Skip to content

HLD - Audit Logging daemon for command tracking and RADIUS accounting#2448

Open
rsh2prasad wants to merge 2 commits into
sonic-net:masterfrom
rsh2prasad:rakprasa/radius_aaa_hld
Open

HLD - Audit Logging daemon for command tracking and RADIUS accounting#2448
rsh2prasad wants to merge 2 commits into
sonic-net:masterfrom
rsh2prasad:rakprasa/radius_aaa_hld

Conversation

@rsh2prasad

@rsh2prasad rsh2prasad commented Jul 7, 2026

Copy link
Copy Markdown

Summary

High-Level Design document for the auditlogd daemon in sonic-host-services. auditlogd streams every command executed on the switch to configured RADIUS servers as RFC 2866 Accounting-Requests, providing a central audit trail of privileged actions.

What the HLD covers

  • Daemon architecture, threading model, and internal roles
  • CONFIG_DB tables and fields consumed (RADIUS_SERVER, MGMT_INTERFACE, DEVICE_METADATA), including timeout and retransmit
  • RADIUS Accounting packet contents and RFC-correct retransmit behavior (same packet reused across retries)
  • Netlink audit consumption and multi-record event reassembly
  • Per-server health tracking and the back-pressure loop that pauses consumption when no RADIUS server is reachable
  • Feedback-loop prevention, systemd integration, and operational notes

@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run

@azure-pipelines

Copy link
Copy Markdown
No pipelines are associated with this pull request.

@rsh2prasad rsh2prasad changed the title Radius AAA Authentication & Accounting HLD HLD - Audit Logging daemon for command tracking and RADIUS accounting Jul 7, 2026
@mssonicbld

Copy link
Copy Markdown
Collaborator

/azp run

@azure-pipelines

Copy link
Copy Markdown
No pipelines are associated with this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants