As lame as it may sound:
I am trying to configure monitoring for our production system which consists of 2 hardware boxes with ESXi on both and multiple VMs. All of this is hidden behind a firewall which we may configure ourselves if needed.
My choice is between Munin (with which I already have experience) or Zabbix.
I would like to keep production system as clean as possible and (to me) the logical way is to put master server out of production so it:
- Won't consume any possible mission critical resources
- Will provide data even if the whole system for some reason is not reachable (so at least from data can see what happened and when happened)
- Will send alert in case of situation when entire production system is not reachable
However from documentation I see that not Zabbix nor Munin don't support this sort of setup. Actually with Munin it would be possible to do, but I would need to create separate fw port forwarding rule for each node that I need to monitor, which sounds like an overkill to me and brings complications to the setup. Same time it seems that only Munin provides encrypted traffic between node and master out-of-box and Zabbix doesn't. And still with all those possibilities the whole setup (apart of fw rules) is still very non-trivial for Munin.
VPN to production system is out of the question (legal issues in this country for having VPN in IDC)
Therefore my question is: Is there a better way to achieve my goal? Or some other tool which can do it that I am not be aware of?