Xymon Proxy for 'conn'
list Paul Root
Hi, I've brought up a xymon proxy to get monitoring on some machines that are a couple firewalls away from my main servers. That works fine. What I would like to do now is to have my 'conn' monitor (with fping) monitor some machines that are behind a firewall from my server. This firewall will allow the 1984 traffic, but not a ping. So can I get my bbproxy to do the fping and forward that info to the main server? Currently, my bbproxy is not running hobbitd. I'm kind of thinking that if I enabled hobbitd to just listen on localhost, and the bbproxy on the real ethernet, I could get the fping, and have bbproxy forward to localhost, and the real servers. Does that make sense? Any special config for that, or basically just the --listen=127.0.0.1, and regular proxy stuff? Thanks, Paul. Paul Root XXX-XXX-XXXX XXX-XXX-XXXX IM/MNS Infrastructure
list Buchan Milne
▸
On Friday 12 June 2009 21:20:45 Root, Paul wrote:
Hi, I've brought up a xymon proxy to get monitoring on some machines that are a couple firewalls away from my main servers. That works fine. What I would like to do now is to have my 'conn' monitor (with fping) monitor some machines that are behind a firewall from my server. This firewall will allow the 1984 traffic, but not a ping. So can I get my bbproxy to do the fping and forward that info to the main server? Currently, my bbproxy is not running hobbitd. I'm kind of thinking that if I enabled hobbitd to just listen on localhost, and the bbproxy on the real ethernet, I could get the fping, and have bbproxy forward to localhost, and the real servers. Does that make sense? Any special config for that, or basically just the --listen=127.0.0.1, and regular proxy stuff?
No need to run hobbitd, all you need to do is enable the bbnet task, and ensure that the BBDISP or BBDISPLAYS variables in hobbitserver.cfg are set correctly. Regards, Buchan
list Paul Root
Thanks, I'll give that a try. Paul Root IM/MNS Infrastructure
▸
-----Original Message-----
From: Buchan Milne [mailto:user-9b139aff4dec@xymon.invalid]
Sent: Wednesday, June 17, 2009 2:59 AM
To: user-ae9b8668bcde@xymon.invalid
Cc: Root, Paul
Subject: Re: [hobbit] Xymon Proxy for 'conn'
On Friday 12 June 2009 21:20:45 Root, Paul wrote:Hi, I've brought up a xymon proxy to get monitoring on some machines that are a couple firewalls away from my main servers. That works fine. What I would like to do now is to have my 'conn' monitor (with fping) monitor some machines that are behind a firewall from my server. This firewall will allow the 1984 traffic, but not a ping. So can I get my bbproxy to do the fping and forward that info to the main server? Currently, my bbproxy is not running hobbitd. I'm kind of thinking that if I enabled hobbitd to just listen on localhost, and the bbproxy on the real ethernet, I could get the fping, and have bbproxy forward to localhost, and the real servers. Does that make sense? Any special config for that, or basically just the --listen=127.0.0.1, and regular proxy stuff?
No need to run hobbitd, all you need to do is enable the bbnet task, and ensure that the BBDISP or BBDISPLAYS variables in hobbitserver.cfg are set correctly. Regards, Buchan
list Paul Root
I enabled bbnet on my proxy server, and it started up sending conn to green on the machines the servers are able to get to. Great. But then I start getting some cycling of the conn icon, red to green to red to green. Could this be the proxy saying it's green, and then the server saying it's red? Do I need to disable bbnet on the servers? Can I do that on a case by case (machine by machine) basis? Thanks, Paul.
▸
Paul Root IM/MNS Infrastructure
-----Original Message-----
From: Buchan Milne [mailto:user-9b139aff4dec@xymon.invalid]
Sent: Wednesday, June 17, 2009 2:59 AM
To: user-ae9b8668bcde@xymon.invalid
Cc: Root, Paul
Subject: Re: [hobbit] Xymon Proxy for 'conn'
On Friday 12 June 2009 21:20:45 Root, Paul wrote:Hi, I've brought up a xymon proxy to get monitoring on some machines that are a couple firewalls away from my main servers. That works fine. What I would like to do now is to have my 'conn' monitor (with fping) monitor some machines that are behind a firewall from my server. This firewall will allow the 1984 traffic, but not a ping. So can I get my bbproxy to do the fping and forward that info to the main server? Currently, my bbproxy is not running hobbitd. I'm kind of thinking that if I enabled hobbitd to just listen on localhost, and the bbproxy on the real ethernet, I could get the fping, and have bbproxy forward to localhost, and the real servers. Does that make sense? Any special config for that, or basically just the --listen=127.0.0.1, and regular proxy stuff?
No need to run hobbitd, all you need to do is enable the bbnet task, and ensure that the BBDISP or BBDISPLAYS variables in hobbitserver.cfg are set correctly. Regards, Buchan
list Buchan Milne
▸
On Wednesday 17 June 2009 20:03:11 Root, Paul wrote:
I enabled bbnet on my proxy server, and it started up sending conn to green on the machines the servers are able to get to. Great. But then I start getting some cycling of the conn icon, red to green to red to green. Could this be the proxy saying it's green, and then the server saying it's red? Do I need to disable bbnet on the servers? Can I do that on a case by case (machine by machine) basis?
Populate the NET tags in the bb-hosts file, to match what you will put in the BBLOCATION variable in hobbitserver.cfg on the Hobbit/Xymon box that should do network tests for the host in question. Regards, Buchan
list Paul Root
I did that. I caused a whole lot more problems. The bbnet process didn't seem to honor it. I had red everywhere. To me, it turns out, it's easier to have a separate bb-hosts file for the proxy server. There aren't that many machines to be monitored there. It's a small extra step in administration, once, for less than 5% of our machines, compared to a little admin for every machine. At config time.
▸
From: Buchan Milne [user-9b139aff4dec@xymon.invalid]
Sent: Friday, June 19, 2009 2:14 AM
To: Root, Paul
Cc: user-ae9b8668bcde@xymon.invalid
Subject: Re: [hobbit] Xymon Proxy for 'conn'
On Wednesday 17 June 2009 20:03:11 Root, Paul wrote:I enabled bbnet on my proxy server, and it started up sending conn to green on the machines the servers are able to get to. Great. But then I start getting some cycling of the conn icon, red to green to red to green. Could this be the proxy saying it's green, and then the server saying it's red? Do I need to disable bbnet on the servers? Can I do that on a case by case (machine by machine) basis?
Populate the NET tags in the bb-hosts file, to match what you will put in the BBLOCATION variable in hobbitserver.cfg on the Hobbit/Xymon box that should do network tests for the host in question. Regards, Buchan