Server

Remote Monitoring Through a SSH Tunnel

This page is scheduled for review and update. Check back soon for updated content!

At some time, you may need to monitor your server trough your SSH access. We assume you have a direct connection to your remote server host. If you're using a gateway, this works too, you just have to configure the right ports forwarding.

Here is how to monitor your server through a SSH tunnel:

  1. On server host, run jstatd with the privileges of the Nuxeo's user:

    jstatd -J-Djava.security.policy=jstat.permissions
    
  2. On your SSH connection, configure a local “dynamic” application-level port forwarding:

    ssh -D 6767 remote-server-host
    
  3. Run jvisualvm on your local host and in the network options, enable the manual proxy settings and configure a socks proxy:

    localhost:6767
  4. Now in jvisualvm, add a remote host for the remote-server-host. You should get the list of Java processes ran by Nuxeo's user remotely.

  5. Identify Nuxeo's Tomcat and launch a connection.

In the given jstat command line, we reference the Java security configuration file jstat.permissions. Here is its content:

grant codebase "file:${java.home}/../lib/tools.jar" {
    permission java.security.AllPermission;
};
12 days ago manonlumeau Final review
6 years ago Solen Guitter 6
7 years ago Solen Guitter 3
7 years ago Solen Guitter 4 | Moved page in Admin doc and fixed steps format
7 years ago Solen Guitter 5 | Migrated to Confluence 4.0
7 years ago Stéphane Lacoin 2
7 years ago Stéphane Lacoin 1
History: Created by Stéphane Lacoin

We'd love to hear your thoughts!

All fields required