AWS VPN

Overview

AWS VPN lets you establish a secure and private tunnel from your network or device to the AWS global network.

Enable this integration to see all your VPN metrics in Datadog.

Setup

Installation

If you haven’t already, set up the Amazon Web Services integration first.

Metric collection

  1. In the AWS integration page, ensure that VPN is enabled under the Metric Collection tab.
  2. Install the Datadog - AWS VPN integration.

Log collection

Enable logging

Configure AWS VPN to send logs either to a S3 bucket or to CloudWatch.

Note: If you log to a S3 bucket, make sure that amazon_vpn is set as Target prefix.

Send logs to Datadog

  1. If you haven’t already, set up the Datadog Forwarder Lambda function.

  2. Once the Lambda function is installed, manually add a trigger on the S3 bucket or CloudWatch log group that contains your AWS VPN logs in the AWS console:

Data Collected

Metrics

aws.vpn.tunnel_data_in
(count)		The number of bytes that have come in through the VPN tunnel
Shown as byte
aws.vpn.tunnel_data_out
(count)		The number of bytes that have gone out through the VPN tunnel
Shown as byte
aws.vpn.tunnel_state
(gauge)		This metric is 1 when the VPN tunnel is up and 0 when it is down

Events

The AWS VPN integration does not include any events.

Service Checks

The AWS VPN integration does not include any service checks.

Troubleshooting

Need help? Contact Datadog support.