<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi Saku,</p>
<pre style="font-family: monospace, Courier; color: black; background-color: rgb(249, 249, 249); border: 1px solid rgb(221, 221, 221); padding: 1em; white-space: pre-wrap; line-height: 1.3em; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;">aggregate [DSTAS]: label, dst_as, peer_dst_as, out_iface
</pre>
<pre style="font-family: monospace, Courier; color: black; background-color: rgb(249, 249, 249); border: 1px solid rgb(221, 221, 221); padding: 1em; white-space: pre-wrap; line-height: 1.3em; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;">aggregate [SRCAS]: label, src_as, peer_src_as, in_iface
</pre>
<pre style="font-family: monospace, Courier; color: black; background-color: rgb(249, 249, 249); border: 1px solid rgb(221, 221, 221); padding: 1em; white-space: pre-wrap; line-height: 1.3em; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-style: initial; text-decoration-color: initial;">aggregate[IP]: label, dst_as, src_host, out_iface, in_iface
</pre>
<p><br>
</p>
<p>And a script goes over this output to relate ifindex to ifalias
from also influxdb SNMP counter DB (where the ifalias is stored) (
script has to be smart to know which port flows to store, as in
edge ports for hosters for example cause you wouldnt want ibgp
flow info in your DST AS database)<br>
</p>
<p><br>
I'm attaching only the graph for IP aggregate series. And Cpu
never goes above 30%.<br>
<br>
As i said, per IP, per iface, per dst As information stored, cant
get more pretties and betetr than this for a capacity manager :D<br>
<br>
And if you add another tag adding a price per mbit to a
carrier/port, you can find out how much a single customer is
costing you for network usage based on per IP aggregation
!!!!!!!!!!!!!!!!!!!!<br>
</p>
<p>You have to be "smart" with duration of your retention policy and
continuous queries though :D<br>
</p>
<p><br>
</p>
<p>(again, Thanks Paulo for PMACCT!!! )<br>
</p>
<p><br>
( and as an addition, we have a telegram bot you send a message to
like "/dst as#",<br>
and this pulls the graph from grafana, renders it and sends it to
telegram chat :D <br>
I worked at a few Hosting companies, and I haven't seen anything
like this :D )<br>
</p>
<p><br>
</p>
<p>The idea is to put this whole thing on github but i need to make
time for that...<br>
And "aint nobody got time for that" :P<br>
</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 02-01-19 13:59, Saku Ytti wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAAeewD8xBvX_W5G91dUnB-KUeMwpRKk1T46nDqn+v41Xs6mbeA@mail.gmail.com">
<pre class="moz-quote-pre" wrap="">Hey,
On Wed, 2 Jan 2019 at 14:40, H I Baysal <a class="moz-txt-link-rfc2396E" href="mailto:hibaysal@gmail.com"><hibaysal@gmail.com></a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">That absolutely depends on the amount of TAGs you use, and how you aggregate, etc.
I am collecting DSTAS, SRCAS, en DST AS per IP. And influx is not even sweating a single drop....
We have a 4 Tbps of traffic during peak, and as well as pmacct and influxdb or running very very smooth.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
How many series do you have in the DB?
Your explanation makes it unclear to me what labels you have 'per IP'
is ambiguous to me. If only DST_IP is tag and you have low amount of
IPs in or behind your network, it seems very feasible indeed.
</pre>
</blockquote>
</body>
</html>