Hi Communities,
Just wanted to explore on if there is any alternative approach to Grafana PDC available? We do have some security concerns around opening port 22 from PDC Agent to PDC Service.
We’ve our datasource on Prem and we do want to leverage Grafana SaaS for the dashboarding purpose only.
Alternative is to expose your on prem datasources on the Internet, so Grafana SaaS can connect to them directly.
I guess you will know that this is less secure alternative than PDC.
I would say that ssh tunnelling is standard secure way. What are yours security concerns for this concept?
Hi @jangaraj , Thanks for replying. Our customer’s security policy do not allow any outbound connection other than the standard HTTP(s) port. So thought of exploring some alternatives.
Could you share which datasource you’re using and whether you’re on AWS, Azure, GCP, or a fully on-prem environment?
The available alternatives to PDC depend on both the datasource and infrastructure. From that information, we can determine whether options such as AWS PrivateLink, Azure Private Link, or GCP Private Service Connect would meet your requirement of using only HTTP(S) ports.
Grafana’s documentation also notes that PDC requires an SSH tunnel on port 22, while cloud private networking options such as AWS PrivateLink, Azure Private Link, and GCP Private Service Connect are supported alternatives.
mhm port 443. So build own infrastructure outside of customer infra, where you configure PDC + maintain ssh tuneling/vpn on port 443 to customer infra.
Ridicilious (double tunnelling, maintaince) network setup, just to satisfy security requirements.