I'm managing a network that connects a core setup with several remote branch offices via fixed VPNs. Occasionally, we run into speed and connectivity issues. To make troubleshooting easier, I'd like a dedicated device onsite to perform diagnostics and collect historical data on various metrics.
My initial idea is to use a Raspberry Pi or a similar micro-PC running Linux as a client in these branches. We could run Docker to host tools like SmokePing, MySpeed, and OpenSpeedTest, which would allow us to monitor real-time and historical connection statistics. Additionally, using Tailscale would let us access this device even during VPN outages for remote management and diagnostics.
While this concept is feasible, it feels a bit cumbersome. I'm curious if there's an off-the-shelf appliance that could provide the same functionality? Ideally, I'd prefer a solution that simplifies the installation process rather than managing multiple monitoring products.
We're primarily a Microsoft/Azure/Windows environment, so while Linux options aren't entirely off the table, we prefer something straightforward. I've done some research, but nothing seems to fit; I've found plenty of middle-out monitoring tools like SolarWinds and Zabbix, but I'm struggling to find something for edge-in monitoring that also allows remote access to local devices.
It's crucial that any solution we consider complies with UK Cyber Essentials+ certification for security and maintenance. Any suggestions?
1 Answer
What kind of networking equipment are you using? Is there uniformity across all your WAN sites, like using Cisco routers at every branch? It might help streamline your setup if there’s consistency in the hardware.
We have Checkpoint at our gateways and Juniper for switching. Both systems have their own monitoring features, but our main concern is accessing devices directly in case of VPN or management server issues. It's crucial for our 'follow the sun' support model that non-local admins can manage hardware arms remotely.