topic Re: Public endpoint for the Cluster ActiveGate in Dynatrace tips

Public endpoints for the Cluster ActiveGate

Julius_Loman — Fri, 07 Feb 2025 13:19:23 GMT

In the Dynatrace Managed deployments, there are sometimes requirements to filter the communication from the wilds of the Internet to the Cluster ActiveGates to comply with security policies. If your deployment uses some sort of web application firewall or load balancer being able to filter out certain URLs, you are able to filter out certain functionality just based on the URLs.

In the table below there is a list of the functionality that is covered by the Cluster ActiveGate and URL paths with HTTP methods the functionality requires. Content types indicate the data types being transmitted to your Managed cluster using the Cluster ActiveGate.

Please note this is indicative and may change in upcoming ActiveGate releases without further notice.

<tenant> - is the environment ID (UUID) for such the regular expression is:

[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}

Cluster ActiveGate endpoints

Functionality	URL path starts with	HTTP methods	Content type
Mission control check	/rest/state	GET
Mobile application monitoring	/mbeacon/<tenant> /dtmb/<tenant>	GET POST	text/plain
OneAgent communication	/communication	HEAD POST	application/octet-stream
API endpoints	/e/<tenant>/api/	GET POST PUT DELETE	text/plain application/json
Dynatrace mobile app (latest version)	/e/<tenant>/api/v2	GET	application/json
Dynatrace mobile app (legacy version)	/e/<tenant>/api/v1/mobile/settings /e/<tenant>/api/v1/mobile/info /e/<tenant>/api/v1/mobile/problems /e/<tenant>/api/v1/mobile/problem/	GET	application/json
Accelerated Mobile Pages	/ampbf/
Agentless monitoring	/bf/<tenant> /jstag/managed/	GET
Browser Extension	/e/<tenant>/api/v1/browserextension/config	GET	application/json
Synthetic	/beacon/synthetic/<tenant> /beacon/synthetic/httpResults/<tenant> /beacon/synthetic/browser/<tenant> /beacon/synthetic/screenshot/<tenant> /beacon/synthetic/multi-protocol/<tenant> /beacon/synthetic/credentials/<tenant>	GET POST

Re: Public endpoint for the Cluster ActiveGate

AntonioSousa — Wed, 18 Jan 2023 21:50:13 GMT

@Julius_Loman,

This is beautiful information! Securing access is a must in today's environments. I believe this should be included in the Dynatrace documentation.

Re: Public endpoint for the Cluster ActiveGate

HannahM — Fri, 03 Feb 2023 08:58:29 GMT

This is a great list, can I add 1 more for Synthetic? If you have screenshots stored in the cluster, rather than s3, you will, also, want

screenshots /beacon/synthetic/screenshot/<tenant>

Re: Public endpoint for the Cluster ActiveGate

Julius_Loman — Fri, 03 Feb 2023 09:39:46 GMT

Perfect! My list is still just "discovered", let's make it collaborative.

Re: Public endpoint for the Cluster ActiveGate

Babar_Qayyum — Mon, 06 Feb 2023 13:42:22 GMT

Hello @Julius_Loman

Great work!

Regards,

Babar

Re: Public endpoints for the Cluster ActiveGate

HannahM — Mon, 15 Jul 2024 08:26:11 GMT

Added a couple more Synthetic endpoints.
Multiprotocol monitor beacons
/beacon/synthetic/multi-protocol/<tenant>
For Credential vault updates by HTTP Monitors
/beacon/synthetic/credentials/<tenant>

Re: Public endpoints for the Cluster ActiveGate

PetrVlacil — Wed, 29 Jan 2025 11:13:38 GMT

In the row with the endpoints for Dynatrace mobile app there are brackets saying "legacy version". Are there any endpoints that are newer? Does anyone know if there is any update to these Dynarace Mobile App endpoints or are they still used?

Many Thanks,
Petr

Re: Public endpoints for the Cluster ActiveGate

a_barbera — Fri, 07 Feb 2025 11:38:26 GMT

Hello @PetrVlacil ,

The old Dynatrace Mobile App only uses those endpoints. The newer app uses common Dynatrace v2 endpoints. For example, /api/v2/problems.

Re: Public endpoints for the Cluster ActiveGate

zaid-bashir — Mon, 20 Oct 2025 08:02:17 GMT

Thanks @Julius_Loman
Very Useful Content.