Intercepting Traffic from ActiveGate to Mission Control with Proxy

[Ardhi]

Hi,

We're trying to capture communication between ActiveGate to mission control in our SaaS environment.

Referring from this thread:

https://community.dynatrace.com/t5/Open-Q-A/Auditing-Dynatrace-mission-control-communication/m-p/466...

We configured common CA with the proxy (MITM) and added to ActiveGate trusted store

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/configuration/co...

and set for proxy configuration (simple scenario) like in below documentation

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/configuration/se...

Checked on the log we have both CA and proxy configured for the ActiveGate, also the proxy is working for other purposes. However we didn't catch any traffic from ActiveGate.

Is this the right way to intercept the traffic communication to mission control (specifically for SaaS), and is there any way we can have some outgoing traffic from ActiveGate to verify the setup?

Thank you

[Lukasz_Halman · Accepted solution]

Described approach should work as you expect. All upstream traffic should go through your proxy. Have you restarted ActiveGate service?

On the other hand, there is no communication between ActiveGate and Mission Control in SaaS as this component simply doesn't exist there. The only communication is between AG and the SaaS cluster where customer environment is placed.

[Ardhi]

Yes it's restarted already and yes sorry I mean to the SaaS cluster.

We don't have remote cloud environment to monitor also, so solely to the SaaS cluster but currently nothing is captured. If the AG has specific need to call to the cluster maybe we can confirm if the setup is working properly.

[Ardhi]

it works, need to zoom in the details. Thanks