Glass

• Glass was created as a quick side project out of necessity to fulfill requirements not readily available through our production ISC DHCP Servers for our organization - I've decided to share it for anyone who would also find it useful
• More features and application-level things could be extended into the interface but my goals were simply the high yield features for our production network needs
• Disclaimer: Glass and its author has no affiliation with ISC and the authors of isc-dhcp-server
• Original Author: Chris Miles: chris.miles.e@gmail.com

Features

• Standalone NodeJS application that has a web interface, listens to the dhcp log and the leases file to collect analytics and data realtime
• DHCP IPv4 Support (No IPv6 at this time)
• Full OUI Database
  • Has complete vendor to MAC OUI database - with a script to pull down and update live data
• Realtime Alerting
  • Shared Subnet Utilization Alerting
    • Customize thresholds (IE: Warning: 80% Critical 95%)
  • Leases Per Minute - If your disk fills up - or your SAN is unavailable - alerting your team on absolutely zero activity on your production server can allow you to be on the 8-ball. This is a step-above process alerting because you can have the dhcp server process running and no leases being written
• Alerting Destinations
  • Slack
  • E-Mail
  • SMS
• Statistics (Available through REST API)
  • Shared Network Utilization
  • Individual Network Utilization
  • Vendor Counts by MAC
  • OUI Count
  • Excessive DHCP Requests
• Log Streaming (Realtime via Websockets)
• Lease Data
  • Full active DHCP lease data available via API and searchable through the web interface
  • All options are dynamically parsed into an easy to ingest JSON format
• Config Edit (Only supports single DHCP config file configurations)
  • Edit the DHCP config using a full web-based text editor (Ace)
  • Before saving the config - Glass will run a syntax check against the file
  • Config editing through Glass creates a backup (snapshot) on success with no syntax errors and commits to production file * Start / Stop / Restart server process * Administrative Authentication enforced on administrative tasks (Restarts/Config/Glass Settings)
• Uses AdminBSB UI with customizations and tweaks
• Full Mobile support

Dashboard

• Glass has a dashboard containing quick-glance important information pertaining to the health of the server and the pools configured - statistics update in realtime
  • DHCP Leases per second / minute
  • Total Active Leases
  • Server CPU Utilization
  • Shared Network Utilization
  • Subnet Utilization

DHCP Config Editing

• A built in config web editor that uses the dhcp server binary to check syntax before over-writing the production config with a bad configuration
• Currently config editing only supports editing one single config file (No includes) due to syntax verificiation that glass performs

DHCP Config Snapshots

• Mess up a config? Snapshots are quickly available through the snapshots sidebar as long as you've been editing the config through the Glass interface

DHCP Server Restart

• Server Stop / Start / Restarting can all be done through the Glass interface

Statistics

• Glass exposes useful statistical information in the Web interface that is also available through the raw API interface

Log Streaming

• Stream the DHCP syslog via Websockets to your browser, making troubleshooting efforts super easy by being able to add realtime filters and have MAC address be translated realtime to the vendor for readability

Glass API

• Glass has a small but powerful REST API exposing data not otherwise available easily through raw isc-dhcp-server data formats

Alerting

• Glass alerts check once a minute for subnet utilization and every 5 seconds for lease-rate alerts
  • Shared Network Utilization % Thresholds (Warning & Critical) (Default 0 and 95)
  • Leases per minute rate (Default 50)
  • 0 values = Off
• Glass currently supports the following alerting delivery methods

E-Mail

Slack

SMS - Simple Format

• SMS gets cut off at 140 characters - but you get the core alert and should only be used as a backup measure to other methods