We have a managed Dynatrace cluster along with a cluster ActiveGate (as well as several environment active gates). The majority of our environment ActiveGates connect directly to the cluster, however, we also have connections being made through the cluster ActiveGate. My question is, what is the best way to see which ActiveGate is connected through the cluster ActiveGate and which are directly connected to the cluster?
When looking at the deployment status in both scenarios, I only see the environment ActiveGates, but no indicator of which ActiveGate connections are being proxied by the Cluster ActiveGate. Where can I find this?
Hello @Sean_Bridges ,
For Agents you can check log SupportArchive*\support_archive\AGENT\*\logs\os\ruxitagent_host_*.0
and grep this :
|info [comm ] Connected to https|
After some time in logs you can find connection status.
In my case I can see that agent have no communicatioin with my cluster-ag-2.
You also need to know that Host agent and for example Java agent from same host - can use two different endpoints at the same time.
Agents and ActiveGates - every 30 minutes (or more often) change the connection endpoints according to the connection string.
You can define network zones to change the priority.
Our Customers use firewall rules to make some endpoint avaliable - some not.
For normal operation and load balancing, avoiding overloading of individual components - It's better to stay out of it. Allow Dynatrace to work as designed.
For OneAgent you can use the Deployment status to find OneAgents connecting through any activegate including cluster activegate. For ActiveGates connecting to Cluster ActiveGates this information is not exposed in the UI. So only way is to download support archives from the ActiveGates and check where are they connected to from the logs. Or reach out to Dynatrace One using built-in chat to check the connections in the DebugUI for you.
Just to complement that it is normal for environment activegates to go through cluster activegates if they cannot connect directly:
As @Romanenkov_Al3x has referred, try out network zones to avoid that traffic doesn't go through unneeded activegates. Another important documentation page you might want to check is https://www.dynatrace.com/support/help/setup-and-configuration/network-zones/activegate-connectivity