iface, consec)
|
||
|
||
if host_has_regression:
|
||
hosts_with_regression.append(host)
|
||
|
||
# A dead host doesn't report its interfaces as down: its series just
|
||
# disappear, so a configured host that's absent needs its own check.
|
||
for instance, host in self._instance_map.items():
|
||
if instance in states:
|
||
db.resolve_event('host_metrics_missing', host, instance)
|
||
continue
|
||
hosts_with_regression.append(host)
|
||
sup = db.check_suppressed(suppressions, 'host', host)
|
||
event_id, is_new, consec, ticket_id = db.upsert_event(
|
||
'host_metrics_missing', 'critical', 'prometheus',
|
||
host, instance,
|
||
f'No metrics from {host} ({instance}): host or node_exporter is down ({_now_utc()})',
|
||
)
|
||
if not sup and consec >= self.fail_thresh and not ticket_id:
|
||
self._ticket_metrics_missing(event_id, host, instance, consec)
|
||
|
||
db.set_baseline(new_baseline)
|
||
|
||
# Cluster-wide check – only genuine regressions count
|
||
if len(hosts_with_regression) >= self.cluster_thresh:
|
||
sup = db.check_suppressed(suppressions, 'all', '')
|
||
event_id, is_new, consec, ticket_id = db.upsert_event(
|
||
'cluster_network_issue', 'critical', 'prometheus',
|
||
self.cluster_name, '',
|
||
f'{len(hosts_with_regression)} hosts with simultaneous interface or metrics failures: '
|
||
f'{", ".join(hosts_with_regression)}',
|
||
)
|
||
if not sup and (is_new or not ticket_id):
|
||
title = (
|
||
f'[{self.cluster_name}][auto][production][issue][network][cluster-wide] '
|
||
f'Multiple hosts reporting interface failures'
|
||
)
|
||
desc = (
|
||
f'Cluster Network Alert\n{"=" * 40}\n\n'
|
||
f'Affected hosts: {", ".join(hosts_with_regression)}\n'
|
||
f'Detected: {_now_utc()}\n\n'
|
||
f'{len(hosts_with_regression)} Proxmox hosts simultaneously reported '
|
||
f'interface regressions (link-down on interfaces previously known UP) '
|
||
f'or stopped reporting metrics.\n'
|
||
f'This likely indicates a switch or upstream network failure.\n\n'
|
||
f'Please check the core and management switches immediately.'
|
||
)
|
||
tid = self.tickets.create(title, desc, priority='1')
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
else:
|
||
db.resolve_event('cluster_network_issue', self.cluster_name, '')
|
||
|
||
def _ticket_metrics_missing(
|
||
self, event_id: int, host: str, instance: str, consec: int
|
||
) -> None:
|
||
title = (
|
||
f'[{host}][auto][production][issue][network][single-node] '
|
||
f'No metrics from host'
|
||
)
|
||
desc = (
|
||
f'Host Metrics Alert\n{"=" * 40}\n\n'
|
||
f'Host: {host}\n'
|
||
f'Prometheus instance: {instance}\n'
|
||
f'Detected: {_now_utc()}\n'
|
||
f'Consecutive check failures: {consec}\n\n'
|
||
f'Prometheus is working but has no node_network_up series for {host}.\n'
|
||
f'Either the host is down or node_exporter has stopped on it.\n\n'
|
||
f'Please check the host power and network connectivity, then '
|
||
f'prometheus-node-exporter on the host.'
|
||
)
|
||
tid = self.tickets.create(title, desc, priority='2')
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
|
||
def _process_prometheus_outage(self, suppressions: list) -> None:
|
||
"""Interface and host alerts can't fire without Prometheus, so say so."""
|
||
sup = db.check_suppressed(suppressions, 'host', 'prometheus')
|
||
event_id, is_new, consec, ticket_id = db.upsert_event(
|
||
'monitor_source_unavailable', 'critical', 'prometheus',
|
||
'prometheus', '',
|
||
f'Prometheus returned no interface data; host and interface alerting is paused ({_now_utc()})',
|
||
)
|
||
if not sup and consec >= self.fail_thresh and not ticket_id:
|
||
title = (
|
||
'[prometheus][auto][production][issue][network][cluster-wide] '
|
||
'Gandalf has no Prometheus data'
|
||
)
|
||
desc = (
|
||
f'Monitoring Source Alert\n{"=" * 40}\n\n'
|
||
f'Prometheus URL: {self.prom.url}\n'
|
||
f'Detected: {_now_utc()}\n'
|
||
f'Consecutive check failures: {consec}\n\n'
|
||
f'Gandalf could not get node_network_up data from Prometheus.\n'
|
||
f'While this lasts, host and interface failures will NOT be detected.\n\n'
|
||
f'Please check the Prometheus service and its scrape targets.'
|
||
)
|
||
tid = self.tickets.create(title, desc, priority='2')
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
|
||
def _ticket_interface(
|
||
self, event_id: int, host: str, iface: str, consec: int
|
||
) -> None:
|
||
title = (
|
||
f'[{host}][auto][production][issue][network][single-node] '
|
||
f'Interface {iface} link-down'
|
||
)
|
||
desc = (
|
||
f'Network Interface Alert\n{"=" * 40}\n\n'
|
||
f'Host: {host}\n'
|
||
f'Interface: {iface}\n'
|
||
f'Detected: {_now_utc()}\n'
|
||
f'Consecutive check failures: {consec}\n\n'
|
||
f'Interface {iface} on {host} is reporting link-down state via '
|
||
f'Prometheus node_exporter.\n\n'
|
||
f'Note: {host} may still be reachable via its other network interface.\n'
|
||
f'Please inspect the cable/SFP/switch port for {host}/{iface}.'
|
||
)
|
||
tid = self.tickets.create(title, desc, priority='2')
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
|
||
# ------------------------------------------------------------------
|
||
# UniFi device monitoring
|
||
# ------------------------------------------------------------------
|
||
def _process_unifi(self, devices: Optional[List[dict]], suppressions: list) -> None:
|
||
if devices is None:
|
||
logger.warning('UniFi API unreachable this cycle')
|
||
return
|
||
|
||
for d in devices:
|
||
name = d['name']
|
||
if not d['connected']:
|
||
sup = db.check_suppressed(suppressions, 'unifi_device', name)
|
||
event_id, is_new, consec, ticket_id = db.upsert_event(
|
||
'unifi_device_offline', 'critical', 'unifi',
|
||
name, d.get('type', ''),
|
||
f'UniFi {name} ({d.get("ip","")}) offline ({_now_utc()})',
|
||
)
|
||
if not sup and consec >= self.unifi_fail_thresh and not ticket_id:
|
||
self._ticket_unifi(event_id, d)
|
||
else:
|
||
db.resolve_event('unifi_device_offline', name, d.get('type', ''))
|
||
|
||
def _ticket_unifi(self, event_id: int, device: dict) -> None:
|
||
name = device['name']
|
||
title = (
|
||
f'[{name}][auto][production][issue][network][single-node] '
|
||
f'UniFi device offline'
|
||
)
|
||
desc = (
|
||
f'UniFi Device Alert\n{"=" * 40}\n\n'
|
||
f'Device: {name}\n'
|
||
f'Type: {device.get("type","unknown")}\n'
|
||
f'Model: {device.get("model","")}\n'
|
||
f'Last Known IP: {device.get("ip","unknown")}\n'
|
||
f'Detected: {_now_utc()}\n\n'
|
||
f'The UniFi device {name} is offline per the UniFi controller.\n'
|
||
f'Please check power and cable connectivity.'
|
||
)
|
||
tid = self.tickets.create(title, desc, priority='2')
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
|
||
# ------------------------------------------------------------------
|
||
# Ping-only hosts (no node_exporter)
|
||
# ------------------------------------------------------------------
|
||
def _process_ping_hosts(self, suppressions: list, ping_states: Dict[str, Optional[bool]]) -> None:
|
||
for h in self.cfg.get('monitor', {}).get('ping_hosts', []):
|
||
name, ip = h['name'], h['ip']
|
||
reachable = ping_states.get(name)
|
||
|
||
if reachable is None:
|
||
# Pulse couldn't run the check. Neither alert nor resolve on no evidence.
|
||
logger.warning(f'Ping check for {name} ({ip}) unavailable this cycle')
|
||
continue
|
||
|
||
if not reachable:
|
||
sup = db.check_suppressed(suppressions, 'host', name)
|
||
event_id, is_new, consec, ticket_id = db.upsert_event(
|
||
'host_unreachable', 'critical', 'ping',
|
||
name, ip,
|
||
f'Host {name} ({ip}) unreachable via ping ({_now_utc()})',
|
||
)
|
||
if not sup and consec >= self.fail_thresh and not ticket_id:
|
||
self._ticket_unreachable(event_id, name, ip, consec)
|
||
else:
|
||
db.resolve_event('host_unreachable', name, ip)
|
||
|
||
def _ticket_unreachable(
|
||
self, event_id: int, name: str, ip: str, consec: int
|
||
) -> None:
|
||
title = (
|
||
f'[{name}][auto][production][issue][network][single-node] '
|
||
f'Host unreachable'
|
||
)
|
||
desc = (
|
||
f'Host Reachability Alert\n{"=" * 40}\n\n'
|
||
f'Host: {name}\n'
|
||
f'IP: {ip}\n'
|
||
f'Detected: {_now_utc()}\n'
|
||
f'Consecutive check failures: {consec}\n\n'
|
||
f'Host {name} ({ip}) is not responding to ping from the Gandalf monitor.\n'
|
||
f'This host does not have a Prometheus node_exporter, so interface-level '
|
||
f'detail is unavailable.\n\n'
|
||
f'Please check the host power, management interface, and network connectivity.'
|
||
)
|
||
tid = self.tickets.create(title, desc, priority='2')
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
|
||
# ------------------------------------------------------------------
|
||
# WAN modem monitoring
|
||
# ------------------------------------------------------------------
|
||
_MODEM_METRIC_LABELS = {
|
||
'rx_power': 'Rx power', 'tx_power': 'Tx power', 'temperature': 'Temperature',
|
||
'vcc': 'Supply voltage', 'tx_bias': 'Tx bias',
|
||
}
|
||
_MODEM_METRIC_UNITS = {'rx_power': ' dBm', 'tx_power': ' dBm', 'temperature': ' C'}
|
||
|
||
def _modem_event(
|
||
self, suppressions: list, event_type: str, severity: str, detail: str,
|
||
description: str, heading: str, priority: str, advice: str,
|
||
) -> None:
|
||
name = self.modem_name
|
||
sup = db.check_suppressed(suppressions, 'host', name)
|
||
event_id, is_new, consec, ticket_id = db.upsert_event(
|
||
event_type, severity, 'modem', name, detail, f'{description} ({_now_utc()})',
|
||
)
|
||
if not sup and consec >= self.modem_fail_thresh and not ticket_id:
|
||
title = f'[{name}][auto][production][issue][network][cluster-wide] {heading}'
|
||
desc = (
|
||
f'WAN Modem Alert\n{"=" * 40}\n\n'
|
||
f'Modem: {name} ({self.modem.base_url})\n'
|
||
f'Detected: {_now_utc()}\n'
|
||
f'Consecutive check failures: {consec}\n\n'
|
||
f'{description}\n\n{advice}'
|
||
)
|
||
tid = self.tickets.create(title, desc, priority=priority)
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
|
||
def _process_modem_failure(self, suppressions: list, error: Exception) -> None:
|
||
"""Handle a failed poll. Link and optical events stay as they are: we can't see them."""
|
||
name = self.modem_name
|
||
if isinstance(error, modem_api.ModemUnreachable):
|
||
db.resolve_event('modem_data_invalid', name, '')
|
||
self._modem_event(
|
||
suppressions, 'modem_unreachable', 'critical', '',
|
||
f'WAN modem is not responding: {error}',
|
||
'WAN modem unreachable', '2',
|
||
'Internet access is probably affected too. Check modem power and the '
|
||
'cable between the modem and the UDM-Pro.',
|
||
)
|
||
else:
|
||
db.resolve_event('modem_unreachable', name, '')
|
||
self._modem_event(
|
||
suppressions, 'modem_data_invalid', 'warning', '',
|
||
f'WAN modem status could not be read: {error}',
|
||
'WAN modem status unreadable', '3',
|
||
'The modem answered but its pages could not be parsed, so fiber alerting is '
|
||
'paused. A firmware update may have changed them; see modem.py.',
|
||
)
|
||
|
||
def _process_modem(self, data: dict, suppressions: list) -> None:
|
||
"""Raise and resolve alerts from a successful modem poll."""
|
||
name = self.modem_name
|
||
db.resolve_event('modem_unreachable', name, '')
|
||
db.resolve_event('modem_data_invalid', name, '')
|
||
|
||
problems = modem_api.wan_problems(data)
|
||
if problems:
|
||
self._modem_event(
|
||
suppressions, 'wan_down', 'critical', '',
|
||
f'WAN link is down: {"; ".join(problems)}.',
|
||
'WAN link down', '1',
|
||
'Check the fiber at the modem and the AT&T service status. Rx power at or below '
|
||
'the alarm limit points to a fiber fault rather than a provider outage.',
|
||
)
|
||
else:
|
||
db.resolve_event('wan_down', name, '')
|
||
|
||
for key, metric in data.get('optics', {}).items():
|
||
status = modem_api.metric_status(metric)
|
||
if status == 'alarm' and problems and key == 'rx_power':
|
||
# wan_down already covers this, and a cut fiber would otherwise open two tickets.
|
||
status = 'ok'
|
||
label = self._MODEM_METRIC_LABELS.get(key, key)
|
||
value = metric.get('value')
|
||
reading = f' at {value}{self._MODEM_METRIC_UNITS.get(key, "")}' if value is not None else ''
|
||
limits = (
|
||
f' (warning {metric.get("warn_low")} to {metric.get("warn_high")}, '
|
||
f'alarm {metric.get("alarm_low")} to {metric.get("alarm_high")})'
|
||
) if value is not None else ''
|
||
advice = (
|
||
'Inspect and clean the fiber connector at the modem and look for tight bends. '
|
||
'If that does not help, contact AT&T: the reading is what the modem measures '
|
||
'on the provider side of the connection.'
|
||
)
|
||
|
||
if status == 'alarm':
|
||
db.resolve_event('fiber_signal_warning', name, key)
|
||
self._modem_event(
|
||
suppressions, 'fiber_signal_alarm', 'critical', key,
|
||
f'{label} is in the alarm range{reading}{limits}.',
|
||
f'Fiber {label} alarm', '2', advice,
|
||
)
|
||
elif status == 'warning':
|
||
db.resolve_event('fiber_signal_alarm', name, key)
|
||
self._modem_event(
|
||
suppressions, 'fiber_signal_warning', 'warning', key,
|
||
f'{label} is in the warning range{reading}{limits}.',
|
||
f'Fiber {label} warning', '3', advice,
|
||
)
|
||
else:
|
||
db.resolve_event('fiber_signal_alarm', name, key)
|
||
db.resolve_event('fiber_signal_warning', name, key)
|
||
|
||
self._check_rx_drift(data, suppressions)
|
||
|
||
def _check_rx_drift(self, data: dict, suppressions: list) -> None:
|
||
"""Alert on a sustained Rx drop relative to this link's own recent normal.
|
||
|
||
The modem's limits are very wide (warning at -27.9 dBm on a link that sits
|
||
around -17), so a damaged connector could lose many dB before they trip.
|
||
"""
|
||
name = self.modem_name
|
||
rx = (data.get('optics', {}).get('rx_power') or {}).get('value')
|
||
if rx is None:
|
||
return
|
||
history = db.get_modem_rx_values(days=7)
|
||
if len(history) < self.rx_drift_min_samples:
|
||
return # not enough history yet to know what normal looks like
|
||
baseline = statistics.median(history)
|
||
drop = round(baseline - rx, 1)
|
||
if drop >= self.rx_drift_db:
|
||
self._modem_event(
|
||
suppressions, 'fiber_rx_drift', 'warning', 'rx_power',
|
||
f'Rx power is {rx} dBm, {drop} dB below its 7-day median of {baseline:.1f} dBm.',
|
||
'Fiber Rx power dropped', '3',
|
||
'The signal is still in range but has changed. Look for a recently disturbed '
|
||
'or bent fiber and check the connector at the modem.',
|
||
)
|
||
else:
|
||
db.resolve_event('fiber_rx_drift', name, 'rx_power')
|
||
|
||
def _load_wan_history(self) -> dict:
|
||
raw = db.get_state('wan_history')
|
||
if raw:
|
||
try:
|
||
return json.loads(raw)
|
||
except ValueError:
|
||
logger.error('Failed to parse wan_history JSON; starting over')
|
||
return {'outages': [], 'restarts': []}
|
||
|
||
def _note_modem_restart(self, data: dict) -> None:
|
||
uptime = data.get('uptime_s')
|
||
if uptime is None:
|
||
return
|
||
previous = None
|
||
raw = db.get_state('modem_stats')
|
||
if raw:
|
||
try:
|
||
previous = json.loads(raw).get('uptime_s')
|
||
except ValueError:
|
||
logger.error('Failed to parse modem_stats JSON')
|
||
if previous is not None and uptime < previous:
|
||
logger.warning(f'Modem restarted: uptime went from {previous}s to {uptime}s')
|
||
history = self._load_wan_history()
|
||
modem_api.record_uptime_reset(history, time.time() - uptime)
|
||
db.set_state('wan_history', history)
|
||
|
||
def _one_shot_ticket(
|
||
self, suppressions: list, event_type: str, description: str,
|
||
heading: str, priority: str, advice: str,
|
||
) -> None:
|
||
"""Report something that has already happened: open a ticket and resolve the event."""
|
||
name = self.modem_name
|
||
event_id, _, _, ticket_id = db.upsert_event(event_type, 'warning', 'unifi', name, '', description)
|
||
if not db.check_suppressed(suppressions, 'host', name) and not ticket_id:
|
||
tid = self.tickets.create(
|
||
f'[{name}][auto][production][issue][network][cluster-wide] {heading}',
|
||
f'WAN Event\n{"=" * 40}\n\nModem: {name}\nReported: {_now_utc()}\n\n{description}\n\n{advice}',
|
||
priority=priority,
|
||
)
|
||
if tid:
|
||
db.set_ticket_id(event_id, tid)
|
||
db.resolve_event(event_type, name, '')
|
||
|
||
def _process_wan_log(self, suppressions: list) -> None:
|
||
"""Read WAN outages and modem restarts from the UniFi log.
|
||
|
||
These can be over in two minutes, so a 5 minute poll of the modem may never see them.
|
||
"""
|
||
now = time.time()
|
||
raw_cursor = db.get_state('unifi_log_cursor')
|
||
if raw_cursor is None:
|
||
# First run: start from now rather than ticketing old history.
|
||
db.set_state('unifi_log_cursor', str(int(now * 1000)))
|
||
return
|
||
# After long monitor downtime, don't open tickets for stale events.
|
||
since_ms = max(int(raw_cursor) + 1, int((now - 86400) * 1000))
|
||
events = self.unifi.get_system_events(since_ms, modem_api.WAN_LOG_KEYS)
|
||
if not events:
|
||
return # None = log unavailable, so the cursor stays put and it's retried
|
||
|
||
history = self._load_wan_history()
|
||
actionable = modem_api.apply_wan_events(history, events)
|
||
|
||
# UniFi repeats "failed multiple times" per failure, so ticket it once a day at most.
|
||
unstable = [e for e in actionable if e['key'] == modem_api.LOG_WAN_UNSTABLE]
|
||
ticket_unstable = bool(unstable) and now - history.get('unstable_ticketed_at', 0) >= 86400
|
||
if ticket_unstable:
|
||
history['unstable_ticketed_at'] = now
|
||
|
||
# Save first: a failed ticket call shouldn't replay these events next cycle.
|
||
db.set_state('wan_history', history)
|
||
db.set_state('unifi_log_cursor', str(int(max(e['ts'] for e in events) * 1000)))
|
||
|
||
for e in actionable:
|
||
if e['key'] == modem_api.LOG_MODEM_RESTARTED:
|
||
when = datetime.fromtimestamp(e['ts'], timezone.utc).strftime('%Y-%m-%d %H:%M:%S UTC')
|
||
self._one_shot_ticket(
|
||
suppressions, 'modem_power_cycled',
|
||
f'{e.get("device") or "Smart Power"} power-cycled the modem at {when} '
|
||
f'to try to restore the internet connection.',
|
||
'Modem auto power-cycled after internet loss', '3',
|
||
'The internet connection failed badly enough to trigger auto power-cycle. '
|
||
'Check the WAN / Fiber panel for outages around this time and Rx power for a drop.',
|
||
)
|
||
if ticket_unstable:
|
||
self._one_shot_ticket(
|
||
suppressions, 'wan_unstable',
|
||
'UniFi reports the WAN connection went down multiple times in the last 24 hours.',
|
||
'WAN connection unstable', '2',
|
||
'See the WAN history on the modem page. Repeated drops with healthy Rx power '
|
||
'point toward the provider or the modem rather than the fiber.',
|
||
)
|
||
|
||
def _collect_modem(self, suppressions: list) -> None:
|
||
"""Poll the modem, then store its status and raise any alerts."""
|
||
try:
|
||
data = self.modem.poll()
|
||
except (modem_api.ModemUnreachable, modem_api.ModemDataInvalid) as e:
|
||
logger.warning(f'Modem poll failed: {e}')
|
||
self._process_modem_failure(suppressions, e)
|
||
db.set_state('modem_stats', {
|
||
'reachable': False, 'error': str(e), 'name': self.modem_name,
|
||
'lan_ip': self.modem_lan_ip, 'updated': _now_utc(),
|
||
})
|
||
return
|
||
|
||
# Uptime going backwards between polls means the gateway restarted, even if
|
||
# it came back too quickly for any poll to fail. Read before it's overwritten.
|
||
self._note_modem_restart(data)
|
||
|
||
now = time.monotonic()
|
||
data['rates'] = modem_api.counter_rates(
|
||
data['counters'], self._prev_modem_counters, now - self._prev_modem_time,
|
||
)
|
||
self._prev_modem_counters = data['counters']
|
||
self._prev_modem_time = now
|
||
data['reachable'] = True
|
||
data['name'] = self.modem_name
|
||
data['lan_ip'] = self.modem_lan_ip
|
||
data['wan_problems'] = modem_api.wan_problems(data)
|
||
data['optics_status'] = {k: modem_api.metric_status(m) for k, m in data['optics'].items()}
|
||
db.set_state('modem_stats', data)
|
||
|
||
# Alert before recording, so a sudden drop isn't compared against itself.
|
||
self._process_modem(data, suppressions)
|
||
|
||
optics = data['optics']
|
||
db.record_modem_sample(
|
||
(optics.get('rx_power') or {}).get('value'),
|
||
(optics.get('tx_power') or {}).get('value'),
|
||
(optics.get('temperature') or {}).get('value'),
|
||
)
|
||
|
||
# ------------------------------------------------------------------
|
||
# Snapshot collection (for dashboard)
|
||
# ------------------------------------------------------------------
|
||
def _collect_snapshot(
|
||
self, iface_states: Optional[Dict[str, Dict[str, bool]]],
|
||
unifi_devices: Optional[List[dict]] = None,
|
||
ping_states: Optional[Dict[str, Optional[bool]]] = None,
|
||
) -> dict:
|
||
# Accept pre-fetched devices; fall back to empty list if unavailable
|
||
display_unifi = unifi_devices if unifi_devices is not None else []
|
||
|
||
# During a Prometheus outage keep showing the hosts, with their state unknown,
|
||
# rather than emptying the dashboard or implying that they're down.
|
||
prom_ok = iface_states is not None
|
||
shown_states = iface_states if prom_ok else self._last_iface_states
|
||
|
||
hosts = {}
|
||
for instance, ifaces in shown_states.items():
|
||
if instance not in self._instance_map:
|
||
continue # skip Prometheus instances not in config (e.g. LXC app servers)
|
||
host = self._hostname(instance)
|
||
phys = {k: v for k, v in ifaces.items()}
|
||
up_count = sum(1 for v in phys.values() if v)
|
||
total = len(phys)
|
||
if not prom_ok:
|
||
status = 'unknown'
|
||
elif total == 0 or up_count == total:
|
||
status = 'up'
|
||
elif up_count == 0:
|
||
status = 'down'
|
||
else:
|
||
status = 'degraded'
|
||
|
||
hosts[host] = {
|
||
'ip': instance.split(':')[0],
|
||
'interfaces': {k: ('up' if v else 'down') for k, v in phys.items()},
|
||
'status': status,
|
||
'source': 'prometheus',
|
||
}
|
||
|
||
# Configured hosts with no data: down if Prometheus is fine, otherwise unknown
|
||
for instance, host in self._instance_map.items():
|
||
if instance not in shown_states:
|
||
hosts[host] = {
|
||
'ip': instance.split(':')[0],
|
||
'interfaces': {},
|
||
'status': 'down' if prom_ok else 'unknown',
|
||
'source': 'prometheus',
|
||
}
|
||
|
||
for h in self.cfg.get('monitor', {}).get('ping_hosts', []):
|
||
name, ip = h['name'], h['ip']
|
||
reachable = (ping_states or {}).get(name)
|
||
hosts[name] = {
|
||
'ip': ip,
|
||
'interfaces': {},
|
||
'status': 'unknown' if reachable is None else ('up' if reachable else 'down'),
|
||
'source': 'ping',
|
||
}
|
||
|
||
return {
|
||
'hosts': hosts,
|
||
'unifi': display_unifi,
|
||
'updated': datetime.now(timezone.utc).isoformat().replace('+00:00', 'Z'),
|
||
}
|
||
|
||
# ------------------------------------------------------------------
|
||
# Main loop
|
||
# ------------------------------------------------------------------
|
||
def run(self) -> None:
|
||
logger.info(
|
||
f'Gandalf monitor started – poll_interval={self.poll_interval}s '
|
||
f'fail_thresh={self.fail_thresh} unifi_fail_thresh={self.unifi_fail_thresh}'
|
||
)
|
||
while True:
|
||
try:
|
||
logger.info('Starting network check cycle')
|
||
|
||
# 1. Fetch interface states once — shared by snapshot and alert processing
|
||
iface_states = self.prom.get_interface_states()
|
||
|
||
# 2. Fetch UniFi devices once — used by both snapshot and alert processing
|
||
unifi_devices = self.unifi.get_devices()
|
||
|
||
# 3a. Ping-only hosts once — shared by snapshot and alert processing
|
||
ping_states: Dict[str, Optional[bool]] = {
|
||
h['name']: self.pulse.ping(h['ip'])
|
||
for h in self.cfg.get('monitor', {}).get('ping_hosts', [])
|
||
}
|
||
|
||
# 3b. Collect and store snapshot for dashboard
|
||
snapshot = self._collect_snapshot(iface_states, unifi_devices, ping_states)
|
||
if iface_states is not None:
|
||
self._last_iface_states = iface_states
|
||
db.set_state('network_snapshot', snapshot)
|
||
db.set_state('last_check', _now_utc())
|
||
|
||
# 4. Collect link stats (ethtool + traffic metrics)
|
||
try:
|
||
link_data = self.link_stats.collect(self._instance_map)
|
||
db.set_state('link_stats', link_data)
|
||
except Exception as e:
|
||
logger.error(f'Link stats collection failed: {e}', exc_info=True)
|
||
|
||
# 5. Process alerts using already-fetched data
|
||
suppressions = db.get_active_suppressions()
|
||
if iface_states is None:
|
||
self._process_prometheus_outage(suppressions)
|
||
else:
|
||
db.resolve_event('monitor_source_unavailable', 'prometheus', '')
|
||
self._process_interfaces(iface_states, suppressions)
|
||
self._process_unifi(unifi_devices, suppressions)
|
||
|
||
self._process_ping_hosts(suppressions, ping_states)
|
||
|
||
# WAN modem: isolated so a failure here can't stop the rest of the cycle
|
||
if self.modem:
|
||
try:
|
||
# Log first, so a restart it reports can explain an uptime reset below
|
||
self._process_wan_log(suppressions)
|
||
self._collect_modem(suppressions)
|
||
except Exception as e:
|
||
logger.error(f'Modem collection failed: {e}', exc_info=True)
|
||
|
||
# Housekeeping: deactivate expired suppressions and purge old resolved events
|
||
db.cleanup_expired_suppressions()
|
||
db.purge_old_resolved_events(days=90)
|
||
if self.modem:
|
||
db.purge_old_modem_samples(days=90)
|
||
|
||
logger.info('Network check cycle complete')
|
||
|
||
except Exception as e:
|
||
logger.error(f'Monitor loop error: {e}', exc_info=True)
|
||
time.sleep(30)
|
||
continue
|
||
|
||
time.sleep(self.poll_interval)
|
||
|
||
|
||
if __name__ == '__main__':
|
||
monitor = NetworkMonitor()
|
||
monitor.run()
|