Allowlist The DigitalOcean Metrics Agent With Firewall | All About

Read the article to know more about how to allowlist the DigitalOcean Metrics agent with a firewall. With our DigitalOcean Managed Services, Bobcares offers solutions to your DigitalOcean Monitoring issues.

How To Allowlist The DigitalOcean Metrics Agent With Firewall?

The DigitalOcean Metrics Agent collects statistics on Droplet-level resource usage. To assist us in monitoring the operational health of the infrastructure, it offers extra Droplet graphs and enables customizable metrics alert policies with integrated email and Slack notifications. It also enables extended metrics and enhanced monitoring features,

In order to shield the servers from external attacks, firewalls stand between them and other computers on the network. However, they may also obstruct the DigitalOcean Metrics Agent from accessing the Droplet. Both the local firewalls defending the Droplet and the Cloud Firewall service provided by DigitalOcean fall under this category. The metrics agent must be allowed access to the monitoring service through whichever firewall we employ in order for the metrics data from the Droplet to be reported to the monitoring service.

In order to enable the Metrics Agent, we need to select the Monitoring checkbox in the additional options section of the creation page during a droplet creation. During the Droplet creation process, the metrics agent will be immediately installed and enabled.

DigitalOcean Metrics Agent – Firewall Setup

Ports 80 and 443 on the Droplet are used by the Metrics Agent to connect to DigitalOcean. We must set up rules in the firewall to permit all outgoing IPv4 and IPv6 HTTP/HTTPS traffic over ports 80 and 443 in order to permit the metrics agent to connect through the firewall.

For Ubuntu and Debian systems, UFW or Firewalld can be used to generate these rules. For CentOS and Fedora systems, use Firewalld. These services communicate with iptables, a firewall application built into the majority of Linux operating systems. Although it is best to use UFW or FirewallD since they are more user-friendly, we may still configure these firewall rules directly in iptables.

Also, when using the Cloud Firewall provided by DigitalOcean, we must set up firewall rules to allow all outgoing IPv4 and IPv6 HTTP/HTTPS traffic on ports 80 and 443.

[Are you looking for a solution to another query? We are just a click away.]

Conclusion

To conclude, the article provides a simple guide on how to allowlist the DigitalOcean Metrics agent with a firewall.