Deploy the ExtraHop Discover Appliance in AWS
The following procedure guides you through the deployment process of the ExtraHop Discover appliance AMI to monitor your Amazon Web Services (AWS) environment.
After you deploy the Discover appliance in AWS, configure remote packet capture (RPCAP) to forward traffic from remote devices to your virtual Discover appliance. For more information, see the Packet Forwarding with RPCAP guide.
System requirements
Your environment must meet the following requirements to deploy a virtual Discover appliance in AWS:
- An AWS account
- Access to the Amazon Machine Image (AMI) of the ExtraHop Discover appliance
- A Discover appliance product key
- An AWS instance type that most closely matches the Discover appliance VM size, as
follows:
Appliance Recommended Instance Type EDA 1000v m5.large (2 vCPU and 8 GB RAM) EDA 2000v c5.2xlarge (8 vCPU and 16 GB RAM) EDA 6100v m5.4xlarge (16 vCPU and 64 GB RAM) c5.9xlarge (36 vCPU and 96 GB RAM)*
Note: Whenever possible, deploy the Discover appliance within the same cluster placement group as the devices that are forwarding traffic. This best practice optimizes the quality of feed that the Discover appliance receives. *Recommended when the EDA 6100v cannot be deployed in the same cluster placement group as the monitored traffic. The c5.9xlarge instance has a higher cost, but is more resilient in environments where data feed fidelity is critical.
Create the ExtraHop instance in AWS
Before you begin
The Amazon Machine Images (AMIs) of ExtraHop appliances are not publicly shared. Before you can start the deployment procedure, you must send your AWS account ID to support@extrahop.com. Your account ID will be linked to the ExtraHop AMIs.Next steps
- Register your ExtraHop appliance.
- Review the Discover and Command Post-deployment Checklist.
- Configure remote packet capture (RPCAP) to forward traffic from remote devices to your virtual Discover appliance. For more information, see Packet Forwarding with RPCAP.
Thank you for your feedback. Can we contact you to ask follow up questions?