Push stats instead of pulling

[Hutch79]

Hey there,

First of all I love this project!
Finally, a monitoring solution which is very quick to set up, thanks for the work so far!

Now to my suggestion.
The current setup works (as far as I understand it) that the host reaches out to the agent and pulls the stats from it.
My suggestion would be to reverse this process, so the agent pushes the stats to the Host via an API call.

This would have two benefits.

1. Different Tokens/Key's. Currently, every Agent is set up with the same SSH-Key. With an API every Agent could have a different token which decreases the risk of accidental leaking. I guess individual SSH-Keys would also be possible with the current setup.
2. Only the Host would need to be accessible via a Port. Currently, every Agent needs a port, so the Host can access it. Iv we reverse this setup, only the Host needs an open port.
   The API/Push approach would also allow for custom Agent's to be created more easily.

Anyway, I'm curious where this project goes!

[henrygd]

This has been brought up previously in #16 and #28, but this seems like a better place to discuss it.

It's on the radar for the future but not something I'm planning to jump into immediately.

For those having trouble with the current setup, it may be possible to connect using services like Cloudflare tunnel, WireGuard, or Tailscale.

[Hutch79]

I understand that this is not priority number one.
First everything must be stable as is, after that reworking existing stuff can happen.

I had connecting trough VPN's or overlay networks like Tailscale or Netbird in my mind, but my networking knowledge is not good enough to implement such a setup. Also, an open port is not a dealbreaker for me personally, but for some it might be.

[TheAnachronism]

Really hope this can be done at some point. With monitoring many VMs on a hypervisor, or systems that don't have public addresses, this would be tremendous.

[gedw99]

I am using NATS JetStream embedded in each server to do this.

NATS is push based and does not need public Ips and has its own security also so it can do multi tenant.

its works very well