User Tools

Site Tools


Server Name Indication based metrics

This article helps with providing steps to install and use the SNI TLS Metrics app in Trisul Network Analytics.

To provide visibility into TLS/SSL traffic by breaking it up by SNI Hostname.

SNI stands for Server Name Indication.It indicates the hostname thT is being contacted by the browser at the beginning of a handshake.This feature allows a server to connect multiple SSL Certificates to one IP address and gate.

This app provides the following 3 metrics namely,

  1. A new Counter Group called “SNI”
  2. A new Resource Group called “SNI” contains IP→SNI hostname mapping.
  3. Top SNI Hostnames for each meter by bandwidth and hits.


  • You can install the app by logging on as Admin,and selecting Web Admin > Manage > Apps > SNI TLS Metrics.
  • Restart the probes.

Viewing Data

The app shows the following metrics,

  • meter 0 : bandwidth per hostname.
  • meter 1 : flows/hits per hostname.

You can view the metrics by selecting Retro > Retro Counters.

sni_tls_metrics.txt · Last modified: 2020/04/13 17:58 by navaneeth