From moritz.kiemer@tribe29.com Mon May 16 12:02:03 2022
From: Moritz Kiemer <moritz.kiemer@tribe29.com>
To: checkmk-werks-lvl2@lists.checkmk.com
Subject: Checkmk Werk 14089: Checkmk agent TLS encryption and compression
Date: Mon, 16 May 2022 12:02:02 +0200
Message-ID: <1652695323.001029.4057460.nullmailer@review.lan.tribe29.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0717148663372321320=="

--===============0717148663372321320==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

ID:          14089
Title:       Checkmk agent TLS encryption and compression
Component:   Checks & agents
Level:       2
Class:       New feature
Version:     2.2.0i1

In Checkmk version 2.1 the monitoring data sent from the monitored host to th=
e monitoring server is TLS encrypted and compressed by default.

This is realized by a new component on the monitored hosts:
The Checkmk agent controller <tt>cmk-agent-ctl</tt>.

The added executable is called <tt>cmk-agent-ctl</tt>.
On Linux systems, the agent controller will be run as a dedicated user <i>cmk=
-agent</i>, which is added during installation.
As a result the process listening on the TCP port will have limited privilege=
s, and the agent output is not available to any other local user.

While upgraded setups will continue to work as before, in order to enable TLS=
 encryption an additional registration step is required.
More information on the registration step, the installation and the provided =
commands can be found <a href=3D"https://docs.checkmk.com/master/en/agent_lin=
ux.html">in our online documentation</a>.




--===============0717148663372321320==--