Telemetry Capabilities

Read this topic to learn about the telemetry data available from Juniper Cloud-Native Router.

Cloud-Native Router Telemetry

Juniper Cloud-Native Router comes with telemetry capabilities that enable you to see performance metrics and telemetry data. Telemetry data is derived separately from the vRouter, cRPD and cSRX (if using IPSec security using service chaining). The container telemetry-exporter provides you this visibility via either a Prometheus-based API or gRPC Network Management Interface (gNMI). Telemetry exporter is enabled for both vRouter and cRPD by default. You can use the following snippet in values.yaml to configure telemetry:

Telemetry export is disabled for cSRX by default. You can enable it in the cSRX helm chart during installation:

You must also provide the cSRX root password in base64 format to the service-chain-instance secret created before the helm installation. Please review the Apply the cSRX License and Configure cSRX for more details.

Telemetry via Prometheus-based API

Prometheus is an open-source systems monitoring and alerting toolkit. You can use Prometheus to retrieve telemetry data from the cloud-native router host servers and view that data in the HTTP format. A sample of Prometheus configuration looks like this:

For vRouter, the telemetry exporter periodically queries the Introspect on the vRouter-agent for statistics and reports metrics information in response to the Prometheus scrape requests. You can directly view the telemetry data by using the following URL: http://host server IP address:8070.

The cRPD telemetry exporter periodically queries the the cRPD pod over NETCONF for statistics and reports metrics information in response to the Prometheus scrape requests. You can directly view the telemetry data by using the following URL: http://host server IP address:8072.

The cSRX telemetry exporter periodically queries the the cSRX pod over NETCONF for statistics and reports metrics information in response to the Prometheus scrape requests. You can directly view the telemetry data by using the following URL: http://host server IP address:8073.

Note:

If the ports 8072 or 8073 is unavailable you can choose an alternate port to collect telemetry data in the respective helm charts.

The tables below shows the sample telemetry outputs for vRouter and cRPD when using Prometheus-based API.

Note:

We've grouped the output shown in the following table. The cloud-native router does not group or sort the output on live systems.

Table 1: Sample vRouter Telemetry Data (Prometheus-based API)
Group	Sample Output
Memory usage per vRouter	# TYPE virtual_router_system_memory_cached_bytes gauge # HELP virtual_router_system_memory_cached_bytes Virtual router system memory cached virtual_router_system_memory_cached_bytes{vrouter_name="jcnr.example.com"} 2635970448 # TYPE virtual_router_system_memory_buffers gauge # HELP virtual_router_system_memory_buffers Virtual router system memory buffer virtual_router_system_memory_buffers{vrouter_name="jcnr.example.com"} 32689 # TYPE virtual_router_system_memory_bytes gauge # HELP virtual_router_system_memory_bytes Virtual router total system memory virtual_router_system_memory_bytes{vrouter_name="jcnr.example.com"} 2635970448 # TYPE virtual_router_system_memory_free_bytes gauge # HELP virtual_router_system_memory_free_bytes Virtual router system memory free virtual_router_system_memory_free_bytes{vrouter_name="jcnr.example.com"} 2635969296 # TYPE virtual_router_system_memory_used_bytes gauge # HELP virtual_router_system_memory_used_bytes Virtual router system memory used virtual_router_system_memory_used_bytes{vrouter_name="jcnr.example.com"} 32689 # TYPE virtual_router_virtual_memory_kilobytes gauge # HELP virtual_router_virtual_memory_kilobytes Virtual router virtual memory virtual_router_virtual_memory_kilobytes{vrouter_name="jcnr.example.com"} 0 # TYPE virtual_router_resident_memory_kilobytes gauge # HELP virtual_router_resident_memory_kilobytes Virtual router resident memory virtual_router_resident_memory_kilobytes{vrouter_name="jcnr.example.com"} 32689 # TYPE virtual_router_peak_virtual_memory_bytes gauge # HELP virtual_router_peak_virtual_memory_bytes Virtual router peak virtual memory virtual_router_peak_virtual_memory_bytes{vrouter_name="jcnr.example.com"} 2894328001
Packet count per interface	# TYPE virtual_router_phys_if_input_packets_total counter # HELP virtual_router_phys_if_input_packets_total Total packets received by physical interface virtual_router_phys_if_input_packets_total{vrouter_name="jcnr.example.com",interface_name="bond0"} 1483 # TYPE virtual_router_phys_if_output_packets_total counter # HELP virtual_router_phys_if_output_packets_total Total packets sent by physical interface virtual_router_phys_if_output_packets_total{vrouter_name="jcnr.example.com",interface_name="bond0"} 32969 virtual_router_phys_if_output_packets_total{vrouter_name="jcnr.example.com",interface_name="bond0"} 1585402623 virtual_router_phys_if_output_packets_total{interface_name="bond0",vrouter_name="jcnr.example.com"} 1585403344 # TYPE virtual_router_phys_if_input_bytes_total counter # HELP virtual_router_phys_if_input_bytes_total Total bytes received by physical interface virtual_router_phys_if_input_bytes_total{interface_name="bond0",vrouter_name="jcnr.example.com"} 125558 virtual_router_phys_if_input_bytes_total{vrouter_name="jcnr.example.com",interface_name="bond0"} 228300499320 virtual_router_phys_if_input_packets_total{interface_name="bond0",vrouter_name="jcnr.example.com"} 1585421179 # TYPE virtual_router_phys_if_output_bytes_total counter # HELP virtual_router_phys_if_output_bytes_total Total bytes sent by physical interface virtual_router_phys_if_output_bytes_total{vrouter_name="jcnr.example.com",interface_name="bond0"} 4597076 virtual_router_phys_if_output_bytes_total{interface_name="bond0",vrouter_name="jcnr.example.com"} 228297889634 # TYPE virtual_router_phys_if_input_errors_total counter # HELP virtual_router_phys_if_input_errors_total Total input errors on the physical interface (vRouter software errors) virtual_router_phys_if_input_errors_total{vrouter_name="node1", interface_name="enp3s0"} 10 # TYPE virtual_router_phys_if_output_errors_total counter # HELP virtual_router_phys_if_output_errors_total Total output errors on the physical interface (vRouter software errors) virtual_router_phys_if_output_errors_total{vrouter_name="node1", interface_name="enp3s0"} 0 # TYPE virtual_router_phys_if_input_port_errors_total counter # HELP virtual_router_phys_if_input_port_errors_total Total output errors on the physical interface (DPDK driver errors) virtual_router_phys_if_input_port_errors_total{vrouter_name="node1", interface_name="enp3s0"} 22 # TYPE virtual_router_phys_if_output_port_errors_total counter # HELP virtual_router_phys_if_output_port_errors_total Total input errors on the physical interface (DPDK driver errors) virtual_router_phys_if_output_port_errors_total{vrouter_name="node1", interface_name="enp3s0"} 3 # TYPE virtual_router_phys_if_input_device_errors_total counter # HELP virtual_router_phys_if_input_device_errors_total Total input errors on the physical interface (Physical device rx/tx queue errors) virtual_router_phys_if_input_device_errors_total{vrouter_name="node1", interface_name="enp3s0"} 52 # TYPE virtual_router_phys_if_output_device_errors_total counter # HELP virtual_router_phys_if_output_device_errors_total Total input errors on the physical interface (Physical device rx/tx queue errors) virtual_router_phys_if_output_device_errors_total{vrouter_name="node1", interface_name="enp3s0"} 1 # TYPE virtual_router_phys_if_discards_total counter # HELP virtual_router_phys_if_discards_total Total input discarded packets on the physical interface virtual_router_phys_if_discards_total{vrouter_name="node1", interface_name="enp3s0"} 2 # TYPE virtual_router_phys_if_drops_total counter # HELP virtual_router_phys_if_drops_total Total dropped packets on the physical interface virtual_router_phys_if_drops_total{vrouter_name="node1", interface_name="enp3s0"} 0
CPU usage per vRouter	# TYPE virtual_router_cpu_1min_load_avg gauge # HELP virtual_router_cpu_1min_load_avg Virtual router CPU 1 minute load average virtual_router_cpu_1min_load_avg{vrouter_name="jcnr.example.com"} 0.11625 # TYPE virtual_router_cpu_5min_load_avg gauge # HELP virtual_router_cpu_5min_load_avg Virtual router CPU 5 minute load average virtual_router_cpu_5min_load_avg{vrouter_name="jcnr.example.com"} 0.109687 # TYPE virtual_router_cpu_15min_load_avg gauge # HELP virtual_router_cpu_15min_load_avg Virtual router CPU 15 minute load average virtual_router_cpu_15min_load_avg{vrouter_name="jcnr.example.com"} 0.110156
Drop packet count per vRouter	# TYPE virtual_router_dropped_packets_total counter # HELP virtual_router_dropped_packets_total Total packets dropped virtual_router_dropped_packets_total{vrouter_name="jcnr.example.com"} 35850
Packet count per interface per VLAN	# TYPE virtual_router_interface_vlan_multicast_input_packets_total counter # HELP virtual_router_interface_vlan_multicast_input_packets_total Total number of multicast packets received on interface VLAN virtual_router_interface_vlan_multicast_input_packets_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_broadcast_output_packets_total counter # HELP virtual_router_interface_vlan_broadcast_output_packets_total Total number of broadcast packets sent on interface VLAN virtual_router_interface_vlan_broadcast_output_packets_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_broadcast_input_packets_total counter # HELP virtual_router_interface_vlan_broadcast_input_packets_total Total number of broadcast packets received on interface VLAN virtual_router_interface_vlan_broadcast_input_packets_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_multicast_output_packets_total counter # HELP virtual_router_interface_vlan_multicast_output_packets_total Total number of multicast packets sent on interface VLAN virtual_router_interface_vlan_multicast_output_packets_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_unicast_input_packets_total counter # HELP virtual_router_interface_vlan_unicast_input_packets_total Total number of unicast packets received on interface VLAN virtual_router_interface_vlan_unicast_input_packets_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_flooded_output_bytes_total counter # HELP virtual_router_interface_vlan_flooded_output_bytes_total Total number of output bytes flooded to interface VLAN virtual_router_interface_vlan_flooded_output_bytes_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_multicast_output_bytes_total counter # HELP virtual_router_interface_vlan_multicast_output_bytes_total Total number of multicast bytes sent on interface VLAN virtual_router_interface_vlan_multicast_output_bytes_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_unicast_output_packets_total counter # HELP virtual_router_interface_vlan_unicast_output_packets_total Total number of unicast packets sent on interface VLAN virtual_router_interface_vlan_unicast_output_packets_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_broadcast_input_bytes_total counter # HELP virtual_router_interface_vlan_broadcast_input_bytes_total Total number of broadcast bytes received on interface VLAN virtual_router_interface_vlan_broadcast_input_bytes_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_multicast_input_bytes_total counter # HELP virtual_router_interface_vlan_multicast_input_bytes_total Total number of multicast bytes received on interface VLAN virtual_router_interface_vlan_multicast_input_bytes_total{vlan_id="100",interface_id="1"} 0 # TYPE virtual_router_interface_vlan_unicast_input_bytes_total counter # HELP virtual_router_interface_vlan_unicast_input_bytes_total Total number of unicast bytes received on interface VLAN virtual_router_interface_vlan_unicast_input_bytes_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_flooded_output_packets_total counter # HELP virtual_router_interface_vlan_flooded_output_packets_total Total number of output packets flooded to interface VLAN virtual_router_interface_vlan_flooded_output_packets_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_broadcast_output_bytes_total counter # HELP virtual_router_interface_vlan_broadcast_output_bytes_total Total number of broadcast bytes sent on interface VLAN virtual_router_interface_vlan_broadcast_output_bytes_total{interface_id="1",vlan_id="100"} 0 # TYPE virtual_router_interface_vlan_unicast_output_bytes_total counter # HELP virtual_router_interface_vlan_unicast_output_bytes_total Total number of unicast bytes sent on interface VLAN virtual_router_interface_vlan_unicast_output_bytes_total{interface_id="1",vlan_id="100"} 0 ...
L3/L4 Access List (Firewall Filter) Counters	# TYPE virtual_router_acl_counter_packets_total counter # HELP virtual_router_acl_counter_packets_total Total packets of named counters defined in firewall configuration virtual_router_acl_counter_packets_total{family="inet", filter="icmpFilter", counter="c1"} 8 # TYPE virtual_router_acl_counter_bytes_total counter # HELP virtual_router_acl_counter_bytes_total Total value in bytes of named counters defined in firewall configuration virtual_router_acl_counter_bytes_total{family="inet", filter="icmpFilter", counter="c1"} 11808

Table 2: Sample cRPD Telemetry Data (Prometheus-based API)
Group	Sample Output
BGP summary	# TYPE crpd_bgp_rib_table_received_prefixes_total counter # HELP crpd_bgp_rib_table_received_prefixes_total Total number of BGP RIB table prefixes received crpd_bgp_rib_table_received_prefixes_total{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_external_prefixes gauge # HELP crpd_bgp_rib_table_external_prefixes Number of BGP RIB table external prefixes crpd_bgp_rib_table_external_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_active_external_prefixes gauge # HELP crpd_bgp_rib_table_active_external_prefixes Number of BGP RIB table active external prefixes crpd_bgp_rib_table_active_external_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_suppressed_internal_prefixes gauge # HELP crpd_bgp_rib_table_suppressed_internal_prefixes Number of BGP RIB table internal prefixes currently inactive, because of damping or other reasons crpd_bgp_rib_table_suppressed_internal_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_prefixes gauge # HELP crpd_bgp_rib_table_prefixes Number of BGP RIB table prefixes crpd_bgp_rib_table_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_active_prefixes gauge # HELP crpd_bgp_rib_table_active_prefixes Number of BGP RIB table active prefixes crpd_bgp_rib_table_active_prefixes{table="bgp.l3vpn.0",node="example.juniper.net"} 0 # TYPE crpd_bgp_rib_table_history_prefixes gauge # HELP crpd_bgp_rib_table_history_prefixes Number of BGP RIB table withdrawn prefixes stored locally to keep track of damping history crpd_bgp_rib_table_history_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_suppressed_external_prefixes gauge # HELP crpd_bgp_rib_table_suppressed_external_prefixes Number of BGP RIB table external prefixes currently inactive, because of damping or other reasons crpd_bgp_rib_table_suppressed_external_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_active_internal_prefixes gauge # HELP crpd_bgp_rib_table_active_internal_prefixes Number of BGP RIB table active internal prefixes crpd_bgp_rib_table_active_internal_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_pending_prefixes gauge # HELP crpd_bgp_rib_table_pending_prefixes Number of BGP RIB table prefixes in process by BGP import policy crpd_bgp_rib_table_pending_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_accepted_prefixes_total counter # HELP crpd_bgp_rib_table_accepted_prefixes_total Total number of BGP RIB table prefixes accepted crpd_bgp_rib_table_accepted_prefixes_total{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_damped_prefixes gauge # HELP crpd_bgp_rib_table_damped_prefixes Number of BGP RIB table prefixes with a figure of merit greater than zero, but still active because the value has not reached the threshold at which suppression occurs crpd_bgp_rib_table_damped_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_accepted_external_prefixes_total counter # HELP crpd_bgp_rib_table_accepted_external_prefixes_total Total number of BGP RIB table external prefixes accepted crpd_bgp_rib_table_accepted_external_prefixes_total{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_internal_prefixes gauge # HELP crpd_bgp_rib_table_internal_prefixes Number of BGP RIB table internal prefixes crpd_bgp_rib_table_internal_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_suppressed_prefixes gauge # HELP crpd_bgp_rib_table_suppressed_prefixes Number of BGP RIB table prefixes currently inactive, because of damping or other reasons crpd_bgp_rib_table_suppressed_prefixes{node="example.juniper.net",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_rib_table_accepted_internal_prefixes_total counter # HELP crpd_bgp_rib_table_accepted_internal_prefixes_total Total number of BGP RIB table internal prefixes accepted crpd_bgp_rib_table_accepted_internal_prefixes_total{node="example.juniper.net",table="bgp.l3vpn.0"} 0 crpd_bgp_rib_table_external_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_active_external_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_suppressed_internal_prefixes{table="bgp.l3vpn-inet6.0",node="example.juniper.net"} 0 crpd_bgp_rib_table_received_prefixes_total{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_active_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_history_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_suppressed_external_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_active_internal_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_pending_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_damped_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_accepted_external_prefixes_total{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_internal_prefixes{table="bgp.l3vpn-inet6.0",node="example.juniper.net"} 0 crpd_bgp_rib_table_accepted_prefixes_total{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_accepted_internal_prefixes_total{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_suppressed_prefixes{node="example.juniper.net",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_rib_table_received_prefixes_total{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_external_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_active_external_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_suppressed_internal_prefixes{table="bgp.evpn.0",node="example.juniper.net"} 0 crpd_bgp_rib_table_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_active_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_history_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_suppressed_external_prefixes{table="bgp.evpn.0",node="example.juniper.net"} 0 crpd_bgp_rib_table_active_internal_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_pending_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_accepted_prefixes_total{table="bgp.evpn.0",node="example.juniper.net"} 0 crpd_bgp_rib_table_damped_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_accepted_external_prefixes_total{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_internal_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_suppressed_prefixes{node="example.juniper.net",table="bgp.evpn.0"} 0 crpd_bgp_rib_table_accepted_internal_prefixes_total{node="example.juniper.net",table="bgp.evpn.0"} 0 # TYPE crpd_bgp_peer_input_messages_total counter # HELP crpd_bgp_peer_input_messages_total Total number of messages received from BGP peer crpd_bgp_peer_input_messages_total{peer_address="11.11.11.11",peer_as="64512",node="example.juniper.net"} 5 # TYPE crpd_bgp_peer_output_messages_total counter # HELP crpd_bgp_peer_output_messages_total Total number of messages sent to BGP peer crpd_bgp_peer_output_messages_total{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512"} 4 # TYPE crpd_bgp_peer_route_queue_count gauge # HELP crpd_bgp_peer_route_queue_count Current number of messages that are queued to be sent to BGP peer crpd_bgp_peer_route_queue_count{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512"} 0 # TYPE crpd_bgp_peer_state gauge # HELP crpd_bgp_peer_state BGP peer state (1=Established, 2=Idle, 3=Connect, 4=Active, 5=OpenSent, 6=OpenConfirm) crpd_bgp_peer_state{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512"} 1 # TYPE crpd_bgp_peer_flaps_total counter # HELP crpd_bgp_peer_flaps_total Total number of times the BGP peer session has gone down and then come back up crpd_bgp_peer_flaps_total{peer_address="11.11.11.11",peer_as="64512",node="example.juniper.net"} 1 # TYPE crpd_bgp_peer_rib_table_accepted_prefixes_total counter # HELP crpd_bgp_peer_rib_table_accepted_prefixes_total Total number of BGP RIB table active prefixes accepted from BGP peer crpd_bgp_peer_rib_table_accepted_prefixes_total{peer_as="64512",table="bgp.l3vpn.0",node="example.juniper.net",peer_address="11.11.11.11"} 0 # TYPE crpd_bgp_peer_rib_table_suppressed_prefixes gauge # HELP crpd_bgp_peer_rib_table_suppressed_prefixes Number of BGP RIB table prefixes received from BGP peer currently inactive, because of damping or other reasons crpd_bgp_peer_rib_table_suppressed_prefixes{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.l3vpn.0"} 0 # TYPE crpd_bgp_peer_rib_table_active_prefixes gauge # HELP crpd_bgp_peer_rib_table_active_prefixes Number of BGP RIB table active prefixes received from BGP peer crpd_bgp_peer_rib_table_active_prefixes{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.l3vpn.0"} 0 crpd_bgp_peer_rib_table_active_prefixes{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_peer_rib_table_accepted_prefixes_total{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_peer_rib_table_suppressed_prefixes{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.l3vpn-inet6.0"} 0 crpd_bgp_peer_rib_table_active_prefixes{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.evpn.0"} 0 crpd_bgp_peer_rib_table_accepted_prefixes_total{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.evpn.0"} 0 crpd_bgp_peer_rib_table_suppressed_prefixes{node="example.juniper.net",peer_address="11.11.11.11",peer_as="64512",table="bgp.evpn.0"} 0
Route table summary	# TYPE crpd_route_table_destinations gauge # HELP crpd_route_table_destinations Number of destinations for which there are routes in the routing table crpd_route_table_destinations{node="example.juniper.net",table="inet.0"} 13 # TYPE crpd_route_table_routes gauge # HELP crpd_route_table_routes Number of routes in the routing table crpd_route_table_routes{node="example.juniper.net",table="inet.0"} 15 # TYPE crpd_route_table_active_routes gauge # HELP crpd_route_table_active_routes Number of active routes in the routing table crpd_route_table_active_routes{node="example.juniper.net",table="inet.0"} 13 # TYPE crpd_route_table_holddown_routes gauge # HELP crpd_route_table_holddown_routes Number of routes in the routing table that are in the hold-down state before being declared inactive crpd_route_table_holddown_routes{node="example.juniper.net",table="inet.0"} 0 # TYPE crpd_route_table_hidden_routes gauge # HELP crpd_route_table_hidden_routes Number of routes in the routing table that are not used, because of routing policy crpd_route_table_hidden_routes{node="example.juniper.net",table="inet.0"} 0 crpd_route_table_routes{node="example.juniper.net",table="inet.3"} 1 crpd_route_table_active_routes{node="example.juniper.net",table="inet.3"} 1 crpd_route_table_holddown_routes{node="example.juniper.net",table="inet.3"} 0 crpd_route_table_hidden_routes{node="example.juniper.net",table="inet.3"} 0 crpd_route_table_destinations{node="example.juniper.net",table="inet.3"} 1 crpd_route_table_holddown_routes{node="example.juniper.net",table="mpls.0"} 0 crpd_route_table_hidden_routes{node="example.juniper.net",table="mpls.0"} 0 crpd_route_table_destinations{node="example.juniper.net",table="mpls.0"} 4 crpd_route_table_routes{node="example.juniper.net",table="mpls.0"} 4 crpd_route_table_active_routes{node="example.juniper.net",table="mpls.0"} 4 crpd_route_table_active_routes{node="example.juniper.net",table="inet6.0"} 34 crpd_route_table_holddown_routes{node="example.juniper.net",table="inet6.0"} 0 crpd_route_table_hidden_routes{node="example.juniper.net",table="inet6.0"} 0 crpd_route_table_destinations{node="example.juniper.net",table="inet6.0"} 34 crpd_route_table_routes{table="inet6.0",node="example.juniper.net"} 38 crpd_route_table_destinations{node="example.juniper.net",table="inet6.3"} 1 crpd_route_table_routes{node="example.juniper.net",table="inet6.3"} 1 crpd_route_table_active_routes{node="example.juniper.net",table="inet6.3"} 1 crpd_route_table_holddown_routes{node="example.juniper.net",table="inet6.3"} 0 crpd_route_table_hidden_routes{node="example.juniper.net",table="inet6.3"} 0 # TYPE crpd_route_table_protocol_routes gauge # HELP crpd_route_table_protocol_routes Number of routes in the routing table learned from the protocol crpd_route_table_protocol_routes{protocol="Direct",node="example.juniper.net",table="inet.0"} 6 # TYPE crpd_route_table_protocol_active_routes gauge # HELP crpd_route_table_protocol_active_routes Number of active routes in the routing table learned from the protocol crpd_route_table_protocol_active_routes{protocol="Direct",node="example.juniper.net",table="inet.0"} 6 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="inet.0",protocol="Local"} 3 crpd_route_table_protocol_routes{node="example.juniper.net",table="inet.0",protocol="Local"} 5 crpd_route_table_protocol_routes{node="example.juniper.net",table="inet.0",protocol="OSPF"} 4 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="inet.0",protocol="OSPF"} 4 crpd_route_table_protocol_routes{node="example.juniper.net",table="inet.3",protocol="Tunnel"} 1 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="inet.3",protocol="Tunnel"} 1 crpd_route_table_protocol_routes{node="example.juniper.net",table="mpls.0",protocol="MPLS"} 4 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="mpls.0",protocol="MPLS"} 4 crpd_route_table_protocol_routes{node="example.juniper.net",table="inet6.0",protocol="Direct"} 8 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="inet6.0",protocol="Direct"} 4 crpd_route_table_protocol_routes{table="inet6.0",protocol="Local",node="example.juniper.net"} 29 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="inet6.0",protocol="Local"} 29 crpd_route_table_protocol_routes{node="example.juniper.net",table="inet6.0",protocol="INET6"} 1 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="inet6.0",protocol="INET6"} 1 crpd_route_table_protocol_routes{node="example.juniper.net",table="inet6.3",protocol="Tunnel"} 1 crpd_route_table_protocol_active_routes{node="example.juniper.net",table="inet6.3",protocol="Tunnel"} 1
OSPF summary	# TYPE crpd_ospf_packets_sent_total counter # HELP crpd_ospf_packets_sent_total Total number of OSPF packets sent crpd_ospf_packets_sent_total{node="example.juniper.net",packet_type="Hello"} 26 # TYPE crpd_ospf_packets_received_total counter # HELP crpd_ospf_packets_received_total Total number of OSPF packets received crpd_ospf_packets_received_total{node="example.juniper.net",packet_type="Hello"} 4 crpd_ospf_packets_sent_total{node="example.juniper.net",packet_type="DbD"} 3 crpd_ospf_packets_received_total{node="example.juniper.net",packet_type="DbD"} 4 crpd_ospf_packets_sent_total{node="example.juniper.net",packet_type="LSReq"} 1 crpd_ospf_packets_received_total{node="example.juniper.net",packet_type="LSReq"} 1 crpd_ospf_packets_sent_total{node="example.juniper.net",packet_type="LSUpdate"} 2 crpd_ospf_packets_received_total{node="example.juniper.net",packet_type="LSUpdate"} 3 crpd_ospf_packets_sent_total{node="example.juniper.net",packet_type="LSAck"} 3 crpd_ospf_packets_received_total{node="example.juniper.net",packet_type="LSAck"} 2 # TYPE crpd_ospf_dbd_packets_retransmitted_total counter # HELP crpd_ospf_dbd_packets_retransmitted_total Total number of OSPF database descriptor packets retransmitted crpd_ospf_dbd_packets_retransmitted_total{node="example.juniper.net"} 1 # TYPE crpd_ospf_lsa_packets_retransmitted_total counter # HELP crpd_ospf_lsa_packets_retransmitted_total Total number of OSPF link-state advertisement packets retransmitted crpd_ospf_lsa_packets_retransmitted_total{node="example.juniper.net"} 0 # TYPE crpd_ospf_lsa_packets_flooded_total counter # HELP crpd_ospf_lsa_packets_flooded_total Total number of OSPF link-state advertisement packets flooded crpd_ospf_lsa_packets_flooded_total{node="example.juniper.net"} 1 # TYPE crpd_ospf_flood_queue_depth gauge # HELP crpd_ospf_flood_queue_depth Number of entries in the extended queue crpd_ospf_flood_queue_depth{node="example.juniper.net"} 0 # TYPE crpd_ospf_error_total counter # HELP crpd_ospf_error_total Total number of OSPF receive errors crpd_ospf_error_total{error_type="no-error",node="example.juniper.net"} 0 # TYPE crpd_ospf_neighbor_state gauge # HELP crpd_ospf_neighbor_state OSPF neighbor state (0=Down, 1=Full, 2=Attempt, 3=Exchange, 4=ExStart, 5=Init, 6=Loading, 7=2Way) crpd_ospf_neighbor_state{neighbor_address="113.113.113.3",interface_name="enp6s0",node="example.juniper.net"} 1
MPLS statistics	# TYPE crpd_mpls_ingress_lsp_sessions_down gauge # HELP crpd_mpls_ingress_lsp_sessions_down Number of MPLS ingress LSP sessions crpd_mpls_ingress_lsp_sessions_down{node="example.juniper.net"} 0 # TYPE crpd_mpls_ingress_lsp_sessions gauge # HELP crpd_mpls_ingress_lsp_sessions Number of MPLS ingress LSP sessions crpd_mpls_ingress_lsp_sessions{node="example.juniper.net"} 0 # TYPE crpd_mpls_lsp_make_before_breaks_total counter # HELP crpd_mpls_lsp_make_before_breaks_total Total number of LSP make before break procedures performed crpd_mpls_lsp_make_before_breaks_total{node="example.juniper.net"} 0 # TYPE crpd_mpls_lsp_bandwidth_increases_total counter # HELP crpd_mpls_lsp_bandwidth_increases_total Total number of LSP bandwidth increases performed crpd_mpls_lsp_bandwidth_increases_total{node="example.juniper.net"} 0 # TYPE crpd_mpls_lsp_bandwidth_decreases_total counter # HELP crpd_mpls_lsp_bandwidth_decreases_total Total number of bandwidth decreases performed crpd_mpls_lsp_bandwidth_decreases_total{node="example.juniper.net"} 0 # TYPE crpd_mpls_lsp_update_cspf_failures_total counter # HELP crpd_mpls_lsp_update_cspf_failures_total Total number of in-place LSP auto-bandwidth resizing failures at the CSPF path computation stage crpd_mpls_lsp_update_cspf_failures_total{node="example.juniper.net"} 0 # TYPE crpd_mpls_lsp_update_signaling_errors_total counter # HELP crpd_mpls_lsp_update_signaling_errors_total Total number of in-place LSP auto-bandwidth resizing failures when RSVP signaling error is received crpd_mpls_lsp_update_signaling_errors_total{node="example.juniper.net"} 0 # TYPE crpd_mpls_lsp_update_signaling_timeouts_total counter # HELP crpd_mpls_lsp_update_signaling_timeouts_total Total number of in-place LSP auto-bandwidth resizing failures when RSVP signaling takes too long to complete crpd_mpls_lsp_update_signaling_timeouts_total{node="example.juniper.net"} 0 # TYPE crpd_mpls_label_space_total_labels gauge # HELP crpd_mpls_label_space_total_labels The total label space available crpd_mpls_label_space_total_labels{label_space="LSI",node="example.juniper.net"} 999984 # TYPE crpd_mpls_label_space_free_labels gauge # HELP crpd_mpls_label_space_free_labels The number of freely available labels crpd_mpls_label_space_free_labels{node="example.juniper.net",label_space="LSI"} 999984 crpd_mpls_label_space_total_labels{node="example.juniper.net",label_space="Block"} 999984 crpd_mpls_label_space_free_labels{node="example.juniper.net",label_space="Block"} 999984 crpd_mpls_label_space_total_labels{node="example.juniper.net",label_space="Dynamic"} 999984 crpd_mpls_label_space_free_labels{node="example.juniper.net",label_space="Dynamic"} 999984 crpd_mpls_label_space_total_labels{node="example.juniper.net",label_space="Static"} 48576 crpd_mpls_label_space_free_labels{node="example.juniper.net",label_space="Static"} 48576
LLDP Statistics	Global Statistics: # TYPE crpd_lldp_remote_db_table_inserts_total counter # HELP crpd_lldp_remote_db_table_inserts_total Number of insertions made in the remote database table crpd_lldp_remote_db_table_inserts_total 192 # TYPE crpd_lldp_remote_db_table_deletes_total counter # HELP crpd_lldp_remote_db_table_deletes_total Number of deletions made in the remote database table crpd_lldp_remote_db_table_deletes_total 0 # TYPE crpd_lldp_remote_db_table_drops_total counter # HELP crpd_lldp_remote_db_table_drops_total Number of LLDP frames dropped from the remote database table because of errors crpd_lldp_remote_db_table_drops_total 0 # TYPE crpd_lldp_remote_db_table_ageouts_total counter # HELP crpd_lldp_remote_db_table_ageouts_total Number of remote database table entries that have aged out of the table crpd_lldp_remote_db_table_ageouts_total 0 Interface Statistics # TYPE crpd_lldp_interface_receive_packets_total counter # HELP crpd_lldp_interface_receive_packets_total Number of LLDP frames received on this interface crpd_lldp_interface_receive_packets_total{interface="enp1s0"} 1566 # TYPE crpd_lldp_interface_receive_unknown_tlvs_total counter # HELP crpd_lldp_interface_receive_unknown_tlvs_total Number of LLDP frames with unsupported content received on this interface crpd_lldp_interface_receive_unknown_tlvs_total{interface="enp1s0"} 0 # TYPE crpd_lldp_interface_receive_errors_total counter # HELP crpd_lldp_interface_receive_errors_total Number of LLDP frames with errors received on this interface crpd_lldp_interface_receive_errors_total{interface="enp1s0"} 0 # TYPE crpd_lldp_interface_receive_tlv_discards_total counter # HELP crpd_lldp_interface_receive_tlv_discards_total Number of LLDP frames received and then discarded on this interface crpd_lldp_interface_receive_tlv_discards_total{interface="enp1s0"} 0 # TYPE crpd_lldp_interface_transmit_packets_total counter # HELP crpd_lldp_interface_transmit_packets_total Number of LLDP frames sent on this interface crpd_lldp_interface_transmit_packets_total{interface="enp1s0"} 3046 # TYPE crpd_lldp_interface_transmit_errors_total counter # HELP crpd_lldp_interface_transmit_errors_total Number of LLDP frames that were untransmitted on this interface crpd_lldp_interface_transmit_errors_total{interface="enp1s0"} 1

Table 3: Sample cSRX Telemetry Data (Prometheus-based API)
Group	Sample Output
Global IPSec Statistics	# TYPE csrx_ipsec_esp_encrypted_packets_total counter # HELP Total number of packets encrypted by the local system across the IPsec tunnel csrx_ipsec_esp_encrypted_packets_total 7627 # TYPE csrx_ipsec_esp_encrypted_bytes_total counter # HELP Total number of bytes encrypted by the local system across the IPsec tunnel csrx_ipsec_esp_encrypted_bytes_total 872655 # TYPE csrx_ipsec_esp_decrypted_packets_total counter # HELP Total number of packets decrypted by the local system across the IPsec tunnel csrx_ipsec_esp_decrypted_packets_total 4329 # TYPE csrx_ipsec_esp_decrypted_bytes_total counter # HELP Total number of bytes decrypted by the local system across the IPsec tunnel csrx_ipsec_esp_decrypted_bytes_total 293764 # TYPE csrx_ipsec_ah_input_packets_total counter # HELP Total number of packets received by the local system across the IPsec tunnel csrx_ipsec_ah_input_packets_total 10 # TYPE csrx_ipsec_ah_input_bytes_total counter # HELP Total number of bytes received by the local system across the IPsec tunnel csrx_ipsec_ah_input_bytes_total 8726 # TYPE csrx_ipsec_ah_output_packets_total counter # HELP Total number of packets transmitted by the local system across the IPsec tunnel csrx_ipsec_ah_output_packets_total 9 # TYPE csrx_ipsec_ah_output_bytes_total counter # HELP Total number of bytes transmitted by the local system across the IPsec tunnel csrx_ipsec_ah_output_bytes_total 6323 # TYPE csrx_ipsec_ah_auth_failures_total counter # HELP Total number of authentication header (AH) failures. An AH failure occurs when there is a mismatch of the authentication header in a packet transmitted across an IPsec tunnel csrx_ipsec_ah_auth_failures_total 0 # TYPE csrx_ipsec_bad_headers_total counter # HELP Total number of invalid headers detected csrx_ipsec_bad_headers_total 0 # TYPE csrx_ipsec_bad_trailers_total counter # HELP Total number of invalid trailers detected csrx_ipsec_bad_trailers_total 0 # TYPE csrx_ipsec_discard_errors_total counter # HELP Total number of discarded packets detected csrx_ipsec_discard_errors_total 0 # TYPE csrx_ipsec_esp_decryption_failures_total counter # HELP total number of ESP decryption errors csrx_ipsec_esp_decryption_failures_total 0 # TYPE csrx_ipsec_esp_auth_failures_total counter # HELP Total number of Encapsulation Security Payload (ESP) failures. An ESP failure occurs when there is an authentication mismatch in ESP packets csrx_ipsec_esp_auth_failures_total 0 # TYPE csrx_ipsec_exceeds_tunnel_mtu_total counter # HELP Total number of times the maximum size of transmit packet exceeds the configured tunnel MTU for IPsec tunnels csrx_ipsec_exceeds_tunnel_mtu_total 0 # TYPE csrx_ipsec_invalid_spi_errors_total counter # HELP Total number of invalid SPIs packets detected csrx_ipsec_invalid_spi_errors_total 0 # TYPE csrx_ipsec_replay_errors_total counter # HELP Total number of replay errors. A replay error is generated when a duplicate packet is received within the replay window csrx_ipsec_replay_errors_total 0 # TYPE csrx_ipsec_ts_check_fail_errors_total counter # HELP Total number of TS check fail detected csrx_ipsec_ts_check_fail_errors_total 0
IKE Gateway Statistics	# TYPE csrx_ike_gateway_active_peers gauge # HELP Number of successful IKE negotiations with the remote peers csrx_ike_gateway_active_peers{gateway="gw-1-1-1-1"} 1 # TYPE csrx_ike_gateway_in_progress_peer_negotiations gauge # HELP Number of in progress IKE negotiations with the remote peers csrx_ike_gateway_in_progress_peer_negotiations{gateway="gw-1-1-1-1"} 0 # TYPE csrx_ike_gateway_failed_peer_negotiations_total counter # HELP Number of failed IKE negotiations with the remote peers csrx_ike_gateway_failed_peer_negotiations_total{gateway="gw-1-1-1-1"} 0 # TYPE csrx_ike_gateway_blocked_peer_negotiations_total counter # HELP Number of blocked IKE negotiations with the remote peers csrx_ike_gateway_blocked_peer_negotiations_total{gateway="gw-1-1-1-1"} 0 # TYPE csrx_ike_gateway_backoff_peer_negotiations_total counter # HELP Number of backed off IKE negotiations with the remote peers csrx_ike_gateway_backoff_peer_negotiations_total{gateway="gw-1-1-1-1"} 0
IKE Peer Statistics	# TYPE csrx_ike_peer_ike_sa_negotiated gauge # HELP Total number of negotiated security associations csrx_ike_peer_ike_sa_negotiated{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ipsec_active_tunnels gauge # HELP Total number of active IPsec tunnels csrx_ike_peer_ipsec_active_tunnels{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_sa_init_requests_sent_total counter # HELP Total number of security association initiation requests sent to the remote address csrx_ike_peer_sa_init_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_sa_init_requests_received_total counter # HELP Total number of security association initiation requests received from the remote address csrx_ike_peer_sa_init_requests_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_sa_init_responses_received_total counter # HELP Total number of security association responses received from the remote address csrx_ike_peer_sa_init_responses_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_sa_init_responses_sent_total counter # HELP Total number of security association responses sent to the remote address csrx_ike_peer_sa_init_responses_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_auth_requests_sent_total counter # HELP Total number of authentication requests sent to the remote address csrx_ike_peer_auth_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_auth_requests_received_total counter # HELP Total number of authentication requests received from the remote address csrx_ike_peer_auth_requests_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_auth_responses_received_total counter # HELP Total number of authentication responses received from the remote address csrx_ike_peer_auth_responses_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_auth_responses_sent_total counter # HELP Total number of authentication responses sent to the remote address csrx_ike_peer_auth_responses_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ike_sa_rekey_requests_sent_total counter # HELP Total number of IKE rekey requests sent to the remote address csrx_ike_peer_ike_sa_rekey_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ike_sa_rekey_requests_received_total counter # HELP Total number of IKE rekey requests received from the remote address csrx_ike_peer_ike_sa_rekey_requests_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ike_sa_rekey_responses_received_total counter # HELP Total number of IKE rekey responses received from the remote address csrx_ike_peer_ike_sa_rekey_responses_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ike_sa_rekey_responses_sent_total counter # HELP Total number of IKE rekey responses sent to the remote address csrx_ike_peer_ike_sa_rekey_responses_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ipsec_sa_rekey_requests_sent_total counter # HELP Total number of IPSEC rekey requests sent to the remote address csrx_ike_peer_ipsec_sa_rekey_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ipsec_sa_rekey_requests_received_total counter # HELP Total number of IPSEC rekey requests received from the remote address csrx_ike_peer_ipsec_sa_rekey_requests_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ipsec_sa_rekey_responses_received_total counter # HELP Total number of IPSEC rekey responses received from the remote address csrx_ike_peer_ipsec_sa_rekey_responses_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1 # TYPE csrx_ike_peer_ipsec_sa_rekey_responses_sent_total counter # HELP Total number of IPSEC rekey responses sent to the remote address csrx_ike_peer_ipsec_sa_rekey_responses_sent_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1

Table 3: Sample cSRX Telemetry Data (Prometheus-based API)

Group

Sample Output

Global IPSec Statistics

# TYPE csrx_ipsec_esp_encrypted_packets_total counter
# HELP Total number of packets encrypted by the local system across the IPsec tunnel
csrx_ipsec_esp_encrypted_packets_total 7627
# TYPE csrx_ipsec_esp_encrypted_bytes_total counter
# HELP Total number of bytes encrypted by the local system across the IPsec tunnel
csrx_ipsec_esp_encrypted_bytes_total 872655
# TYPE csrx_ipsec_esp_decrypted_packets_total counter
# HELP Total number of packets decrypted by the local system across the IPsec tunnel
csrx_ipsec_esp_decrypted_packets_total 4329
# TYPE csrx_ipsec_esp_decrypted_bytes_total counter
# HELP Total number of bytes decrypted by the local system across the IPsec tunnel
csrx_ipsec_esp_decrypted_bytes_total 293764
# TYPE csrx_ipsec_ah_input_packets_total counter
# HELP Total number of packets received by the local system across the IPsec tunnel
csrx_ipsec_ah_input_packets_total 10
# TYPE csrx_ipsec_ah_input_bytes_total counter
# HELP Total number of bytes received by the local system across the IPsec tunnel
csrx_ipsec_ah_input_bytes_total 8726
# TYPE csrx_ipsec_ah_output_packets_total counter
# HELP Total number of packets transmitted by the local system across the IPsec tunnel
csrx_ipsec_ah_output_packets_total 9
# TYPE csrx_ipsec_ah_output_bytes_total counter
# HELP Total number of bytes transmitted by the local system across the IPsec tunnel
csrx_ipsec_ah_output_bytes_total 6323
# TYPE csrx_ipsec_ah_auth_failures_total counter
# HELP Total number of authentication header (AH) failures. An AH failure occurs when there is a mismatch of the authentication header in a packet transmitted across an IPsec tunnel
csrx_ipsec_ah_auth_failures_total 0
# TYPE csrx_ipsec_bad_headers_total counter
# HELP Total number of invalid headers detected
csrx_ipsec_bad_headers_total 0
# TYPE csrx_ipsec_bad_trailers_total counter
# HELP Total number of invalid trailers detected
csrx_ipsec_bad_trailers_total 0
# TYPE csrx_ipsec_discard_errors_total counter
# HELP Total number of discarded packets detected
csrx_ipsec_discard_errors_total 0
# TYPE csrx_ipsec_esp_decryption_failures_total counter
# HELP total number of ESP decryption errors
csrx_ipsec_esp_decryption_failures_total 0
# TYPE csrx_ipsec_esp_auth_failures_total counter
# HELP Total number of Encapsulation Security Payload (ESP) failures. An ESP failure occurs when there is an authentication mismatch in ESP packets
csrx_ipsec_esp_auth_failures_total 0
# TYPE csrx_ipsec_exceeds_tunnel_mtu_total counter
# HELP Total number of times the maximum size of transmit packet exceeds the configured tunnel MTU for IPsec tunnels
csrx_ipsec_exceeds_tunnel_mtu_total 0
# TYPE csrx_ipsec_invalid_spi_errors_total counter
# HELP Total number of invalid SPIs packets detected
csrx_ipsec_invalid_spi_errors_total 0
# TYPE csrx_ipsec_replay_errors_total counter
# HELP Total number of replay errors. A replay error is generated when a duplicate packet is received within the replay window
csrx_ipsec_replay_errors_total 0
# TYPE csrx_ipsec_ts_check_fail_errors_total counter
# HELP Total number of TS check fail detected
csrx_ipsec_ts_check_fail_errors_total 0

IKE Gateway Statistics

# TYPE csrx_ike_gateway_active_peers gauge
# HELP Number of successful IKE negotiations with the remote peers
csrx_ike_gateway_active_peers{gateway="gw-1-1-1-1"} 1
# TYPE csrx_ike_gateway_in_progress_peer_negotiations gauge
# HELP Number of in progress IKE negotiations with the remote peers
csrx_ike_gateway_in_progress_peer_negotiations{gateway="gw-1-1-1-1"} 0
# TYPE csrx_ike_gateway_failed_peer_negotiations_total counter
# HELP Number of failed IKE negotiations with the remote peers
csrx_ike_gateway_failed_peer_negotiations_total{gateway="gw-1-1-1-1"} 0
# TYPE csrx_ike_gateway_blocked_peer_negotiations_total counter
# HELP Number of blocked IKE negotiations with the remote peers
csrx_ike_gateway_blocked_peer_negotiations_total{gateway="gw-1-1-1-1"} 0
# TYPE csrx_ike_gateway_backoff_peer_negotiations_total counter
# HELP Number of backed off IKE negotiations with the remote peers
csrx_ike_gateway_backoff_peer_negotiations_total{gateway="gw-1-1-1-1"} 0

IKE Peer Statistics

# TYPE csrx_ike_peer_ike_sa_negotiated gauge
# HELP Total number of negotiated security associations
csrx_ike_peer_ike_sa_negotiated{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ipsec_active_tunnels gauge
# HELP Total number of active IPsec tunnels
csrx_ike_peer_ipsec_active_tunnels{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_sa_init_requests_sent_total counter
# HELP Total number of security association initiation requests sent to the remote address 
csrx_ike_peer_sa_init_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_sa_init_requests_received_total counter
# HELP Total number of security association initiation requests received from the remote address 
csrx_ike_peer_sa_init_requests_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_sa_init_responses_received_total counter
# HELP Total number of security association responses received from the remote address
csrx_ike_peer_sa_init_responses_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_sa_init_responses_sent_total counter
# HELP Total number of security association responses sent to the remote address
csrx_ike_peer_sa_init_responses_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_auth_requests_sent_total counter
# HELP Total number of authentication requests sent to the remote address
csrx_ike_peer_auth_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_auth_requests_received_total counter
# HELP Total number of authentication requests received from the remote address
csrx_ike_peer_auth_requests_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_auth_responses_received_total counter
# HELP Total number of authentication responses received from the remote address
csrx_ike_peer_auth_responses_received_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_auth_responses_sent_total counter
# HELP Total number of authentication responses sent to the remote address
csrx_ike_peer_auth_responses_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ike_sa_rekey_requests_sent_total counter
# HELP Total number of IKE rekey requests sent to the remote address
csrx_ike_peer_ike_sa_rekey_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ike_sa_rekey_requests_received_total counter
# HELP Total number of IKE rekey requests received from the remote address
csrx_ike_peer_ike_sa_rekey_requests_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ike_sa_rekey_responses_received_total counter
# HELP Total number of IKE rekey responses received from the remote address
csrx_ike_peer_ike_sa_rekey_responses_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ike_sa_rekey_responses_sent_total counter
# HELP Total number of IKE rekey responses sent to the remote address
csrx_ike_peer_ike_sa_rekey_responses_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ipsec_sa_rekey_requests_sent_total counter
# HELP Total number of IPSEC rekey requests sent to the remote address
csrx_ike_peer_ipsec_sa_rekey_requests_sent_total{local_address="1.1.1.1", remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ipsec_sa_rekey_requests_received_total counter
# HELP Total number of IPSEC rekey requests received from the remote address
csrx_ike_peer_ipsec_sa_rekey_requests_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ipsec_sa_rekey_responses_received_total counter
# HELP Total number of IPSEC rekey responses received from the remote address
csrx_ike_peer_ipsec_sa_rekey_responses_received_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1
# TYPE csrx_ike_peer_ipsec_sa_rekey_responses_sent_total counter
# HELP Total number of IPSEC rekey responses sent to the remote address
csrx_ike_peer_ipsec_sa_rekey_responses_sent_total{local_address="1.1.1.1",remote_address="2.2.2.2", routing_instance="default"} 1

Telemetry via gNMI

The gNMI protocol defines the Subscribe RPC for subscribing to telemetry data. The telemetry collector uses this RPC to request updates from the network device for state and configuration data. Review Subscribing to Telemetry Data using gNMI for more detail.

You can enable support by enabling the gNMI configuration for cRPD and vRouter in the values.yaml helm chart. Please review the Customize the Helm Chart topic for your platform for more details. You can also enable gNMI by passing the following arguments to the helm install command while installing JCNR:

To enable gNMI configuration for cSRX, configure the values.yaml helm chart. Please review the Customize the Helm Chart topic for your platform for more details. You can also enable gNMI by passing the following arguments to the helm install command while installing JCNR:

Note:

External clients can connect to the grpc port 50053 when telemetry.gnmi.enable is set to true in the helmchart.

gNMI subscription works with only authenticated requests from external clients, for example:

SAMPLE and TARGET_DEFINED subscription modes are supported in the current release.
Targeting of specific instances in a SubscribeMessage using key values in paths is not supported in the current release, for example, subscribing to monitoring the metrics of a specific interface using a path such as /interfaces/interface[name=”enp3s0”]/state/counters
The gNMI debug logs are available at /var/log/jcnr/na-grpcd.

The following table lists the supported sensors for telemetry metrics:

Table 4: Supported Sensors for Telemetry Metrics (cRPD)
Sensor Type	Sensor Paths
Interface Sensors	`/interfaces/interface[name="interface_name"]/config/description` `/interfaces/interface[name="interface_name"]/ethernet/mac-address` `/interfaces/interface[name="interface_name"]/state/admin-status` `/interfaces/interface[name="interface_name"]/state/oper-status` `/interfaces/interface[name="interface_name"]/state/counters/in-octets` `/interfaces/interface[name="interface_name"]/state/counters/in-pkts` `/interfaces/interface[name="interface_name"]/state/counters/out-octets` `/interfaces/interface[name="interface_name"]/state/counters/out-pkts` `/interfaces/interface[name="interface_name"]/state/counters/in-errors` `/interfaces/interface[name="interface_name"]/state/counters/out-errors` `/interfaces/interface[name="interface_name"]/state/counters/in-port-errors` `/interfaces/interface[name="interface_name"]/state/counters/out-port-errors` `/interfaces/interface[name="interface_name"]/state/counters/in-device-errors` `/interfaces/interface[name="interface_name"]/state/counters/out-device-errors` `/interfaces/interface[name="interface_name"]/state/counters/drops` `/interfaces/interface[name="interface_name"]/state/counters/discards`
L3/L4 Access List (Firewall Filter) Counters	`/junos/firewall_stats[family="family", name="filter_name"]/state/counter_stats[name="counter_name"]/packets` `/junos/firewall_stats[family="family", name="filter_name"]/state/counter_stats[name="counter_name"]/bytes`
ARP Sensors	`/arp-information/ipv4/neighbors/neighbor[ip="ip_address"]/state/link-layer-address` `/arp-information/ipv4/neighbors/neighbor[ip="ip_address"]/state/interface-name` `/arp-information/ipv4/neighbors/neighbor[ip="ip_address"]/state/origin`
MAC Learning Sensors	`/network-instances/network-instance/fdb/mac-table/entry[vlan=vlan_id, mac-address="mac_address"]/state/entry-type` `/network-instances/network-instance/fdb/mac-table/entry[vlan=vlan_id, mac-address="mac_address"]/mac-address` `/network-instances/network-instance/fdb/mac-table/entry[vlan=vlan_id, mac-address="mac_address"]/interface/interface-ref/state/interface` `/network-instances/network-instance/fdb/mac-table/entry[vlan=vlan_id, mac-address="mac_address"]/vlan`
TWAMP Sensors	`/junos/twamp/client/probe-test-results[owner="owner_name", test-name="test_name"]/probe-test-generic-results[results-scope=enum]/probe-test-generic-measurements[probe-measurement-type=enum]/avg-delay` `/junos/twamp/client/probe-test-results[owner="owner_name", test-name="test_name"]/probe-test-generic-results[results-scope=enum]/probe-test-generic-measurements[probe-measurement-type=enum]/jitter-delay` `/junos/twamp/client/probe-test-results[owner="owner_name", test-name="test_name"]/probe-test-generic-results[results-scope=enum]/probe-test-generic-measurements[probe-measurement-type=enum]/max-delay` `/junos/twamp/client/probe-test-results[owner="owner_name", test-name="test_name"]/probe-test-generic-results[results-scope=enum]/probe-test-generic-measurements[probe-measurement-type=enum]/min-delay` `/junos/twamp/client/probe-test-results[owner="owner_name", test-name="test_name"]/probe-test-generic-results[results-scope=enum]/probe-test-generic-measurements[probe-measurement-type=enum]/samples` `/junos/twamp/client/probe-test-results[owner="owner_name", test-name="test_name"]/probe-test-generic-results[results-scope=enum]/probe-test-generic-measurements[probe-measurement-type=enum]/stddev-delay` `/junos/twamp/client/probe-test-results[owner="owner_name", test-name="test_name"]/probe-test-generic-results[results-scope=enum]/probe-test-generic-measurements[probe-measurement-type=enum]/sum-delay` Note: results-scope `enum` can be one of the following: [`CURRENT_TEST\|LAST_TEST\|MOVING_AVERAGE_TEST\|ALL_TESTS`] probe-measurement-type `enum` can be one of the following: [`ROUND_TRIP_TIME \| EGRESS_DELAY \| INGRESS_DELAY \| POSITIVE_RTT_JITTER \| NEGATIVE_RTT_JITTER \| POSITIVE_EGRESS_JITTER \| NEGATIVE_EGRESS_JITTER \| POSITIVE_INGRESS_JITTER \| NEGATIVE_INGRESS_JITTER`]
Routing Sensors	`/junos/routing/route-tables/route-table[name="routing_table_name"]/routes/route[prefix="prefix"]/entries/entry[protocol="protocol",next-hop="ip_addr",interface="interface_name"]/interface` `/junos/routing/route-tables/route-table[name="routing_table_name"]/routes/route[prefix="prefix"]/entries/entry[protocol="protocol",next-hop="ip_addr",interface="interface_name"]/next-hop` `/junos/routing/route-tables/route-table[name="routing_table_name"]/routes/route[prefix="prefix"]/entries/entry[protocol="protocol",next-hop="ip_addr",interface="interface_name"]/protocol` `/junos/routing/route-tables/route-table[name="routing_table_name"]/routes/route[prefix="prefix"]/entries/entry[protocol="protocol",next-hop="ip_addr",interface="interface_name"]/state/age` `/junos/routing/route-tables/route-table[name="routing_table_name"]/route[prefix="prefix]/entries/entry[protocol="protocol",next-hop="ip_addr",interface="interface_name"]/state/active`
LLDP Sensors	`/lldp` `/lldp/state` `/lldp/state/enabled` `/lldp/state/hello-timer` `/lldp/state/system-name` `/lldp/state/system-description` `/lldp/state/chassis-id` `/lldp/state/chassis-id-type` `/lldp/state/loc-port-id-type` `/lldp/state/counters` `/lldp/state/counters/frame-in` `/lldp/state/counters/frame-out` `/lldp/state/counters/frame-error-in` `/lldp/state/counters/frame-discard` `/lldp/state/counters/tlv-discard` `/lldp/state/counters/tlv-unknown` `/lldp/state/counters/last-clear` `/lldp/state/counters/tlv-accepted` `/lldp/state/counters/entries-aged-out` `/lldp/state/suppress-tlv-advertisement` `/lldp/interfaces` `/lldp/interfaces/interface` `/lldp/interfaces/interface/name` `/lldp/interfaces/interface/state` `/lldp/interfaces/interface/state/name` `/lldp/interfaces/interface/state/enabled` `/lldp/interfaces/interface/state/counters` `/lldp/interfaces/interface/state/counters/frame-in` `/lldp/interfaces/interface/state/counters/frame-out` `/lldp/interfaces/interface/state/counters/frame-error-in` `/lldp/interfaces/interface/state/counters/frame-discard` `/lldp/interfaces/interface/state/counters/tlv-discard` `/lldp/interfaces/interface/state/counters/tlv-unknown` `/lldp/interfaces/interface/state/counters/last-clear` `/lldp/interfaces/interface/state/counters/frame-error-out` `/lldp/interfaces/interface/state/loc-port-id` `/lldp/interfaces/interface/state/loc-port-description` `/lldp/interfaces/interface/neighbors` `/lldp/interfaces/interface/neighbors/neighbor` `/lldp/interfaces/interface/neighbors/neighbor/id` `/lldp/interfaces/interface/neighbors/neighbor/state` `/lldp/interfaces/interface/neighbors/neighbor/state/system-name` `/lldp/interfaces/interface/neighbors/neighbor/state/system-description` `/lldp/interfaces/interface/neighbors/neighbor/state/chassis-id` `/lldp/interfaces/interface/neighbors/neighbor/state/chassis-id-type` `/lldp/interfaces/interface/neighbors/neighbor/state/id` `/lldp/interfaces/interface/neighbors/neighbor/state/age` `/lldp/interfaces/interface/neighbors/neighbor/state/last-update` `/lldp/interfaces/interface/neighbors/neighbor/state/port-id` `/lldp/interfaces/interface/neighbors/neighbor/state/port-id-type` `/lldp/interfaces/interface/neighbors/neighbor/state/port-description` `/lldp/interfaces/interface/neighbors/neighbor/state/management-address` `/lldp/interfaces/interface/neighbors/neighbor/state/management-address-type` `lldp/interfaces/interface/neighbors/neighbor/custom-tlvs` `lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/type` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/oui` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/oui-subtype` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/state` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/state/type` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/state/oui` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/state/oui-subtype` `/lldp/interfaces/interface/neighbors/neighbor/custom-tlvs/tlv/state/value` `/lldp/interfaces/interface/neighbors/neighbor/capabilities` `/lldp/interfaces/interface/neighbors/neighbor/capabilities/capability` `/lldp/interfaces/interface/neighbors/neighbor/capabilities/capability/name` `/lldp/interfaces/interface/neighbors/neighbor/capabilities/capability/state` `/lldp/interfaces/interface/neighbors/neighbor/capabilities/capability/state/name` `/lldp/interfaces/interface/neighbors/neighbor/capabilities/capability/state/enabled`

To view additional supported sensors for cRPD please review—Telemetry Information on cRPD.

Table 5: Supported Sensors for Telemetry Metrics (vRouter)
Sensor Type	Sensor Paths
Interface Sensors	`/interfaces/interface[name="interface_name"]/state/counters/in-octets` `/interfaces/interface[name="interface_name"]/state/counters/in-pkts` `/interfaces/interface[name="interface_name"]/state/counters/out-octets` `/interfaces/interface[name="interface_name"]/state/counters/out-pkts`
Interface VLAN Sensors	`/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters`/`in-broadcast-octets` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/in-broadcast-pkts` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-broadcast-octets` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-broadcast-pkts` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-flooded-octets` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-flooded-pkts` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/in-multicast-octets` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/in-multicast-pkts` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-multicast-octets` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-multicast-pkts` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/in-unicast-octets` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/in-unicast-pkts` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-unicast-octets` `/interfaces/interface[name="interface_name"]/subinterfaces/subinterface[index=vlanID]/vlan/state/counters/out-unicast-pkts` Note: Interface VLAN sensors are not supported for L3 VLAN Sub-Interfaces.
Global vRouter Sensors	`/junos/system/state/network/in-octets` `/junos/system/state/network/in-pkts` `/junos/system/state/network/out-octets` `/junos/system/state/network/out-pkts` `/junos/system/state/network/flows` `/junos/system/state/network/active-flows` `/junos/system/state/network/aged-flows` `/junos/system/state/network/hold-flows` `/junos/system/state/network/drop-pkts` `/junos/system/state/network/checksum-err-drop-pkts` `/junos/system/state/network/flow-no-memory-drop-pkts` `/junos/system/state/network/clone-fail-drop-pkts` `/junos/system/state/network/discard-drop-pkts` `/junos/system/state/network/drop-new-flow-drop-pkts` `/junos/system/state/network/drop-pkts-drop-pkts` `/junos/system/state/network/duplicated-drop-pkts` `/junos/system/state/network/flow-action-drop-drop-pkts` `/junos/system/state/network/flow-action-invalid-drop-pkts` `/junos/system/state/network/flow-evict-drop-pkts` `/junos/system/state/network/flow-invalid-protocol-drop-pkts` `/junos/system/state/network/flow-nat-no-rflow-drop-pkts` `/junos/system/state/network/flow-no-memory-drop-pkts` `/junos/system/state/network/flow-queue-limit-exceeded-drop-pkts` `/junos/system/state/network/flow-table-full-drop-pkts` `/junos/system/state/network/flow-unusable-drop-pkts` `/junos/system/state/network/frag-err-drop-pkts` `/junos/system/state/network/fragment-queue-fail-drop-pkts` `/junos/system/state/network/head-alloc-fail-drop-pkts` `/junos/system/state/network/icmp-error-drop-pkts` `/junos/system/state/network/interface-drop-drop-pkts` `/junos/system/state/network/interface-rx-discard-drop-pkts` `/junos/system/state/network/interface-tx-discard-drop-pkts` `/junos/system/state/network/invalid-arp-drop-pkts` `/junos/system/state/network/invalid-if-drop-pkts` `/junos/system/state/network/invalid-label-drop-pkts` `/junos/system/state/network/invalid-mcast-source-drop-pkts` `/junos/system/state/network/invalid-nh-drop-pkts` `/junos/system/state/network/invalid-packet-drop-pkts` `/junos/system/state/network/invalid-protocol-drop-pkts` `/junos/system/state/network/invalid-source-drop-pkts` `/junos/system/state/network/invalid-vnid-drop-pkts` `/junos/system/state/network/l2-no-route-drop-pkts` `/junos/system/state/network/mcast-clone-fail-drop-pkts` `/junos/system/state/network/mcast-df-bit-drop-pkts` `/junos/system/state/network/misc-drop-pkts` `/junos/system/state/network/no-fmd-drop-pkts` `/junos/system/state/network/no-frag-entry-drop-pkts` `/junos/system/state/network/no-memory-drop-pkts` `/junos/system/state/network/nowhere-to-go-drop-pkts` `/junos/system/state/network/pcow-fail-drop-pkts` `/junos/system/state/network/pull-drop-pkts` `/junos/system/state/network/push-drop-pkts` `/junos/system/state/network/rewrite-fail-drop-pkts` `/junos/system/state/network/trap-no-if-drop-pkts` `/junos/system/state/network/trap-original-drop-pkts` `/junos/system/state/network/ttl-exceeded-drop-pkts` `/junos/system/state/network/vlan-fwd-enq-drop-pkts` `/junos/system/state/network/vlan-fwd-tx-drop-pkts`

Table 6: Supported Sensors for Telemetry Metrics (cSRX)
Sensor Type	Sensor Paths
IPSec Sensors	`/junos/security/ipsec/counters/esp-encrypted-packets` `/junos/security/ipsec/counters/esp-encrypted-bytes` `/junos/security/ipsec/counters/esp-decrypted-packets` `/junos/security/ipsec/counters/esp-decrypted-bytes` `/junos/security/ipsec/counters/ah-input-packets` `/junos/security/ipsec/counters/ah-input-bytes` `/junos/security/ipsec/counters/ah-output-packets` `/junos/security/ipsec/counters/ah-output-bytes` `/junos/security/ipsec/counters/ah-output-bytes` `/junos/security/ipsec/counters/ah-auth-failures` `/junos/security/ipsec/counters/bad-headers` `/junos/security/ipsec/counters/bad-trailers` `/junos/security/ipsec/counters/discard-errors` `/junos/security/ipsec/counters/esp-auth-failures` `/junos/security/ipsec/counters/esp-decryption-failures` `/junos/security/ipsec/counters/exceeds-tunnel-mtu` `/junos/security/ipsec/counters/invalid-spi-errors` `/junos/security/ipsec/counters/replay-errors` `/junos/security/ipsec/counters/ts-check-fail-errors` `/junos/security/ike-gateways/ike-gateway[name="gateway_name"]/counters/active-peers` `/junos/security/ike-gateways/ike-gateway[name="gateway_name"]/counters/in-progress-peer-negotiations` `/junos/security/ike-gateways/ike-gateway[name="gateway_name"]/counters/failed-peer-negotiations` `/junos/security/ike-gateways/ike-gateway[name="gateway_name"]/counters/blocked-peer-negotiations` `/junos/security/ike-gateways/ike-gateway[name="gateway_name"]/counters/backoff-peer-negotiations` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/active-peers` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/in-progress-peer-negotiations` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/failed-peer-negotiations` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/blocked-peer-negotiations` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/backoff-peer-negotiations` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ipsec-active-tunnels` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ike-sa-negotiated` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/sa-init-requests-sent` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/sa-init-responses-received` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/sa-init-responses-sent` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/auth-requests-received` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/auth-requests-sent` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/auth-responses-received` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/auth-responses-sent` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ike-sa-rekey-requests-received` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ike-sa-rekey-requests-sent` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ike-sa-rekey-responses-received` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ike-sa-rekey-responses-sent` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ipsec-sa-rekey-requests-received` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ipsec-sa-rekey-requests-sent` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ipsec-sa-rekey-responses-received` `/junos/security/ike-peers/ike-peer[local-address="local_address",remote-address="remote_address",routing-instance="routing_instance_name"]/counters/ipsec-sa-rekey-responses-sent`

Troubleshooting

You can view the cRPD telemetry logs under /var/log/jcnr/na-grpcd on your Cloud-Native Router server. You can view the Vrouter telemetry logs using the kubectl -n contrail logs -c contrail-vrouter-telemetry-exporter vRouter_pod_name command. You can view the cSRX telemetry logs using the kubectl –n jcnr logs –c csrx-telemetry-exporter csrx_pod_nameThe supported logging levels are error, warning, info, debug, trace and verbose. The default logging level is set to debug and can be modified in the helm chart.

ON THIS PAGE

Telemetry Capabilities

Cloud-Native Router Telemetry

Telemetry via Prometheus-based API

Telemetry via gNMI

Troubleshooting