Otel Config

1# ADOT collector configuration — traces to X-Ray, metrics to CloudWatch via EMF
2#
3# Deployment options:
4# - EC2: daemon/agent
5# - ECS: sidecar container
6# - EKS: DaemonSet (resources: 200Mi memory, 250m CPU)
7# - Lambda: managed layer (auto-instrumentation)
8#
9# NETWORK EXPOSURE: the OTLP receivers below bind 0.0.0.0, so they accept traffic on every
10# interface with no TLS and no authentication — anything that can reach the port can inject
11# spans, and the telemetry itself may carry request payloads. Bind to 127.0.0.1 where the
12# senders are local, and otherwise restrict 4317/4318 via security groups, NSGs, or host
13# firewall. This file does not apply those controls, so assess and configure them for your
14# environment.
15
16receivers:
17  otlp:
18    protocols:
19      grpc:
20        endpoint: 0.0.0.0:4317
21      http:
22        endpoint: 0.0.0.0:4318
23
24processors:
25  batch:
26    timeout: 30s
27    send_batch_size: 8192
28
29  # Memory limiter to prevent OOM
30  memory_limiter:
31    check_interval: 5s
32    limit_mib: 160
33    spike_limit_mib: 40
34
35  # Cardinality defense layer 2 of 3:
36  #   1. OTel SDK: don't emit high-cardinality attributes
37  #   2. Collector: filter processor (this)
38  #   3. Backend: dimension_rollup_option + metric_declarations
39  filter:
40    error_mode: ignore
41    metric_conditions:
42      - 'IsMatch(metric.name, ".*_bucket$")'  # Histogram bucket metrics can explode cardinality
43
44exporters:
45  awsxray:
46    region: us-east-1  # TODO: Replace with your target region
47
48  awsemf:
49    namespace: MyApplication
50    region: us-east-1  # TODO: Replace with your target region
51    dimension_rollup_option: NoDimensionRollup
52    resource_to_telemetry_conversion:
53      enabled: false
54
55service:
56  pipelines:
57    traces:
58      receivers: [otlp]
59      processors: [memory_limiter, batch]
60      exporters: [awsxray]
61    metrics:
62      receivers: [otlp]
63      processors: [memory_limiter, filter, batch]
64      exporters: [awsemf]