Public endpoints for the Cluster ActiveGate

[Julius_Loman]

In the Dynatrace Managed deployments, there are sometimes requirements to filter the communication from the wilds of the Internet to the Cluster ActiveGates to comply with security policies. If your deployment uses some sort of web application firewall or load balancer being able to filter out certain URLs, you are able to filter out certain functionality just based on the URLs.

In the table below there is a list of the functionality that is covered by the Cluster ActiveGate and URL paths with HTTP methods the functionality requires.  Content types indicate the data types being transmitted to your Managed cluster using the Cluster ActiveGate.

Please note this is indicative and may change in upcoming ActiveGate releases without further notice.

<tenant> - is the environment ID (UUID) for such the regular expression is:

[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}

Cluster ActiveGate endpoints

Functionality	URL path starts with	HTTP methods	Content type
Mission control check	/rest/state	GET
Mobile application monitoring	/mbeacon/<tenant> /dtmb/<tenant>	GET POST	text/plain
OneAgent communication	/communication	HEAD POST	application/octet-stream
API endpoints	/e/<tenant>/api/	GET POST PUT DELETE	text/plain application/json
Dynatrace mobile app (legacy version)	/e/<tenant>/api/v1/mobile/settings /e/<tenant>/api/v1/mobile/info /e/<tenant>/api/v1/mobile/problems /e/<tenant>/api/v1/mobile/problem/	GET	application/json
Accelerated Mobile Pages	/ampbf/
Agentless monitoring	/bf/<tenant> /jstag/managed/	GET
Browser Extension	/e/<tenant>/api/v1/browserextension/config	GET	application/json
Synthetic	/beacon/synthetic/<tenant> /beacon/synthetic/httpResults/<tenant> /beacon/synthetic/browser/<tenant> /beacon/synthetic/screenshot/<tenant> /beacon/synthetic/multi-protocol/<tenant>  /beacon/synthetic/credentials/<tenant>	GET POST

[AntonioSousa]

@Julius_Loman,

This is beautiful information! Securing access is a must in today's environments. I believe this should be included in the Dynatrace documentation.

[HannahM]

This is a great list, can I add 1 more for Synthetic? If you have screenshots stored in the cluster, rather than s3, you will, also, want 

screenshots /beacon/synthetic/screenshot/<tenant> 

[Julius_Loman]

Perfect! My list is still just "discovered", let's make it collaborative.

[Babar_Qayyum]

Hello @Julius_Loman 

Great work!

Regards,

Babar

[HannahM]

Added a couple more Synthetic endpoints. 
Multiprotocol monitor beacons
/beacon/synthetic/multi-protocol/<tenant>
For Credential vault updates by HTTP Monitors 
/beacon/synthetic/credentials/<tenant>