AMQ SSL encrypted Data Aggregator with unencrypted non-SSL Data Collector

Products

• Network Observability
• CA Performance Management

Issue/Introduction

Can you have AMQ SSL encrypted Data Aggregator with an unencrypted non-SSL Data Collector?

Can you mix the encryption methods for DX NetOps Performance Management Data Aggregator (DA) and Data Collector (DC) in the same environment?

Mixing SSL encryption methods for DX NetOps Performance Management Data Aggregator (DA) and Data Collector (DC) in the same environment?

We're unable to get one DC to connect to an AMQ SSL encrypted DA due to environmental network problems. How can we get the DC to connect without encryption to continue polling until the problem is resolved?

Environment

All supported DX NetOps Performance Management releases

Cause

Network or other environmental issues prevent one DC from successfully connecting to a DA with AMQ SSL encryption enabled.

Resolution

This applies to both standalone and Fault Tolerant Data Aggregators configurations.

There are only a few changes required to this to work. Note that this is intended as a temporary workaround to allow the DC to function until the environmental issues are resolved. Once resolved reconfigure the systems for AMQ encryption following the supported documented process.

• SSL Encrypted AMQ DA
  • Make the following change to the AMQ encrypted DA activemq.xml file. For the existing non-ssl tcp entries.
    • Set the transportConnector 61616 tcp entry to use 0.0.0.0
• Working SSL Encrypted AMQ DCs
  • No changes needed.
  • Configure per documentation.
• Non-Working SSL Encrypted AMQ DC
  • Have a backup copy of the default non-SSL activemq.xml file? Place it as the active file in use, and restart the AMQ service.
  • No backup copy of the activemq.xml to fall back to? Make the following changes to effectively revert to a default activemq.xml file.
    • Reset the transportConnector tcp entries to use 0.0.0.0
    • Reset the networkConnector entries from ssl back to tcp and set the ports back to defaults.
  • After making changes restart the AMQ service.

Additional Information

23.3.x Authenticate and Encrypt ActiveMQ Communication documentation topic

Restart the Data Collector documentation topic