https://community.dynatrace.com/t5/Dynatrace-Managed-Q-A/Wanting-to-confirm-architecture-choices-for-VM-service-provider/m-p/265789#M4003 <P>Hello:</P> <P>We have a managed cluster environment.</P> <P>We contract with a business partner that provides several VM application servers and a VM databases to us from their presence in the cloud (I think it is AWS).</P> <P>Since these are actual VM's, we are wanting to install copies of managed on prem Dyantrace once agents onto the VM's they have specifically dedicated for our company.</P> <P>&nbsp;</P> <P>If I understand correctly, there are 2 options:</P> <P>1) Install the Dynatrace One Agent on each of the servers, and have those servers communicated back directly using SSL over port 9999 to our Cluster Active Gate located in our DMZ.</P> <P>&nbsp;</P> <P>2)&nbsp; Install the One Agent on each of the servers AND bring up an Environment Active Gate in their cloud space. Then the One Agents communicate with the Environment AG, and then the Environment AG communicates back on 443 to our cluster Active gate&nbsp;</P> <P>&nbsp;</P> <P>I understand that their firewall and routing rules would need to be updated to allow access and communication to our routable address on the Cluster AG.</P> <P>&nbsp;</P> <P><STRONG>Are there other factors to consider regarding access and communication since we are the agent in another network, but allowing it to communicate back to the Cluster AG in our network?</STRONG></P> <P>&nbsp;</P> <P>Please advise and thank you!</P> <P>-C&nbsp;</P> <P>&nbsp;</P> Fri, 20 Dec 2024 08:09:17 GMT runatyr 2024-12-20T08:09:17Z https://community.dynatrace.com/t5/Dynatrace-Managed-Q-A/Wanting-to-confirm-architecture-choices-for-VM-service-provider/m-p/265789#M4003 <P>Hello:</P> <P>We have a managed cluster environment.</P> <P>We contract with a business partner that provides several VM application servers and a VM databases to us from their presence in the cloud (I think it is AWS).</P> <P>Since these are actual VM's, we are wanting to install copies of managed on prem Dyantrace once agents onto the VM's they have specifically dedicated for our company.</P> <P>&nbsp;</P> <P>If I understand correctly, there are 2 options:</P> <P>1) Install the Dynatrace One Agent on each of the servers, and have those servers communicated back directly using SSL over port 9999 to our Cluster Active Gate located in our DMZ.</P> <P>&nbsp;</P> <P>2)&nbsp; Install the One Agent on each of the servers AND bring up an Environment Active Gate in their cloud space. Then the One Agents communicate with the Environment AG, and then the Environment AG communicates back on 443 to our cluster Active gate&nbsp;</P> <P>&nbsp;</P> <P>I understand that their firewall and routing rules would need to be updated to allow access and communication to our routable address on the Cluster AG.</P> <P>&nbsp;</P> <P><STRONG>Are there other factors to consider regarding access and communication since we are the agent in another network, but allowing it to communicate back to the Cluster AG in our network?</STRONG></P> <P>&nbsp;</P> <P>Please advise and thank you!</P> <P>-C&nbsp;</P> <P>&nbsp;</P> Fri, 20 Dec 2024 08:09:17 GMT https://community.dynatrace.com/t5/Dynatrace-Managed-Q-A/Wanting-to-confirm-architecture-choices-for-VM-service-provider/m-p/265789#M4003 runatyr 2024-12-20T08:09:17Z https://community.dynatrace.com/t5/Dynatrace-Managed-Q-A/Wanting-to-confirm-architecture-choices-for-VM-service-provider/m-p/265861#M4004 <P>Hello&nbsp;<a href="https://community.dynatrace.com/t5/user/viewprofilepage/user-id/29954">@runatyr</a>, you got the understanding and I would recommend the second option to reduce the number of exit and entry points of OneAgent communication. Keep in mind every time you add a layer add 1 min delay to your data if it is within the region.</P><P>Thanks</P><P>Raj</P><P>All</P> Fri, 20 Dec 2024 04:10:00 GMT https://community.dynatrace.com/t5/Dynatrace-Managed-Q-A/Wanting-to-confirm-architecture-choices-for-VM-service-provider/m-p/265861#M4004 mrc15816 2024-12-20T04:10:00Z