-
Notifications
You must be signed in to change notification settings - Fork 16
W-16935769 beta traffic inspection monitoring duke #305
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
dukesphere
wants to merge
41
commits into
latest
Choose a base branch
from
W-16935769-beta-traffic-inspection-monitoring-duke
base: latest
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Changes from 40 commits
Commits
Show all changes
41 commits
Select commit
Hold shift + click to select a range
1ed343c
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere a4892c1
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere b4d7830
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere f70d1e4
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 32571ec
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 51aeacd
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 359cf4d
Merge branch 'W-16935769-beta-traffic-inspection-monitoring-duke' of …
dukesphere 88925db
W-16935769-beta-traffic-inspection feedback v1
dukesphere 2bc38ed
W-16935769-beta-traffic-inspection-monitoring-duke permissions
dukesphere 1298ac4
W-16935769-beta-traffic-inspection-monitoring-duke permissions
dukesphere 7c6991c
W-16935769-beta-traffic-inspection-monitoring-duke tweaks
dukesphere e270f2f
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 6d86c27
Update modules/ROOT/pages/_partials/include-traffic-inspection.adoc
dukesphere 7e07b07
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere d39af0a
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere e55f2a7
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere df84b4f
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere cf74ece
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere a18a20c
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 783a46c
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 8f8acef
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 749500e
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere facb772
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 8495df4
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 97bfae4
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 3ecbd9d
incorp feedback from bin
dukesphere 34032f1
Update modules/ROOT/pages/_partials/include-traffic-inspection.adoc
dukesphere d45152f
Update modules/ROOT/pages/_partials/include-traffic-inspection.adoc
dukesphere a425547
Update modules/ROOT/pages/_partials/include-traffic-inspection.adoc
dukesphere 3f986c3
Update modules/ROOT/pages/_partials/include-traffic-inspection.adoc
dukesphere 01a53d2
W-16935769-beta-traffic-inspection-monitoring-duke
dukesphere 47e2eb0
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 33922b9
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 6cbcf8d
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 225ddc0
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 3670de8
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 792679d
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere bcd252a
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 4d533f2
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 0af32fa
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere 98775a8
Merge branch 'latest' into W-16935769-beta-traffic-inspection-monitor…
dukesphere File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
93 changes: 93 additions & 0 deletions
93
modules/ROOT/pages/_partials/include-traffic-inspection.adoc
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,93 @@ | ||
|
|
||
|
|
||
| // | ||
| //tag::traffic-inspection-overview[] | ||
| Intercept and inspect all HTTPS traffic through a proxy server that resides between your on-premises Mule apps and Anypoint Monitoring. To enable traffic inspection for your xref:runtime-manager::deployment-strategies.adoc#hybrid-deployments[hybrid deployments], you must install the 3.x version of Anypoint Monitoring agent. | ||
| //end::traffic-inspection-overview[] | ||
| // | ||
| // | ||
| //tag::traffic-inspection-limitations[] | ||
|
|
||
| At this time, the Anypoint Monitoring agent that supports traffic inspection is available for Mule instances running on _Red Hat Enterprise Linux (RHEL) 7 and later_. | ||
| //end::traffic-inspection-limitations[] | ||
| // | ||
| // | ||
| // | ||
| //tag::traffic-inspection-prereqs[] | ||
|
|
||
| ** A closed beta version of the Anypoint Monitoring agent from a Salesforce representative | ||
| + | ||
| The agent's zip file is available to a limited customer base. | ||
|
dukesphere marked this conversation as resolved.
|
||
| ** Traffic inspection is enabled for your on-premise Mule instances | ||
| + | ||
| For guidance, see xref:runtime-manager::rtm-traffic-inspection.adoc[]. | ||
| ** The private certificate in the proxy that communicates with the Anypont Monitoring agent in the Mule runtime instance includes `us1.ingest.mulesoft.com` in its Subject Alternative Name (SAN). | ||
| + | ||
| In addition, you must add this private certificate or its CA certificate to the operating system's system-wide truststore. For guidance, see https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/securing_networks/using-shared-system-certificates_securing-networks#adding-new-certificates_using-shared-system-certificates[Adding new certificates] in the Redhat Linux documentation. | ||
| ** Access to Anypoint Monitoring | ||
| + | ||
| An Anypoint Platform administrator can provide access from Access Manager, in Anypoint Platform. For more information, see xref:monitoring::am-permissions.adoc[]. | ||
|
|
||
| //** The Runtime Manager Agent must be installed. See xref:runtime-manager::runtime-manager-agent.adoc[]. | ||
| // Perhaps if server is set up, it would be installed? Without it, I got this error: | ||
| // NoSuchFileException: /Users/sduke/Downloads/mule-enterprise-standalone-4.8.0/conf/mule-agent.yml | ||
| //end::traffic-inspection-prereqs[] | ||
| // | ||
|
|
||
|
|
||
| // | ||
| // | ||
| //tag::traffic-inspection-procedure[] | ||
|
|
||
| To enable traffic inspection: | ||
|
|
||
| . If an earlier version of Anypoint Monitoring agent is installed on your server, uninstall the agent and delete its `am` subfolder: | ||
|
|
||
| .. From your agent's home directory (`${AM_HOME}`, typically `${MULE_HOME}/am`), run this command to uninstall the agent: | ||
| + | ||
| ---- | ||
| ./bin/uninstall | ||
| ---- | ||
| .. Delete the `am` subfolder from your Mule home directory (`${MULE_HOME}`). | ||
| . Place the Anypoint Monitoring agent zip file (`am-3.x.zip`) into `${MULE_HOME}`. | ||
| + | ||
| The zip is available as part of the closed beta program. | ||
| . Extract the zip file to add the `am` subfolder into your Mule home directory (`${MULE_HOME}`). | ||
| . From the command line: | ||
| .. Navigate to the `am` subfolder, for example: | ||
| + | ||
| ---- | ||
| cd am | ||
| ---- | ||
| .. Install the agent to your Linux server: | ||
| + | ||
| ---- | ||
| ./bin/install -p http:/proxy-server:port | ||
| ---- | ||
| + | ||
| Replace `+http:/proxy-server:port+` with the URI of your proxy server and port. | ||
| . Restart your server in Runtime Manager. | ||
| + | ||
| For guidance, see xref:runtime-manager::servers-actions.adoc[] | ||
| . From your `am` subfolder, run the setup script: | ||
| + | ||
| ---- | ||
| ./bin/setup | ||
| ---- | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. updated step below, @bin-shi-mulesoft |
||
| . After approximately five minutes, check for your Mule app's metrics in Anypoint Monitoring: | ||
| + | ||
| From https://anypoint.mulesoft.com/monitoring/#/builtin[Anypoint Monitoring] (requires login), select your *Environment* (such as Sandbox or Production) and the *Resource name* of your hybrid Mule app to display the app's monitoring data. | ||
| + | ||
| To troubleshoot issues, check the log files under `am/logs` in your Mule home directory. | ||
|
|
||
| //end::traffic-inspection-procedure[] | ||
| // | ||
|
|
||
|
|
||
| // | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. ignore this content in tag::NOT-USED-YET[] |
||
| //tag::NOT-USED-YET[] | ||
| . Open the *Hybrid* settings page in Anypoint Monitoring (https://anypoint.mulesoft.com/monitoring/#/settings/hybrid[US], https://eu1.anypoint.mulesoft.com/monitoring/#/settings/hybrid[EU]). | ||
|
dukesphere marked this conversation as resolved.
|
||
| + | ||
| For more guidance, see xref:monitoring::monitoring-settings-page.adoc[]. | ||
| //end::NOT-USED-YET[] | ||
| // | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@bin-shi-mulesoft The prerequisites are listed below