xymonproxy 🔗 link

Hi,
 
I've got the request to set up an additional XYmon server in our internet DMZ
for external customers.
Since all machines that would be displayed there are on our internal network I'd
like to forward all statuses  from our internal XYmon server to the one in the
DMZ and was thinking about xymonproxy.
But I saw on the man page and in the config files that I can only use xymonproxy
OR xymond. And xymonproxy would forward ALL data not only the data for some
specific hosts.
Has one of you a solution that he/she wants to share?
 
TIA
Torsten

On clients you want monitored by your main Xymon server and your new (dmz) Xymon server, add the second server to the BBDISP variable (old config, not sure the field for newer versions).  The client will send status messages to both servers.

 
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of user-c862b499d9fa@xymon.invalid
Sent: Friday, November 18, 2011 10:27 AM
To: xymon at xymon.com
Subject: [Xymon] xymonproxy

 
Hi, 
  
I've got the request to set up an additional XYmon server in our internet DMZ for external customers. 
Since all machines that would be displayed there are on our internal network I'd like to forward all statuses  from our internal XYmon server to the one in the DMZ and was thinking about xymonproxy. 
But I saw on the man page and in the config files that I can only use xymonproxy OR xymond. And xymonproxy would forward ALL data not only the data for some specific hosts. 
Has one of you a solution that he/she wants to share? 
  
TIA 
Torsten  

 

 Bruce White
 Senior Enterprise Systems Engineer | Phone: X-XXX-XXX-XXXX | Fax: XXX-XXX-XXXX | user-58f975e8bf9d@xymon.invalid | http://www.fellowes.com/
 
 
 
Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.

I was thinking the same thing. I have a xymon server inside a client network for them to see and it does the network tests. It has itself and our centralized xymon server as display servers. I use the variables below from xymonserver.cfg on the client's xymon server.


XYMSRV="0.0.0.0"                                                     # IP of a single Xymon server

XYMSERVERS="<IP.OF.FIRST.XYMON> <IP.OF.SECOND.XYMON>"                # IP of multiple Xymon servers. If used, XYMSRV must be 0.0.0.0


These are BBDISP and BBDISPLAYS on older versions. There is a space between the two IPs.


Greg

From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of White, Bruce
Sent: Monday, November 21, 2011 9:08 AM
To: user-c862b499d9fa@xymon.invalid; xymon at xymon.com
Subject: Re: [Xymon] xymonproxy

On clients you want monitored by your main Xymon server and your new (dmz) Xymon server, add the second server to the BBDISP variable (old config, not sure the field for newer versions).  The client will send status messages to both servers.


 Bruce White

 Senior Enterprise Systems Engineer | Phone: X-XXX-XXX-XXXX | Fax: XXX-XXX-XXXX | user-58f975e8bf9d@xymon.invalid | www.fellowes.com<http://www.fellowes.com/>;


[cid:image001.jpg at 01CCA830.9AAFF0A0]

Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.


From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of user-c862b499d9fa@xymon.invalid
Sent: Friday, November 18, 2011 10:27 AM
To: xymon at xymon.com
Subject: [Xymon] xymonproxy


Hi,


I've got the request to set up an additional XYmon server in our internet DMZ for external customers.

Since all machines that would be displayed there are on our internal network I'd like to forward all statuses  from our internal XYmon server to the one in the DMZ and was thinking about xymonproxy.

But I saw on the man page and in the config files that I can only use xymonproxy OR xymond. And xymonproxy would forward ALL data not only the data for some specific hosts.

Has one of you a solution that he/she wants to share?


TIA

Torsten

Hello,

Does this sort of architecture could work:

agent -> xymonproxy A -> xymonproxy B -> xymonserver

More, can we change the listening port of the proxy B ?

This could solve a security requirement in my company.

Cordialement, Regards,Mit freundlichen Grüßen,

Gautier BEGIN

Yes, that would work.

Yes you can change the port. It is done in tasks.cfg:

[xymonproxy]
    ENVFILE /usr/lib64/xymon/server/etc/xymonserver.cfg
    CMD $XYMONHOME/bin/xymonproxy --server=127.0.0.1:1985,192.168.3.212 --listen=0.0.0.0:1984 --report=$MACHINE.xymonproxy --no-daemon --pidfile=$XYMONSERVERLOGS/xymonproxy.pid
    LOGFILE $XYMONSERVERLOGS/xymonproxy.log


You see here, I have the proxy listening on 1984, and it sends out to itself on port 1985 and also to another machine on the regular port, 1984.

You need to be careful where you send disable and acknowledgements. You want to send them to the servers directly not the proxies. If you send to the proxy, you will get a loop that will change the disable times seemingly randomly until the disable expires.

From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Gautier Begin
Sent: Friday, January 17, 2014 8:05 AM
To: xymon at xymon.com
Subject: [Xymon] [xymon] xymonproxy

Hello,

Does this sort of architecture could work:

agent -> xymonproxy A -> xymonproxy B -> xymonserver

More, can we change the listening port of the proxy B ?

This could solve a security requirement in my company.

Cordialement, Regards,Mit freundlichen Grüßen,

Gautier BEGIN