Network

Overview

The network check collects TCP/IP stats from the host operating system.

Setup

Follow the instructions below to install and configure this check for an Agent running on a host.

Installation

The network check is included in the Datadog Agent package, so you don’t need to install anything else on your server.

To collect metrics with this integration, make sure the conntrack module is activated on your host. If it’s not the case, run:

sudo modprobe nf_conntrack
sudo modprobe nf_conntrack_ipv4
sudo modprobe nf_conntrack_ipv6

Note: You may need to install the conntrack binary in the Agent image.

Configuration

1. The Agent enables the network check by default, but if you want to configure the check yourself, edit file network.d/conf.yaml, in the conf.d/ folder at the root of your Agent’s configuration directory . See the sample network.d/conf.yaml for all available configuration options.

2. Restart the Agent to effect any configuration changes.

Note:

Some conntrack metrics require running conntrack with privileged access to be retrieved.

Linux: Configure the following sudoers rule for this to work:

dd-agent ALL=NOPASSWD: /usr/sbin/conntrack -S

Kubernetes

Conntrack metrics are available by default in Kubernetes < v1.11 or when using the host networking mode in Kubernetes v1.11+.

In order to collect AWS ENA metrics :

• Update network check to enable collection of AWS ENA metrics with collect_aws_ena_metrics: true.
• Update Agent containers to use host network mode and add NET_ADMIN capabilities.

For Datadog Helm Chart deployment, update chart values with:

datadog:
 # Enable AWS ENA metrics collection for network check
 confd:
   network.yaml: |-
     init_config:
     instances:
       - collect_aws_ena_metrics: true     

# Have agent containers use host network with NET_ADMIN capability
agents:
  useHostNetwork: true
  containers:
    agent:
      securityContext:
        capabilities:
          add:
            - NET_ADMIN

For Agents manually deployed with DaemonSet, apply datadog DaemonSet patch:

spec:
  template:
    spec:
      dnsPolicy: ClusterFirstWithHostNet
      hostNetwork: true
      containers:
        - name: agent
          ports:
          - containerPort: 8125
            hostPort: 8125
            name: dogstatsdport
            protocol: UDP
          securityContext:
            capabilities:
              add:
              - NET_ADMIN

Note: You may need to add hostPort: 8125 for other containers in the DaemonSet as hostNetwork: true will apply to all containers.

Validation

Run the Agent’s status subcommand and look for network under the Checks section.

Data Collected

Metrics

Note: system.net.conntrack metrics are available with Agent v6.12+. See the CHANGELOG for details.

Events

The Network check does not include any events.

Service Checks

The Network check does not include any service checks.

Troubleshooting

• Send TCP/UDP host metrics to the Datadog API

Further Reading

• Build a network monitor on an HTTP check