-
Notifications
You must be signed in to change notification settings - Fork 16
W-16935769 beta traffic inspection monitoring duke #305
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: latest
Are you sure you want to change the base?
Changes from 25 commits
1ed343c
a4892c1
b4d7830
f70d1e4
32571ec
51aeacd
359cf4d
88925db
2bc38ed
1298ac4
7c6991c
e270f2f
6d86c27
7e07b07
d39af0a
e55f2a7
df84b4f
cf74ece
a18a20c
783a46c
8f8acef
749500e
facb772
8495df4
97bfae4
3ecbd9d
34032f1
d45152f
a425547
3f986c3
01a53d2
47e2eb0
33922b9
6cbcf8d
225ddc0
3670de8
792679d
bcd252a
4d533f2
0af32fa
98775a8
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,21 @@ | ||
| { | ||
| "asciidoc.antora.enableAntoraSupport": false | ||
| "asciidoc.antora.enableAntoraSupport": false, | ||
| "files.exclude": { | ||
| "**/.git": true, | ||
| "**/.svn": true, | ||
| "**/.hg": true, | ||
| "**/CVS": true, | ||
| "**/.DS_Store": true, | ||
| "**/Thumbs.db": true, | ||
| "**/.apivcs": true, | ||
| "**/.gitignore": true, | ||
| "**/.designer.json": true, | ||
| "**/.exchange.xml": true, | ||
| "**/.vscode": true, | ||
| "**/.mvn": true, | ||
| "**/.tmp": true, | ||
| "**/.settings": true, | ||
| "**/.exchange_modules_tmp": true, | ||
| ".mule": true | ||
| } | ||
| } |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,90 @@ | ||
|
|
||
|
|
||
| // | ||
| //tag::traffic-inspection-overview[] | ||
| Intercept and inspect all HTTPS traffic through a proxy server that resides between your on-premises Mule apps and Anypoint Monitoring. To enable traffic inspection for your xref:runtime-manager::deployment-strategies.adoc#hybrid-deployments[hybrid deployments], you must install the latest Anypoint Monitoring agent. | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| //end::traffic-inspection-overview[] | ||
| // | ||
| // | ||
| //tag::traffic-inspection-limitations[] | ||
|
|
||
| At this time, the Anypoint Monitoring agent that supports traffic inspection is available for Mule instances running on _Linux_. | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Red Hat Linux 7 and onwards.
dukesphere marked this conversation as resolved.
Outdated
|
||
| //end::traffic-inspection-limitations[] | ||
| // | ||
| // | ||
| // | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. @bin-shi-mulesoft The prerequisites are listed below |
||
| //tag::traffic-inspection-prereqs[] | ||
|
|
||
| ** A closed beta version of the Anypoint Monitoring agent from a Salesforce representative | ||
| + | ||
| The agent's zip file is available to a limited customer base. | ||
|
dukesphere marked this conversation as resolved.
|
||
| ** A Mule server that is registered in Runtime Manager | ||
|
dukesphere marked this conversation as resolved.
Outdated
dukesphere marked this conversation as resolved.
Outdated
|
||
| + | ||
| To set up a Mule server, see xref:runtime-manager::rtm-traffic-inspection.adoc[]. | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| ** The private certificate in the proxy that communicates with the Anypont Monitoring agent in the Mule runtime instance includes `us1.ingest.mulesoft.com` in its Subject Alternative Name (SAN). | ||
| + | ||
| In addition, you must add this private certificate or its CA certificate to the operating system's system-wide truststore. For guidance, see https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/securing_networks/using-shared-system-certificates_securing-networks#adding-new-certificates_using-shared-system-certificates[Adding new certificates] in the Redhat Linux documentation. | ||
| ** Access to Anypoint Monitoring | ||
| + | ||
| An Anypoint Platform administrator can provide access from Access Manager, in Anypoint Platform. For more information, see xref:monitoring::am-permissions.adoc[]. | ||
|
|
||
| //** The Runtime Manager Agent must be installed. See xref:runtime-manager::runtime-manager-agent.adoc[]. | ||
| // Perhaps if server is set up, it would be installed? Without it, I got this error: | ||
| // NoSuchFileException: /Users/sduke/Downloads/mule-enterprise-standalone-4.8.0/conf/mule-agent.yml | ||
| //end::traffic-inspection-prereqs[] | ||
| // | ||
|
|
||
|
|
||
| // | ||
| // | ||
| //tag::traffic-inspection-procedure[] | ||
|
|
||
| To enable traffic inspection: | ||
|
|
||
| . If an Anypoint Monitoring agent is installed on your server, uninstall the agent and delete its `/am` subfolder: | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
|
|
||
| .. From your Mule home directory (`MULE_HOME`), run the following command to uninstall the agent: | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| + | ||
| ---- | ||
| ./bin/uninstall | ||
| ---- | ||
| .. Delete the `/am` subfolder from your Mule home directory. | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| . Place the Anypoint Monitoring agent zip file (`am-3.x.zip`) into your Mule home directory (`MULE_HOME`). | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| + | ||
| The zip is available as part of the closed beta program. | ||
| . Extract the zip file to add the `/am` subfolder into your Mule home directory (`MULE_HOME`). | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| . From the command line: | ||
| .. Navigate to the `/am` subfolder, for example: | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| + | ||
| ---- | ||
| cd am | ||
| ---- | ||
| .. Install the agent to your Linux server: | ||
| + | ||
| ---- | ||
| ./bin/install -p http:/proxy-server:port | ||
| ---- | ||
| + | ||
| Replace `+http:/proxy-server:port+` with the URI of your proxy server and port. | ||
| . Restart your server in Runtime Manager. | ||
| + | ||
| For guidance, see xref:runtime-manager::servers-actions.adoc[] | ||
| . Return to your `/am` subfolder and run the setup script: | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
| + | ||
| ---- | ||
| ./bin/setup | ||
| ---- | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. updated step below, @bin-shi-mulesoft |
||
| . After approximately five minutes, check for your server's metrics in Anypoint Monitoring, within the *Investigations* tab of the *Built-in Dashboard* page for your deployment. | ||
| + | ||
| To troubleshoot issues, check the log files under `am/logs` in your Mule home directory. | ||
|
dukesphere marked this conversation as resolved.
Outdated
|
||
|
|
||
| //end::traffic-inspection-procedure[] | ||
| // | ||
|
|
||
| // | ||
|
Contributor
Author
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. ignore this content in tag::NOT-USED-YET[] |
||
| //tag::NOT-USED-YET[] | ||
| . Open the *Hybrid* settings page in Anypoint Monitoring (https://anypoint.mulesoft.com/monitoring/#/settings/hybrid[US], https://eu1.anypoint.mulesoft.com/monitoring/#/settings/hybrid[EU]). | ||
|
dukesphere marked this conversation as resolved.
|
||
| + | ||
| For more guidance, see xref:monitoring::monitoring-settings-page.adoc[]. | ||
| //end::NOT-USED-YET[] | ||
| // | ||
Uh oh!
There was an error while loading. Please reload this page.