Amazon VPC-VPN monitoring integration

AWS managed VPN lets you create an IPsec Virtual Private Network Connection (VPN) between your VPC and on-premise remote network. With Site24x7's AWS VPN integration you can monitor and alert on the state and activity of the VPN connection and VPN tunnel.

Setup and configuration

  • If you haven't done it already, please enable access to your AWS resources by creating a cross-account IAM role between your account and Site24x7's AWS account (Recommended). You can also create Site24x7 as an IAM user. Learn more. Learn more.
  • Next, in the Integrate AWS Account page, please ensure the VPC-VPN check box is selected in the Services to be discovered field. Learn more.

Policies and permissions

Please make sure the following read-level action is present in the policy document assigned to the Site24x7 entity. Learn more.

  • "ec2:DescribeVpnConnections",
  • "ec2:DescribeAddresses"

Polling frequency

Site24x7 makes API requests as per the poll frequency set (1 minute to a day), to collect performance metrics and metadata. Learn more.

To view data

  • Log in to the Site24x7 console. Choose AWS and choose your Monitored AWS account. Select VPC-VPN from the drop down.
  • From the list of monitored AWS managed VPN connections, choose the connection for which you want to access metrics for
  • The various graphs applicable for your connection are displayed in the summary tab.

Supported metrics

The following metrics are collected on a per connection basis:

AttributeDescriptionData typeStatistic
Tunnel state Tracks the state of the tunnel. 0 means down, 1 means up. Boolean   
Tunnel data in Measures the number of bytes received through the VPN tunnel. Each metric data point represents the number of bytes received after the previous data point. Bytes Sum
Tunnel data Out Measures the number of bytes sent through the VPN tunnel. Each metric data point represents the number of bytes received after the previous data point. Bytes Sum

Configuration details

The following information is collected on a per connection basis:

AttributeDescription
VPN connection ID Displays the ID of the managed VPN connection.
VPN Gateway ID Displays the ID of the virtual private gateway.
Customer Gateway ID Displays the ID of the customer gateway.
Type Displays the type of connection – ipsec.1
State The state of the connection (pending, available, deleting, deleted).
Static Routes enabled Indicates whether the connection has static routed only or not.

Forecast

Estimate future values of the following performance metrics and make informed decisions about adding capacity or scaling your AWS infrastructure.

  • Data In
  • Data Out
  • Tunnel Data In
  • Tunnel Data Out
Was this document helpful?
Thanks for taking the time to share your feedback. We’ll use your feedback to improve our online help resources.