Analyze network traffic costs with Vantage Network Flow Reports and identify cost-driving flows.
S3-Egress
fee from CloudWatch. Unfortunately, there is no way around these costs being incurred. Vantage has contacted various AWS platform teams to attempt to remove this cost, but this is likely a limitation that AWS is unwilling to change or remove.
These logs are considered Vended Logs. You can create a Cost Report that monitors these charges:
UNSUPPORTED TRAFFIC
, UNSUPPORTED DESTINATION
, or UNSUPPORTED LOG FORMAT
label next to the log name in the Manage VPC Flow Logs window. Hover your mouse over this label to see additional information about the issue.
Issue | Description |
---|---|
UNSUPPORTED TRAFFIC | Vantage does not import any REJECT flows, nor any flows that do not generate corresponding costs. |
UNSUPPORTED DESTINATION | This message is displayed if a log is going to any destination other than S3. Logs need to be published to S3 to be imported by Vantage. |
UNSUPPORTED LOG FORMAT | Unsupported log format means that your log may be missing some required columns. Hover over the UNSUPPORTED LOG FORMAT label to see a list of missing columns. Ensure your logs contain the columns noted in the Prerequisites section. |
kms:Decrypt
).
flow_direction
is present in your VPC Flow Log format. If flow_direction
is not present in your VPC Flow Log format, then a No data available in table message is displayed on the report. See the Prerequisites section for the recommended VPC Flow Log format. To add the field to your format, create a new VPC Flow Log configuration that includes the flow_direction
field.Click to view example image
Click to view all fields
Vantage Field | Description | Example |
---|---|---|
Account ID | AWS account ID of the source network | production, 123456789012 |
Availability Zone ID | ID of the source Availability Zone | us-east-1a |
Destination Address | Specific IP address that identifies the location of where the traffic is being sent | An IP, like 1.23.456.90 |
Destination Hostname | Domain name that corresponds with the IP address of the destination (see note below table) | 01234.broadband.com OR Datadog A dsthostname:null value means Vantage is unable to reverse DNS the dst_address IP address. |
Flow Direction | Movement of network traffic relative to a specific network interface | Ingress or egress |
Interface ID | Source ENI ID | eni-001d78b2agh4caa05 |
Instance ID | Source instance ID | i-0b22a22eec53b9321 |
Peer Resource UUID | Destination resource ARN or tag (if available) | eni-c123ab7f9c55af9a6d OR example-tag |
Peer Account ID | Destination account ID | production, 123456789012 |
Peer VPC ID | Destination VPC ID | vpc-12a34567b8g8a03ef |
Peer Region ID | AWS Region of destination | us-west-2 |
Peer Availability Zone ID | ID of the Availability Zone for the destination | us-east-1b |
Peer Subnet ID | Destination subnet ID | subnet-123ab7f9c55af9a6d |
Peer Interface ID | Destination ENI ID | eni-001d78b2agh4caa12 |
Peer Instance ID | Destination instance ID | i-0b22a22eec53b9321 |
Region | AWS Region of the source | us-east-1 |
Resource UUID | Source resource ARN or tag (if available) | eni-c123ab7f9c55af9a6d OR example-tag |
Source Address | Specific IP address from which the network traffic originates | An IP, like 1.23.456.90 |
Source Hostname | Domain name that corresponds with the IP address of the source (see note below table) | 100.123.456.789.bc.googleusercontent.com OR Datadog |
Subnet ID | ID of the source subnet | subnet-123ab7f9c55af9a6d |
Traffic Category | The type of traffic | public, cross-AZ, cross-region, unknown An Unknown value means Vantage is unable to categorize the type of traffic based on the available metadata. |
Traffic Path | Path traffic takes to reach the destination, such as through a virtual private gateway | - In VPC - Internet Gateway or Gateway VPC Endpoint - Virtual Private Gateway - Intra-Region VPC Peering - Inter-Region VPC Peering - Local Gateway - Gateway VPC Endpoint (Nitro-based instances) - Internet Gateway (Nitro-based instances) |
VPC ID | ID of the source VPC | vpc-12a34567b8g8a03ef |
Click to view example image
Click to view example image