feat: support for availability checks from multiple agents #3318
Labels
No labels
1week
2weeks
Failed compliance check
IP cameras
NATS
Possible security concern
Review effort 1/5
Review effort 2/5
Review effort 3/5
Review effort 4/5
Review effort 5/5
UI
aardvark
accessibility
amd64
api
arm64
auth
back-end
bgp
blog
bug
build
checkers
ci-cd
cleanup
cnpg
codex
core
dependencies
device-management
documentation
duplicate
dusk
ebpf
enhancement
eta 1d
eta 1hr
eta 3d
eta 3hr
feature
fieldsurvey
github_actions
go
good first issue
help wanted
invalid
javascript
k8s
log-collector
mapper
mtr
needs-triage
netflow
network-sweep
observability
oracle
otel
plug-in
proton
python
question
reddit
redhat
research
rperf
rperf-checker
rust
sdk
security
serviceradar-agent
serviceradar-agent-gateway
serviceradar-web
serviceradar-web-ng
siem
snmp
sysmon
topology
ubiquiti
wasm
wontfix
zen-engine
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
carverauto/serviceradar#3318
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Is your feature request related to a problem?
We need to be able to support network sweeps/scans from multiple agents.
Scenario:
Customer has agent-a deployed in segmented OT network
Customer has agent-b deployed in intranet
Customer wants to test availability of a device from both agents, the idea being that access to a device (tcp/ICMP checks) should fail (or be blocked by network ACLs) from the segmented OT network, but should be allowed through the intranet.
Customer wants the ability to assign primary
is_availableto a particular agent. Customer also wants to expose availability checks from both agent in the device details view. We need to also include metadata in the device record that includes where the availability check came from, so basically additional fields for every agent that includes the agent name and the is_available = true|false, and we need to also update the Armis northbound integration so we can choose which is_available field we want to use. Right now the Armis northbound integration just uses theis_availablefield, but we need to be able to choose which agent we want to use to update the Armis tag with. In this particular customer use case, the customer is trying to update Armis records to show if a device is isolated or not, if the device is not available from the particular agent, that means the device is isolated and that the network ACLs are in-place and working.Our other or original option was to just assign different agents to different partitions, and then import two sets of devices into the inventory, one for each partition assigned to the two different agents. The downside to this approach is we double up the inventory and it becomes difficult for users/operators to understand what they're looking. We have a new group of users that primary wants to use ServiceRadar to see if devices are actually online and don't necessarily care whether or not the device is isolated.
Describe the solution you'd like
A clear and concise description of what you want to happen.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.