[DOCS-8726] Document hostnames/ips Ops Mgr needs to access for downloading manifest and db archives Created: 01/Sep/16  Updated: 26/Jan/18  Resolved: 26/Jan/18

Status: Closed
Project: Documentation
Component/s: Ops Manager
Affects Version/s: ops-manager-2.0.5
Fix Version/s: None

Type: Task Priority: Major - P3
Reporter: Jason Mimick (Inactive) Assignee: Anthony Sansone (Inactive)
Resolution: Done Votes: 7
Labels: docs-cloudmgr-opsmgr-security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
Participants:
Days since reply: 6 years, 2 weeks, 5 days ago
Story Points: 0.1

 Description   

More and more customers are scaling up large Ops Manager deployments which do not have access to the internet. This requires they use the Local Mode feature of Ops Manager. But for complex deployments this can be a pain, since there are multiple files they will need to download and place on, possibly, many Ops Mgr machines (all app's and backup daemons). Also, there are many file extension issues, need to uncompress archive or not, etc. Many customers hit these little gotchas, causing additional pains.

For those customer who wish to configure their firewall's with special rules to allow Ops Mgr machines to talk to specific hosts so they don't need Local Mode it would be great if we could document just what hosts Ops Mgr will need to connect.

So far, we've identified the following:
-download.10gen.com
-opsmanager.mongodb.com
-fastdl.mongodb.org

I'm happy to discuss and provide more background if needed.
Thanks-



 Comments   
Comment by Githook User [ 26/Jan/18 ]

Author:

{'name': 'Tony Sansone', 'username': 'atsansone', 'email': 'tony.sansone@mongodb.com'}

Message: (DOCS-8726): Added whitelist block to proxy page.
Branch: v3.4
https://github.com/10gen/mms-docs/commit/25c6a37170739e42513039c9e1a30c1012967b10

Comment by Githook User [ 26/Jan/18 ]

Author:

{'name': 'Tony Sansone', 'username': 'atsansone', 'email': 'tony.sansone@mongodb.com'}

Message: (DOCS-8726): Added whitelist block to proxy page.
Branch: master
https://github.com/10gen/mms-docs/commit/53bd3ee52107ec98bce94c5702281827730112a4

Comment by Spencer Brown [ 07/Nov/17 ]

According to cory.mintz's comment on HELP-5244, the proper list of FQDNs that need to be allowed is:

  • downloads.mongodb.com
  • opsmanager.mongodb.com
  • fastdl.mongodb.org

This information should be added to the "FIrewall Configuration" doc at https://docs.opsmanager.mongodb.com/current/reference/firewall-configuration/

Comment by Louisa Berger [ 20/Oct/16 ]

cc cory.mintz

Generated at Thu Feb 08 07:56:52 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.