Reaching Munin nodes behind NAT

Using port forwarding, it's no problem reaching Munin nodes on the "inside" of a NAT device. The NAT device (the brick drawing in the middle, referred to as "bouncer") must enable port forwarding to each Munin node. The port mapping on the drawing links TCP port 5001 to server A, port 5002 to server B, and port 5003 to server C.

http://munin.projects.linpro.no/attachment/wiki/BouncingMunin/MuninPortForwarding.png?format=raw

Configuring port forwarding on whatever device you have is outside the scope of a Munin documentation web site. Please consult the manual for your device on how to do that. However, if your NAT device is actually a *nix system, you may want to consider bouncing through (x)inetd or tunneling with SSH instead.

After you have successfully configured port forwarding, munin.conf on the Munin server must be configured accordingly:

[Server-A]
  address bouncer
  port 5001
  use_node_name yes

[Server-B]
  address bouncer
  port 5002
  use_node_name yes

[Server-C]
  address bouncer
  port 5003
  use_node_name yes