monitoring-plugins-cyconet/check_wireguard

nagios-plugin-check_wireguard

Nagios check for wireguard server

This plugin uses the wg show output on a Wireguard server to show the interfaces and peers defined

Dependencies

• Monitoring::Plugin::Functions Perl module
• Monitoring::Plugin::Getopt Perl module

Usage

./check_wireguard

The output shows the following information

WIREGUARD OK Interfaces: Online:2 Expected:2 wg0:1/2 wg1:0/2

• Interfaces: Online:X Expected:Y The number of interfaces found with wg show and the number expected (provided by the -i argument)
• The available online interfaces are then listed in the format wgX:<connected>/<total>.
  • <connected> is the number of interfaces that have a "latest handshake" value listed
  • <total> is the total number of peers defined for that interface

Installation

• Copy the check_wireguard to your nagios plugin folder and set executable.

• Add the following to your nrpe.cfg file

command[wireguard]=sudo /usr/lib/nagios/plugins/check_wireguard

• Set your nagios user to be able to run the plugin without a password

nagios    ALL=(ALL) NOPASSWD: /usr/lib/nagios/plugins/check_wireguard

Examples

• Run with the -h argument to see all options

check_wireguard -h

• Specify the path to the wg binary. Default is /usr/bin/wg

check_wireguard -b /usr/local/wireguard/bin/wg

• Specify after how many seconds since the last handshake, a peer should be considered disconnected. Default is 300 seconds. If set to 0, a peer will be considered connected after a single handshake no matter how long ago it was

check_wireguard -s 600

Future Work

• Compare config against current running config to determine interfaces that are offline

Changelog

• 2021-11-15 :: 0.5.0 :: Update function seconds_since_handshake() to handle string 'Now'
• 2021-11-12 :: 0.4.0 :: Add extra output on error when failing to parse handshake value
• 2018-08-31 :: 0.3.0 :: Add -s switch for connection timeout calculation
• 2018-08-30 :: 0.2.0 :: Add -i switch for expected interfaces
• 2018-08-30 :: 0.1.0 :: First relase

Site

https://gitlab.com/alasdairkeyes/nagios-plugin-check_wireguard

Author

• Alasdair Keyes - https://akeyes.co.uk/

License

Released under GPL V3 - See included license file.