Support monitoring over SSH

[cluther]

Alexander Fortin [email protected] requested support for monitoring over SSH to the PostgreSQL server instead of the native PostgreSQL protocol. This would be better for situations where you don't want to open the PostgreSQL server to remote connections.

[shaftoe]

Thanks Chet, very appreciated. For our purpose maybe just having the Monitoring Template via ssh could be ok, we could leave out modeling and just get data point if it is possible

[ghost]

Can i second this. Having to open and secure 5432 is a real annoyance, particually when an ssh service account infrastructure already exists.

[ghost]

Just chiming in to see if this has had any progress ? I'm still really wanting to use this zenpack, but there's no way i'm opening port 5432 up across my estate.

[cluther]

@robertpearce: No, I don't think anyone is currently working on it.

I wouldn't advocate opening 5432 to everyone either. I'd surely rather only open it to servers that needed access such as the Zenoss collector.

[ghost]

no, but my issue is the db's i'm monitoring are offsite, over several vpn links and the 4-5 firewalls that entails managed by 3 different companies, so opening 5432 even just to the monitoring host is a pain.

[cluther]

@robertpearce: I feel your pain.

This isn't going to be a trivial thing to add. Right now the collection uses a direct connection to PostgreSQL using a client library. Going over SSH would probably mean invoking the queries through the psql command line utility. It would end up being an entirely new modeling plugin and set of monitoring templates. At least the model could be reused.

[ghost]

yeah, it's ok. I came to a similar conclusion just a minute ago when looking at the source code.