1 Reply Latest reply on Oct 11, 2012 10:15 PM by byrona

    solarwinds npm in multi-tenet enviroment

    fkeough
    fkeough Oct 11, 2012 7:00 PM

      We currently making a change in our hosting environment, before we could poll all our customer sites from our management vlan.

      We could even manage remote sites if they were on the MPLS.

       

      We have begun to migrate to a more secure environment and our management vlan will no longer be able to map to our customer

      servers. We have been wondering how this works in a SolarWinds environment.

       

      vFoglight apparently has remote management agents or something we can place in the new customer environments and will report back to the management

      server.  I understand the SolarWinds has collectors, but they are priced very high

       

      So in an environment where our customer environments are segmented and will not communicate with each other or us, how can we leverage Solarwinds

      in this environment?

       

      Thanks

       

      Frank Keough

        • Re: solarwinds npm in multi-tenet enviroment
          byrona
          byrona Expert Oct 11, 2012 10:15 PM (in response to fkeough)

          Orion handles multi-tenant environments relatively well so long as you implement the proper design.  No matter what product you use there will need to be some level of communication between the customer environment and the management system, this is the case with vFoglight as well as Orion. 

           

          You can have a secure environment yet still allow the monitoring system to communicate with the customer environment.  One of the best ways to accomplish this is with a NAT box.  For each customer environment setup a NAT box that does static translations for each customer IP to a different IP and only allows the monitoring system to communicate through the NAT.  There is a SolarWinds blog article HERE that talks about this, see the NAT Based Deployment scenario though keep in mind that as long as you are using unique IP's you don't need to have a separate polling engine for each NAT box.

           

          Hope this helps!