Connecting to Gateway Hub

 

Overview

You can connect Gateway and Gateway Hub to share data and centralise administration. Connecting to a Gateway Hub allows you to:

  • Perform anomaly detection.
  • Store Geneos metrics and events and retrieve them with an Open API.
  • Use centralised configuration to manage Geneos at scale.
  • Visualise data using a web-based UI, the Web Console.

For more information see the Introduction to Gateway Hub.

Connect to Gateway Hub

Connect using the Gateway Setup Editor

To connect a Gateway to Gateway Hub and share data follow these steps:

  1. Open Active Console.
  2. Double-click the Gateway you wish to configure with Gateway Hub. This opens the Gateway Setup Editor (GSE).
  3. In the GSE, double-click Gateway Hub in the Navigation tree. This creates the Gateway Hub section.
  4. In the Gateway Hub section:
    1. In Publishing address, add the host name and port of one of your Gateway Hub nodes. The default is <hostname>:9092.
    2. In REST address, add the REST address location of Gateway Hub. The REST address uses HTTPS. The default REST address is https://<hostname>:8080.
  5. You can configure security in Additional Settings by specifying the location of the SSL certification, this is optional but recommended (obtain the certificate file from your system administrator).
    kafka.security.protocol=ssl
    kafka.ssl.ca.location=<location of CA certificate PEM file>
    

    For more information about all of the above fields, see Gateway integration technical reference.

  6. Click Validate current document.
  7. Click Save current document.

For more information about using data from a Gateway in Gateway Hub see the Gateway integration technical reference.

Connect using the command line

You can connect to Gateway Hub by using the -gateway-hub <REST URL> command line option when starting the Gateway. The URL specified here will take precedence over any REST address value specified in the Gateway Setup Editor. For more information, see Centralised Gateways User Guide.

Note: To use anomaly detection features you must start the Gateway in centrally configured mode.

Connect using SSO

In order to use Gateway Hub for centralised configuration or to perform anomaly detection, you should connect to the Gateway Hub using Kerberos SSO.

You can connect to a Gateway Hub without authentication. This is useful in testing and development environments. However, this is not secure and you should always use the SSO Agent for production environments.

To connect to Gateway Hub using SSO:

  1. Configure SSO in Gateway Hub, see Configure single sign-on (SSO) for more information
  2. Configure the SSO Agent, see SSO Agent User Guide for more information
  3. Start the Gateway using the following command-line options:
    1. -kerberos-principal <name> — Principal that the Gateway uses to request an SSO Token.
    2. -kerberos-keytab <keytab> — Path to the file that stores the Kerberos keytab for the principal defined in -kerberos-principal <name>.
    3. -sso-agent <URL> — Optional. URL of the SSO Agent providing an SSO Token to use with Gateway Hub. This is only required if you are not using the SSO Agent on the default port of the Gateway Hub node.

    You can also place these command line options in a file for the Gateway to read at start up. See Command line options.

For more information, see Centralised Gateways User Guide, Anomaly Detection, and Data Sets (Time series).

Monitor the connection to Gateway Hub

You can use the Gateway Hub data Gateway plug-in to monitor the status of the connection to Gateway Hub. For more information see Gateway Hub data in Gateway Plug-Ins.

Troubleshooting

Specifying the REST address

You can specify the REST address of the Gateway Hub you want to connect to using the Gateway Setup Editor, or by using the -gateway-hub option when starting the Gateway from the command line.

If an address is specified using the command line this will take precedence over any address specified in the Gateway Setup Editor. You must specify the REST address from the command line to use central configuration or anomaly detection.

The Gateway expects a REST address of the form https://<hostname>:<port> only. Addresses containing trailing slashes or using non-standard syntax will be considered invalid.

Disabling the connection to Gateway Hub

After you have started publishing data to Gateway Hub, be aware that temporarily disabling this connection may result in Gateway Hub containing references to obsolete or deleted items.

For example, if a managed entity is deleted, the Gateway cannot buffer this information and the Gateway Hub is not notified of the deletion when publishing is resumed. It is recommend that, once started, you do not disable publishing from the Gateway to Gateway Hub.

Shared Gateways

Gateway Hub publishing is not available from shared Gateways. Instead, you must enable publishing from the source Gateways. For more information see Gateway Sharing User Guide.