Skip to content

Latest commit

 

History

History
85 lines (68 loc) · 4.53 KB

File metadata and controls

85 lines (68 loc) · 4.53 KB

DNS-collector - Workers

Supported Collectors

Collectors are responsible for gathering DNS data from different sources. They act as the input layer of your DNS monitoring pipeline.

Network-Based Collectors

Collector Status Description
AF_PACKET Sniffer Production ready Live packet capture using AF_PACKET sockets
XDP Sniffer Experimental High-performance live packet capture using XDP (eXpress Data Path)

Network Streaming Collectors

Collector Status Description
DNStap Server Production ready Integration with DNS servers supporting DNStap (BIND, Unbound, PowerDNS) Full support
PowerDNS Production ready Direct integration with PowerDNS authoritative and recursive servers Full support
TZSP Beta support TZSP network protocol

File-Based Collectors

Collector Status Description
File Ingestor Production ready Processes stored network captures (PCAP or DNStap files)
Tail Production ready Monitors and parses plain text log files

Specialized Collectors

Collector Status Description
DNS Message Production ready Filters and matches specific DNS messages
HTTP Webhook Experimental Adds custom data using HTTP webhooks

Supported Loggers

Loggers handle the output and processing of collected DNS data. They provide various formats and destinations for your DNS logs.

Console & File Output

Logger Status Description
Console Production ready Outputs logs to standard output (Text, JSON, Binary)
File Production ready Saves logs to local files (Plain text, Binary)

Network Streaming

Logger Status Description
DNStap Client Production ready Forwards logs in DNStap format over TCP/Unix sockets
TCP Production ready Streams logs over TCP connections
Syslog Production ready Sends logs via syslog protocol (RFC3164/RFC5424)

Metrics & Monitoring

Logger Status Description
Prometheus Production ready Exposes DNS metrics for Prometheus scraping
Statsd Beta support Sends metrics in StatsD format
Rest API Beta support Provides REST endpoints for log searching

Time-Series Databases

Logger Status Description
InfluxDB Beta support Stores DNS metrics and logs in InfluxDB v1.x/v2.x
ClickHouse Beta support High-performance analytics database

Log Aggregation Platforms

Logger Status Description
Fluentd Beta support Forwards logs to Fluentd collectors
Loki Client Production ready Sends logs to Grafana Loki
ElasticSearch Production ready Indexes logs in Elasticsearch
Scalyr Beta support Sends logs to DataSet/Scalyr platform

Message Queues & Streaming

Logger Status Description
Redis Publisher Production ready Publishes logs to Redis pub/sub channels
Kafka Producer Production ready Sends logs to Apache Kafka topics
NSQ Beta support Publishes logs to NSQ topics
MQTT Publisher Beta support Publishes DNS logs to MQTT brokers

Specialized Loggers

Logger Status Description
Falco Beta support Integration with Falco security monitoring
OpenTelemetry Experimental Distributed tracing support
DevNull Production ready Discards all logs (Performance testing)