How to set up Astra Traffic Monitoring with Nginx in Cloud VM
Here's how to configure Nginx with OpenTelemetry (Otel) for traffic monitoring, in cloud VM environments such as AWS, GCP, Azure and Digital Ocean. It also covers troubleshooting common issues encountered during configuration.
Nginx integration
Case 1: Nginx not present in my VM
This section details the steps required to install and configure the Nginx load balancer to successfully instrument inFew readersHow to mitigate the risks for API endpoints?
API Risk
In this help article, we will explain different kinds of risk detected against HTTP endpoints and how to mitigate them. We will also explain the methodology behind our risk scoring and security grading system, highlighting the key factors we consider.
Risk Classification
Zombie APIs
Zombie APIs refer to APIs that are outdated, unused, or deprecated but still deployed and accessible. These APIs can remain active without the knowledge of development or operations teams, pFew readersHow to customize the Astra Traffic collector
Customizing Traffic Collector Configuration
Sensor can be customized to filter, templatize and redact the traces generated from traffic. These customization are present to give flexibility to the customer to define a rule to choose a trace to be monitored. Similarly, personally identified information in the trace can be redacted before it reaches Astra's server. This way it can be ensured that no sensitive data leaves customers environment. Lets look at configuring each of them in detail.Few readersHow to set up Astra Traffic Monitoring with Nginx in Kubernetes
Here's how to configure ingress-nginx with OpenTelemetry (Otel) for traffic monitoring, in Kubernetes environments such as EKS, GKE, AKE. It also covers troubleshooting common issues encountered during configuration.
Nginx integration
This section details the steps required to install and configure the ingress-nginx load balancer to successfully instrument incoming HTTP requests.
If *ingress-Few readersHow to setup Astra Traffic Collector in VM
Here's how to configure Astra Traffic Collector for traffic monitoring inside a linux based VM (AWS/GCP/Azure/DO). It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
SSH into the VM.
Pre-requisite
Install Docker Compose in your VM by following the official doc.
Create a directory for the Astra Traffic CollectorFew readersHow to setup Astra Traffic Collector in Kubernetes
Here's how to configure Astra Traffic Collector for traffic monitoring, in Kubernetes environments such as EKS, GKE, AKE. It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
Create a working directory and switch to it.
Create astra-collector namespace for traffic collector installation by runningFew readersHow to setup Astra Proxy Service Integration
Here's how to configure Astra Proxy Service to capture the HTTP traffic for Postman/Burp/Curl. It also covers troubleshooting common issues encountered during configuration.
Astra Proxy integration
Quick Installation
SSH into the VM or developer box where proxy should be hosted.
Pre-requisite
Install Docker in your VM by following the official doc (https://docs.docker.com/engFew readersHow to setup Astra Traffic Collector via Cloud Market Place
Here's how to configure Astra Traffic Collector for traffic monitoring, by choosing the VM images from respective cloud provider marketplace (AWS/GCP/Azure/DO). It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
Spin up a new instance of traffic collector by chosing the right image from marketplace.
SSH into the VM.
Locate the following two editable files under */opt/astra-traffic-colFew readersHow to setup Astra Packet Processor for Cloud Mirroring
Astra Mirroring Setup Using Ansible Playbooks
You can find all the required files in the GitHub repository: Astra Mirroring Playbooks.
Prerequisites
Docker and Docker Compose
Ensure Docker is installed on the target machine.
Ensure Docker Compose is iFew readersHow to use astra-cli for Astra Proxy Service
Astra-cli is a wrapper tool around docker to manage astra-proxy-service on the fly. It can be used to setup and manage the astra-proxy-service by launching this proxy service as a container. This guide will cover how to use astra-cli to manage astra-proxy-service. It also covers troubleshooting common issues encountered for astra-proxy-service.Few readersHow to setup Astra Traffic Monitoring with GCP Mirroring
GCP Packet Mirroring Setup
Architecture
What's not supported
You cannot mirror and collect traffic on the same network interface of a VM instance because doing this would cause a mirroring loop.
Refer to official GCP Docs for more queries related to gcp packet mirroring support.
Assumptions
The source instances already exist in yFew readersHow to set up Astra Traffic Monitoring with AWS Mirroring
AWS Traffic Mirroring Setup
Architecture
What's Not Supported
Classic instances or instances based on the Xen hypervisor (e.g., t2, but supported on select non-Nitro instance types.
Traffic mirroring does not natively support cross-VPC mirroring without additional configuration, such as using Transit Gateway or VPC Peering
Security group rules and network ACL ruFew readersHow to setup Astra Traffic Collector in Windows
Here's how to configure Astra Traffic Collector for traffic monitoring inside a Windows based VM (AWS/GCP/Azure/DO). It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
SSH into the VM.
Pre-requisite
Install Docker Desktop version 4.34 or later in your machine by following the official doc.
Follow these five steps (https://docs.doFew readersHow to setup APIGEE Instrumentation
Setting up APIGEE Instrumentation using JavaScript Policy
Overview
This guide explains how to set up a JavaScript policy in an Apigee proxy to instrument request and response flows. The JavaScript policy file is available at: GitHub Repository.
Prerequisites
Access to Apigee UI in Google Cloud
An exiFew readersHow to setup AWS API Gateway Access Logging for Traffic Monitoring
In this article we will see how to enable traffic monitoring for AWS API Gateway using cloudwatch logs.
How to setup Detailed Tracing in AWS REST API Gateway
Create an IAM role to send logs to CloudWatch
Open the AWS Identity and Access Management (IAM) console.
In the navigation pane, choose Roles.
In the Roles pane, choose Create role.
On the Create role page, enter the following information:
- For Trusted entity, choose AWS Service.
- For *Few readersHow to setup Astra Traffic Monitoring with AWS API Gateway
Here's how to configure AWS Rest and HTTP API Gateway with OpenTelemetry (Otel) for traffic monitoring. It also covers troubleshooting common issues encountered during configuration.
Astra AWS APIGW integration
AWS APIGW integration
This integration is supported for the following type of AWS API Gateway:
REST API Gateway
HTTP API GatewayFew readersHow to setup Astra Traffic Collector for Mac
Here's how to configure Astra Traffic Collector for traffic monitoring inside a Mac based VM. It also covers troubleshooting common issues encountered during configuration.
Traffic Collector integration
Quick Installation
SSH into the VM.
Pre-requisite
Install Docker Desktop version 4.34 or later in your machine by following the official doc.
Follow these five steps (https://docs.docker.com/engine/networkFew readers