Your customer is probably right, don't use SNMP. If you're using Prometheus, you don't need SNMP. Why not use Prometheus-native solutions?
This sounds like you and your customer have cornered yourselves into an XY Problem. https://en.wikipedia.org/wiki/XY_problem On Tue, Mar 30, 2021 at 7:34 AM Rizwan Khan <[email protected]> wrote: > The customer does not to open SNMP at all, they want us to get the > required information by other means (local bash scripts, db scripts etc) > but we need SNMP. So they will open it for localhost access only. Yes, I'll > use keep alive and may be give autossh a try and see how it goes. > > Thanks for the help. > > On Monday, March 29, 2021 at 11:55:05 PM UTC+4 Stuart Clark wrote: > >> On 2021-03-29 20:09, Rizwan Khan wrote: >> > I am have to scrape certain snmp OIDs from appliances, which run >> > custom Oses based on Linux and FreeBSD. And most of these are vendor >> > specific OIDs. They are running snmpd processes with access restricted >> > to local host only. >> > >> > I think I a workaround could be to use vmagent from Victoria Metrics >> > with proxy_url .. and i can create an ssh tunnel to those machines >> > from the machine which is going to scrape. Not an ideal solution but a >> > workaround. Cant think of anything else... >> > >> >> Ignoring Prometheus completely for a moment, how would SNMP be used >> generally for those machines given that only local processes can access >> it? I'd normally expect external access, often firewalled (at either the >> network and/or machine layers) rather than local only. >> >> If you are able to create permanent SSH tunnels then there's no reason >> you couldn't use those for the SNMP exporter directly - you are adding a >> failure mode that you probably want to monitor for as well - a tunnel >> failing would stop metrics totally, so you'd ideally setup the tunnel in >> a way that can detect issues (e.g. keepalives) and fix itself (auto >> restarts). >> >> -- >> Stuart Clark >> > -- > You received this message because you are subscribed to the Google Groups > "Prometheus Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/prometheus-users/35da41a6-c41c-4deb-a539-e1672fdecf37n%40googlegroups.com > <https://groups.google.com/d/msgid/prometheus-users/35da41a6-c41c-4deb-a539-e1672fdecf37n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/CABbyFmqnx0m017ynXvVU6hS8a6hwSKvgJC2GrxY%3DwLfsAXjVGw%40mail.gmail.com.
