Traffic mirror targets
A target is the destination for a traffic mirror session.
The traffic mirror target can be an elastic network interface, a Network Load Balancer, or a Gateway Load Balancer endpoint. After you create a target, assign it to a traffic mirror session. For more information, see Create a traffic mirror session.
You must configure a security group for the traffic mirror target that allows VXLAN traffic from the source to the target.
You can share a traffic mirror target across accounts. To share a traffic mirror target, create the target, and then share the target. For more information, see Share a traffic mirror target.
Create a traffic mirror target
Create a destination for mirrored traffic.
To create a traffic mirror target using the console
-
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
In the Region selector, choose the AWS Region that you used when you created the VPCs.
-
On the navigation pane, choose Traffic Mirroring, Mirror Targets.
-
Choose Create traffic mirror target.
-
(Optional) For Name tag, enter a name for the traffic mirror target.
-
(Optional) For Description, enter a description for the traffic mirror target.
-
For Target type, choose the traffic mirror target type.
-
For Target, choose the traffic mirror target.
-
(Optional) For each tag to add, choose Add new tag and enter the tag key and tag value.
-
Choose Create.
To create a traffic mirror target using the AWS CLI
Use the create-traffic-mirror-target command.
View traffic mirror target details
View the traffic mirror target details.
To view your traffic mirror targets using the console
-
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
On the navigation pane, choose Traffic Mirroring, Mirror Targets.
-
Select the ID of the traffic mirror target to open its details page.
To view your traffic mirror targets using the AWS CLI
Use the describe-traffic-mirror-targets command.
Modify traffic mirror target tags
Add a tag to the traffic mirror target, or remove a tag from the traffic mirror target.
To modify your traffic mirror target tags using the console
-
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
On the navigation pane, choose Traffic Mirroring, Mirror Targets.
-
Select the ID of the traffic mirror target to open its details page.
-
On the Tags tab, choose Manage tags.
-
(Optional) For each tag to add, choose Add new tag and enter the tag key and tag value. For each tag to remove, choose Remove.
-
Choose Save.
To modify your traffic mirror target tags using the AWS CLI
Use the create-tags command to add a tag. Use the delete-tags command to remove a tag.
Delete a traffic mirror target
Before you delete a traffic mirror target, pause all traffic mirror sessions that use the traffic mirror target.
To delete your traffic mirror target using the console
-
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
On the navigation pane, choose Traffic Mirroring, Mirror Targets.
-
Select the traffic mirror target.
-
Choose Delete.
-
When prompted for confirmation, enter
delete
, and then choose Delete.
To delete a traffic mirror target using the AWS CLI
Use the delete-traffic-mirror-target command.