The customer does not to open SNMP at all, they want us to get the required information by other means (local bash scripts, db scripts etc) but we need SNMP. So they will open it for localhost access only. Yes, I'll use keep alive and may be give autossh a try and see how it goes.
Thanks for the help. On Monday, March 29, 2021 at 11:55:05 PM UTC+4 Stuart Clark wrote: > On 2021-03-29 20:09, Rizwan Khan wrote: > > I am have to scrape certain snmp OIDs from appliances, which run > > custom Oses based on Linux and FreeBSD. And most of these are vendor > > specific OIDs. They are running snmpd processes with access restricted > > to local host only. > > > > I think I a workaround could be to use vmagent from Victoria Metrics > > with proxy_url .. and i can create an ssh tunnel to those machines > > from the machine which is going to scrape. Not an ideal solution but a > > workaround. Cant think of anything else... > > > > Ignoring Prometheus completely for a moment, how would SNMP be used > generally for those machines given that only local processes can access > it? I'd normally expect external access, often firewalled (at either the > network and/or machine layers) rather than local only. > > If you are able to create permanent SSH tunnels then there's no reason > you couldn't use those for the SNMP exporter directly - you are adding a > failure mode that you probably want to monitor for as well - a tunnel > failing would stop metrics totally, so you'd ideally setup the tunnel in > a way that can detect issues (e.g. keepalives) and fix itself (auto > restarts). > > -- > Stuart Clark > -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/35da41a6-c41c-4deb-a539-e1672fdecf37n%40googlegroups.com.
