I'm using java application server behind web application firewall (nginx with TLS & mod_security).
Java application is running in Internal network segment behind WAF. Requests from the Internet comes to java application server only via WAF which is running on different host in DMZ.
I want to monitor various metrics of java application. JVM provides JMX service out of the box for monitoring and management, so it's very easy to setup java application process monitoring by tools like Nagios & Zabbix. Monitoring server will be running on same network segment as java server or in special Management network segment.
- Is it secure to expose JMX service to local network (internal segment)?
- Is safe to monitor java application with JMX when application is processing secure data?
- If not, should I use some http-jmx bridge like Jolokia and not expose JMX? In this case I'll have to setup manually all the metrics in Nagios/Zabbix. For JMX the standard java JMX metrics are pre-configured.
- Is SNMP a good replacement of JMX for monitoring?