Study guide
2.2 ActiveGate Capabilities: Proxying, Private Synthetic, Cloud Integrations & Extensions
Dynatrace Certified Associate Exam
Track your progress as you read
Finished sections get a check mark.
1 Chapter 1: Platform Overview, Deployment Models & Architecture
1.1 Dynatrace Platform Capabilities, Web UI Navigation & the Dynatrace Hub 1.2 SaaS vs. Dynatrace Managed Architecture & Security 1.3 Core Telemetry Components: OneAgent, ActiveGate & Grail Lakehouse 1.4 Licensing Models: Dynatrace Platform Subscription (DPS) & Davis Data Units (DDUs)
2 Chapter 2: ActiveGate Architecture & Network Topologies
2.1 ActiveGate Types: Environment vs. Cluster ActiveGates 2.2 ActiveGate Capabilities: Proxying, Private Synthetic, Cloud Integrations & Extensions 2.3 Network Zones, Multi-DC Routing & Firewall Traversal
3 Chapter 3: OneAgent Deployment, Configuration & Management
3.1 OneAgent Architecture, Components & Automatic Injection 3.2 Host Installation on Linux, Windows & Containerized Hosts 3.3 Cloud-Native Deployment: Dynatrace Operator on Kubernetes & OpenShift 3.4 Kubernetes Observability: Clusters, Nodes, Namespaces, Workloads & Events
4 Chapter 4: Monitoring Modes, Process Groups & Infrastructure Observability
4.1 Monitoring Modes: Full-Stack vs. Infrastructure-Only vs. Discovery 4.2 Process Groups, Process Instances & Custom Process Group Detection Rules 4.3 Host Groups, Host Naming Rules & Environmental Metadata Extraction 4.4 Infrastructure & Operations: Host Health, Disk, Network & Availability Analysis 4.5 Database Observability: The Databases App, Connection Pools & Storage Latency
5 Chapter 5: Smartscape Topology & Service Flow
5.1 The 5-Layer Smartscape Topology: Datacenter to Application 5.2 Service Detection: Web Services, Background Tasks & Custom Services 5.3 Service Flow, Backtrace Analysis & Horizontal/Vertical Dependency Mapping
6 Chapter 6: PurePath Distributed Tracing & Code-Level Diagnostics
6.1 PurePath Architecture, Distributed Tracing & Request Context Propagation 6.2 Method Hotspots, CPU Profiling & Memory Allocation Thread Analysis 6.3 Database Service Diagnostics, Slow Queries & Exception Analysis
7 Chapter 7: Davis AI Engine, Baselining & Causation
7.1 Davis Deterministic Causation Engine vs. Pure Correlation 7.2 Automated Dynamic Baselining, Percentiles & Traffic Seasonality 7.3 Event Ingestion, Event Types & Event Hierarchy in Problem Evolution
8 Chapter 8: Problem Lifecycle, Root Cause Analysis & Alerting
8.1 Problem Lifecycle, Severity Categories & Root Cause Cards 8.2 Alerting Profiles, Delay Filters & Management Zone Routing 8.3 Problem Notification Integrations: Webhooks, Slack, ServiceNow & ITSM
9 Chapter 9: Digital Experience Monitoring: Synthetic Monitoring
9.1 Synthetic Monitors: HTTP, Single-Step Browser & Multi-Step Clickpaths 9.2 Private Synthetic Locations, ActiveGate Engines & Credential Vault 9.3 Outage Detection, Performance Baselining & Maintenance Suppression
10 Chapter 10: Digital Experience Monitoring: Real User Monitoring (RUM)
10.1 RUM Architecture, OneAgent Script Injection & Mobile/OpenKit Telemetry 10.2 User Actions: Load vs. XHR/Fetch Actions, Visually Complete & Speed Index 10.3 Apdex Performance Ratings, User Sessions & Session Replay Masking
11 Chapter 11: Log Management and Analytics on Grail with DQL
11.1 Log Management on Grail: Storage, Ingestion Pipelines & Log Masking 11.2 Dynatrace Query Language (DQL): Fetch, Filter, Fields & String Operations 11.3 DQL Aggregations: Summarize, MakeTimeseries, Sorting & Visualizations
12 Chapter 12: Platform Governance, OpenTelemetry & Automation
12.1 Management Zones: Scoping Observability, Dashboards & Access Control 12.2 Tagging Strategies: Automated Rule-Based Tags, Manual Tags & AWS/K8s Metadata 12.3 OpenTelemetry Ingestion, OpenPipeline & Dynatrace Workflows Automation
13 Chapter 13: Cloud Integrations & Agentless Infrastructure Ingestion
13.1 AWS, Azure & Google Cloud Integrations 13.2 VMware vSphere, Extensions & Other Agentless Ingestion Paths
14 Chapter 14: Business Analytics & Business Events
14.1 Business Events: Capture, Ingestion & the bizevents Grail Table 14.2 Business Analytics: Connecting Performance to Revenue, Conversion & KPIs
15 Chapter 15: Notebooks, Dashboards & Data Visualization
15.1 Notebooks: Section-Based Investigation & Shareable Analysis 15.2 Dashboards: Tiles, Variables, Segments & Continuous Monitoring 15.3 Choosing Visualizations: Data Explorer, Chart Types & Metric Selection
16 Chapter 16: Reporting, Metrics & User Behavior Analysis
16.1 Metrics on Grail: Built-in Metrics, Granularity & Retention 16.2 Dashboard Reports, Subscriptions & Exporting Data via APIs 16.3 User Behavior Analysis: Bounce Rate, Landing & Exit Pages, Conversion Goals 16.4 Session Segmentation, User Journeys & Funnel Drop-Off Analysis
17 Chapter 17: Security, Vulnerability Analytics & Application Protection
17.1 Platform Security: Data Privacy, Encryption & Access Control 17.2 Third-Party Vulnerabilities, the Davis Security Score & Security Advisor 17.3 Code-Level Vulnerabilities, Attacks & Runtime Application Protection 17.4 Security Investigator, Notifications & the Remediation Workflow
2.2 ActiveGate Capabilities: Proxying, Private Synthetic, Cloud Integrations & Extensions
Key Takeaways Explain This Topic AI
ActiveGates function as multi-capability execution engines, running modular subsystems for OneAgent proxying, Private Synthetic monitoring, cloud API integrations, and Extensions 2.0.
Private Synthetic locations require dedicated Environment ActiveGates equipped with Chromium engines to execute single-step and multi-step browser synthetic monitors behind firewalls.
Cloud infrastructure monitoring for AWS, Azure, GCP, and VMware vCenter connects via ActiveGate polling engines, collecting topology, metrics, and events agentlessly without installing OneAgent on hypervisors.
ActiveGate capabilities and runtime parameters are managed through the custom.properties configuration file and coordinated centrally through the Dynatrace web UI.
Last updated: September 2026
2.2 ActiveGate Capabilities: Proxying, Private Synthetic, Cloud Integrations & Extensions
While an ActiveGate's primary function in network design is routing telemetry, it is architecturally structured as a modular host platform that executes multiple specialized background subsystems. In Dynatrace terminology, these modular subsystems are known as ActiveGate Capabilities (or modules). Depending on operational needs, an administrator can configure an ActiveGate instance to fulfill one or more specific roles.
On the Dynatrace Certified Associate exam, candidates must understand what each capability does, where it should be placed in an enterprise network, its hardware resource implications, and how to configure it.
Modular Subsystems of ActiveGate
An ActiveGate can run the following modular capabilities:
Routing and Telemetry Aggregation (OneAgent Proxying): Buffering, compressing, and proxying PurePath traces, metrics, logs, and events.
Memory Dump Offloading: Storing diagnostic heap and thread dumps locally on disk.
Private Synthetic Monitoring Engine: Executing synthetic HTTP monitors and full headless browser clickpaths against internal endpoints.
Virtualization Monitoring (VMware vCenter / ESXi): Agentlessly discovering hypervisor topology and polling ESXi performance metrics.
Cloud Platform Monitoring: Polling cloud provider monitoring APIs (AWS CloudWatch, Azure Monitor, Google Cloud Operations).
Extensions 2.0 Execution (Extension Execution Controller - EEC): Remotely polling targets via SNMP, WMI, Prometheus, and SQL database queries.
Log Ingestion & OpenTelemetry Gateway: Ingesting OTLP telemetry and local/remote syslog streams.
- Capability 1: Traffic Proxying, Aggregation & Memory Dump Offloading
- Telemetry Aggregation and WAN Optimization
The routing capability is enabled by default upon ActiveGate installation. It terminates incoming TLS connections from OneAgents, parses message envelopes, strips network overhead, aggregates timeseries data into batched payloads, and applies high-ratio compression before transmitting the data upstream over port 443. This reduces bandwidth overhead by up to 70% and prevents external network interfaces from being overwhelmed by thousands of concurrent persistent connections.
Disk Spooling and Network Resilience
If the upstream network link between an ActiveGate and the Dynatrace Cluster fails or experiences severe degradation, the ActiveGate does not drop telemetry immediately. Instead, it activates its disk spooling buffer :
Inbound telemetry from OneAgents is written to a temporary spool directory on the ActiveGate host's local filesystem ( /var/lib/dynatrace/gateway/temp on Linux or %PROGRAMDATA%\dynatrace\gateway\temp on Windows).
Once upstream connectivity to the Dynatrace Cluster is restored, the ActiveGate drains the spool buffer in chronological sequence while continuing to process real-time incoming streams.
This buffer ensures zero telemetry loss during transient network disconnects or scheduled cluster maintenance windows.
Memory Dump Storage Offloading
When troubleshooting complex production memory leaks or thread deadlocks, developers and operations teams can trigger on-demand heap dumps or thread dumps directly from the Dynatrace web UI for Java, .NET, or Node.js processes. Generating a 4 GB heap dump on a production application host and transferring it across a WAN to Dynatrace SaaS could saturate production interfaces.
To prevent this, the ActiveGate serves as a local diagnostic repository :
The OneAgent transfers the raw dump file locally across the LAN to the designated Environment ActiveGate.
The ActiveGate stores the dump file in its local directory ( /var/lib/dynatrace/gateway/dump on Linux).
Authorized engineers can download the dump file directly from the ActiveGate via the Dynatrace UI or REST API, keeping heavy diagnostic network traffic isolated from critical application uplinks.
Capability 2: Private Synthetic Monitoring
Dynatrace offers both Public Synthetic Locations (managed by Dynatrace across global cloud regions) and Private Synthetic Locations (deployed by customers within their internal infrastructure). Private Synthetic locations allow enterprises to monitor internal web applications, core banking portals, intranet sites, and internal microservice APIs that reside behind corporate firewalls and are completely inaccessible from the public internet.
Synthetic Execution Modules
A Private Synthetic ActiveGate runs two distinct execution engines:
Synthetic HTTP Engine: Executes lightweight single-step and multi-step HTTP requests. It validates API response codes, checks TLS handshake timings, asserts payload JSON/XML properties, and calculates HTTP response metrics. This engine has a minimal CPU and memory footprint.
Synthetic Browser Engine (Headless Chromium): Executes full browser clickpaths that simulate end-user transactions. The engine launches an actual headless Chromium browser process that renders HTML/CSS, executes complex client-side JavaScript, navigates DOM elements, captures full-page screenshots on failure, and measures end-user performance metrics (Visually Complete, Speed Index, User Action Duration).
Architectural Sizing & The Dedicated ActiveGate Rule
Because headless Chromium instances consume substantial CPU cycles and memory during page rendering and script execution, running concurrent browser clickpaths places severe demands on the underlying operating system.
Caution
Critical Exam Rule: Dedicated ActiveGates for Browser Synthetic. Dynatrace strongly recommends deploying dedicated Environment ActiveGates exclusively for Private Synthetic Browser monitoring. Co-locating Browser Synthetic workloads on an ActiveGate that also handles traffic aggregation for hundreds of OneAgents or polls heavy VMware clusters will lead to CPU starvation, socket exhaustion, and dropped OneAgent metrics.
Resource Sizing for Private Synthetic:
HTTP Monitors Only: 2 to 4 vCPUs, 4 GB RAM.
Browser Monitors (Chromium): Minimum 4 to 8 vCPUs, 8 to 16 GB RAM, and dedicated high-speed SSD storage. On Linux, specific operating system dependencies (such as Xvfb , libX11 , GConf2 , nss , and font libraries) must be installed to support the headless browser engine.
Private Synthetic Location Pools: Multiple Private Synthetic ActiveGates can be assigned to a single Private Synthetic Location. Dynatrace automatically distributes scheduled synthetic executions across the ActiveGates in the pool, ensuring high availability and execution redundancy.
Capability 3: Cloud & Virtualization Integrations
Many infrastructure components do not support running host agents—most notably hypervisor appliances, managed cloud databases, and serverless infrastructure. ActiveGates bridge this gap through agentless remote API polling.
VMware vCenter / ESXi Monitoring
Dynatrace monitors VMware virtual infrastructure agentlessly via an Environment ActiveGate:
The ActiveGate connects directly to the VMware vCenter Server API over HTTPS (port 443) using a read-only service account.
It collects hypervisor inventory, ESXi host hardware utilization (CPU, memory, power), datastore capacity, read/write IOPS, storage latency, and VM provisioning state.
Topology Mapping: The Dynatrace Smartscape engine automatically stitches together the VMware hypervisor topology discovered by the ActiveGate with the internal process and service topology discovered by OneAgents running inside the guest virtual machines.
Cloud Platform Monitoring (AWS, Azure, GCP)
For cloud environments, an ActiveGate deployed within a cloud VPC or on-premise datacenter connects to cloud management APIs:
AWS Integration: Connects to AWS CloudWatch APIs (or ingests AWS Metric Streams via Kinesis Firehose) to capture metrics for Amazon RDS, DynamoDB, S3, Elasticache, and API Gateway.
Azure Integration: Connects to the Azure Monitor REST API via an Azure App Registration / Service Principal to collect metrics and resource health across Azure subscriptions.
Google Cloud Integration: Queries Google Cloud Monitoring APIs using a Google Cloud Service Account to monitor Google Compute Engine, Cloud SQL, and Google Kubernetes Engine (GKE).
Capability 4: Extensions 2.0 & Extension Execution Controller (EEC)
Dynatrace Extensions 2.0 enables monitoring of third-party network devices, legacy applications, and specialized hardware. The ActiveGate hosts the Extension Execution Controller (EEC) , which acts as the execution runtime for remote extensions:
SNMP Monitoring (v1, v2c, v3): The ActiveGate polls network switches, routers, load balancers, and firewalls for MIB/OID metrics and processes incoming SNMP traps.
Prometheus Metric Scraping: Scrapes internal /metrics endpoints across internal Kubernetes clusters or standalone servers that expose OpenMetrics formats.
WMI (Windows Management Instrumentation): Remotely queries performance counters on legacy Windows servers without requiring local agent installation.
Database Monitoring (SQL/JDBC): Executes custom performance and diagnostic queries against Oracle, Microsoft SQL Server, PostgreSQL, MySQL, and IBM DB2 databases.
ActiveGate Configuration Architecture: custom.properties
All ActiveGate operational parameters, module activations, proxy settings, and network identities are defined in a central configuration file named custom.properties .
- Configuration File Locations
- Linux: /var/lib/dynatrace/gateway/config/custom.properties
- Windows: %PROGRAMDATA%\dynatrace\gateway\config\custom.properties
- Key Directives in custom.properties [connectivity]
- # Defines the public IP or FQDN advertised to OneAgents
- dnsEntryPoint = https://activegate.internal.corp:9999
- [network_zone]
- # Defines the Network Zone this ActiveGate belongs to
- networkZone = dc-chicago-prod
- [http.client.proxy]
- # Configures an upstream corporate proxy for egress to Dynatrace SaaS
- host = proxy.corporate.local
- port = 8080
- user = dynatrace_svc
- password = SecretProxyPassword123
- [modules]
- # Explicitly controls active capability modules
- routing = true
- synthetic = false
- remote_configuration = true
Whenever changes are made to custom.properties , the ActiveGate service must be restarted to apply the new configuration:
- Linux: sudo systemctl restart dynatracegateway
- Windows: net stop "Dynatrace Gateway" && net start "Dynatrace Gateway"
- Capability Sizing and Placement Summary
ActiveGate Capability Primary Workload Resource Footprint Dedicated AG Recommended? Key Ports Used
OneAgent Routing Proxying agent traces & metrics Moderate (scales with agent count) No (can co-locate routing) Inbound 9999, Outbound 443
Memory Dump Storage Storing heap & thread dumps Low CPU, High Disk SSD capacity No (can co-locate with routing) Inbound 9999
Private Synthetic (HTTP) Polling REST APIs & web endpoints Low CPU, Low Memory No (can share with routing) Outbound 80/443 to targets
Private Synthetic (Browser) Running headless Chromium clickpaths Very High CPU & Memory Yes (Mandatory Best Practice) Outbound 80/443 to targets
VMware vCenter Polling Polling vCenter API Low CPU, Moderate Memory No (can share with routing) Outbound 443 to vCenter
Cloud Monitoring (AWS/Azure) Polling CloudWatch/Azure APIs Low CPU, Moderate Memory No (can share with routing) Outbound 443 to Cloud APIs
Extensions 2.0 (EEC) SNMP, WMI, Prometheus, SQL Moderate CPU, Moderate Memory Dependent on poll frequency Outbound 161 (SNMP), 1433/1521/5432 (SQL)