<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">On 08 Oct 2014, at 07:56, Jeremy Laidman <<a href="mailto:jlaidman@rebel-it.com.au">jlaidman@rebel-it.com.au</a>> wrote:<br><div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On 8 October 2014 16:36, Thomas Eckert <span dir="ltr"><<a href="mailto:thomas.eckert@it-eckert.de" target="_blank">thomas.eckert@it-eckert.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Depending on the extent of the security requirements 'ssh-tunnel' may be an alternative.<br></blockquote><div><br></div><div>Various methods of tunnelling Xymon are documented here:</div><div><br></div><div><a href="http://en.wikibooks.org/wiki/System_Monitoring_with_Xymon/Administration_Guide#Encryption_and_Tunnelling">http://en.wikibooks.org/wiki/System_Monitoring_with_Xymon/Administration_Guide#Encryption_and_Tunnelling</a><br></div><div><br></div><div>For example, add the following to tasks.cfg:</div><font face="courier new, monospace"><br>[xymon-over-ssh]<br> ENVFILE /usr/lib/xymon/server/etc/xymonserver.cfg<br> CMD ssh -R1984:<a href="http://127.0.0.1:1984/">127.0.0.1:1984</a> -o batchmode=yes xymon@xymon-client '/usr/lib/xymon/client/bin/xymoncmd sh -c "XYMSRV=127.0.0.1 /usr/lib/xymon/client/bin/xymonclient.sh"'<br> LOGFILE $XYMONERVERLOGS/xymon-over-ssh.log<br> INTERVAL 5m</font></div><div class="gmail_quote"><font face="courier new, monospace"><br></font></div>This requires no additional software. As long as the xymon user can ssh to the remote xymon client machine using key authentication, and as long as the xymon client is installed in the expected location, it should work as expected.</div></div>
</blockquote><br></div><div>Agreed. That’s a nice and out-of-the-box solution.</div><div><br></div><div>It does not require the ssh-tunnel extension on the server-side. But if you do this for a lot of clients the ssh overhead _may_ become a problem (every 5 minutes).</div><div>The ssh-tunnel extension creates a persistent tunnel that is only re-created if not already established.</div><div><br></div><div>For only a few systems I’d use your example if pulldata is not desired.</div><div>For larger setups I prefer the persistent tunnel (with xymonproxy on the far end).</div><br><div>Cheers</div><div>Thomas</div></body></html>