This article helps with providing steps to install and use the SNI TLS Metrics app in Trisul Network Analytics.

To provide visibility into TLS/SSL traffic by breaking it up by SNI Hostname.

SNI stands for Server Name Indication.It indicates the hostname thT is being contacted by the browser at the beginning of a handshake.This feature allows a server to connect multiple SSL Certificates to one IP address and gate.

This app provides the following 3 metrics namely,

1. A new Counter Group called “SNI”
2. A new Resource Group called “SNI” contains IP→SNI hostname mapping.
3. Top SNI Hostnames for each meter by bandwidth and hits.

• You can install the app by logging on as Admin,and selecting Web Admin > Manage > Apps > SNI TLS Metrics.
• Restart the probes.

The app shows the following metrics,

• meter 0 : bandwidth per hostname.
• meter 1 : flows/hits per hostname.

You can view the metrics by selecting Retro > Retro Counters.