Mirroring Agent

The mirroring agent captures and stitches your application's request and response data and sends it to the Traceable Platform agent. The mirroring agent can be installed on the same machine as your application or on a different virtual machine. The following deployment diagram shows a setup where the application and the mirroring agent are installed on other machines.

Prerequisites

• Traffic mirroring is configured on source devices.

• Mirrored traffic is reaching to the VM. Confirm by tcpdump on the VM. tcpdump -i eth0 -n -X -s 0

• In case of TLS mirroring, the source is configured to send tls secret to the mirroring agent(default port 8001). On the VM, nmap's ncat can be used to verify if the secret is reaching to the mirroring agent.

  # check if keys are coming to non-tls connection
  ncat -l -p 8001
  # check if keys are coming to tls connection
  ncat -l -p 8001 --ssl

  Data coming to these connection are in the following format:

  CLIENT_RANDOM abcdabcdbacdba acbabac123123123
  CLIENT_TRAFFIC_SECRET_0 abcdabcdbacdba acbabac123123123

• TPA is installed either on same VM or different VM. TPA is reachable from the Mirroring agent VM. If TPA is using TLS, then make sure that TPA certificate carries the domain name/IP in SAN.

Follow these guides to install and configure the mirroring agent:

• Deployment Architectures — reference patterns (VM, ECS sidecar, AWS/GCP collectors, TLS key sharing)

• Installation

• Configuration

• Troubleshooting

AWS Deployment

For AWS deployments, use one of the following methods:

• AWS VPC Traffic Mirroring Collector Architecture

• AWS VPC Mirroring — Terraform

• AWS VPC Mirroring — CloudFormation

GCP Deployment

For GCP packet mirroring, use the setup script to deploy Mirroring Agent collectors. Deploy Traceable Platform Agent (TPA) before running the GCP setup script.

• GCP Traffic Mirroring

Quick Links

• Deployment Architectures

• Configuration

• Installation Steps

• Installation Steps (Windows)

• ECS Sidecar

• AWS VPC Mirroring

• GCP Traffic Mirroring

• Troubleshooting

• Release Notes

• Images

• Vulnerability Reports