Monitor DB Server without outside IP Address

John Cianfarani jcianfarani at rogers.com
Fri Mar 2 04:19:51 CET 2007


Could have the DB Server only have a route for the nagios box.

Thanks
John

-----Original Message-----
From: nagios-users-bounces at lists.sourceforge.net
[mailto:nagios-users-bounces at lists.sourceforge.net] On Behalf Of Tobias
Klausmann
Sent: Thursday, March 01, 2007 6:12 PM
To: nagios-users at lists.sourceforge.net
Subject: Re: [Nagios-users] Monitor DB Server without outside IP Address

Hi! 

On Thu, 01 Mar 2007, Marc Powell wrote:
> > From: nagios-users-bounces at lists.sourceforge.net [mailto:nagios-users-
> > bounces at lists.sourceforge.net] On Behalf Of Patrick Morris
> > Sent: Thursday, March 01, 2007 4:07 PM
> > To: James Pells
> > Cc: nagios-users at lists.sourceforge.net
> > Subject: Re: [Nagios-users] Monitor DB Server without outside IP Address
> > 
> > There are reasons people don't make their DB boxes available from the
> > internet.  A couple better solutions might be:
> > 
> > 1. Monitor the box from inside the network it's on, or
> > 2. Have the DB submit passive checks to your monitoring box.
> 
> Depending on what you are actually interested in monitoring some other
> options might be...
> 
> 3. create a small script on your web server that performs checks on your
> DB and outputs a web page than you can check with check_http.
> 4. check_nrpe -> webserver calls check_nrpe -> DB server (untested but
> should work)

Note though that longer NRPE cascades (>=3 hops) can be
notopriously difficult to debug. Worse, if you don't have proper
dependencies (between your NRPE checks and a check for NRPE
itself), you can very easily spam your cell into oblivion ;)

Also, some DB machines deliberately have no default route (or one
not letting them leave their nets). So passive sending is not
possibel, either.

So, from a security standpoint, I'd recommend the "webpage does
the checks and is checked by check_http" approach.

Regards,
Tobias


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list