Use Cloud Monitor to track the health and traffic of your VPN gateway. You can view real-time metrics in the VPN Gateway console and create threshold-triggered alert rules to get notified when a metric crosses a defined limit — for example, when a tunnel goes down.
View monitoring data
-
Log on to the VPN Gateway console.
-
In the top navigation bar, select the region where your VPN gateway resides.
-
On the VPN Gateways page, click the ID of the VPN gateway.
-
On the instance details page, click the Monitor tab.
The Monitor tab shows metric charts for the past hour by default. To change the time range, select Last 1 hour, Last 3 hours, Last 6 hours, Last 12 hours, or specify a custom range.
To keep the data current, turn on Auto-refresh above a metric chart. When enabled, the chart refreshes every minute.
Available metrics
Traffic
| Metric | Description | Unit |
|---|---|---|
| Inbound Traffic Rate of VPN Gateway | Rate at which the VPN gateway receives traffic | bit/s |
| Outbound Traffic Rate of VPN Gateway | Rate at which the VPN gateway sends traffic | bit/s |
| Inbound Bandwidth Usage of VPN Gateway | Percentage of bandwidth used for inbound traffic | % |
| Outbound Bandwidth Usage of VPN Gateway | Percentage of bandwidth used for outbound traffic | % |
Packets
| Metric | Description | Unit |
|---|---|---|
| Inbound Packet Rate of VPN Gateway | Rate at which the VPN gateway receives packets | packets/s |
| Outbound Packet Rate of VPN Gateway | Rate at which the VPN gateway sends packets | packets/s |
SSL VPN clients
| Metric | Description | Unit |
|---|---|---|
| Number of SSL Clients | Number of clients connected through SSL VPN | count |
Create a threshold-triggered alert rule
Create an alert rule to receive a notification when a metric crosses a threshold. For example, you can create a rule that sends a notification when a tunnel is down for more than 5 minutes.
-
Log on to the Cloud Monitor console.
-
In the left navigation pane, choose Alerts > Alert Rules.
-
On the Alert Rules page, click Create Alert Rule.
-
In the Create Alert Rule panel, set Product to vpngw, configure the remaining parameters, and click OK.
In the Rule Description section, click Add Rule > Simple Metric. In the Configure Rule Description panel, configure the following parameters, and click OK.
| Parameter | Description |
|---|---|
| Alert Rule | Name of the alert rule. |
| Metric Type | Type of metric to evaluate. Options: Simple Metric, Composite Metric, Expression, and Dynamic Threshold. This example uses Simple Metric. For details, see Create an alert template. |
| Metric | The metric to monitor. Select from the metric codes listed below. |
| Chart Preview | A preview of the monitoring chart for the selected metric. |
Available metric codes
Gateway-level
| Metric code | Description |
|---|---|
net_rx.rate |
Network inbound rate |
net_tx.rate |
Network outbound rate |
VpnGateway.rxPkgs |
Inbound packet rate |
VpnGateway.txPkgs |
Outbound packet rate |
Gateway.rxPkgs |
Gateway inbound packets |
Gateway.txPkgs |
Gateway outbound packets |
Gateway.rx.utilization |
Inbound bandwidth usage |
Gateway.tx.utilization |
Outbound bandwidth usage |
client.count |
Number of SSL VPN clients |
IPsec connection-level
| Metric code | Description |
|---|---|
IPSec.connection.state |
IPsec connection state |
IPSec.connection.bgp_state |
BGP state of an IPsec connection |
IPSec.connection.rxPkgs |
Inbound packets on an IPsec connection |
IPSec.connection.txpkgs |
Outbound packets on an IPsec connection |
IPSec.connection.rx.rate |
Inbound traffic rate on an IPsec connection |
IPSec.connection.tx.rate |
Outbound traffic rate on an IPsec connection |
Tunnel-level
| Metric code | Description |
|---|---|
Tunnel.state |
Tunnel state |
Tunnel.bgp_state |
BGP state of a tunnel |
Tunnel.rx.bps |
Tunnel inbound traffic (bps) |
Tunnel.tx.bps |
Tunnel outbound traffic (bps) |
Tunnel.rx.pps |
Tunnel inbound packets (pps) |
Tunnel.tx.pps |
Tunnel outbound packets (pps) |
See Create an alert rule.