Deploy AWS Monitoring Points

Deploy Amazon Web Services (AWS) optimized EC2 Monitoring Points to your AWS infrastructure to monitor your network or web application performance.

To start monitoring, download the AWS Monitoring Point CloudFormation provisioning template from the Google Cloud console or open a quick-create link. Then follow the instructions from AppNeta to provision an EC2 Monitoring Point.

Before you begin

The deployment environment and Monitoring Points have specific networking requirements to ensure that the Monitoring Point can be installed successfully and communicate back to the Cloud Network Insights control plane.

Required roles

To get the permissions that you need to add Monitoring Points, ask your administrator to grant you the Cloud Network Insights Editor (roles/networkmanagement.CloudNetworkInsightsEditor) IAM role on the project that has Cloud Network Insights enabled. For more information about granting roles, see Manage access to projects, folders, and organizations.

You might also be able to get the required permissions through custom roles or other predefined roles.

Firewall requirements

Since we recommend installing Monitoring Points behind your firewalls, you might need to modify your firewall rules. Monitoring Points require outbound internet access to communicate back to the Cloud Network Insights control plane.


Protocol
Port
Description

TCP
443 (HTTPS)
Required. Connectivity to the Cloud Network Insights control plane

UDP
123 (NTP)
Required. Network Time Protocol. The Monitoring Point will fail to connect if time is not synced

UDP/TCP
53 (DNS)
Required. Domain Name Service to resolve Cloud Network Insights endpoints

UDP
3239, 33434
Test Traffic. Required for standard Network Path monitoring (dual-ended)

ICMP
Type 8 (echo request)
Test Traffic. Required for single-ended paths (for example, pinging 8.8.8.8).

For more information, see Firewall Configuration from AppNeta.

Monitoring Point requirements

Review AppNeta's Specifications – AWS EC2 Cloud Monitoring Point to ensure that you can successfully deploy the Monitoring Point.

Download Monitoring Point provisioning template

Get the AWS CloudFormation provisioning template and move it to the target host.

Console

  1. In the Google Cloud console, navigate to Network Intelligence > Cloud Network Insights > Monitoring Points.

    Go to Cloud Network Insights

  2. Click Add monitoring point.

  3. In the Platform Type list, select AWS, and then click Continue.

  4. Enter the Hostname of the container. This is the name of the host you're installing the Monitoring Point on.

  5. In Select a Monitoring Point deployment option, select AWS CloudFormation.

  6. In Download the Monitoring Point, choose how you want to download the provisioning template.

    • To download the provisioning template on the target host using a terminal, select Run a command on the host.
      1. Click Open shell and generate token. You might need to authorize Cloud Shell.
      2. Press Enter to generate a token, and then copy and paste it in the text field.
      3. Open a terminal to your target host using administrator credentials, and run the generated command to download the provisioning template. The curl command is valid for one hour.
    • To download the provisioning template locally, select Download locally.
      1. Click Download Monitoring Point.
      2. Move the provisioning template to the target host.

Deploy the AWS Monitoring Point using an AWS CloudFormation quick-create link

Open a quick-create link with a pre-populated AWS CloudFormation Create stack. Some advanced configuration options aren't available with this option.

Console

  1. In the Google Cloud console, navigate to Network Intelligence > Cloud Network Insights > Monitoring Points.

    Go to Cloud Network Insights

  2. Click Add Monitoring Point.

  3. In the Platform Type list, select AWS, and then click Continue.

  4. Enter the Hostname of the container. This is the name of the host you're installing the Monitoring Point on.

  5. In Select a Monitoring Point deployment option, select AWS Quick-Create Link.

  6. Click Launch, and sign in to your AWS account. The deployment workflow pre-populates a single AWS CloudFormation Create stack.

Install your AWS Monitoring Point

Once the provisioning template is on the target host or you've followed the quick-create link, follow the instruction from AppNeta to install the Monitoring Point.

Verify the install

Open the Google Cloud console and navigate to Network Intelligence Center > Cloud Network Insights. After 2–5 minutes, the Monitoring Point appears in the table with the status Active. If it doesn't appear within ten minutes, see Troubleshooting.

Remove Monitoring Points

To remove a Monitoring Point, delete it in AppNeta. For more information about removing a Monitoring Point, see the AppNeta documentation.

What's next

After you add Monitoring Points, it's time to create monitoring policies to populate Cloud Network Insights with data.