Alibaba Cloud WAF

Integration version1.0.0

To find out if this integration is available in your organization, see your Datadog Integrations page or ask your organization administrator.

To initiate an exception request to enable this integration for your organization, email support@ddog-gov.com.

Overview

Alibaba Cloud Web Application Firewall (WAF) protects web applications from common attacks such as SQL injection and cross-site scripting (XSS). It also guards against malicious bots, Challenge Collapsar (CC) attacks, and unwanted traffic.

Use this integration to monitor WAF request rates, block rates, and resource usage across your protected domains.

Setup

Installation

After you set up the Alibaba Cloud integration, ensure that the WAF service is included in your Alibaba Cloud monitoring configuration.

Data Collected

Metrics

alibabacloud.waf.4xx_ratio.maximum
(gauge)		4XX status code ratio.
Shown as percent
alibabacloud.waf.4xx_ratio_wafv3.maximum
(gauge)		4XX status code ratio (WAF 3.0, value range 0-1).
Shown as fraction
alibabacloud.waf.4xx_ratio_wafv3_v2.maximum
(gauge)		4XX status code ratio (WAF 3.0, value range 0-100).
Shown as percent
alibabacloud.waf.5xx_ratio.maximum
(gauge)		5XX status code ratio.
Shown as percent
alibabacloud.waf.5xx_ratio_wafv3.maximum
(gauge)		5XX status code ratio (WAF 3.0, value range 0-1).
Shown as fraction
alibabacloud.waf.5xx_ratio_wafv3_v2.maximum
(gauge)		5XX status code ratio (WAF 3.0, value range 0-100).
Shown as percent
alibabacloud.waf.acl_blocks_5m.maximum
(gauge)		Access-control blocks over the last 5 minutes.
Shown as request
alibabacloud.waf.acl_blocks_5m_wafv3.maximum
(gauge)		Access-control blocks over the last 5 minutes.
Shown as request
alibabacloud.waf.acl_rate_5m.maximum
(gauge)		Access-control block ratio over the last 5 minutes.
Shown as percent
alibabacloud.waf.acl_rate_5m_wafv3.maximum
(gauge)		Access-control block ratio over the last 5 minutes (WAF 3.0, value range 0-1).
Shown as fraction
alibabacloud.waf.acl_rate_5m_wafv3_v2.maximum
(gauge)		Access-control block ratio over the last 5 minutes (WAF 3.0, value range 0-100).
Shown as percent
alibabacloud.waf.active_monitor.maximum
(rate)		Process monitoring (active processes).
Shown as process
alibabacloud.waf.active_monitor_hybrid_wafv3.maximum
(rate)		Process monitoring (active processes).
Shown as process
alibabacloud.waf.cc_blocks_5m.maximum
(gauge)		CC attack protection blocks over the last 5 minutes.
Shown as request
alibabacloud.waf.cc_blocks_5m_wafv3.maximum
(gauge)		CC attack protection blocks over the last 5 minutes.
Shown as request
alibabacloud.waf.cc_rate_5m.maximum
(gauge)		CC attack protection block ratio over the last 5 minutes.
Shown as percent
alibabacloud.waf.cc_rate_5m_wafv3.maximum
(gauge)		CC attack protection block ratio over the last 5 minutes (WAF 3.0, value range 0-1).
Shown as fraction
alibabacloud.waf.cc_rate_5m_wafv3_v2.maximum
(gauge)		CC attack protection block ratio over the last 5 minutes (WAF 3.0, value range 0-100).
Shown as percent
alibabacloud.waf.cpu_usage.maximum
(gauge)		CPU utilization.
Shown as percent
alibabacloud.waf.cpu_usage_hybrid_wafv3.maximum
(gauge)		CPU utilization.
Shown as percent
alibabacloud.waf.disk_usage.maximum
(gauge)		Disk utilization.
Shown as percent
alibabacloud.waf.disk_usage_hybrid_wafv3.maximum
(gauge)		Disk utilization.
Shown as percent
alibabacloud.waf.memory_usage.maximum
(gauge)		Memory utilization.
Shown as percent
alibabacloud.waf.memory_usage_hybrid_wafv3.maximum
(gauge)		Memory utilization.
Shown as percent
alibabacloud.waf.qps.maximum
(rate)		Queries per second.
Shown as request
alibabacloud.waf.qps_wafv3.maximum
(rate)		Queries per second.
Shown as request
alibabacloud.waf.qps_ratio.maximum
(gauge)		QPS growth rate compared with the previous period.
Shown as percent
alibabacloud.waf.qps_ratio_wafv3.maximum
(gauge)		QPS growth rate compared with the previous period.
Shown as percent
alibabacloud.waf.qps_ratio_down.maximum
(gauge)		QPS decline rate compared with the previous period.
Shown as percent
alibabacloud.waf.qps_ratio_down_wafv3.maximum
(gauge)		QPS decline rate compared with the previous period.
Shown as percent
alibabacloud.waf.waf_blocks_5m.maximum
(gauge)		Web attack blocks over the last 5 minutes.
Shown as request
alibabacloud.waf.waf_blocks_5m_wafv3.maximum
(gauge)		Web attack blocks over the last 5 minutes.
Shown as request
alibabacloud.waf.waf_qps.average
(rate)		Instance-level QPS.
Shown as request
alibabacloud.waf.waf_qps.maximum
(rate)		Instance-level QPS.
Shown as request
alibabacloud.waf.waf_qps_wafv3.average
(rate)		Instance-level QPS.
Shown as request
alibabacloud.waf.waf_qps_wafv3.maximum
(rate)		Instance-level QPS.
Shown as request
alibabacloud.waf.waf_qps_wafv3_max.maximum
(rate)		Instance-level maximum QPS.
Shown as request
alibabacloud.waf.waf_rate_5m.maximum
(gauge)		Web attack block ratio over the last 5 minutes.
Shown as percent
alibabacloud.waf.waf_rate_5m_wafv3.maximum
(gauge)		Web attack block ratio over the last 5 minutes (WAF 3.0, value range 0-1).
Shown as fraction
alibabacloud.waf.waf_rate_5m_wafv3_v2.maximum
(gauge)		Web attack block ratio over the last 5 minutes (WAF 3.0, value range 0-100).
Shown as percent

Events

Alibaba Cloud WAF does not include any events.

Service Checks

Alibaba Cloud WAF does not include any service checks.

Troubleshooting

Need help? Contact Datadog support.