Amazon VPC-VPN monitoring integration
AWS managed VPN lets you create an IPsec Virtual Private Network Connection (VPN) between your VPC and on-premise remote network. With Site24x7's AWS VPN integration you can monitor and alert on the state and activity of the VPN connection and VPN tunnel.
Setup and configuration
- If you haven't done it already, please enable access to your AWS resources by creating a cross-account IAM role between your account and Site24x7's AWS account (Recommended). You can also create Site24x7 as an IAM user. Learn more. Learn more.
- Next, in the Integrate AWS Account page, please ensure the VPC-VPN check box is selected in the Services to be discovered field. Learn more.
Policies and permissions
Please make sure the following read-level action is present in the policy document assigned to the Site24x7 entity. Learn more.
- "ec2:DescribeVpnConnections",
- "ec2:DescribeAddresses"
Polling frequency
Site24x7 makes API requests as per the poll frequency set (1 minute to a day), to collect performance metrics and metadata. Learn more.
To view data
- Log in to the Site24x7 console. Choose AWS and choose your Monitored AWS account. Select VPC-VPN from the drop down.
- From the list of monitored AWS managed VPN connections, choose the connection for which you want to access metrics for
- The various graphs applicable for your connection are displayed in the summary tab.
Supported metrics
The following metrics are collected on a per connection basis:
| Attribute | Description | Data type | Statistic |
|---|---|---|---|
| Tunnel state | Tracks the state of the tunnel. 0 means down, 1 means up. | Boolean | |
| Tunnel data in | Measures the number of bytes received through the VPN tunnel. Each metric data point represents the number of bytes received after the previous data point. | Bytes | Sum |
| Tunnel data Out | Measures the number of bytes sent through the VPN tunnel. Each metric data point represents the number of bytes received after the previous data point. | Bytes | Sum |
Configuration details
The following information is collected on a per connection basis:
| Attribute | Description |
|---|---|
| VPN connection ID | Displays the ID of the managed VPN connection. |
| VPN Gateway ID | Displays the ID of the virtual private gateway. |
| Customer Gateway ID | Displays the ID of the customer gateway. |
| Type | Displays the type of connection – ipsec.1 |
| State | The state of the connection (pending, available, deleting, deleted). |
| Static Routes enabled | Indicates whether the connection has static routed only or not. |
Forecast
Estimate future values of the following performance metrics and make informed decisions about adding capacity or scaling your AWS infrastructure.
- Data In
- Data Out
- Tunnel Data In
- Tunnel Data Out