Configuring Cloud Proxies in vRealize Operations Cloud

Using cloud proxies in vRealize Operations Cloud, you can collect and monitor data from your on-prem data center or cloud (VMC on AWS, VMC on Dell EMC, Azure VMware Solution, Google Cloud VMware Engine). You can deploy one or more cloud proxies in vRealize Operations Cloud to create a one-way communication between your end-point environment and vRealize Operations Cloud. The cloud proxies work as one-way remote collectors and upload data from the end-point environment to vRealize Operations Cloud. Cloud proxies can support multiple vCenter Servers or cloud accounts. For public cloud (AWS, Azure, GCP), the default collector can collect and monitor data. For more information on cloud proxies, see the topic called Cloud Proxy FAQ in the VMware vRealize Operations Cloud Getting Started Guide.

Prerequisites

• Verify that you have an IP address, a DNS entry, and permissions to deploy OVF templates in vSphere.
• Log in to vSphere and verify that you are connected to a vCenter Server system.
• Allow outgoing HTTPS traffic for cloud proxy over port 443.
• Allow outgoing traffic from the endpoints to cloud proxy over 443, 4505, and 4506.
• Ensure firewalls are configured to allow outgoing traffic to:
  • *.vmwareidentity.com
  • gaz.csp-vidm-prod.com
  • *.vmware.com
  • *.vrops-cloud.com
  • s3-us-west-2.amazonaws.com/vrops-cloud-proxy
• Add a vCenter cloud account and provide an account with the following read and write privileges:
  • vCenter IP address or FQDN
  • Permissions required to install a cloud proxy on the vCenter Server.

  For more information on privileges, see, Privileges Required for Configuring a vCenter Adapter Instance.

Procedure

1. Log in to vRealize Operations Cloud.
2. From the left menu, click Data Sources > Cloud Proxy, and then click New.
3. Save the OVA path. Optionally, click Download Cloud Proxy OVA to download and save the OVA file locally.
   • To copy the link for the VMware vRealize^® Operations Cloud Appliance™, click the Copy Path icon for the Cloud Proxy OVA.
   • To download and save the OVA file locally, click Download Cloud Proxy OVA.
4. Navigate to your vSphere, select the name of your vCenter Server cluster, and select Deploy OVF Template from the Actions menu.
5. Insert the ova link and then click Next.
   • Paste the cloud proxy ova link in the URL field.
   • Click the Local File option, browse, and select the downloaded OVA file.
6. Follow the prompts to install the OVA on your vCenter Server.
   For the most current information about sizing and scaling, see Knowledge Base article 78491.
7. When prompted to enter the One Time Key (OTK) in the Customize template screen, return to the Install Cloud Proxy page in vRealize Operations Cloud, and click the Copy Key icon.
   The One Time Key expires 24 hours after generation. To avoid using an expired key, click Regenerate Key before proceeding. The one time key is used by the cloud proxy to authenticate to vRealize Operations Cloud.
8. Return to vSphere and paste the key in the One Time Key text box to install the vRealize Operations Cloud Appliance.
9. Select Use IPv6 to use IPv6 for internal communications.
10. (Optional) Set up a proxy server in the Customize template screen.
    1. Enter details in the Network Proxy IP Address and Network Proxy Password properties.
    2. To enable SSL, select the Use SSL connection to proxy check box.
    3. If you are using SSL, you can verify the certificate of the proxy server. Public certificate authorities are used to verify the proxy server certificate. To enable this, select the Verify proxy's SSL cert check box in the Verify SSL cert property.
    4. If you have a custom certificate authority, paste the root certificate authority in the Custom CA property to verify the certificate of the proxy server. The root certificate authority is passed on to the cloud proxy. Do not include the following lines from the certificate authority:

       "-----BEGIN CERTIFICATE-----" 

       "-----END CERTIFICATE-----"

11. Click Finish.
    The deployment takes a few minutes to finish.
12. Locate the cloud proxy you just installed, select the vRealize Operations Cloud Appliance, and click Power on.
    Note: You must power on the vRealize Operations Cloud Appliance within 24 hours of registering it. After 24 hours, the One Time Key expires, and you must delete the vRealize Operations Cloud Appliance and deploy another cloud proxy.
13. Return to the Cloud Proxy page in vRealize Operations Cloud to view the status of the cloud proxy you just installed.

    Option	Description
    Name	The name of the cloud proxy.
    IP	The IP address of the cloud proxy.
    Status	Status of the cloud proxy. For example, the Getting Online status is displayed for a few minutes when you add a new cloud proxy. Once the cloud proxy is connected to vRealize Operations Cloud, the status changes to Online. If the vRealize Operations Cloud is not connected, the Offline status is displayed.
    Version	The version used to install the cloud proxy.
    Accounts	The number of accounts that are created and associated with the cloud proxy.
    Network Proxy Address	The network proxy address of the cloud proxy.
    Network Proxy Port	The network proxy port number of the cloud proxy.
    Filter	Enables you to search the list of cloud proxies according to the following criteria: Name IP Version Accounts Network Proxy Address Network Proxy Port

14. To view the accounts that are using this connection, click the Cloud Proxy.
    The communication from the cloud proxy to cloud is one way. The cloud proxy initiates this connection and if necessary, it also pulls data from cloud (like the adapters configuration or upgrade pak). The cloud proxy requires a regular Internet access over the https protocol but it does not need any special firewall configuration. The cloud proxy verifies the certificate of the cloud service it connects to and if there are transparent proxy servers which do stop SSL, it might cause connectivity problems for the cloud proxy.

    The cloud proxy also supports connection through the corporate proxy server. The proxy settings are given during OVF deployment.

15. (Optional) To remove a cloud proxy, click Remove.

What to do next

Upgrade your cloud proxy. For more information, see the topic called Upgrading Cloud Proxy in the VMware vRealize Operations vApp Deployment Guide.

Troubleshoot any cloud proxy issues. For more information, see Troubleshooting Cloud Proxy.