6d0ed88722
Now that we're explicitly connecting via TCP to localhost:705 (which
can be overriden by the -a flag), we no longer need to run as root.
Therefore, update vpp-snmp-agent.service to run as user Debian-snmp
group vpp, so that /run/vpp/{api,stats}.sock are writable.
Be explicit on the commandline arguments in the service definition.
VPP's Interface AgentX
This is an SNMP agent that implements the Agentx
protocol. It connects to VPP's statseg (statistics memory segment) by MMAPing
it, so the user running the agent must have read access to /run/vpp/stats.sock.
It then connects to SNMP's agentx socket, which can be either a TCP socket
(by default localhost:705), or a unix domain socket (by default /var/agentx/master)
the latter being readable only by root. It's preferable to run as unprivileged user
The agent incorporates pyagentx with a few changes, and is released with the BSD 2-clause license.
Running
First, configure the snmpd to accept agentx connections by adding the following
to snmpd.conf:
master agentx
agentXSocket tcp:localhost:705,unix:/var/agentx-dataplane/master
and restart snmpd to pick up the changes. Simply run ./vpp-snmp-agent.py and it
will connect to the snmpd on localhost:705, and expose the IFMib by periodically
polling VPP. Observe the console output.
Building
Install pyinstaller to build a binary distribution
sudo pip install pyinstaller
pyinstaller vpp-snmp-agent.py --onefile
## Run it on console
dist/vpp-snmp-agent
## Install
sudo cp dist/vpp-snmp-agent /usr/sbin/
Running in production
Meant to be run on Ubuntu, copy vpp-snmp-agent.service, enable and start:
sudo cp snmpd-dataplane.service /usr/lib/systemd/system/
sudo cp vpp-snmp-agent.service /usr/lib/systemd/system/
sudo systemctl daemon-reload
sudo systemctl enable snmpd-dataplane
sudo systemctl start snmpd-dataplane
sudo systemctl enable vpp-snmp-agent
sudo systemctl start vpp-snmp-agent