Set up App and API Protection for .NET on Linux

This product is not supported for your selected Datadog site. ().
이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

You can enable App and API Protection for .NET services with the following setup options:

  1. If your .NET service already has APM tracing set up and running, then skip to service configuration.
  2. If your .NET service doesn't have APM tracing set up, you can easily enable App and API Protection with Datadog's Automatic Installation.
  3. Otherwise, continue reading the manual setup instructions below.

Overview

App and API Protection leverages the Datadog .NET library to monitor and secure your .NET service. The library integrates seamlessly with your existing application without requiring code changes.

For detailed compatibility information, including supported DOTNET versions, frameworks, and deployment environments, see .NET Compatibility Requirements.

This guide explains how to set up App and API Protection (AAP) for .NET applications. The setup involves:

  1. Installing the Datadog Agent.
  2. Enabling App and API Protection monitoring.
  3. Running your .NET application with the Datadog Agent.
  4. Verifying the setup.

Prerequisites

  • Linux operating system
  • .NET application
  • Root or sudo privileges
  • Systemd (for service management)
  • Your Datadog API key
  • Datadog .NET tracing library (see version requirements here)

1. Installing the Datadog Agent

Install the Datadog Agent by following the setup instructions for Linux hosts.

2. Enabling App and API Protection monitoring

Automatically enabling App and API Protection through Remote Configuration

You can enable remote configuration on your services dashboard. Simply check the box for the service you want to enable App and API Protection for under "Activate on your APM services".

Manually enabling App and API Protection monitoring

Go to Datadog .NET Tracer package to find out the latest release to download.

    Download and install the latest Datadog .NET Tracer package that supports your operating system and architecture.

    Note on version: replace <TRACER_VERSION> with the latest three component version of the library (ej: 3.21.0)
    wget -O datadog-dotnet-apm-<TRACER_VERSION>.tar.gz 'https://github.com/DataDog/dd-trace-dotnet/releases/download/v<TRACER_VERSION>'

    Run the following command to install the package and create the .NET tracer log directory /var/log/datadog/dotnet with the appropriate permissions:

    sudo tar -C /opt/datadog -xzf datadog-dotnet-apm-<TRACER_VERSION>.tar.gz && /opt/datadog/createLogPath.sh

    Download and install the latest Datadog .NET Tracer package that supports your operating system and architecture.

    Note on version: replace <TRACER_VERSION> with the latest three component version of the library (ej: 3.21.0)
    wget -O datadog-dotnet-apm-<TRACER_VERSION>.arm64.tar.gz 'https://github.com/DataDog/dd-trace-dotnet/releases/download/v<TRACER_VERSION>'

    Run the following command to install the package and create the .NET tracer log directory /var/log/datadog/dotnet with the appropriate permissions:

    sudo tar -C /opt/datadog -xzf datadog-dotnet-apm-<TRACER_VERSION>.arm64.tar.gz && /opt/datadog/createLogPath.sh
    If you are having issues installing the Tracer library check the [Tracer Installation guide][5] *Note on version:* replace ** with the latest three component version of the library (ej: 3.21.0)

    Set the required environment variables and start your .NET application:

    export CORECLR_ENABLE_PROFILING=1
export CORECLR_PROFILER={846F5F1C-F9AE-4B07-969E-05C26BC060D8}
export CORECLR_PROFILER_PATH=/opt/datadog/Datadog.Trace.ClrProfiler.Native.so
export DD_DOTNET_TRACER_HOME=/opt/datadog
export DD_SERVICE=<MY_SERVICE>
export DD_ENV=<MY_ENV>
export DD_APPSEC_ENABLED=true

    To disable APM tracing while keeping App and API Protection enabled, you must set the APM tracing variable to false.

    export CORECLR_ENABLE_PROFILING=1
export CORECLR_PROFILER={846F5F1C-F9AE-4B07-969E-05C26BC060D8}
export CORECLR_PROFILER_PATH=/opt/datadog/Datadog.Trace.ClrProfiler.Native.so
export DD_DOTNET_TRACER_HOME=/opt/datadog
export DD_SERVICE=<MY_SERVICE>
export DD_ENV=<MY_ENV>
export DD_APPSEC_ENABLED=true
export DD_APM_TRACING_ENABLED=false

    3. Run your application

    Start your .NET application with above settings.

    4. Verify setup

    To verify that App and API Protection is working correctly:

    1. Send some traffic to your application
    2. Check the Application Signals Explorer in Datadog
    3. Look for security signals and vulnerabilities

    Troubleshooting

    If you encounter issues while setting up App and API Protection for your .NET application, see the .NET App and API Protection troubleshooting guide.

    Further Reading

    추가 유용한 문서, 링크 및 기사:

    How App and API Protection WorksDOCUMENTATION more more OOTB App and API Protection RulesDOCUMENTATION more more Troubleshooting App and API ProtectionDOCUMENTATION more more