Monitoring Route 53 Resolver endpoints with Amazon CloudWatch - Amazon Route 53
Metrics and dimensions for Resolver
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Monitoring Route 53 Resolver endpoints with Amazon CloudWatch

You can use Amazon CloudWatch to monitor the number of DNS queries that are forwarded by Route 53 Resolver endpoints. Amazon CloudWatch collects and processes raw data into readable, near real-time metrics. These statistics are recorded for a period of two weeks, so that you can access historical information and gain a better perspective on how your resources are performing. By default, metric data for Resolver endpoints is automatically sent to CloudWatch at five-minute intervals. The five-minute interval is also the smallest interval at which the metric data can be sent.

For more information about Resolver, see What is Amazon Route 53 Resolver?. For more information about CloudWatch, see What is Amazon CloudWatch? in the Amazon CloudWatch User Guide.

Metrics and dimensions for Route 53 Resolver

When you configure Resolver to forward DNS queries to your network or vice versa, Resolver starts to send metrics and dimensions once every five minutes to CloudWatch about the number of queries that are forwarded. You can use the following procedures to view the metrics in the CloudWatch console or view them by using the Amazon Command Line Interface (Amazon CLI).

To view Resolver metrics using the CloudWatch console

  1. Open the CloudWatch console at https://console.amazonaws.cn/cloudwatch/.

  2. On the navigation bar, choose the Region where you created the endpoint.

  3. In the navigation pane, choose Metrics.

  4. On the All metrics tab, choose Route 53 Resolver.

  5. Choose By Endpoint to view query counts for a specified endpoint. Then choose the endpoints that you want to view the number of queries for.

    Choose Across All Endpoints to view query counts for all inbound endpoints or for all outbound endpoints that were created by the current Amazon account. Then choose InboundQueryVolume or OutboundQueryVolume to view the desired counts.

To view metrics using the Amazon CLI

  • At a command prompt, use the following command:

    aws cloudwatch list-metrics --namespace "AWS/Route53Resolver"

CloudWatch metrics for Route 53 Resolver

AWS/Route53Resolver namespace includes metrics for Route 53 Resolver endpoints and for IP addresses.

Metrics for Resolver endpoints

The AWS/Route53Resolver namespace includes the following metrics for Route 53 Resolver endpoints.

EndpointHealthyENICount

The number of elastic network interfaces in the OPERATIONAL status. This means that the Amazon VPC network interfaces for the endpoint (specified by EndpointId) are correctly configured and able to pass inbound or outbound DNS queries between your network and Resolver.

Valid statistics: Minimum, Maximum, Average

Units: Count

EndpointUnhealthyENICount

The number of elastic network interfaces in the AUTO_RECOVERING status.

This means that the resolver is trying to recover one or more of the Amazon VPC network interfaces that are associated with the endpoint (specified by EndpointId). During the recovery process, the endpoint functions with limited capacity and is unable to process DNS queries until it's fully recovered.

Valid statistics: Minimum, Maximum, Average

Units: Count

InboundQueryVolume

For inbound endpoints, the number of DNS queries forwarded from your network to your VPCs through the endpoint specified by EndpointId.

Valid statistics: Sum

Units: Count

OutboundQueryVolume

For outbound endpoints, the number of DNS queries forwarded from your VPCs to your network through the endpoint specified by EndpointId.

Valid statistics: Sum

Units: Count

OutboundQueryAggregateVolume

For outbound endpoints, the total number of DNS queries forwarded from Amazon VPCs to your network, including the following:

  • The number of DNS queries forwarded from your VPCs to your network through the endpoint that is specified by EndpointId.

  • When the current account shares Resolver rules with other accounts, queries from VPCs that are created by other accounts that are forwarded to your network through the endpoint that is specified by EndpointId.

Valid statistics: Sum

Units: Count

Metrics for Resolver IP addresses

The AWS/Route53Resolver namespace includes the following metrics for each IP address that's associated with a Resolver inbound or outbound endpoint. (When you specify an endpoint, Resolver creates an Amazon VPC elastic network interface.)

InboundQueryVolume

For each IP address for your inbound endpoints, the number of DNS queries forwarded from your network to the specified IP address. Each IP address is identified by the IP address ID. You can get this value using the Route 53 console. On the page for the applicable endpoint, in the IP addresses section, see the IP address ID column. You can also get the value programmatically using ListResolverEndpointIpAddresses.

Valid statistics: Sum

Units: Count

OutboundQueryAggregateVolume

For each IP address for your outbound endpoints, the total number of DNS queries forwarded from Amazon VPCs to your network, including the following:

  • The number of DNS queries forwarded from your VPCs to your network using the specified IP address.

  • When the current account shares Resolver rules with other accounts, queries from VPCs that are created by other accounts that are forwarded to your network through using the specified IP address.

Each IP address is identified by the IP address ID. You can get this value using the Route 53 console. On the page for the applicable endpoint, in the IP addresses section, see the IP address ID column. You can also get the value programmatically using ListResolverEndpointIpAddresses.

Valid statistics: Sum

Units: Count

Dimensions for Route 53 Resolver metrics

Route 53 Resolver metrics for inbound and outbound endpoints use the AWS/Route53Resolver namespace and provide metrics for EndpointId. If you specify a value for the EndpointId dimension, CloudWatch returns the number of DNS queries for the specified endpoint. If you don't specify EndpointId, CloudWatch returns the number of DNS queries for all endpoints that were created by the current Amazon account.

The RniId dimension is supported for OutboundQueryAggregateVolume and InboundQueryVolume metrics.