Enabling Cloud-Based Monitoring and Remote Support

This section explains how to enable Cloud-Based Monitoring and Remote Support for your Qumulo cluster.

Important
To let the Qumulo Care team provide fast support when you need it most, we strongly recommend enabling both Cloud-Based Monitoring and Remote Support.

How Cloud-Based Monitoring Works

Enabling Cloud-Based Monitoring lets the Qumulo Care team monitor your Qumulo cluster proactively.

Important
Cloud-Based Monitoring doesn’t collect file names, path names, client IP addresses, or account credentials.

We use a proprietary application that aggregates diagnostic cluster data and alerts the Qumulo Care team if an issue arises. Depending on the issue severity and cluster state, a member of the Qumulo Care team reaches out. For more information, see:

How Remote Support Works

Enabling Remote Support lets the Qumulo Care team access your Qumulo cluster solely to assist you with a software update or perform diagnostics or troubleshooting on your cluster from the command line.

When you install VPN keys in the /etc/openvpn directory, an authorized member of the Qumulo Care team uses SSH to connect to the ep1.qumulo.com server and then uses SSH through a secure VPN connection to connect to your cluster (normally, this VPN connection is closed).

By default, the VPN tunnel remains open for four hours to allow members of the Qumulo Care team to perform operations such as uploading logs to monitor.qumulo.com or to a secured Amazon S3 bucket and sending diagnostic data to a private Amazon EC2 instance for analysis.

Note
Currently, Qumulo Core doesn’t support VPN connections with IPv6.

You can configure the connection period and enable or disable Remote Support at any time.

What Data Gets Sent to Qumulo

Cloud-Based Monitoring and Remote Support let your cluster send the following detailed diagnostic data to Qumulo through an encrypted connection.

Cluster name
Number of nodes in cluster
Hardware and software incidents
- Drives
  - CRC errors
  - S.M.A.R.T. status alerts
  - Capacity triggers
- Nodes
  - PSU failure
  - Fan failure
  - Recused node
  - Offline node
  - Unreachable cluster
- Qumulo Core
  - New process core dump
Configuration data (such as users, groups, SMB shares, and NFS exports)
Logs, stack traces, and code dumps

Prerequisites

Before you can use Cloud-Based Monitoring and Remote Support:

A member of the Qumulo Care Team must install VPN keys on your Qumulo cluster

You must enable the following destination hostnames for TCP on port 443

Hostname	Description
`api.nexus.qumulo.com`	Nexus monitoring
`ep1.qumulo.com`	Remote Support Important If your organization has an intrusion detection device or a firewall that performs SSL or HTTPS deep-packet inspection, you must add an exception to the IP address that resolves to `ep1.qumulo.com`. To identify this IP address, log in to your Qumulo cluster and run the `nslookup ep1.qumulo.com` command.
`api.missionq.qumulo.com`	Cloud-Based Monitoring connectivity
`missionq-dumps.s3.amazonaws.com`	Proxy forwarding
`monitor.qumulo.com`	Cloud-Based Monitoring log uploads