Questions about cluster ActiveGate

[h_medeiros]

Hi,

I hope your are safe.

I Have some questions about Cluster Active Gate.

We are deployng a Dynatrace managed with 3 nodes.

We already installed the nodes e three Environment Active Gates for two Environments (one for homologation and two for Production)

To install Environment AC and Nodes we use an proxy with communication with mission control.

No Agent installed yet.

So, the customer want monitor a RUM Mobile:

Questions:

1 - Already installed Environment active Gate, can i install Clusters active Gate? The Environment AC will find this Cluster AC? Or do I need unnistall the Envi AC?

2 - We will deploy the Clusters active Gates in DMZ network, but the customer have a load balance, like the scenario 3 of Managed deployment. They will provide the DNS and ssl certificate. Do I need import the ssl certificate from Cluster Active to Load balance? What the address i will put in URL beacon?

Best Regards

[ChadTurner]

I might not be following your question correctly, but here are the fundamentals:

Dynatrace offers two types of ActiveGate: Environment ActiveGate and Cluster ActiveGate. If you use Dynatrace SaaS, you only need to install an Environment ActiveGate. Dynatrace Managed deployments typically require both ActiveGate types, though the most important type for Managed deployments is the Cluster ActiveGate.

Cluster AG: https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-managed/installation/how-to...

Environment AG: https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/basic-concepts/w...

The biggest difference is what data is being passed. The Cluster AG handles things such as Mobile App Connection, UFO Connection and so on. Where the environment AG handles all the metrics coming into Dynatrace from the Oneagents, to Synthetics, to VMware integrations, Log monitoring and so on.

[h_medeiros]

Hi Chad T,

I Will explain better. I saw in documentation that for deploy Cluster AC, it need be installed before to install Env AC. Because Env AC need to knowsi f there someone Cluster AC deployed. So, in my case there 3 Env Ac installed. Can i install Cluster active gate to collect RUM mobile and this cluster AC Will be able to connect with Env AC already deployed?

[Radoslaw_Szulgo · Accepted solution]

Hey,

1 - Already installed Environment active Gate, can i install Clusters active Gate? The Environment AC will find this Cluster AC? Or do I need unnistall the Envi AC?

Of course you can install ActiveGates in any order - they will find out about themselves automatically.

just take a look here to see how the traffic will flow and what are the priorities for agents to select the route. For Mobile RUM of course it will go immediately to Cluster AG and then to the cluster.

https://www.dynatrace.com/support/help/shortlink/sgw-availability

2 - We will deploy the Clusters active Gates in DMZ network, but the customer have a load balance, like the scenario 3 of Managed deployment. They will provide the DNS and ssl certificate. Do I need import the ssl certificate from Cluster Active to Load balance? What the address i will put in URL beacon?

You need to configure a public endpoint in CMC (Settings -> Public endpoints) as your Load Balancer address - as you want that Mobile RUM agents use exactly that address. Certificate will be verified of those that you have at Load Balancer. Of course then your Load Balancer will need to trust those that are in Cluster AG. If you use Dynatrace-provided certs, you should be good to go as they are valid CA. If you use your custom self-signed certs, then you might need to import public cert and chain of Cluster AG to your Load Balancer.

So the traffic always go like that:

Mobile RUM -> Load Balancer -> Cluster AG -> Cluster

Cluster AG doesn't know about LB actually (and doesn't need to 🙂 )

Hope this helps!

[h_medeiros]

Thanks for you help @Radoslaw S.

I Understood!

Just more one question. In this case, do i realy need a valid DNS for Cluster AG or can i use a private ip? And if I need an valid DNS, is it better to use the DNS provided by dynatrace?

Best Regards

[Radoslaw_Szulgo]

In case of just (Mobile) RUM and Synthetic - yes, you can have a private IP. Valid DNS has to be provided by you in the Load Balancer - as Dynatrace has no access there.

[h_medeiros]

Thank you very much Radoslaw!! 😃

[paco_porro]

perhaps you have misinterpreted the documentation.

If you are referring to this: https://www.dynatrace.com/support/help/shortlink/public-managed-sgw#before-you-begin, what you can find there is the possibility to reduce the number of AGs needed by installing multi-environment AGs.

[h_medeiros]

Thanks for your support Paco A. I saw this part of the documentation: " if you plan to use the Environment ActiveGate, the deployment order is important: " https://www.dynatrace.com/support/help/shortlink/managed-deployment-scenarios#scenario-2-pure-dynatr...

Best Regards