Print Email PDF

Qumulo's Remote Support

IN THIS ARTICLE 

Outlines the configuration and support process for Qumulo's Remote Support

REQUIREMENTS

  • Cluster running Qumulo Core
  • VPN keys installed on the cluster
  • Protocols/ports allowed to the following destination hostnames as outlined in the table below:
 Feature  Protocol    Ports  Destination
 Remote Support  tcp  443  ep1.qumulo.com
 Log Uploads  tcp  443  monitor.qumulo.com

IMPORTANT! If your company has an intrusion detection device or firewall that performs SSL/HTTPS Deep Packet Inspection, you will need to add an exception for the ep1.qumulo.com IP address. Run the command below on your cluster to identify the IP address for ep1.qumulo.com:

nslookup ep1.qumulo.com

DETAILS

Remote Support allows access to your cluster so that Qumulo Care can troubleshoot and resolve problems remotely. Using a secure VPN connection accessed only by Qumulo, the following information is available to an authorized Qumulo Care team member to provide help when you need it the most. 

  • Cluster name and number of nodes
  • Performance and capacity statistics
  • Notification of hardware and software issues
  • Configuration data including users, groups, shares and exports
  • Logs, stack traces, and core dumps

Remote Support relies on a VPN connection from your cluster to a server accessed only by Qumulo using industry standard authentication and encryption. To secure this connection, VPN Keys are installed on each Qumulo node in /etc/openvpn at initial installation. Once Remote Support is enabled on your cluster, an authorized member of the Qumulo Care team can open a connection to your cluster via the openvpn tunnel that is closed by default. This connection will remain established for a fixed period of four hours or can be modified per customer security requirements if necessary. 

NOTE: Qumulo Core does not currently support VPN connections via IPv6 configurations.

ENABLE AND DISABLE REMOTE SUPPORT

Qumulo Core Web UI

  • Hover over the Support menu and click Qumulo Care

support_menu.png

  • Click the Edit button for Remote Support

remote_disabled.png

  • Enable Remote Support by selecting Yes or disable Remote Support by selecting No

no-yes.png

  • Click Save 

Once enabled, Remote Support will display as Connected on the Qumulo Care page. 

remote_enabled.png

QQ CLI

To enable via the qq CLI, run the following command from a node:

qq set_monitoring_conf --vpn-enabled

Run the command below to disable Remote Support:

qq set_monitoring_conf --vpn-disabled

Lastly, verify the cluster's support configuration by using the following command:

qq monitoring_conf

REMOTE SUPPORT PROCESS

  • Customer initiates VPN connection by enabling (disabled by default) Remote Support option
  • Customer will notify Qumulo Care team that Remote Support is enabled
  • Authorized Qumulo Care support team member will activate openvpn connection creating a tunnel from the customer Qumulo cluster to ep1.qumulo.com server
  • Qumulo Care support team member will initiate ssh from Qumulo HQ to ep1.qumulo.com server
  • Qumulo Care support team member will initiate ssh via established openvpn tunnel from ep1.qumulo.com to customer cluster
  • Qumulo will use connection to troubleshoot and upload logs first to monitor.qumulo.com then to S3 bucket
    • Log uploads, while not shown in the UI, can be initiated manually by a member of the Customer Success team. Logs & other pertinent diagnostic data are sent to a private Amazon EC2 instance for analysis by our support team.
  • Qumulo will notify customer to deactivate Remote Support once troubleshooting is complete
  • Customer disables remote support via the Web UI, CLI or API

Click image to enlarge

We highly recommend that you enable Cloud-Based Monitoring with Remote Support so that our team can proactively provide fast support when you need it the most. Reference the Qumulo's Cloud-Based Monitoring article for additional details.

RESOLUTION 

You should now be able to successfully utilize Qumulo's Remote Support 

ADDITIONAL RESOURCES

Install VPN keys on a Cluster

Qumulo Care Proactive Monitoring

Qumulo's Cloud-Based Monitoring

QQ CLI: Monitoring and VPN

 

Like what you see? Share this article with your network!

Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Please sign in to leave a comment.

Have more questions?
Open a Case
Share it, if you like it.