Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to Restrict dynatrace onegent/SGW/Managed CLuster to communicate via backend network ?


Hi guys,

i have frontend nework and backend network in my environment.

Frontend for prod application communication

backend for monitoring ,backup,admin communication.

Please suggest how can i restrict my

1) oneagent to communicate SQW via a backend IP(out of multiple IPs on the machine)

Can this be done in an automated way or it has to be done manually in each oneagetn config file?

2) how can i restrict my SGW & managed cluster nodes to use the backend network IPs only?


Himanshu Mor


DynaMight Guru
DynaMight Guru

As far as I know, you can't at the moment. After agent connects, it downloads configuration including connection points (URLs to available gateways and tenant) and this will be stored in agent config. Even if you edit this config, it will be updated and overwritten.

Certified Dynatrace Master | Alanata a.s., Slovakia, Dynatrace Master Partner


Thanks Julius for the update here!

As mentioned in the below link , we can do so in case of a Security Gateway and managed cluster Nodes. I just hoped that same is available in OneAgent config as well


dnsEntryPoint= https://X.X.X.X:9999

Are you aware that this feature is in roadmap of next release ? or does it needs a Feature Request ?


Himanshu Mor