Re: [tor-relays] snowflake prometheus metrics listen address

toralf · October 3, 2023, 8:30am

yes - DNAT the remote prometheus ip to the local address [1]

[1]

toralf/tor-relays/blob/main/playbooks/roles/setup-snowflake/tasks/firewall.yaml#L10


      
          ---
          - name: ACCEPT incoming UDP to (ephemeral ports of) Snowflake
            ansible.builtin.iptables:
              chain: INPUT
              protocol: udp
              destination: "{{ ansible_facts.default_ipv4.address }}"
              destination_ports: "32768:60999" # /proc/sys/net/ipv4/ip_local_port_range
              jump: ACCEPT
          
          - name: Enable Prometheus to scrape metrics from Snowflake
            when: prometheus_server is defined
            block:
              - name: Allow Prometheus server to localhost
                ansible.builtin.iptables:
                  chain: PREROUTING
                  table: nat
                  protocol: tcp
                  source: "{{ prometheus_server }}"
                  destination_port: 9999
                  jump: DNAT

···

On 10/3/23 10:24, Fran via tor-relays wrote:

Any ideas?

--
Toralf

_______________________________________________
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays