Vmware Unified Access gateway(UAG) External Monitoring

UAG appliance is used as reverse proxy for applications and provide secure connection. We can monitor UAG appliance either by API call scripts or you can create Custom monitor in AVI LB and set below python script.

Here are steps to perform this :

1) Create Monitoring account in UAG's , since we have multiple UAG's so we have used script to create account in all UAG's.

====================================================================================
 # Title : Python script for creation of monitoring account in UAG
 # Author : Nikhil Verma
 # Version : " v1.0"
 ====================================================================================
 
 import requests
 requests.packages.urllib3.disable_warnings() #"Ignore UAG SSL warnings"
 from requests.auth import HTTPBasicAuth
 import json
 
 
 url = 'https://uagIP:9443/rest/v1/config/adminusers'
 
 
 payload = {
  'name': 'test',
  'password': 'test@12345',
  'enabled':True,
  'roles' : ["ROLE_MONITORING"],
  'noOfDaysRemainingForPwdExpiry':0
 }
 
 headers = {'Content-type': 'application/json'}
 r = requests.put(url2,data=json.dumps(payload),headers=headers,verify=False,auth = HTTPBasicAuth('admin', 'password'))
 print(r.text)
 users = session.get(url2, verify=False,auth = HTTPBasicAuth('admin', 'password'))
 print(users.text)

2) We need to create External health monitor in AVI LoadBalancer :

====================================================================================
 # Title : Python script for Monitoring Unified Access Gateway Horizon Tunnels
 # Author : Nikhil Verma
 # Version : " v1.0"
 ====================================================================================
 
 import requests
 requests.packages.urllib3.disable_warnings()
 from requests.auth import HTTPBasicAuth
 from lxml import etree
 
 
 url = 'https://$IP:$PORT/rest/v1/monitor/stats'
 
 
 # Making a get request
 response = requests.get(url,verify=False,auth = HTTPBasicAuth('test', 'password'))
 
 # print request object
 #print(response)
 data = response.text.encode('utf-8')
 
 tree = etree.fromstring(data)
 blast_status = tree.xpath("//viewEdgeServiceStats/protocol[@name='blast']/status/status")[0]
 pcoip_status = tree.xpath("//viewEdgeServiceStats/protocol[@name='pcoip']/status/status")[0]
 UTS_status = tree.xpath("//viewEdgeServiceStats/protocol[@name='utserver']/status/status")[0]
 print(blast_status.text, pcoip_status.text,UTS_status.text)
 

3) This Monitor need to be attached at port 9443 which is used to monitor health status

I hope this Blog will help you to do granular health checks and will stop sending requests to UAG if monitor is down