I need help to set off an alarm if the latency towards a device suddenly increase by “more than 20ms” compared to polling 60 minutes ago, and still experiencing an increased latency since.
Reason is to pick up and flag for VPN/SD-WAN etc tunnels that may be affected by ISP operator re-routes/changes in peering etc.
You might have a look at dpinger. Dpinger is used in open source firewalls to monitor link latency and loss. Natively it supports alarms based on absolute (rather than time-relative) values, but you can easily implement time relative rules above it.