amazon-web-servicesvpnamazon-cloudwatchlogsaws-vpnaws-site-to-site

How to view / monitor packets (incoming/outgoing) of AWS Site-to-Site VPN

I want to monitor not just the metrics from my Site-to-Site VPN via CloudWatch, I ether want to see the whole incoming and outgoing traffic with source and destination addresses and packet types i.e. 1.2.3.4 => 12.20.12.1 ICMP (Port 123)

In Client VPN there is a possibility, but not in Site-to-Site VPN.

Solution

  • Unfortunately, that is not possible as per docs.

    Only the following metrics are currently available:

    1. TunnelState - Fractional value between 0 and 1
    2. TunnelDataIn - Bytes
    3. TunnelDataOut - Bytes