Nagios - distributed environment

[MSPk]

Hi Team,

We have got a requirement to monitor an environment which has close to 1400(500 Prod, 700 non-prod & 200 DR) servers on multiple platforms (Windows, AIX 7 & Ubuntu). I have attached a rough draft of the architecture we are planning to implement, please suggest if we are in the right direction or do we need to take care of anything while designing a distributed environment. Also, Let us know the firewall ports that need to be opened on the firewall to pass the traffic.

[img]

Nagios%20-%20distributed%20environment.png

[/img]

[slansing]

That looks good, are you looking to share a single DB between your two DR servers??

[MSPk]

Actually the DR instance will have XI to monitor DR servers and also have a db which collects perf stats from DR and the 2 non-prod xi instances. Updated Arch.diagram attached.

[img]

Nagios%20-%20distributed%20environment.png

[/img]

[slansing]

This seems to be in order. Something you may look into would be the addition of mod_gearman workers for your hosts so you can strain more performance out of the:

http://exchange.nagios.org/directory/Do ... XI/details

[MSPk]

Should the worker system also have nagios core/xi instance??

[slansing]

No, you do not need a nagios server for your worker servers if you go that route, as the documentation shows.

[MSPk]

Can we setup 2 workers on the same server? if yes, how. In addtion can we configure a worker to accpet traffic from 2 nagios worker servers(or can we specify the ip addresses of 2 modgearman servers when we asked to enter the ip of the nagios master server).

[slansing]

Yes you can control the number of workers that spawn through the worker configuration file, and you should be able to point two nagios addresses to a worker server. More advanced configurations not shown in our installation doc should all be covered here:

https://labs.consol.de/nagios/mod-gearman/

[MSPk]

In the above archituecture what all ports should be open to allow the traffic to and from the fusion server and non-prod XI instances as we have a firewall between prod and non-prod environments.
Also, if we offload the database, will that offload the rrd's as well? Can you please help me understand what all information is stored on the mysql DB?

[slansing]

You should only need ports 80, and 443 (if using ssl) open in order to connect to the XI servers from Fusion.