网络课程笔记

00:00 Hello and welcome to this lecture.

00:02 Now let's see VPN monitoring.

00:03 So, it is important that you know

00:06 which CloudWatch metrics are available

00:08 when you're using AWS Site-to-Site VPN.

00:11 And this would also be a part of your exam questions.

00:14 So, let's understand there are not many

00:16 but those are important to remember.

00:19 So, you can do VPN monitoring using CloudWatch

00:21 because AWS Site-to-Site VPN

00:23 is a native service by AWS.

00:26 It uses virtual private gateway.

00:28 You can very well get some metrics from

00:30 this virtual private gateway using CloudWatch

00:32 and then you can do all the regular stuff

00:35 that you typically do.

00:36 For example, you can create alarms

00:38 and then you can get notified

00:39 when something goes wrong.

00:41 So, in particular, AWS Site-to-Site VPN provides

00:44 three important CloudWatch metrics.

00:46 Very first is TunnelState.

00:48 So, the state of the tunnel,

00:50 which indicates whether tunnel is down or it's up.

00:53 So, zero indicates that tunnel is down

00:56 and one indicates that tunnel is up.

00:58 Now this TunnelState could also have different values,

01:03 anything between zero and one.

01:05 And in those cases it would indicate

01:08 that at least one of the tunnel is not up.

01:11 So, zero means both the tunnels are down.

01:14 One means both tunnels are up.

01:16 But if it's between zero and one

01:18 that may mean there is one tunnel which is not up.

01:22 So, that's a TunnelState CloudWatch metric.

01:25 Then there is TunnelDataIn,

01:27 the bytes that through the VPN tunnel.

01:30 And then TunnelDataOut,

01:31 the total bytes sent through the VPN tunnel.

01:34 All these metrics are collected

01:36 by default using CloudWatch.

01:38 You don't have to do any additional settings for this.

01:41 And as you have these metrics available

01:44 you can definitely create a CloudWatch Alarm.

01:48 For example, when TunnelState goes down

01:51 that means value becomes zero,

01:52 you can say:

01:54 set an alarm, send a notification

01:56 via AWS notification service, that is SNS,

02:00 and you can send either email and SMS

02:02 to the receiver or administrator.

02:05 So, remember these three CloudWatch metrics:

02:08 TunnelState, TunnelDataIn and TunnelDataOut.

02:12 Those are available for you to monitor via CloudWatch.

02:15 Now, there is one more way in which you can do

02:18 the monitoring of your VPN tunnel,

02:20 and that's through a Health Dashboard.

02:23 Now, as you know,

02:24 AWS provides something called Personal Health Dashboard, PHD

02:28 and any changes to the VPN tunnel

02:32 you can see that automatically coming

02:34 to your Health Dashboard.

02:36 So, AWS Site-to-Site VPN automatically sends

02:38 the notification to AWS Personal Health Dashboard.

02:42 And whenever there is a,

02:44 say tunnel replacement notification,

02:46 for example, out of two tunnel

02:48 one tunnel goes down for maintenance,

02:50 then that notification would also come here.

02:53 And if there is, say out of two tunnel

02:56 only one tunnel is working.

02:58 And how it detects

02:59 that if one of the tunnel is down

03:01 for more than one hour in a day,

03:04 it would consider that your VPN is working

03:06 only on the single tunnel.

03:08 Now, that notification,

03:10 in terms of single tunnel VPN notification

03:12 would also be coming here in the Personal Health Dashboard.

03:16 So, these are the mechanism through which you can monitor

03:19 your Site-to-Site VPN tunnel.

03:21 More important is your CloudWatch metrics.

03:24 Remember these three CloudWatch metrics

03:25 we just talked about.

03:27 That is TunnelState, TunnelDataIn and TunnelDataOut.

03:31 So, that is what you want to remember

03:33 for monitoring your VPN tunnel,

03:35 and thanks for watching.