Basic information
| Field | Details |
|---|---|
| English / full name | Amazon VPC Traffic Mirroring |
| Chinese | VPC 流量镜像 |
| Japanese | VPC トラフィックミラーリング |
| Review priority | 考试频率 ⭐⭐⭐ |
| Often confused with | VPC Flow Logs / Gateway Load Balancer / Network Firewall |
In one sentence
Copies packets from supported ENIs to monitoring appliances while production traffic continues on its normal path.
Core summary
Source, target, session, and filter are the core components. A target can be an ENI, NLB, or Gateway Load Balancer endpoint.
Study points
- Use it for forensics, intrusion analysis, and packet-level troubleshooting.
- Mirroring is out of band and does not automatically block production traffic.
- Encrypted packets remain encrypted in the copy.
- The source still needs a valid network path to the target.
Common pitfalls
- Flow Logs record metadata; Traffic Mirroring copies packets.
- For inline blocking, use Network Firewall or a GWLB appliance chain.
Key memory
Copies are for seeing; inline inspection is for controlling.