graphite_aclproxy

The goal of this project is to create a rather simple proxy to enforce ACLs on metrics a given host (user, ....) is allowed to access. It uses the graphite-web grammer to parse targets and extract metric names.

So far only the /render/ + /metrics/find and IP based acls are implemented. So if your project is using /render/ from your graphite-web Serve ronly, the proxy should work instantly by pointing your client to the proxy URL instead of the graphite-web server.

The project is BETA software, but works for me. Comments, bug reports and wishes are welcome!

TODOS:

• Implement user based acls
• add support for various /metric/ requests
• add some documentation, better coding style, .....
• add caching