Deploy on AWS

Deploy on AWS

You have the option to deploy Lumu Virtual Appliances as cloud collectors in cloud solutions such as AWS, Azure, and Google Cloud.

A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your infrastructure.

This guide contains the necessary steps to run a Virtual Appliance on Amazon Web Services Elastic Compute Cloud (AWS EC2) on a Virtual Private Cloud (VPC).

Requirements

To ensure the successful deployment of a Lumu VA on AWS, you must meet the following minimum requirements:

  1. AWS EC2 privileges to launch instances.

AWS Set Up

In order to create a cloud collector, you must first obtain the virtual appliance image in AWS.
Contact Lumu support, providing your AWS account Id and your preferred region. We will use this information for sharing the Lumu Virtual Appliance AMI with you directly via AWS.
AWS Accounts settings areaFigure 1 - AWS Accounts settings area.
1. After receiving the confirmation email from Lumu, go to the AWS panel, navigate to EC2 > AMIs and select “Private images”.
AWS AMI settings areaFigure 2 - AWS AMI settings area.

2. Select and copy the image we shared with you to the region that you want to deploy the Virtual Appliance to. It can take a few minutes until the new AMI is displayed.
Copying the Lumu VA AMIFigure 3 - Copying the Lumu VA AMI.

3. Launch the new instance from the AMI you copied. During the launch, you will be prompted to configure the instance.
Review our sizing guidelines to evaluate the virtual hardware considerations.

Remember to confirm that inbound rules are set for allowing access to UDP port 53 for the VPC.

Inbound rulesFigure 4 - Inbound rules.

Virtual Appliance Activation and Setup

Once you have configured AWS and uploaded the Lumu Virtual Appliance, you are ready to activate and explore the VA general settings.

4. Consult our General Configuration guide for instructions on VA activation and setup.

AWS Network Setup

After having your VA activated and configured, set the Lumu Virtual Appliance you created as the DNS name server.

5. On the AWS VPC console, go to the DHCP options set and create a new DHCP options set adding the Lumu Virtual Appliance you created as DNS name server. The DHCP is responsible for allocating IP addresses and other information to requesting clients.

Creating DHCP options set for Lumu VAFigure 5 - Creating DHCP options set for Lumu VA.

6. Associate the new DHCP options set to your VPC by selecting the option to edit options set on the action list.

Associating DHCP options set to a VPC.Figure 6 - Associating DHCP options set to a VPC.
Once you associate a new set of DHCP options with a VPC, any existing instances, and all new instances that you launch in that VPC use those options.

In the DHCP options set list, select the DHCP options set you created on step 5.

Associating DHCP options set to a VPCFigure 7 - Associating DHCP options set to a VPC.

Flush the DNS cache

All the instances of the VPC will automatically pick up the changes within a few hours, depending on how frequently the instance renews its DHCP lease. You don't need to restart or relaunch the instances.

For the new DNS settings to take effect immediately on existing servers, you have the option to explicitly renew the lease being used on each server by the instance, see Flushing DNS Cache for guidance.

Validate your settings

The final step is to verify that your DNS connections are correctly routed through Lumu. See Validate your DNS Settings for more information.

        • Related Articles

        • Lumu Virtual Appliance

          The Lumu Virtual Appliance (VA) is a pre-configured lightweight virtual machine solution provided by Lumu Technologies to enable the collection of network metadata of your entire enterprise and forward it to the Lumu cloud with the lowest impact on ...
        • Deploy on Google Cloud

          You have the option to deploy Lumu Virtual Appliances as cloud collectors in cloud solutions such as AWS, Azure, and Google Cloud.  A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network ...
        • Configure Virtual Appliance

          Once the Virtual Appliance (VA) has been added to the Lumu Portal and imported into a hypervisor it is time to configure the Lumu VA to collect network metadata to illuminate threats, attacks, and adversaries coming from your network. If you are ...
        • Virtual Appliance Collectors

          The Lumu Virtual Appliance (VA) offers the option to create VA collectors, a seamless way to integrate network metadata, as well as send your DNS logs through the VA instead of using the VA built-in DNS resolver. In this quick guide, we show you how ...
        • Deploy on VMware Workstation

          The best way to implement Lumu in your network is to delegate DNS resolution tasks to the Lumu Virtual Appliance (VA). A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network metadata to ...