semconv.com

Network

as of v1.44.0

Addresses, ports, transports and TLS — the connection every client and server span sits on.

tls 29network 17net 15geo 7client 2destination 2dns 2server 2source 2peer 1

attributes
79
metrics
1
signals
0
stable
12
deprecated
17

Metrics 1

Specification

The specification prose never names this domain. That is not an omission: the specification defines signals, not subject matter — what binds tls telemetry is the general rules above, and the conventions themselves carry the rest.

On the wire, this lands in metrics/v1/metrics. Field-by-field definitions are under OTLP.

Attributes 79

tls29 attributes

  • tls.cipher
    DevelopmentString indicating the cipher used during the current connection.
  • tls.client.certificate
    DevelopmentPEM-encoded stand-alone certificate offered by the client. This is usually mutually-exclusive of client.certificate_chain since this value also exists in that l
  • tls.client.certificate_chain
    DevelopmentArray of PEM-encoded certificates that make up the certificate chain offered by the client. This is usually mutually-exclusive of client.certificate since that
  • tls.client.hash.md5
    DevelopmentCertificate fingerprint using the MD5 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value sho
  • tls.client.hash.sha1
    DevelopmentCertificate fingerprint using the SHA1 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value sh
  • tls.client.hash.sha256
    DevelopmentCertificate fingerprint using the SHA256 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value
  • tls.client.issuer
    DevelopmentDistinguished name of subject of the issuer of the x.509 certificate presented by the client.
  • tls.client.ja3
    DevelopmentA hash that identifies clients based on how they perform an SSL/TLS handshake.
  • tls.client.not_after
    DevelopmentDate/Time indicating when client certificate is no longer considered valid.
  • tls.client.not_before
    DevelopmentDate/Time indicating when client certificate is first considered valid.
  • tls.client.server_name
    Deprecated→ server.addressDeprecated, use server.address instead.
  • tls.client.subject
    DevelopmentDistinguished name of subject of the x.509 certificate presented by the client.
  • tls.client.supported_ciphers
    DevelopmentArray of ciphers offered by the client during the client hello.
  • tls.curve
    DevelopmentString indicating the curve used for the given cipher, when applicable
  • tls.established
    DevelopmentBoolean flag indicating if the TLS negotiation was successful and transitioned to an encrypted tunnel.
  • tls.next_protocol
    DevelopmentString indicating the protocol being tunneled. Per the values in the IANA registry, this string should be lower case.
  • tls.protocol.name
    DevelopmentNormalized lowercase protocol name parsed from original string of the negotiated SSL/TLS protocol version
  • tls.protocol.version
    DevelopmentNumeric part of the version parsed from the original string of the negotiated SSL/TLS protocol version
  • tls.resumed
    DevelopmentBoolean flag indicating if this TLS connection was resumed from an existing TLS negotiation.
  • tls.server.certificate
    DevelopmentPEM-encoded stand-alone certificate offered by the server. This is usually mutually-exclusive of server.certificate_chain since this value also exists in that l
  • tls.server.certificate_chain
    DevelopmentArray of PEM-encoded certificates that make up the certificate chain offered by the server. This is usually mutually-exclusive of server.certificate since that
  • tls.server.hash.md5
    DevelopmentCertificate fingerprint using the MD5 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value sho
  • tls.server.hash.sha1
    DevelopmentCertificate fingerprint using the SHA1 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value sh
  • tls.server.hash.sha256
    DevelopmentCertificate fingerprint using the SHA256 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value
  • tls.server.issuer
    DevelopmentDistinguished name of subject of the issuer of the x.509 certificate presented by the client.
  • tls.server.ja3s
    DevelopmentA hash that identifies servers based on how they perform an SSL/TLS handshake.
  • tls.server.not_after
    DevelopmentDate/Time indicating when server certificate is no longer considered valid.
  • tls.server.not_before
    DevelopmentDate/Time indicating when server certificate is first considered valid.
  • tls.server.subject
    DevelopmentDistinguished name of subject of the x.509 certificate presented by the server.

network17 attributes

net15 attributes

geo7 attributes

  • geo.continent.code
    DevelopmentTwo-letter code representing continent’s name.
  • geo.country.iso_code
    DevelopmentTwo-letter ISO Country Code (ISO 3166-1 alpha2).
  • geo.locality.name
    DevelopmentLocality name. Represents the name of a city, town, village, or similar populated place.
  • geo.location.lat
    DevelopmentLatitude of the geo location in WGS84.
  • geo.location.lon
    DevelopmentLongitude of the geo location in WGS84.
  • geo.postal_code
    DevelopmentPostal code associated with the location. Values appropriate for this field may also be known as a postcode or ZIP code and will vary widely from country to cou
  • geo.region.iso_code
    DevelopmentRegion ISO code (ISO 3166-2).

client2 attributes

  • client.address
    StableClient address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • client.port
    StableClient port number.

destination2 attributes

  • destination.address
    DevelopmentDestination address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • destination.port
    DevelopmentDestination port number

dns2 attributes

server2 attributes

  • server.address
    StableServer domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • server.port
    StableServer port number.

source2 attributes

  • source.address
    DevelopmentSource address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
  • source.port
    DevelopmentSource port number

peer1 attributes

  • peer.service
    Deprecated→ service.peer.nameThe service.name of the remote service. SHOULD be equal to the actual service.name resource attribute of the remote service if any.

Recent changes

Breaking and notable changes to this domain across the last 6 semantic-conventions releases.

Topics are this site's grouping of upstream namespaces, not a structure the OpenTelemetry project publishes. JSON · All domains