Embed Google Cloud optimized Monitoring Points in your Google Cloud infrastructure to monitor your network or web application performance.
To deploy the Compute Engine Monitoring Point, download the installation bundle from Google Cloud, and then follow the instructions from AppNeta to install it using Terraform or Google Cloud Marketplace.
Before you begin
The deployment environment and Monitoring Points have specific networking requirements to ensure that the Monitoring Point can be installed successfully and communicate back to the Cloud Network Insights control plane.
Required roles
To get the permissions that you need to add Monitoring Points, ask your administrator to grant you the following IAM roles:
- Cloud Network Insights Editor (
roles/networkmanagement.CloudNetworkInsightsEditor) on the project that has Cloud Network Insights enabled -
Deploy Compute Engine Monitoring Points by using Terraform:
Compute Admin (
roles/compute.admin) on the project in which you're deploying the Compute Engine Monitoring Point -
Deploy a Monitoring Point by using Google Cloud Marketplace:
- Cloud Infrastructure Manager Admin (
roles/config.admin) on on the project in which you're deploying the Compute Engine Monitoring Point - Consumer Procurement Entitlement Manager (
roles/consumerprocurement.entitlementManager) on on the project in which you're deploying the Compute Engine Monitoring Point - Compute Admin (
roles/compute.admin) on on the deployment service account - Cloud Infrastructure Manager Agent (
roles/config.agent) on on the deployment service account - Service Account User (
roles/iam.serviceAccountUser) on on the deployment service account
- Cloud Infrastructure Manager Admin (
For more information about granting roles, see Manage access to projects, folders, and organizations.
You might also be able to get the required permissions through custom roles or other predefined roles.
If you want to use OS Login, specific Identity and Access Management (IAM) roles must be granted to the user accounts who connect to the VMs. See Assign OS Login IAM roles in the Compute Engine documentation.
Firewall requirements
Since we recommend installing Monitoring Points behind your firewalls, you might need to modify your firewall rules. Monitoring Points require outbound internet access to communicate back to the Cloud Network Insights control plane.
Protocol |
Port |
Description |
|---|---|---|
TCP |
443 (HTTPS) |
Required. Connectivity to the Cloud Network Insights control plane |
UDP |
123 (NTP) |
Required. Network Time Protocol. The Monitoring Point will fail to connect if time is not synced |
UDP/TCP |
53 (DNS) |
Required. Domain Name Service to resolve Cloud Network Insights endpoints |
UDP |
3239, 33434 |
Test Traffic. Required for standard Network Path monitoring (dual-ended) |
ICMP |
Type 8 (echo request) |
Test Traffic. Required for single-ended paths (for example, pinging 8.8.8.8). |
For more information, see Firewall Configuration from AppNeta.
Monitoring Point requirements
Review AppNeta's documentation for Google CE Cloud Monitoring Point to ensure that you can successfully deploy the Monitoring Point.
Deploy Compute Engine VMs
You can deploy a Compute Engine VM to Google Cloud by using Terraform. The Terraform configuration files (TF) are available through the Google Cloud console or through Cloud Marketplace.
Console
In the Google Cloud console, navigate to Network Intelligence > Cloud Network Insights > Monitoring Points.
Click Add monitoring point.
In the Platform Type list, select Google Cloud, and then click Continue.
Enter the Hostname of the VM. This name is used as the VM name and as the Monitoring Point's name by default.
Optional: Select Connect via Private Service Connect (PSC) so that the Monitoring Point can communicate with AppNeta using Private Service Connect. You must already have Private Service Connect endpoints in your Virtual Private Cloud (VPC).
For more information, see the AppNeta documentation.
Click Continue.
In Select a Monitoring Point deployment option, select Terraform.
In Download the Monitoring Point, choose how you want to download the installation bundle.
- To download the installation bundle locally, select Download locally.
- Click Download Monitoring Point.
- Extract the archive in the directory where you want to deploy the Terraform configuration files.
- To download the installation bundle on a host using a terminal,
select Run a command on the host.
- Click Open shell and generate token. You might need to authorize Cloud Shell.
- Press Enter to generate a token, and then copy and paste it in the text field.
- Open a terminal to your host using administrator credentials, and run the generated command to download an archive of the Terraform configuration files. The curl command is valid for one hour.
- To download the installation bundle locally, select Download locally.
Marketplace
In the Google Cloud console, navigate to Network Intelligence > Cloud Network Insights > Monitoring Points.
Click Add monitoring point.
In the Platform Type list, select Google Cloud, and then click Continue.
Enter the Hostname of the VM. This name is used as the VM name and as the Monitoring Point's name by default.
Optional: Select Connect via Private Service Connect (PSC) so that the Monitoring Point can communicate with AppNeta using Private Service Connect. You must already have Private Service Connect endpoints in your VPC.
For more information, see the AppNeta documentation.
Click Continue.
Select Google Cloud Marketplace, and select the project you want to deploy the Monitoring Point in.
Copy the configuration code snippet for the Monitoring Point. If you've deployed a Monitoring Point from Cloud Marketplace before, the code snippet is entered in the Configuration field automatically.
Click Open through Google Cloud Marketplace.
You might need to review the Marketplace Terms of Service. To install Cloud Network Insights using Cloud Marketplace accept the Terms of service.
Click either the Terraform tab or the Command-Line Deployment tab and follow the on-screen instructions.
- In Network interfaces, configure an external IP address to allow the Monitoring Point to communicate with AppNeta.
- In Configuration, paste the Monitoring Point configuration code snippet.
Click Deploy.
Install with Terraform
Once the install bundle is on the host, follow the instructions from AppNeta to install the Monitoring Point.
For more information about deploying a VM from Cloud Marketplace, see either Deploy a software package or Deploy virtual machine (VM) products using the command-line interface (CLI).
Verify the install
Open the Google Cloud console and navigate to Network Intelligence Center > Cloud Network Insights. After 2–5 minutes, the Monitoring Point appears in the table with the status Active. If it doesn't appear within ten minutes, see Troubleshooting.
Remove Monitoring Points
To remove a Monitoring Point, delete it in AppNeta. For more information about removing a Monitoring Point, see the AppNeta documentation.
What's next
After you add Monitoring Points, it's time to create monitoring policies to populate Cloud Network Insights with data.