Gaining Visibility into Your Network Topology

When you build your Aviatrix Multicloud Transit Network by launching Aviatrix Gateways and other constructs, Aviatrix CoPilot automatically draws a topology map that shows your current network environment. In Topology, you can search for any objects that are plotted. This allows you to quickly isolate and identify resources that you are looking for in your entire environment and across clouds.

You can run diagnostics from any Aviatrix gateway running in your multicloud network directly from Topology. Performing diagnostics from Topology can dramatically reduce the time spent troubleshooting issues.

You can use filters to show only the parts of your network environment you want to see. You can use many different properties of your managed resources to filter them.

Working with Topology

This section describes the Topology feature of Aviatrix CoPilot.

Topology provides a visual representation of deployed networks, gateways, instances, and gateway connections.

The Topology feature gives you visibility into your network as follows:

  • Network Graph - Network View

    In Network Graph, in Network view, CoPilot displays a network topology map that shows the logical and physical layout of how managed network resources are connected across multiple clouds. Topology provides a visual representation of deployed networks (VPCs/VNets/VCNs), gateways, instances, and gateway connections. CoPilot automatically draws the map when it connects to Aviatrix Controller.

    The Aviatrix Gateways running in your multicloud network enable you to run diagnostics from them directly from Topology. When highlighting a gateway, click on the DIAG button to see options available for performing diagnostics from the gateway that is in focus.

  • Network Graph - Transit View

    In Network Graph, in Transit view, CoPilot shows the topology of your Aviatrix transit network in relation to your deployed Aviatrix transit gateways. By clicking on the Aviatrix transit icon, you can see all of the transit VPCs/VNets that are managed by Aviatrix Controller. By clicking on a region icon, you can see the spoke VPC/VNets that the controller currently manages. By clicking on a spoke VPC/VNet, you can see all network constructs inside of that spoke. You can use the search field to find specific resources.

  • Topology Replay

    In Topology Replay, CoPilot shows what changed in your environment and when it changed. CoPilot shows when route, credential, and other metrics in your cloud network constructs have changed over time. A timeline panel shows you all of the changes (as change sets) that were recorded over the last month. You can analyze the additions, modifications, and deletions recorded in each change set. You can delete change sets when you no longer need them.

You can click the New Topology Experience toggle to see a version of the map introduced in CoPilot release 3.0.2 (Topology New Experience). See New Topology Experience.

Show Managed Resources by Using Filters

You can filter your network managed resources in the topology map to show only the resources you want by using filters.

To create a topology filter, see:

Topology Resource Field Reference

In Topology, the topology map’s supported filter fields include identifiers and tags for constructs, health and status metrics, and associative properties like CSP Vendor and Region. This section describes the properties of managed resources you can filter on in the map for Transit VPC/VNets, Spoke VPCs, Aviatrix transit gateways, Aviatrix spoke gateways, AWS TGWs, and user instances (virtual machines).

The technical descriptions are for Topology New Experience.

Transit VPC/VNet Field Reference

You can filter your Transit VPC/VNet topology in the topology map using the following fields for Transit VPCs.

Transit VPC/VNet Property Description

Account Name

The CSP Account associated with this VPC.

Cloud

The CSP that this VPC/VNet belongs to (AWS, Azure, etc.).

Managed

Whether or not this VPC is managed by an Aviatrix Gateway.

Name

The VPC’s name tag.

NAT Gateways

List of the VPC’s NAT Gateways.

Peer Connections

List of the VPC’s peer connections.

Region

The CSP region where the VPC is located.

Site2Cloud Connections

List of the VPC’s Site2Cloud tunnels.

Type

The type of Topology construct this is (VPC, in this case).

Virtual Machines

Number of VM’s (instances) the VPC contains.

VPC CIDR

List of the VPC’s CIDRs.

VPC ID

The VPC’s unique identifier.

Spoke VPC/VNet Field Reference

You can filter your Spoke VPC topology in the topology map using the following fields for Spoke VPC/VNets.

Spoke VPC/VNet Property Description

Account Name

The CSP Account associated with this VPC.

Cloud

The CSP that this VPC/VNet belongs to (AWS, Azure, etc.).

Managed

Whether or not this VPC is managed by an Aviatrix Gateway.

Name

The VPC’s name tag.

NAT Gateways

List of the VPC’s NAT Gateways.

Peer Connections

List of the VPC’s peer connections.

Region

The CSP region where the VPC is located.

Site2Cloud Connections

List of the VPC’s Site2Cloud tunnels.

Type

The type of Topology construct this is (VPC, in this case).

Virtual Machines

Number of VM’s (instances) the VPC contains.

VPC CIDR

List of the VPC’s CIDRs.

VPC ID

The VPC’s unique identifier.

Transit Gateway Field Reference

You can filter your Transit Gateway topology in the topology map using the following fields for Transit Gateways virtual machines.

Transit Gateway VM Field Description

Account Name

The CSP Account associated with this VPC.

Associated Gateway

The Aviatrix Gateway with which this VM is associated.

Cloud

The CSP that this VPC belongs to (AWS, Azure, etc.).

Hypervisor

The instance’s hypervisor.

Image ID

ID of the image from which the instance was built.

Insane Mode (High Performance Encryption Mode)

Whether the gateway has high performance encryption active.

Instance ID

ID of the image from which the instance was built.

Instance Size

The size of the instance (e.g. “t2.micro,").

Kernel

The Linux kernel version of the Gateway instance.

Launch Time

The timestamp when the VM (Gateway in this case) was launched.

License Expiry

The timestamp when the gateway’s license expires.

License ID

The unique identifier of the instance’s license.

Name

The name of the instance.

Private IP

The private IP of the instance.

Private DNS Name

The Private DNS name of the instance.

Public DNS Name

The Public DNS name of the instance.

Public IP

The Public IP of the instance.

Region

The CSP region in which the instance is located.

Source NAT

Denotes whether Source NAT is active on this gateway.

Stateful Firewall

Denotes whether stateful firewall rules are enabled or disabled on the gateway.

Status

Denotes whether the instance is running.

Subnet ID

The ID of the instance’s subnet.

Type

The type of Topology construct this is (VPC, in this case).

VPC ID

The ID of the instance’s VPC.

VPC Name

The name of the instance’s VPC.

Spoke Gateway Field Reference

You can filter your Spoke Gateway topology in the topology map using the following fields for Spoke Gateways virtual machines.

Spoke Gateway VM Field Description

Account Name

The CSP Account associated with this VPC.

Associated Gateway

The Aviatrix Gateway with which this VM is associated.

Cloud

The CSP that this VPC belongs to (AWS, Azure, etc.).

Hypervisor

The instance’s hypervisor.

Image ID

ID of the image from which the instance was built.

Insane Mode (High Performance Encryption Mode)

Whether the gateway has high performance encryption active.

Instance ID

ID of the image from which the instance was built.

Instance Size

The size of the instance (e.g. “t2.micro,").

Kernel

The Linux kernel version of the Gateway instance.

Launch Time

The timestamp when the VM (Gateway in this case) was launched.

License Expiry

The timestamp when the gateway’s license expires.

License ID

The unique identifier of the instance’s license.

Name

The name of the instance.

Private IP

The private IP of the instance.

Private DNS Name

The Private DNS name of the instance.

Public DNS Name

The Public DNS name of the instance.

Public IP

The Public IP of the instance.

Region

The CSP region in which the instance is located.

Source NAT

Denotes whether Source NAT is active on this gateway.

Stateful Firewall

Denotes whether stateful firewall rules are enabled or disabled on the gateway.

Status

Denotes whether the instance is running.

Subnet ID

The ID of the instance’s subnet.

Type

The type of Topology construct this is (Virtual Machine, in this case).

VPC ID

The ID of the instance’s VPC.

VPC Name

The name of the instance’s VPC.

AWS TGW Field Reference

You can filter your AWS TGW topology in the topology map using the following fields for AWS TGWs.

AWS TGW Property Description

Name

The name of the AWS Transit Gateway.

Account Name

The Aviatrix account that corresponds to an IAM role or account in AWS.

Region

One of the AWS regions.

AWS TGW ASN

TGW ASN number. The default AS number is 64512.

AWS TGW CIDR

The TGW CIDR ranges.

Instance ID

ID of the image from which the AWS TGW was built.

User Virtual Machine Field Reference

You can filter your Virtual Machine topology in the topology map using the following fields for user virtual machines that are in Aviatrix-managed VPCs/VNets.

User Virtual Machine Field Description

Account Name

The CSP Account associated with this VPC.

Associated Gateway

The Aviatrix Gateway with which this VM is associated.

Cloud

The CSP that this VPC belongs to (AWS, Azure, etc.).

Hypervisor

The instance’s hypervisor.

Image ID

ID of the image from which the instance was built.

Instance ID

ID of the image from which the instance was built.

Instance Size

The size of the instance (e.g. “t2.micro,").

Kernel

The Linux kernel version of the Gateway instance.

Launch Time

The timestamp when the VM (Gateway in this case) was launched.

Name

The name of the instance.

Private IP

The private IP of the instance.

Private DNS Name

The Private DNS name of the instance.

Public DNS Name

The Public DNS name of the instance.

Public IP

The Public IP of the instance.

Region

The CSP region in which the instance is located.

Status

Denotes whether the instance is running.

Subnet ID

The ID of the instance’s subnet.

Type

The type of Topology construct this is (Virtual Machine, in this case).

VPC ID

The ID of the instance’s VPC.

VPC Name

The name of the instance’s VPC.

Subnets Field Reference

You can filter your Subnet topology in the topology map using the following fields for subnets that are Aviatrix-managed.

Subnet Field Description

Account Name

The CSP Account associated with this VPC.

Cloud

The CSP that this VPC belongs to (AWS, Azure, etc.).

Interface ID

The ID of the gateway interface the subnet is on.

Name

The name of the subnet.

Region

The CSP region in which the instance is located.

Subnet CIDR

The CIDR of the subnet.

Subnet ID

The ID of the instance’s subnet

Type

The type of Topology construct this is (Subnet, in this case).

VPC ID

The ID of the instance’s VPC.

VPC Name

The name of the instance’s VPC.

In CoPilot > Topology map (New Topology Experience), you can see link status for links between gateways located in different VPC/VNets.

A green line indicates less than 50 milliseconds of latency for the link.

A brown line indicates between 50 and 100 milliseconds of latency for the link.

A red line indicates more than 50 milliseconds of latency for the link.

Viewing a Map of your Network Topology

When you build your Aviatrix Multicloud Transit Network by launching Aviatrix Gateways and other constructs, Aviatrix CoPilot automatically draws a map to show your current network topology.

To view the topology map, go to Networking > Topology or type Topology in the navigation search.

You can filter the topology map on multiple fields to show only the gateways and constructs you want to see in your network. You can save the conditions to create a topology filter.

Working with Topology

This section describes the Topology feature of Aviatrix CoPilot.

Topology provides a visual representation of deployed networks, gateways, instances, and gateway connections.

The Topology feature gives you visibility into your network as follows:

  • Network Graph - Network View

    In Network Graph, in Network view, CoPilot displays a network topology map that shows the logical and physical layout of how managed network resources are connected across multiple clouds. Topology provides a visual representation of deployed networks (VPCs/VNets/VCNs), gateways, instances, and gateway connections. CoPilot automatically draws the map when it connects to Aviatrix Controller.

    The Aviatrix Gateways running in your multicloud network enable you to run diagnostics from them directly from Topology. When highlighting a gateway, click on the DIAG button to see options available for performing diagnostics from the gateway that is in focus.

  • Network Graph - Transit View

    In Network Graph, in Transit view, CoPilot shows the topology of your Aviatrix transit network in relation to your deployed Aviatrix transit gateways. By clicking on the Aviatrix transit icon, you can see all of the transit VPCs/VNets that are managed by Aviatrix Controller. By clicking on a region icon, you can see the spoke VPC/VNets that the controller currently manages. By clicking on a spoke VPC/VNet, you can see all network constructs inside of that spoke. You can use the search field to find specific resources.

  • Topology Replay

    In Topology Replay, CoPilot shows what changed in your environment and when it changed. CoPilot shows when route, credential, and other metrics in your cloud network constructs have changed over time. A timeline panel shows you all of the changes (as change sets) that were recorded over the last month. You can analyze the additions, modifications, and deletions recorded in each change set. You can delete change sets when you no longer need them.

You can click the New Topology Experience toggle to see a new version of the map introduced in CoPilot release 3.0.2 (Topology New Experience). See Topology Map (Topology New Experience) for information about tne new topology map.

Topology Map (New Topology Experience)

In CoPilot release 3.0.1, a new topology map was introduced (Topology New Experience). Use the New Topology Experience toggle to switch to the new map. The new map can display large network topologies.

The illustration below shows the network constructs that get laid out in the 5 circles of the map.

The following constructs are placed on the circle working from the most outer circle to the most inner circle:

1) External Connections (S2C) (outermost circle)

2) Instances

3) Subnets

4) Spoke Gateway VPC/VNets

5) Transit Gateway VPC/VNets (innermost circle)

topology-v2

The following illustration shows a topology map populated with nodes that represent the constructs in the network architecture:

topology-map-v2

You can apply any number of filters to search for resources in the map.

Topology Map Controls

The following shows the zoom-in, zoom-out, node-expand, and node-collapse topology controls.

topology-nodes-controls

For large topologies that have many constructs, you can zoom in to the map for selection of granular nodes to display their properties.

For smaller monitors, you can zoom out of the map to better see the external connections in the outermost circle.

By default, all nodes for your constructs are plotted on the map when you open the Topology page. You can show or hide all subnets and instances under VPC/VNets in your map by using the expand-node and collapse-node controls.

Diagnostics Tools from Topology Map

You can select gateway instances in your Topology map and then click the Tools button below the Properties table, to run relevant diagnostics on those instances.

Creating and saving topology filters (Classic Topology)

Create filters to narrow down the network constructs to include in your topology maps and save the filters to your local system.

To create and save filters for topology, use the following steps:

  1. In CoPilot, go to CoPilot > Cloud Fabric > Topology.

  2. In Network view, click the Toggle Filter slider to enable the topology filter editor page.

  3. In Select a Key to Filter on, select a key and value to filter on. You can apply any number of filters to a given filter group.

  4. In Filter Group Name, assign a name to your filter/filter group.

  5. Click Save.

    The filter is saved to your local system.

    When you want to view the topology layout for this filter, click Load Filters and select it from the list. If you load more than one filter, the layout of all of them is displayed in the map.

    After a filter/filter group is loaded, you can edit or delete it.

Searching and filtering for cloud native custom tags

Search and filter for custom tags you created in your cloud provider environment for your VPC/VNets and instances.

This feature is available starting from Controller release 6.6.

To filter for cloud native VPC/VNet tags and instance tags, use the following steps:

  1. In CoPilot, go to CoPilot > Cloud Fabric > Topology.

  2. In Network view, click the Toggle Filter slider to enable the topology filter editor page.

  3. From the Select a Key to Filter on list, under the CSP Tags category, select the cloud native tag to filter on.

Topology Map (Classic Topology Experience)

This section describes physics options for the classic view of topology map.

Topology Physics Options (Classic Topology Experience)

This section describes the physics options that control how objects move in the network topology map.

Topology Physics Option Description

Physics Enabled

Enable or disable physics effects in the topology map. Deselect this option if you do not want objects to move on their own and have them stay in the location you place them (when you click and drag them there).

Smooth Edges

Enable or disable smooth edges for objects in the topology map. Deselect this option if you do not want the lines between the nodes to be smoothed. Smooth edges are more computationally expensive but they produce better layouts.

Node Repulsion

Controls how strongly the objects in the map repulse other objects that come near them. The higher the value, the more force applies to the repulsion field around each object.

Central Gravity

Controls the force by which all objects in the network are pulled to a center of gravity in the topology map.

Spring Length

Controls how far apart objects appear from each other when they are moving or at rest. The edges are modelled as springs.

Spring Constant

Controls how quickly objects go back (spring back) to their original position after they are dragged and released. The higher the value, the more quickly the objects spring back into place.

Dampening

Controls how much the moving of objects (in one physics simulation iteration) carries over into moving objects again (next physics simulation iteration). The higher the value, the more velocity of movement carries over into moving subsequent objects.

Max Velocity

Controls how long it takes for objects to stop moving after they are dragged and released. The higher the value, the more time it takes for objects to stabilize (stop moving) after having been dragged.

Min Velocity

Controls how long it takes for objects to stop moving after they are dragged and released. The higher the value, the less time it takes for objects to stop moving after having been dragged.

Interacting with Topology (Classic Topology Experience)

Objects on the topology maps support drag and drop. You can click, drag and drop resources to reorganize the objects.

You can multi-select objects for drag and drop by holding control/command key and selecting.

  • Toggle filter

    Enable the filter editor page where you can create and save your own topology filters and filter groups, load them in the map, and edit or delete them.

  • Search

    The search box allows you to filter the objects that are plotted on the topology.

  • Filter

    Filter menu offers the option to hide/show different categories of the objects to ensure the topology shows only what you care about.

  • Layout

    You can save and reload layouts in the topology using the layout menu. If you prefer the topology to load a default layout, you can select one as the default.

  • Physics options

    By default topology objects are organized using physics engines. This menu allows you to configure physical gravity settings that manage the placement of objects. You can adjust different parameters, or turn the physics off completely for complete control over placement of the objects.

Stateful representations in Topology (Classic Topology Experience)

Connectivity elements in Topology reflect the state of the object:

  • Connections between Aviatrix gateways are drawn with color codes representing the status of their connections.

  • Aviatrix gateway icons represent the state of the gateway. A gateway that is down is shown as a black line.

  • Tunnels statuses are shown with green or red lines, representing the status of the link.