You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/ddos-protection/test-through-simulations.md
+1Lines changed: 1 addition & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,6 +25,7 @@ You can only simulate attacks using our approved testing partners:
25
25
-[BreakingPoint Cloud](https://www.ixiacom.com/products/breakingpoint-cloud): a self-service traffic generator where your customers can generate traffic against DDoS Protection-enabled public endpoints for simulations.
26
26
-[Red Button](https://www.red-button.net/): work with a dedicated team of experts to simulate real-world DDoS attack scenarios in a controlled environment.
27
27
-[RedWolf](https://www.redwolfsecurity.com/services/#cloud-ddos) a self-service or guided DDoS testing provider with real-time control.
28
+
-[MazeBolt](https://mazebolt.com):The RADAR™ platform continuously identifies and enables the elimination of DDoS vulnerabilities – proactively and with zero disruption to business operations.
28
29
29
30
Our testing partners' simulation environments are built within Azure. You can only simulate against Azure-hosted public IP addresses that belong to an Azure subscription of your own, which will be validated by our partners before testing. Additionally, these target public IP addresses must be protected under Azure DDoS Protection. Simulation testing allows you to assess your current state of readiness, identify gaps in your incident response procedures, and guide you in developing a proper [DDoS response strategy](ddos-response-strategy.md).
Copy file name to clipboardExpand all lines: articles/operator-insights/set-up-ingestion-agent.md
+12-38Lines changed: 12 additions & 38 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -65,34 +65,6 @@ We recommend that you restrict the following:
65
65
66
66
When using an Azure VM, also follow all recommendations from Microsoft Defender for Cloud. You can find these recommendations in the portal by navigating to the VM, then selecting Security.
67
67
68
-
## Download the RPM for the agent
69
-
70
-
Download the RPM for the ingestion agent using the details you received as part of the [Azure Operator Insights onboarding process](overview.md#how-do-i-get-access-to-azure-operator-insights) or from [https://go.microsoft.com/fwlink/?linkid=2260508](https://go.microsoft.com/fwlink/?linkid=2260508).
71
-
72
-
Links to the current and previous releases of the agents are available below the heading of each [release note](ingestion-agent-release-notes.md). If you're looking for an agent version that's more than six months old, check out the [release notes archive](ingestion-agent-release-notes-archive.md).
73
-
74
-
### Verify the authenticity of the ingestion agent RPM (optional)
75
-
76
-
Before you install the RPM, you can verify the signature of the RPM with the [Microsoft public key file](https://packages.microsoft.com/keys/microsoft.asc) to ensure it hasn't been corrupted or tampered with.
1. Verify the RPM signature matches the public key
90
-
```
91
-
rpm --checksig <path-to-rpm>
92
-
```
93
-
94
-
The output of the final command should be `<path-to-rpm>: digests signatures OK`
95
-
96
68
## Set up authentication to Azure
97
69
98
70
The ingestion agent must be able to authenticate with the Azure Key Vault created by the Data Product to retrieve storage credentials. The method of authentication can either be:
@@ -186,7 +158,6 @@ Repeat these steps for each VM onto which you want to install the agent.
186
158
```
187
159
sudo dnf install systemd logrotate zip
188
160
```
189
-
1. Obtain the ingestion agent RPM and copy it to the VM.
190
161
1. If you're using a service principal, copy the base64-encoded P12 certificate (created in the [Prepare certificates](#prepare-certificates-for-the-service-principal) step) to the VM, in a location accessible to the ingestion agent.
191
162
1. Configure the agent VM based on the type of ingestion source.
192
163
@@ -222,22 +193,26 @@ Repeat these steps for each VM onto which you want to install the agent.
222
193
223
194
---
224
195
225
-
## Ensure that VM can resolve Microsoft hostnames
196
+
## Ensure that the VM can resolve Microsoft hostnames
226
197
227
198
Check that the VM can resolve public hostnames to IP addresses. For example, open an SSH session and use `dig login.microsoftonline.com` to check that the VM can resolve `login.microsoftonline.com` to an IP address.
228
199
229
200
If the VM can't use DNS to resolve public Microsoft hostnames to IP addresses, [map the required hostnames to IP addresses](map-hostnames-ip-addresses.md). Return to this procedure when you have finished the configuration.
230
201
231
202
## Install the agent software
232
203
233
-
Repeat these steps for each VM onto which you want to install the agent:
204
+
The agent software package is hosted on the "Linux software repository for Microsoft products" at [https://packages.microsoft.com](https://packages.microsoft.com)
234
205
235
-
1. In an SSH session, change to the directory where the RPM was copied.
236
-
1. Install the RPM.
237
-
```
238
-
sudo dnf install ./*.rpm
239
-
```
240
-
Answer `y` when prompted. If there are any missing dependencies, the RPM won't be installed.
206
+
**The name of the ingestion agent package is `az-aoi-ingestion`.**
207
+
208
+
To download and install a package from the software repository, follow the relevant steps for your VM's Linux distribution in [
209
+
How to install Microsoft software packages using the Linux Repository](/linux/packages#how-to-install-microsoft-software-packages-using-the-linux-repository).
210
+
211
+
For example, if you are installing on a VM running Red Hat Enterprise Linux (RHEL) 8, follow the instructions under the [Red Hat-based Linux distributions](/linux/packages#red-hat-based-linux-distributions) heading, substituting the following parameters:
212
+
213
+
- distribution: `rhel`
214
+
- version: `8`
215
+
- package-name: `az-aoi-ingestion`
241
216
242
217
## Configure the agent software
243
218
@@ -344,7 +319,6 @@ The configuration you need is specific to the type of source and your Data Produ
344
319
```
345
320
sudo systemctl enable az-aoi-ingestion.service
346
321
```
347
-
1. Save a copy of the delivered RPM – you need it to reinstall or to back out any future upgrades.
Copy file name to clipboardExpand all lines: articles/operator-insights/upgrade-ingestion-agent.md
+16-31Lines changed: 16 additions & 31 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,49 +14,31 @@ ms.date: 02/29/2024
14
14
15
15
The ingestion agent is a software package that is installed onto a Linux Virtual Machine (VM) owned and managed by you. You might need to upgrade the agent.
16
16
17
-
In this article, you'll upgrade your ingestion agent and roll back an upgrade.
17
+
This article describes how to upgrade your ingestion agent, and how to roll back an upgrade.
18
18
19
19
## Prerequisites
20
20
21
-
Obtain the latest version of the ingestion agent RPM from [https://go.microsoft.com/fwlink/?linkid=2260508](https://go.microsoft.com/fwlink/?linkid=2260508).
21
+
Decide which version of the ingestion agent you would like to upgrade to. If you don't specify a version when you upgrade, you'll upgrade to the most recent version.
22
22
23
-
Links to the current and previous releases of the agents are available below the heading of each [release note](ingestion-agent-release-notes.md). If you're looking for an agent version that's more than 6 months old, check out the [release notes archive](ingestion-agent-release-notes-archive.md).
23
+
See [What's new with Azure Operator Insights ingestion agent](ingestion-agent-release-notes.md) for a list of recent releases and to see what's changed in each version. If you're looking for an agent version that's more than six months old, check out the [release notes archive](ingestion-agent-release-notes-archive.md).
24
24
25
-
### Verify the authenticity of the ingestion agent RPM (optional)
26
-
27
-
Before you install the RPM, you can verify the signature of the RPM with the [Microsoft public key file](https://packages.microsoft.com/keys/microsoft.asc) to ensure it has not been corrupted or tampered with.
1. Verify the RPM signature matches the public key
41
-
```
42
-
rpm --checksig <path-to-rpm>
43
-
```
44
-
45
-
The output of the final command should be `<path-to-rpm>: digests signatures OK`
25
+
If you would like to verify the authenticity of the ingestion agent package before upgrading, see [How to use the GPG Repository Signing Key](/linux/packages#how-to-use-the-gpg-repository-signing-key).
46
26
47
27
## Upgrade the agent software
48
28
49
29
To upgrade to a new release of the agent, repeat the following steps on each VM that has the old agent.
50
30
51
-
1. Ensure you have a copy of the currently running version of the RPM, in case you need to roll back the upgrade.
52
-
1. Copy the new RPM to the VM.
53
-
1. Connect to the VM over SSH, and change to the directory where the RPM was copied.
31
+
1. Connect to the VM over SSH.
54
32
1. Save a copy of the existing */etc/az-aoi-ingestion/config.yaml* configuration file.
55
-
1. Upgrade the RPM.
33
+
1. Upgrade the agent using your VM's package manager. For example, for Red Hat-based Linux Distributions:
34
+
```
35
+
sudo dnf upgrade az-aoi-ingestion
56
36
```
57
-
sudo dnf install ./*.rpm
37
+
Answer `y` when prompted.
38
+
1. Alternatively, to upgrade to a specific version of the agent, specify the version number in the command. For example, for version 2.0.0 on a RHEL8 system, use the following command:
39
+
```
40
+
sudo dnf install az-aoi-ingestion-2.0.0
58
41
```
59
-
Answer `y` when prompted.
60
42
1. Make any changes to the configuration file described by your support contact or the documentation for the new version. Most upgrades don't require any configuration changes.
61
43
1. Restart the agent.
62
44
```
@@ -72,8 +54,11 @@ To upgrade to a new release of the agent, repeat the following steps on each VM
72
54
73
55
If an upgrade or configuration change fails:
74
56
57
+
1. Downgrade back to the previous version by reinstalling the previous version of the agent. For example, to downgrade to version 1.0.0 on a RHEL8 system, use the following command:
58
+
```
59
+
sudo dnf downgrade az-aoi-ingestion-1.0.0
60
+
```
75
61
1. Copy the backed-up configuration file from before the change to the */etc/az-aoi-ingestion/config.yaml* file.
0 commit comments