new feature: added data collection for SYNPROXY - netfilter TCP anti-DDoS protection...

[netdata.git] / web / index.html

diff --git a/web/index.html b/web/index.html
index b9b1785a2b7a945bf7ad0ca751ca8030b184cb75..f4afaad2d389a31321ec4c2213df834b803eeed7 100644 (file)
--- a/web/index.html
+++ b/web/index.html
@@ -966,6 +966,21 @@ var submenuData = {
        'mem.ksm': {
                title: 'Memory Deduper',
                info: 'Kernel Same-page Merging (KSM) is the kernel memory de-duper.'
+       },
+
+       'netfilter.conntrack': {
+               title: 'Connection Tracker',
+               info: 'The following information is taken from <code>/proc/net/stat/nf_conntrack</code>. The connection tracker keeps track of all connections of the machine, inbound and outbound. It works by keeping a database with all open connections, tracking network and address translation and connection expectations.'
+       },
+
+       'netfilter.nfacct': {
+               title: 'Bandwidth Accounting',
+               info: 'The following information is read using the <code>nfacct.plugin</code>.'
+       },
+
+       'netfilter.synproxy': {
+               title: 'Anti-DDoS Protection',
+               info: 'The following information is taken from <code>/proc/net/stat/synproxy</code>. <a href="https://github.com/firehol/firehol/wiki/Working-with-SYNPROXY" target="_blank">SYNPROXY</a> is a TCP SYN packets proxy. It is used to protect any TCP server (like a web server) from SYN floods and similar DDoS attacks. It is a netfilter module, in the Linux kernel (since version 3.12). It is optimized to handle millions of packets per second utilizing all CPUs available without any concurrency locking between the connections. It can be used for any kind of TCP traffic (even encrypted), since it does not interfere with the content itself.'
        }
 };