How to set up Astra Traffic Monitoring with Nginx in Cloud VM
Here's how to configure nginx with OpenTelemetry (Otel) for traffic monitoring, in cloud VM environments such as AWS, GCP, Azure and Digital Ocean. It also covers troubleshooting common issues encountered during configuration.
Nginx integration
Case 1: Nginx not present in my VM
This section details the steps required to install and configure the Nginx load balancer to successfully instrument inFew readersHow to set up Astra Traffic Monitoring with Nginx in Kubernetes
Here's how to configure ingree-nginx with OpenTelemetry (Otel) for traffic monitoring, in Kubernetes environments such as EKS, GKE, AKE. It also covers troubleshooting common issues encountered during configuration.
Nginx integration
This section details the steps required to install and configure the ingress-nginx load balancer to successfully instrument incoming HTTP requests.
If *ingress-nFew readersHow to mitigate the risks for API endpoints?
API Risk
In this help article, we will explain different kinds of risk detected against HTTP endpoints and how to mitigate them. We will also explain the methodology behind our risk scoring and security grading system, highlighting the key factors we consider.
Risk Classification
Zombie APIs
Zombie APIs refer to APIs that are outdated, unused, or deprecated but still deployed and accessible. These APIs can remain active without the knowledge of development or operations teams, pFew readersHow to customize the Astra Traffic collector
Customizing Traffic Collector Configuration
Sensor can be customized to filter, templatize and redact the traces generated from traffic. These customization are present to give flexibility to the customer to define a rule to choose a trace to be monitored. Similarly, personally identified information in the trace can be redacted before it reaches Astra's server. This way it can be ensured that no sensitive data leaves customers environment. Lets look at configuring each of them in detail.
|Few readersHow to setup Astra Traffic Collector in VM
Here's how to configure Astra Traffic Collector for traffic monitoring inside a linux based VM (AWS/GCP/Azure/DO). It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
SSH into the VM.
Pre-requisite
Install Docker Compose in your VM by following the official doc.
Create a directory for the Astra Traffic CollectorFew readersHow to setup Astra Traffic Collector in Kubernetes
Here's how to configure Astra Traffic Collector for traffic monitoring, in Kubernetes environments such as EKS, GKE, AKE. It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
Create astra-collector namespace for traffic collector installation by running
Add astra traffic collector helm repository by runningFew readersHow to setup Astra Traffic Collector via Cloud Market Place
Here's how to configure Astra Traffic Collector for traffic monitoring, by choosing the VM images from respective cloud provider marketplace (AWS/GCP/Azure/DO). It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
Spin up a new instance of traffic collector by chosing the right image from marketplace.
SSH into the VM.
Locate the following two editable files under */opt/astra-traffic-colFew readersHow to setup Astra Packet Processor for Cloud Mirroring
Astra Mirroring Setup Using Ansible Playbooks
You can find all the required files in the GitHub repository: Astra Mirroring Playbooks.
Prerequisites
Docker and Docker Compose
Ensure Docker is installed on the target machine.
Ensure Docker Compose is iFew readersHow to setup Astra Proxy Service Integration
Here's how to configure Astra Proxy Service to capture the HTTP traffic for Postman/Burp/Curl. It also covers troubleshooting common issues encountered during configuration.
Astra Proxy integration
Quick Installation
SSH into the VM or developer box where proxy should be hosted.
Pre-requisite
Install Docker in your VM by following the official doc (https://docs.docker.com/engFew readersHow to use astra-cli for Astra Proxy Service
Astra-cli is a wrapper tool around docker to manage astra-proxy-service on the fly. It can be used to setup and manage the astra-proxy-service by launching this proxy service as a container. This guide will cover how to use astra-cli to manage astra-proxy-service. It also covers troubleshooting common issues encountered for astra-proxy-service.Few readersHow to setup Astra Traffic Monitoring with GCP Mirroring
GCP Packet Mirroring Setup
Architecture
What's not supported
You cannot mirror and collect traffic on the same network interface of a VM instance because doing this would cause a mirroring loop.
Refer to official GCP Docs for more queries related to gcp packet mirroring support.
Assumptions
The source instances already exist in yFew readersHow to set up Astra Traffic Monitoring with AWS Mirroring
AWS Traffic Mirroring Setup
Architecture
What's Not Supported
Classic instances or instances based on the Xen hypervisor (e.g., t2, but supported on select non-Nitro instance types.
Traffic mirroring does not natively support cross-VPC mirroring without additional configuration, such as using Transit Gateway or VPC Peering
Security group rules and network ACL ruFew readers