Use metrics

firewall/interception.go

@@ -50,7 +50,12 @@ func init() {
 	network.SetDefaultFirewallHandler(defaultHandler)
 }
 
-func interceptionPrep() (err error) {
+func interceptionPrep() error {
+	err := registerMetrics()
+	if err != nil {
+		return err
+	}
+
 	return prepAPIAuth()
 }
 
@@ -81,6 +86,10 @@ func SetNameserverIPMatcher(fn func(ip net.IP) bool) error {
 }
 
 func handlePacket(ctx context.Context, pkt packet.Packet) {
+	// Record metrics.
+	startTime := time.Now()
+	defer packetHandlingHistogram.UpdateDuration(startTime)
+
 	if fastTrackedPermit(pkt) {
 		return
 	}

firewall/metrics.go

@@ -0,0 +1,21 @@
+package firewall
+
+import (
+	"github.com/safing/portbase/api"
+	"github.com/safing/portbase/config"
+	"github.com/safing/portbase/metrics"
+)
+
+var packetHandlingHistogram *metrics.Histogram
+
+func registerMetrics() (err error) {
+	packetHandlingHistogram, err = metrics.NewHistogram(
+		"firewall/handling/duration/seconds",
+		nil,
+		&metrics.Options{
+			Permission:     api.PermitUser,
+			ExpertiseLevel: config.ExpertiseLevelExpert,
+		})
+
+	return err
+}