25 May 2022 07:02 AM - last edited on 26 May 2022 12:33 AM by MaciejNeumann
We have multiple interfaces on our nodes hosting the Dynatrace managed cluster. Only one interface per host can be used by agents and activeGates to connect to the cluster..
So all agents and activeGates use a list of addresses that can not be used, ever!
This situation exist for a long time, does anybody have a suggestion how to remove those unused interface from Dynatrace config?
Solved! Go to Solution.
Kindly raise a support ticket if its for any organization.
Ticket raised for the cluster issue, thx!
You can define what gets announced in CMC. For each node check out "Deployment status", then "Configure" on each node. At the bottom, check:
Thx for your response, this takes care of 50% of the answer the Agent search path. Looking back on the original "security complaint" I notice it is about the activeGates. They are trying to connect the "unreachable" interfaces on the cluster.
For this I need to go for option 1, the ticket (-;
The AGs will follow that CMC configuration too, so it should resolve for both OneAgents and ActiveGates.
Just had to check (-; installed a oneAgent and found the error in the list the oneAgent gets from the cluster:
So there is a error on the cluster I assume Node5 -> I will create a ticket for this
General (I do not think this this is available) for security reasons e.g. preventing calls to unavailable destinations, it would be nice to have an option to turn off traffic to cluster-nodes or to the cluster activeGate completely.
Normal behavior for an activeGate is to connect to :
In this use case, the AG can only connect to the Cluster ActiveGate )-;
Looks like there are some dependencies that I was not aware of. Have you tried Network Zones to segment traffic?
No not yet, I will propose it. (-; Just figured out that agents that are technically limited to connect to one Environment ActiveGate, still get the long node list, and will thy them all! So implementing network zones looks to me as a great idea!