Dustin C. Hatch
3f39747557
Using domain names in the "blackbox" probe makes it difficult to tell the difference between a complete Internet outage and DNS issues. I switched to using these names when I changed how the firewall routed traffic to the public DNS servers, since those were the IP addresses I was using to determine if the Internet was "up." I think it makes sense, though, to just ping the upstream gateway for that check. If EverFast changes their routing or numbering, we'll just have to update our checks to match.
46 lines
1000 B
YAML
46 lines
1000 B
YAML
modules:
|
|
dns_pyrocufflink:
|
|
dns:
|
|
query_name: pyrocufflink.blue
|
|
query_type: SOA
|
|
validate_answer_rrs:
|
|
fail_if_not_matches_regexp:
|
|
- pyrocufflink\.blue\.\t\d+\tIN\tSOA\tdc.+\.pyrocufflink\.blue.*
|
|
prober: dns
|
|
timeout: 2s
|
|
dns_recursive:
|
|
dns:
|
|
query_name: github.com
|
|
query_type: A
|
|
prober: dns
|
|
timeout: 5s
|
|
http:
|
|
http:
|
|
headers:
|
|
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
|
|
Accept-Charset: utf-8
|
|
Accept-Language: en-US
|
|
method: GET
|
|
prober: http
|
|
timeout: 5s
|
|
icmp:
|
|
prober: icmp
|
|
timeout: 5s
|
|
icmp:
|
|
preferred_ip_protocol: ip4
|
|
smtp:
|
|
prober: tcp
|
|
tcp:
|
|
query_response:
|
|
- expect: ^220 ([^ ]+) ESMTP (.+)$
|
|
- send: EHLO prober\r
|
|
- expect: ^250[ -]SMTPUTF8
|
|
- send: QUIT\r
|
|
timeout: 5s
|
|
tcp:
|
|
prober: tcp
|
|
timeout: 5s
|
|
tcp:
|
|
preferred_ip_protocol: ip4
|
|
ip_protocol_fallback: false
|