AWS Client VPNの接続ログを確認しました

2021/06/28 2021/07/07

AWS Client VPNを設定しましたで証明書とかせっかく作ったので、いろいろ試してみます。

接続ログを有効にしてみました。

CloudWatchのロググループは、事前に作成しておく必要がありました。
ログストリームは自動生成されました。

接続成功のログ

{
    "connection-log-type": "connection-attempt",
    "connection-attempt-status": "successful",
    "connection-attempt-failure-reason": "NA",
    "connection-id": "cvpn-connection-0858586fa04af3dc8",
    "client-vpn-endpoint-id": "cvpn-endpoint-0702364d39b4e5304",
    "transport-protocol": "udp",
    "connection-start-time": "2021-07-07 13:38:37",
    "connection-last-update-time": "2021-07-07 13:38:37",
    "client-ip": "192.168.0.130",
    "common-name": "client1.domain.tld",
    "device-type": "mac",
    "device-ip": "xxx.xxx.xxx.xxx",
    "port": "62349",
    "ingress-bytes": "0",
    "egress-bytes": "0",
    "ingress-packets": "0",
    "egress-packets": "0",
    "connection-end-time": "NA",
    "connection-duration-seconds": "0"
}

{

"connection-log-type": "connection-attempt",

"connection-attempt-status": "successful",

"connection-attempt-failure-reason": "NA",

"connection-id": "cvpn-connection-0858586fa04af3dc8",

"client-vpn-endpoint-id": "cvpn-endpoint-0702364d39b4e5304",

"transport-protocol": "udp",

"connection-start-time": "2021-07-07 13:38:37",

"connection-last-update-time": "2021-07-07 13:38:37",

"client-ip": "192.168.0.130",

"common-name": "client1.domain.tld",

"device-type": "mac",

"device-ip": "xxx.xxx.xxx.xxx",

"port": "62349",

"ingress-bytes": "0",

"egress-bytes": "0",

"ingress-packets": "0",

"egress-packets": "0",

"connection-end-time": "NA",

"connection-duration-seconds": "0"

}

クライアントIPは接続成功して設定されるのですね。

接続失敗のログ

{
    "connection-log-type": "connection-attempt",
    "connection-attempt-status": "failed",
    "connection-attempt-failure-reason": "client-connect-handler-invalid-response",
    "connection-id": "cvpn-connection-015ea98db63257637",
    "client-vpn-endpoint-id": "cvpn-endpoint-0702364d39b4e5304",
    "transport-protocol": "udp",
    "connection-start-time": "NA",
    "connection-last-update-time": "2021-07-07 13:37:55",
    "client-ip": "NA",
    "common-name": "client1.domain.tld",
    "device-type": "mac",
    "device-ip": "xxx.xxx.xxx.xxx",
    "port": "63453",
    "ingress-bytes": "0",
    "egress-bytes": "0",
    "ingress-packets": "0",
    "egress-packets": "0",
    "connection-end-time": "NA",
    "connection-duration-seconds": "NA"
}

{

"connection-log-type": "connection-attempt",

"connection-attempt-status": "failed",

"connection-attempt-failure-reason": "client-connect-handler-invalid-response",

"connection-id": "cvpn-connection-015ea98db63257637",

"client-vpn-endpoint-id": "cvpn-endpoint-0702364d39b4e5304",

"transport-protocol": "udp",

"connection-start-time": "NA",

"connection-last-update-time": "2021-07-07 13:37:55",

"client-ip": "NA",

"common-name": "client1.domain.tld",

"device-type": "mac",

"device-ip": "xxx.xxx.xxx.xxx",

"port": "63453",

"ingress-bytes": "0",

"egress-bytes": "0",

"ingress-packets": "0",

"egress-packets": "0",

"connection-end-time": "NA",

"connection-duration-seconds": "NA"

}

これは、AWS Client VPNのクライアント接続ハンドラを試してみましたを試しているときに、レスポンススキーマを間違えてたときのログです。

切断のログ

{
    "connection-log-type": "connection-reset",
    "connection-attempt-status": "NA",
    "connection-attempt-failure-reason": "NA",
    "connection-id": "cvpn-connection-0858586fa04af3dc8",
    "client-vpn-endpoint-id": "cvpn-endpoint-0702364d39b4e5304",
    "transport-protocol": "udp",
    "connection-start-time": "2021-07-07 13:38:37",
    "connection-last-update-time": "2021-07-07 13:49:08",
    "client-ip": "192.168.0.130",
    "common-name": "client1.domain.tld",
    "device-type": "mac",
    "device-ip": "xxx.xxx.xxx.xxx",
    "port": "62349",
    "ingress-bytes": "6485552",
    "egress-bytes": "18366976",
    "ingress-packets": "18947",
    "egress-packets": "21526",
    "connection-end-time": "2021-07-07 13:49:08",
    "connection-reset-status": "NA",
    "connection-duration-seconds": "631"
}