Nms-existing-tests - Revision history

Chubbard at 21:01, 6 June 2023

2023-06-06T21:01:52Z

← Older revision		Revision as of 14:01, 6 June 2023
Line 28:		Line 28:
	* templates		* templates

			=== Need to think of a good solution to this ===
	The frontend is going to have to be addressed all on its own. In general the backend should NOT trust the frontend at all. Frontend should be able to be swapped out without anything on the backend caring other than the authentication validation. The frontend ITSELF will have to validate against the backend as well as user authentication. It is not a good idea for random un-authenticated apps or shims to be able to talk to all the APIs without some kind of validation happening. While user auth is a good start, TBH we cannot say that we can trust the frontend or something that SAYS it is the frontend without checking. The frontend on setup with the backend will have to "register" itself as a known acceptable frontend service of some kind.		The frontend is going to have to be addressed all on its own. In general the backend should NOT trust the frontend at all. Frontend should be able to be swapped out without anything on the backend caring other than the authentication validation. The frontend ITSELF will have to validate against the backend as well as user authentication. It is not a good idea for random un-authenticated apps or shims to be able to talk to all the APIs without some kind of validation happening. While user auth is a good start, TBH we cannot say that we can trust the frontend or something that SAYS it is the frontend without checking. The frontend on setup with the backend will have to "register" itself as a known acceptable frontend service of some kind.

			Overall certain routes will never need auth, as they are adhoc ingress points such as snmptrap and event/create API. Anything that goes into these ingress points must be validated to not contain executable code and will never execute a process unexpectedly. There will be times such as a mapped event triggering something to happen when they go live, however the trigger is isolated from the incoming event itself. Some thought will have to be given to new ingress points such as collectd or other ones that an end user may wish to use. We are going to need a good way to ingest these new inbound routes with safeties in place so that they cannot damage the system. Likely a shim of some kind will have to be implemented for things such as collectd to translate into API calls which are sanitized.

Chubbard at 20:39, 6 June 2023

2023-06-06T20:39:03Z

← Older revision		Revision as of 13:39, 6 June 2023
Line 19:		Line 19:
	* build a db with a large amount of 100% valid fake (but valid) data that we can hammer against		* build a db with a large amount of 100% valid fake (but valid) data that we can hammer against

			=== Areas for discrete tests ===
			* authentication local
			* authentication TFA
			* authentication LDAP
			* API each route
			* Each discrete Graphing option
			* poller inputs
			* templates

			The frontend is going to have to be addressed all on its own. In general the backend should NOT trust the frontend at all. Frontend should be able to be swapped out without anything on the backend caring other than the authentication validation. The frontend ITSELF will have to validate against the backend as well as user authentication. It is not a good idea for random un-authenticated apps or shims to be able to talk to all the APIs without some kind of validation happening. While user auth is a good start, TBH we cannot say that we can trust the frontend or something that SAYS it is the frontend without checking. The frontend on setup with the backend will have to "register" itself as a known acceptable frontend service of some kind.

Chubbard at 20:32, 6 June 2023

2023-06-06T20:32:20Z

@@ Line 1: / Line 1: @@
 Local LAN links to different monitoring tests
@@ Line 7: / Line 8: @@
 # http://larvel01:8002/events/stateChange/after/2021-10-11%2008:25:57
 # https://observium.iwillfearnoevil.com/device/device=47/tab=ports/
 [[Category:NMS]]

Chubbard at 23:32, 15 October 2021

2021-10-15T23:32:14Z

← Older revision		Revision as of 16:32, 15 October 2021
Line 6:		Line 6:
	# http://webserver01:82/event/tables/event.html		# http://webserver01:82/event/tables/event.html
	# http://larvel01:8002/events/stateChange/after/2021-10-11%2008:25:57		# http://larvel01:8002/events/stateChange/after/2021-10-11%2008:25:57
			# https://observium.iwillfearnoevil.com/device/device=47/tab=ports/

	[[Category:NMS]]		[[Category:NMS]]

Chubbard at 23:31, 15 October 2021

2021-10-15T23:31:44Z

← Older revision		Revision as of 16:31, 15 October 2021
Line 1:		Line 1:
	Local LAN links to different monitoring tests		Local LAN links to different monitoring tests

	http://192.168.15.249/event?sort=eventSeverity&direction=DESC		# http://192.168.15.249/event?sort=eventSeverity&direction=DESC
	http://backup01:85/windowDetail.php?id=5d1036d709297		# http://backup01:85/windowDetail.php?id=5d1036d709297
	http://backup01:85/wob2.php		# http://backup01:85/wob2.php
	http://webserver01:82/event/tables/event.html		# http://webserver01:82/event/tables/event.html
	http://larvel01:8002/events/stateChange/after/2021-10-11%2008:25:57		# http://larvel01:8002/events/stateChange/after/2021-10-11%2008:25:57

	[[Category:NMS]]		[[Category:NMS]]

Chubbard: Created page with "Local LAN links to different monitoring tests http://192.168.15.249/event?sort=eventSeverity&direction=DESC http://backup01:85/windowDetail.php?id=5d1036d709297 http://backup..."

2021-10-15T23:31:29Z

Created page with "Local LAN links to different monitoring tests http://192.168.15.249/event?sort=eventSeverity&direction=DESC http://backup01:85/windowDetail.php?id=5d1036d709297 http://backup..."

New page

Local LAN links to different monitoring tests

http://192.168.15.249/event?sort=eventSeverity&direction=DESC
http://backup01:85/windowDetail.php?id=5d1036d709297
http://backup01:85/wob2.php
http://webserver01:82/event/tables/event.html
http://larvel01:8002/events/stateChange/after/2021-10-11%2008:25:57

[[Category:NMS]]