topic APIGEE Extension working & usage in Extensions

APIGEE Extension working & usage

shashank_87 — Tue, 27 Feb 2024 00:06:10 GMT

Hello, I have recently come across this extension which looks very interesting to monitor APIGEE proxies. https://www.dynatrace.com/hub/detail/apigee/#overview

But the documentation is not very precise and does not answer some of some of questions I had in my mind.

It says the extension uses active gate to pull the metrics from APIGEE. What kind of active gate is required? We use Dynatrace on-prem so I believe it will also require connectivity to be established from our active gates to APIGEE to poll the metrics?
It says the keys.json file needs to be placed on active gate server but does not say where? Also if there are 3 active gates within a group, does it needs to be placed on each server?
What about security? Storing secret file in a plain text format on active gate server would be a security risk?
Is it possible to use containerised active gate? We have an active gate running on Kubernetes cluster.
Is this extension even applicable for Dynatrace managed?

If anyone has used this extension with DT managed, I'd really appreciate if you can clear some of these basic queries.

Many Thanks.

Re: APIGEE Extension working & usage

PacoPorro — Tue, 27 Feb 2024 08:31:38 GMT

1 - Enviroment activegate with extensions module active

https://docs.dynatrace.com/docs/shortlink/activegate-capabilities#functional_tbl

2 - It's part of the configuration

3 - You can restrict access to the Dynatrace ActiveGate user (e.g., dtuserag on Linux) and apply 400 to the file.

4 - No

5 - No restrictions with DT Managed. You need to be sure the Activegate is able to reach the apigee API

Re: APIGEE Extension working & usage

shashank_87 — Tue, 27 Feb 2024 11:29:59 GMT

Hey @PacoPorro Thanks. This was really helpful.

I have one more question. So it is clear that I can't use containerised AGs so I have to rely on active gates which are hosted on my linux boxes. The thing is when I try to add monitoring configuration, by default it shows me 5 AGs and as you can see 3 of them are Containerised AGs and the 2 others are Environment AGs hosted on a secured on-prem servers.

As these are secured on-prem servers, they don't have connectivity to internet. Are you saying that I have to open the connectivity from these servers to reach APIGEE API to pull the metrics? What would that endpoint?

Best Regards,
Shashank