---
title: Alibaba Cloud WAF
description: >-
  Monitor Alibaba Cloud WAF request rates, block rates, and resource usage
  across protected domains.
breadcrumbs: Docs > Integrations > Alibaba Cloud WAF
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Alibaba Cloud WAF
Integration version1.0.0
{% callout %}
# Important note for users on the following Datadog sites: us2.ddog-gov.com

{% alert level="info" %}
To find out if this integration is available in your organization, see your [Datadog Integrations](https://app.datadoghq.com/integrations) page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email [support@ddog-gov.com](mailto:support@ddog-gov.com).
{% /alert %}

{% /callout %}

## Overview{% #overview %}

Alibaba Cloud Web Application Firewall (WAF) protects web applications from common attacks such as SQL injection and cross-site scripting (XSS). It also guards against malicious bots, Challenge Collapsar (CC) attacks, and unwanted traffic.

Use this integration to monitor WAF request rates, block rates, and resource usage across your protected domains.

## Setup{% #setup %}

### Installation{% #installation %}

After you set up the [Alibaba Cloud](https://docs.datadoghq.com/integrations/alibaba_cloud.md) integration, ensure that the WAF service is included in your Alibaba Cloud monitoring configuration.

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **alibabacloud.waf.4xx_ratio.maximum**(gauge)                    | 4XX status code ratio.*Shown as percent*                                                                 |
| **alibabacloud.waf.4xx_ratio_wafv3.maximum**(gauge)             | 4XX status code ratio (WAF 3.0, value range 0-1).*Shown as fraction*                                     |
| **alibabacloud.waf.4xx_ratio_wafv3_v2.maximum**(gauge)         | 4XX status code ratio (WAF 3.0, value range 0-100).*Shown as percent*                                    |
| **alibabacloud.waf.5xx_ratio.maximum**(gauge)                    | 5XX status code ratio.*Shown as percent*                                                                 |
| **alibabacloud.waf.5xx_ratio_wafv3.maximum**(gauge)             | 5XX status code ratio (WAF 3.0, value range 0-1).*Shown as fraction*                                     |
| **alibabacloud.waf.5xx_ratio_wafv3_v2.maximum**(gauge)         | 5XX status code ratio (WAF 3.0, value range 0-100).*Shown as percent*                                    |
| **alibabacloud.waf.acl_blocks_5m.maximum**(gauge)               | Access-control blocks over the last 5 minutes.*Shown as request*                                         |
| **alibabacloud.waf.acl_blocks_5m_wafv3.maximum**(gauge)        | Access-control blocks over the last 5 minutes.*Shown as request*                                         |
| **alibabacloud.waf.acl_rate_5m.maximum**(gauge)                 | Access-control block ratio over the last 5 minutes.*Shown as percent*                                    |
| **alibabacloud.waf.acl_rate_5m_wafv3.maximum**(gauge)          | Access-control block ratio over the last 5 minutes (WAF 3.0, value range 0-1).*Shown as fraction*        |
| **alibabacloud.waf.acl_rate_5m_wafv3_v2.maximum**(gauge)      | Access-control block ratio over the last 5 minutes (WAF 3.0, value range 0-100).*Shown as percent*       |
| **alibabacloud.waf.active_monitor.maximum**(rate)                | Process monitoring (active processes).*Shown as process*                                                 |
| **alibabacloud.waf.active_monitor_hybrid_wafv3.maximum**(rate) | Process monitoring (active processes).*Shown as process*                                                 |
| **alibabacloud.waf.cc_blocks_5m.maximum**(gauge)                | CC attack protection blocks over the last 5 minutes.*Shown as request*                                   |
| **alibabacloud.waf.cc_blocks_5m_wafv3.maximum**(gauge)         | CC attack protection blocks over the last 5 minutes.*Shown as request*                                   |
| **alibabacloud.waf.cc_rate_5m.maximum**(gauge)                  | CC attack protection block ratio over the last 5 minutes.*Shown as percent*                              |
| **alibabacloud.waf.cc_rate_5m_wafv3.maximum**(gauge)           | CC attack protection block ratio over the last 5 minutes (WAF 3.0, value range 0-1).*Shown as fraction*  |
| **alibabacloud.waf.cc_rate_5m_wafv3_v2.maximum**(gauge)       | CC attack protection block ratio over the last 5 minutes (WAF 3.0, value range 0-100).*Shown as percent* |
| **alibabacloud.waf.cpu_usage.maximum**(gauge)                    | CPU utilization.*Shown as percent*                                                                       |
| **alibabacloud.waf.cpu_usage_hybrid_wafv3.maximum**(gauge)     | CPU utilization.*Shown as percent*                                                                       |
| **alibabacloud.waf.disk_usage.maximum**(gauge)                   | Disk utilization.*Shown as percent*                                                                      |
| **alibabacloud.waf.disk_usage_hybrid_wafv3.maximum**(gauge)    | Disk utilization.*Shown as percent*                                                                      |
| **alibabacloud.waf.memory_usage.maximum**(gauge)                 | Memory utilization.*Shown as percent*                                                                    |
| **alibabacloud.waf.memory_usage_hybrid_wafv3.maximum**(gauge)  | Memory utilization.*Shown as percent*                                                                    |
| **alibabacloud.waf.qps.maximum**(rate)                            | Queries per second.*Shown as request*                                                                    |
| **alibabacloud.waf.qps_wafv3.maximum**(rate)                     | Queries per second.*Shown as request*                                                                    |
| **alibabacloud.waf.qps_ratio.maximum**(gauge)                    | QPS growth rate compared with the previous period.*Shown as percent*                                     |
| **alibabacloud.waf.qps_ratio_wafv3.maximum**(gauge)             | QPS growth rate compared with the previous period.*Shown as percent*                                     |
| **alibabacloud.waf.qps_ratio_down.maximum**(gauge)              | QPS decline rate compared with the previous period.*Shown as percent*                                    |
| **alibabacloud.waf.qps_ratio_down_wafv3.maximum**(gauge)       | QPS decline rate compared with the previous period.*Shown as percent*                                    |
| **alibabacloud.waf.waf_blocks_5m.maximum**(gauge)               | Web attack blocks over the last 5 minutes.*Shown as request*                                             |
| **alibabacloud.waf.waf_blocks_5m_wafv3.maximum**(gauge)        | Web attack blocks over the last 5 minutes.*Shown as request*                                             |
| **alibabacloud.waf.waf_qps.average**(rate)                       | Instance-level QPS.*Shown as request*                                                                    |
| **alibabacloud.waf.waf_qps.maximum**(rate)                       | Instance-level QPS.*Shown as request*                                                                    |
| **alibabacloud.waf.waf_qps_wafv3.average**(rate)                | Instance-level QPS.*Shown as request*                                                                    |
| **alibabacloud.waf.waf_qps_wafv3.maximum**(rate)                | Instance-level QPS.*Shown as request*                                                                    |
| **alibabacloud.waf.waf_qps_wafv3_max.maximum**(rate)           | Instance-level maximum QPS.*Shown as request*                                                            |
| **alibabacloud.waf.waf_rate_5m.maximum**(gauge)                 | Web attack block ratio over the last 5 minutes.*Shown as percent*                                        |
| **alibabacloud.waf.waf_rate_5m_wafv3.maximum**(gauge)          | Web attack block ratio over the last 5 minutes (WAF 3.0, value range 0-1).*Shown as fraction*            |
| **alibabacloud.waf.waf_rate_5m_wafv3_v2.maximum**(gauge)      | Web attack block ratio over the last 5 minutes (WAF 3.0, value range 0-100).*Shown as percent*           |

### Events{% #events %}

Alibaba Cloud WAF does not include any events.

### Service Checks{% #service-checks %}

Alibaba Cloud WAF does not include any service checks.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).
