Re: PCP deployment with some monitored servers behind a firewall

[fche@xxxxxxxxxx (Frank Ch. Eigler)]

tadej.j wrote:

> [...]
> Servers under 3) only accept incoming connections on port 80 and 443.
> For SSH access on port 22, I have to use my personal VPN credentials.
> Outgoing connections are allowed on all ports, however.
>
> My question is, how can the monitoring server collect the metrics from
> servers under 3)? Is there a way to push the metrics to some
> intermediate gateway, which would act similar to pmcd so that pmlogger
> and pmie can connect to it?

If you can tunnel some random TCP port across an SSH tunnel, it should
work just fine.  You can configure pmmgr to refer to the this-side
addresses, i.e.,:

   % ssh -f -L 6543:localhost:44321 firewalled_host sleep 9999 # or equivalent
   # echo 'localhost:6543' >> /etc/pcp/pmmgr/target-host

That's it.  pmie won't work across that tunnel, due to bugs just
recently fixed (somewhere in the merge queue), but pmlogger will be
fine.


- FChE