24.9. Establishing Monitoring with JBoss Operations Network (JON)
24.9.1. About AMI Monitoring
Figure 24.1. JON Server connectivity
24.9.2. About Connectivity Requirements
7080on all JON servers, except in the case of SSL where port
7443is used. Each JON server must be able to access each of the connected agents on a unique host and port pairing. The agent port is usually
24.9.3. About Network Address Translation (NAT)
rhq.communications.connector.*description for the
24.9.4. About Amazon EC2 and DNS
24.9.5. About Routing in EC2
source/destination checkingrouting feature activated by default. This feature drops any packets being sent to the server which have a destination different from the machine's IP address. If the VPN solution selected for connecting agents to the JON server includes a router, this feature needs to be turned off for the server or servers acting as routers or VPN gateways. This configuration setting can be accessed via the Amazon AWS console. Disabled
source/destination checkingis also required in a Virtual Private Cloud (VPC).
10.0.0.0/8network. Instances usually have a public IP address also, but only network traffic on the internal IP address within the same availability zone is free. To avoid using the
10.0.0.0/8network in private addressing, there are a few things to consider.
- When creating a VPC, avoid allocating addresses already in use in the private network to avoid connectivity problems.
- If an instance needs access to availability zone local resources, make sure Amazon EC2 private addresses are used and traffic is not routed through the VPN.
- If an Amazon EC2 instance will access a small subset of corporate private network addresses (for example only JON servers), only these addresses should be routed through the VPN. This increases security and lowers the chance of Amazon EC2 or private network address space collisions.
24.9.6. About Terminating and Restarting with JON
/etc/sysconfig/jon-agent-ec2to reflect the new IP address and restart the agent.
24.9.7. Configure an Instance to Register with JBoss Operations Network
- For JBoss EAP 6, add this to the User Data field.
JON_SERVER_ADDR=jon2.it.example.com ## if instance not already configured to resolve its hostname JON_AGENT_ADDR=`ip addr show dev eth0 primary to 0/0 | sed -n 's#.*inet \([0-9.]\+\)/.*#\1#p'` PORTS_ALLOWED=16163 # insert other JON options when necessary.See Section 24.10.1, “Permanent Configuration Parameters”, parameters starting with
JON_for the format of JON options.