ssllabs_exporter

README

SSLLabs exporter

Getting deep analysis of the configuration of any SSL web server on the public Internet à la blackbox_exporter style.

This exporter relays the target server hostname to SSLLabs API, parses the result and export it as Prometheus metrics. It covers retries in case of failures and simplifies the assessment result.

SSLLabs

SSL Labs is a non-commercial research effort, run by Qualys, to better understand how SSL, TLS, and PKI technologies are used in practice.

source: https://www.ssllabs.com/about/assessment.html

This exporter implements SSLLabs API client that would get you the same results as if you use the web interface.

Configuration

ssllabs_exporter doesn't require any configuration file and the available flags can be found as below :

$ ssllabs_exporter --help
usage: ssllabs_exporter [<flags>]

Flags:
  --help                     Show context-sensitive help (also try --help-long and --help-man).
  --listen-address=":19115"  The address to listen on for HTTP requests.
  --timeout=300              Assessment timeout in seconds (including retries).
  --log-level=debug          Printed logs level.
  --version                  Show application version.

Docker

The Prometheus exporter is available as a docker image :

docker run --rm -it anasaso/ssllabs_exporter:latest --help

How To Use it

Deploy the exporter to your infrastructure. Kubernetes deployment and service Yaml file are provided here as an example.

Then adjust Prometheus config to add a new scrape configuration. Examples of how this look like can be found here (it includes both static config and Kubernetes service discovery to auto check all the cluster ingresses).

Once deployed, Prometheus Targets view page should look like this :

The Grafana dashboard below is available here.