# ActiveGate download link URL as used by diagnostic tools should use public DNS name **URL:** \ **Category:** Open Q&A\ **Tags:** activegate, dynatrace-saas\ **Created:** [October 25, 2017, 8:37am UTC](https://community.dynatrace.com/t/activegate-download-link-url-as-used-by-diagnostic-tools-should-use-public-dns-name/8729 "2017-10-25T08:37:27Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![mark\_linders](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/mark_linders/32/7446_2.png) [@mark\_linders](https://community.dynatrace.com/u/mark_linders)\ **Post date:** [October 25, 2017, 8:37am UTC](https://community.dynatrace.com/t/activegate-download-link-url-as-used-by-diagnostic-tools-should-use-public-dns-name/8729/1 "2017-10-25T08:37:27Z")
When creating memory dumps of processes, the dumps are transferred to the ActiveGate. From the Dynatrace console you will receive the download links to the dumps. Unfortunately the download links that are presented are the internal AWS DNS names instead of the public ones Making the links unusable. Is it possible to configure public DNS names instead of the local ones? ---
**Author:** ![silvia\_moreno\_u](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/silvia_moreno_u/32/27330_2.png) [@silvia\_moreno\_u](https://community.dynatrace.com/u/silvia_moreno_u)\ **Post date:** [January 25, 2018, 3:39pm UTC](https://community.dynatrace.com/t/activegate-download-link-url-as-used-by-diagnostic-tools-should-use-public-dns-name/8729/2 "2018-01-25T15:39:08Z")
Hi. For future reference, when installing the security gateway there are command-line options and you can use them to specify such thing. I’m trying to find the documentation on that. ---
**Author:** ![mark\_linders](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/mark_linders/32/7446_2.png) [@mark\_linders](https://community.dynatrace.com/u/mark_linders)\ **Post date:** [January 25, 2018, 10:05pm UTC](https://community.dynatrace.com/t/activegate-download-link-url-as-used-by-diagnostic-tools-should-use-public-dns-name/8729/3 "2018-01-25T22:05:49Z")
Hi Silvia, Thank you for the tip. I only found the following reference to command line options that do not include setting the published DNS record. > **[Configuration properties and parameters of ActiveGate](https://docs.dynatrace.com/docs/ingest-from/dynatrace-activegate/configuration/configure-activegate)** > > Learn which ActiveGate properties you can configure based on your needs and requirements. From what I recall configuring the download links is something that is still being worked on. Until then, the feature will be unusable for us unfortunately. If you happen to find other information that gives me other options, please share and I will surely try it out. Kind regards, Mark ---
**Author:** ![silvia\_moreno\_u](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/silvia_moreno_u/32/27330_2.png) [@silvia\_moreno\_u](https://community.dynatrace.com/u/silvia_moreno_u)\ **Post date:** [January 26, 2018, 8:06am UTC](https://community.dynatrace.com/t/activegate-download-link-url-as-used-by-diagnostic-tools-should-use-public-dns-name/8729/4 "2018-01-26T08:06:14Z")
![15609-sg-parameters.png](https://global.discourse-cdn.com/dynatrace/original/2X/9/9df8438aede2e37fc89fab8d76cee87b2744a12a.png) One of my customers found out there is a command-line option called DNSENTRYPOINT. I am going to see if we should add this to the documentation. Regards, Silvia ---
**Author:** ![mark\_linders](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/mark_linders/32/7446_2.png) [@mark\_linders](https://community.dynatrace.com/u/mark_linders)\ **Post date:** [February 16, 2018, 9:36am UTC](https://community.dynatrace.com/t/activegate-download-link-url-as-used-by-diagnostic-tools-should-use-public-dns-name/8729/5 "2018-02-16T09:36:51Z")
So I have been playing around with the dnsEntryPoint parameter. And it is finally working. It did need some AWS trickery to make this useful: First add the following to /var/lib/dynatrace/gateway/config/custom.properties on the dynatrace security gateway: ```auto [connectivity]
dnsEntryPoint= https:// sg.mydomainname.com:9999 ``` From what I’ve seen, the agents now try to connect to this URL as well. Since we need the agents to connect to the local address of the Security Gateway we added a new **private zone** in **route53** called **[sg.mydomainname.com](http://sg.mydomainname.com)** with a single A record to the local ip address (for example 10.10.0.100). The ec2 instances now resolved [sg.mydomain.com](http://sg.mydomain.com) to the local address of the Security Gateway. We created a heapdump of one of our processes and waited for the agent to copy the files to the Security Gateway. The download link returned is: sg.mydomainname.com:9999. We created a new A record in route53 to point to the public IP address of the Dynatrace Gateway and opened up port 9999 for our public IP address. We were now able to download the heapdumps from the security gateway. Now the only question that remains is: How long are the heapdumps kept on the application servers where the oneagent is running? I do see dumps being accumulated on /opt/dynatrace/oneagent/log/memorydump, even when they have already been copied over to the security gateway. Regards, Mark