-
Notifications
You must be signed in to change notification settings - Fork 16
W-16935769 beta traffic inspection monitoring duke #305
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: latest
Are you sure you want to change the base?
Changes from 27 commits
1ed343c
a4892c1
b4d7830
f70d1e4
32571ec
51aeacd
359cf4d
88925db
2bc38ed
1298ac4
7c6991c
e270f2f
6d86c27
7e07b07
d39af0a
e55f2a7
df84b4f
cf74ece
a18a20c
783a46c
8f8acef
749500e
facb772
8495df4
97bfae4
3ecbd9d
34032f1
d45152f
a425547
3f986c3
01a53d2
47e2eb0
33922b9
6cbcf8d
225ddc0
3670de8
792679d
bcd252a
4d533f2
0af32fa
98775a8
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,21 @@ | ||
| { | ||
| "asciidoc.antora.enableAntoraSupport": false | ||
| "asciidoc.antora.enableAntoraSupport": false, | ||
| "files.exclude": { | ||
| "**/.git": true, | ||
| "**/.svn": true, | ||
| "**/.hg": true, | ||
| "**/CVS": true, | ||
| "**/.DS_Store": true, | ||
| "**/Thumbs.db": true, | ||
| "**/.apivcs": true, | ||
| "**/.gitignore": true, | ||
| "**/.designer.json": true, | ||
| "**/.exchange.xml": true, | ||
| "**/.vscode": true, | ||
| "**/.mvn": true, | ||
| "**/.tmp": true, | ||
| "**/.settings": true, | ||
| "**/.exchange_modules_tmp": true, | ||
| ".mule": true | ||
| } | ||
| } |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,90 @@ | ||
|
|
||
|
|
||
| // | ||
| //tag::traffic-inspection-overview[] | ||
| Intercept and inspect all HTTPS traffic through a proxy server that resides between your on-premises Mule apps and Anypoint Monitoring. To enable traffic inspection for your xref:runtime-manager::deployment-strategies.adoc#hybrid-deployments[hybrid deployments], you must install the latest Anypoint Monitoring agent. | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| //end::traffic-inspection-overview[] | ||
| // | ||
| // | ||
| //tag::traffic-inspection-limitations[] | ||
|
|
||
| At this time, the Anypoint Monitoring agent that supports traffic inspection is available for Mule instances running on _Red Hat Enterprise Linux (RHEL) 7 and later_. | ||
| //end::traffic-inspection-limitations[] | ||
| // | ||
| // | ||
| // | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. @bin-shi-mulesoft The prerequisites are listed below |
||
| //tag::traffic-inspection-prereqs[] | ||
|
|
||
| ** A closed beta version of the Anypoint Monitoring agent from a Salesforce representative | ||
| + | ||
| The agent's zip file is available to a limited customer base. | ||
|
dukesphere marked this conversation as resolved.
|
||
| ** Traffic inspection is enabled for your on-premise Mule instances in Runtime Manager | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| + | ||
| For guidance, see xref:runtime-manager::rtm-traffic-inspection.adoc[]. | ||
| ** The private certificate in the proxy that communicates with the Anypont Monitoring agent in the Mule runtime instance includes `us1.ingest.mulesoft.com` in its Subject Alternative Name (SAN). | ||
| + | ||
| In addition, you must add this private certificate or its CA certificate to the operating system's system-wide truststore. For guidance, see https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/securing_networks/using-shared-system-certificates_securing-networks#adding-new-certificates_using-shared-system-certificates[Adding new certificates] in the Redhat Linux documentation. | ||
| ** Access to Anypoint Monitoring | ||
| + | ||
| An Anypoint Platform administrator can provide access from Access Manager, in Anypoint Platform. For more information, see xref:monitoring::am-permissions.adoc[]. | ||
|
|
||
| //** The Runtime Manager Agent must be installed. See xref:runtime-manager::runtime-manager-agent.adoc[]. | ||
| // Perhaps if server is set up, it would be installed? Without it, I got this error: | ||
| // NoSuchFileException: /Users/sduke/Downloads/mule-enterprise-standalone-4.8.0/conf/mule-agent.yml | ||
| //end::traffic-inspection-prereqs[] | ||
| // | ||
|
|
||
|
|
||
| // | ||
| // | ||
| //tag::traffic-inspection-procedure[] | ||
|
|
||
| To enable traffic inspection: | ||
|
|
||
| . If an earlier version of Anypoint Monitoring agent is installed on your server, uninstall the agent and delete its `am` subfolder: | ||
|
|
||
| .. From your agent's home directory (`${AM_HOME}`, typically `${MULE_HOME}/am`), run this command to uninstall the agent: | ||
| + | ||
| ---- | ||
| ./bin/uninstall | ||
| ---- | ||
| .. Delete the `am` subfolder from your Mule home directory (`${MULE_HOME}`). | ||
| . Place the Anypoint Monitoring agent zip file (`am-3.x.zip`) into `${MULE_HOME}`. | ||
| + | ||
| The zip is available as part of the closed beta program. | ||
| . Extract the zip file to add the `am` subfolder into your Mule home directory (`${MULE_HOME}`). | ||
| . From the command line: | ||
| .. Navigate to the `am` subfolder, for example: | ||
| + | ||
| ---- | ||
| cd am | ||
| ---- | ||
| .. Install the agent to your Linux server: | ||
| + | ||
| ---- | ||
| ./bin/install -p http:/proxy-server:port | ||
| ---- | ||
| + | ||
| Replace `+http:/proxy-server:port+` with the URI of your proxy server and port. | ||
| . Restart your server in Runtime Manager. | ||
| + | ||
| For guidance, see xref:runtime-manager::servers-actions.adoc[] | ||
| . From your `am` subfolder, run the setup script: | ||
| + | ||
| ---- | ||
| ./bin/setup | ||
| ---- | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. updated step below, @bin-shi-mulesoft |
||
| . After approximately five minutes, check for your server's metrics in Anypoint Monitoring, within the *Investigations* tab of the *Built-in Dashboard* page for your deployment. | ||
| + | ||
| To troubleshoot issues, check the log files under `am/logs` in your Mule home directory. | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
|
|
||
| //end::traffic-inspection-procedure[] | ||
| // | ||
|
|
||
| // | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. ignore this content in tag::NOT-USED-YET[] |
||
| //tag::NOT-USED-YET[] | ||
| . Open the *Hybrid* settings page in Anypoint Monitoring (https://anypoint.mulesoft.com/monitoring/#/settings/hybrid[US], https://eu1.anypoint.mulesoft.com/monitoring/#/settings/hybrid[EU]). | ||
|
dukesphere marked this conversation as resolved.
|
||
| + | ||
| For more guidance, see xref:monitoring::monitoring-settings-page.adoc[]. | ||
| //end::NOT-USED-YET[] | ||
| // | ||
Uh oh!
There was an error while loading. Please reload this page.