Re: RFC: NFS over TLS stats

From: Simon J. Gerraty <sjg_at_juniper.net>
Date: Thu, 26 Oct 2023 03:09:45 UTC 
Rick Macklem <rick.macklem@gmail.com> wrote:
> > kern.rpctls.tls.snd_msgbytes: 20828
> > kern.rpctls.tls.snd_msgcnt: 57
> > kern.rpctls.tls.rcv_tmsgbytes: 12336
> > kern.rpctls.tls.rcv_msgcnt: 57
> >
> > which allows for sysctl kern.rpctls.tls
> Not sure what you mean?

If for some reason I only care about tls I can do

sysctl kern.rpctls.tls

and get

kern.rpctls.tls.snd_msgbytes: 20828
kern.rpctls.tls.snd_msgcnt: 57
kern.rpctls.tls.rcv_tmsgbytes: 12336
kern.rpctls.tls.rcv_msgcnt: 57

otherwise I'd have to do

sysctl kern.rpctls | grep tls

> I am listing counts for TLS and non-TLS so they can
> be compared. As such, a "tls" in the last component of
> the name is needed, unless I list the non-TLS ones

Ok

> under something else like:
> kern.rpc.snd_msgbytes
> 
> I currently actually have them all as:
> kern.rpc.tls.XXX instead of kern.rpctls.XXX,

Haha I didn't notice the tls in rpctls ;-)

> since there was already kern.rpc.gss.XXX.

kern.rpc.tls.XXX sounds fine

> 
> rick