prometheus / jmx_exporter

A process for exposing JMX Beans via HTTP for Prometheus consumption
Apache License 2.0
3.01k stars 1.2k forks source link

Cassandra metric on https #630

Closed MGulerce closed 2 years ago

MGulerce commented 3 years ago

Hello, I'm new to jmx-exporter.I setup the jar with standalone and agent .Works fine each way.But metric can read on http://IP:7070 But I cant add ssl encryption.I dont know if it's possible to do. If it's possible how can ı do that?

Thanks for helping.

tashian commented 3 years ago

see #442

MGulerce commented 3 years ago

Hi tashian thanks for comment and helping but as ı understand this line "Just to be clear: The PR mentioned above adds basic HTTP authentication. It does not add SSL support." in #442 It supports http authentication not ssl But ı will try to do that at least . If you have any experiment whit this I'm waiting for any advice or direction. Thanks again

tashian commented 3 years ago

Sure, as far as I can tell this project doesn't support TLS. My suggestion would be to have the jmx exporter bind to localhost, and then run a reverse proxy in front of it (eg. Caddy or Traefik) that adds TLS server authentication. See https://caddyserver.com/docs/caddyfile/directives/reverse_proxy for more.

MGulerce commented 3 years ago

Thank you for helping I will check it out and see what ı can do

fstab commented 2 years ago

@dhoard started working on it https://github.com/prometheus/client_java/pull/686

dhoard commented 2 years ago

@MGulerce as @fstab has pointed out, I am in the process of adding cleaner SSL support into client_java

Issue -> https://github.com/prometheus/client_java/issues/693 PR -> https://github.com/prometheus/client_java/pull/695

If / when client_java is released with these changes, exporters can then be modified to support SSL and BASIC authentication.

In the short term, @tashian 's suggestion is the current approach.

MGulerce commented 2 years ago

Thank you, We use our system as @tashian said , But It would be great to add SSL support on client_java . So I reaopened the ıssue

dhoard commented 2 years ago

As pointed out by @tashian this a dupe of https://github.com/prometheus/jmx_exporter/issues/442

I propose we close this issue and track SSL/TLS support in that issue.

MGulerce commented 2 years ago

Okey than Thanks again for helping