Comparative Analysis of Pull and Push Monitoring Models for Information Services in CGNAT Environments

Abstract

This research investigates the development of a monitoring system for information environments operating behind Carrier-Grade NAT (CGNAT), a significant constraint that prevents direct access from a central server to client nodes. The study conducts an in-depth comparative analysis of two architectures: (1) a Pull Model operating over an overlay network utilizing Tailscale technology, and (2) a traditional Push Model transmitting data via a Pushgateway. Experiments were performed on a live system deployed on Microsoft Azure, with network conditions simulated using pfSense. The results reveal significant trade-offs between the two approaches. The Pull Model via Tailscale demonstrates superior performance regarding alerting latency, real-time data continuity, and enhanced security, as it eliminates the need to expose public ports. Conversely, the Push Model is distinguished by lower system overhead on client nodes and greater configuration autonomy. These findings provide guidelines for architectural selection based on specific use cases. The Pull Model is recommended for scenarios prioritizing high security where specialized configuration expertise is limited; Tailscale’s underlying Zero Trust Network Access (ZTNA) simplifies deployment through single-account authentication without complex setup. Alternatively, the Push Model is ideal for resource-constrained devices, such as IoT, provided that expert personnel are available to ensure secure configuration.