passive monitoring solutions for remote networks · passive monitoring solutions for remote...

19
Passive Monitoring Solutions For Remote Networks Scott Wilkerson [email protected]

Upload: others

Post on 04-Jul-2020

9 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

Passive Monitoring SolutionsFor

Remote Networks

Scott Wilkerson

[email protected]

Page 2: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

๒๐๑๒ ๒

Topics

Difficulties with Remote NetworksFirewall ChallengesTypes of Monitoring Active vs. PassivePossible Solutions

Nagios Remote Data Sender (NRDS)Nagios Reflector

Q & A / Discussion

Page 3: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

๒๐๑๒ ๓

Difficulties with Remote Networks

Active ChecksNeed Access through Firewall

Port forwardingMultiple levels of NAT/firewall to go throughWhat port goes to which system?What about Laptops with Dynamic IP?

Passive ChecksEvery monitoring change requires updating

config and plugin on each machine monitoredNagios server need to be reachable from

remote system

Page 4: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

๒๐๑๒ ๔

Pitfalls with Remote Networks

Nagios Server

Page 5: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

Unlocking The Power ofPassive Monitoring With

NRDS

Page 6: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 6

What the heck is NRDS?

NagiosRemoteDataSender

Page 7: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 7

Key Benefits of NRDS

Central ConfigurationDeploy onceAutomatic updates

Plugin DeploymentAll plugins on one server

Shared ConfigurationsChange config, deploy to allIncluding needed plugins!

Multiple Platforms and Architecture

Page 8: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

How do(es) NRDS work?How do(es) NRDS work?

Page 9: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 9

What Makes NRDS tick?

Primarily Nagios XINRDP (NRDS adds on to NRDP)NRDS Config Manager ComponentPlugin Cache in /usr/local/nrdp/pluginsEasy Addition Using XI's Unconfigured Objects

Could be used with CoreStill need NRDPNeed to modify configs manually

Client-sideCron/Scheduled Tasks*nix/Mac OS/X version use bash & curl/wget

Page 10: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012
Page 11: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 11

Pros & Cons of Passive Checks

AdvantagesNo Need to Open Firewalls to ClientsReduce Nagios Server LoadCentral Config ManagementCentral Plugin ManagementEasy setup, no compiling on every server

DisadvantagesNagios doesn't control when checks happenSome plugins have pre-reqsNagios server needs to be accessible from

remote system

Page 13: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

Using the NewNagios Reflector

to MonitorRemote Machines

Page 14: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 14

What is the Nagios Reflector?Just ReleasedNagios Enterprise Hosted Results

Clients send data to ReflectorNagios server Utilizes new

check_reflector.py pluginto collect results via SSL HTTP

Useful for Core and Nagios XICan accept NRDP or NSCA dataZero Firewall setup, all connections outbound

Conference attendees are the first people allowed access to Nagios Reflector

Page 15: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 15

Slide Title

Page 16: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 16

Pros & Cons of Nagios Reflector

AdvantagesNo Need to Open Firewalls (either) Reduce Nagios Server LoadWorks with dynamic IP assignmentsCan pull data to multiple Nagios ServersIntegration with NRDS (Roadmap)

DisadvantagesNagios doesn't control when checks happenClients & Nagios need Internet AccessSome data is sent to remote network

Page 18: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 18

Contact Us

Hours of operation: 9am - 5pm CST, Monday – Friday

Phone: U.S.: 1-888-624-4671 ♦ International: +1-651-204-9102

Fax: U.S.: 651-204-9103 ♦ International: +1-651-204-9103

Email: [email protected]

Mail: Nagios Enterprises, LLCP.O. Box 8154Saint Paul, MN 55108

Websites:

http://www.nagios.com/http://www.nagios.org/http://exchange.nagios.org/http://labs.nagios.com/

Page 19: Passive Monitoring Solutions For Remote Networks · Passive Monitoring Solutions For Remote Networks Scott Wilkerson ... remote system. ... Some data is sent to remote network. 2012

2012 19

Thank You!

Thank you!Additional Questions?

http://support.nagios.com/forum/viewtopic.php?f=24&t=7484