CFW Monitored Metrics

Description

This topic describes metrics reported by CFW to Cloud Eye as well as their namespaces and dimensions. You can use APIs provided by Cloud Eye to query the metrics of the monitored object and alarms generated for CFW. You can also query them on the Cloud Eye console.

Namespace

SYS.CFW

A namespace is an abstract collection of resources and objects. Multiple namespaces can be created in a single cluster with the data isolated from each other. This enables namespaces to share the same cluster services without affecting each other.

Constraints

The following metrics are supported only in CN North-Ulanqab1, CN-Hong Kong, and CN East-Shanghai1:

internet_protection_traffic
vpc_protection_traffic
internet_protection_traffic_inbound
internet_protection_traffic_outbound
ips_allow_count

Metrics

The metrics described in Table 1 are old. You are advised to use the metric in Table 2.

**Table 1** CFW metrics (not recommended)
Metric ID	Metric Name	Description	Value Range	Unit	Number System	Dimension	Monitoring Period (Original Metric)
used_protection_bandwidth	Boundary Protection Bandwidth Usage (Mbps)	Used Internet bandwidth detected by CFW in the last 5 minutes	≥ 0 Value type: Float	KB/s	1000(SI)	fw_instance_id	5 minutes
protection_bandwidth_usage	Boundary Protection Bandwidth Usage (%)	Internet bandwidth usage rate detected by CFW within 5 minutes. Usage rate = Use bandwidth/Percentage of the used bandwidth to the bandwidth quota.	≥ 0 Value type: Float	Percentage	N/A	fw_instance_id	5 minutes

**Table 2** CFW metrics
Metric ID	Metric Name	Description	Value Range	Unit	Number System	Dimension	Monitoring Period (Original Metric)
internet_protection_bandwidth_usage	Internet Boundary Protection Bandwidth Usage (Mbps)	Bandwidth usage (Mbps) for protection at the Internet boundary.	≥ 0 Value type: Float	Bit/s	1000(SI)	fw_instance_id	Every minute
vpc_protection_bandwidth_usage	Inter-VPC Protection Bandwidth Usage (Mbps)	Bandwidth usage (Mbps) for inter-VPC protection.	≥ 0 Value type: Float	Bit/s	1000(SI)	fw_instance_id	Every minute
internet_protection_bandwidth_usage_rate	Internet Boundary Protection Bandwidth Usage (%)	Bandwidth usage (%) for protection at the Internet boundary.	≥ 0 Value type: Float	%	N/A	fw_instance_id	Every minute
vpc_protection_bandwidth_usage_rate	Inter-VPC Protection Bandwidth Usage (%)	Bandwidth usage (%) for inter-VPC protection.	≥ 0 Value type: Float	%	N/A	fw_instance_id	Every minute
internet_protection_pps	Internet Boundary Firewall PPS	PPS of protected objects at the Internet border.	≥ 0 Value type: Float	/	N/A	fw_instance_id	Every minute
vpc_protection_pps	Inter-VPC Firewall PPS	PPS of inter-VPC protected objects.	≥ 0 Value type: Float	/	N/A	fw_instance_id	Every minute
ips_hit_count	IPS Rule Hits	Number of times that traffic matches IPS rules.	≥ 0 Value type: Int	/	N/A	fw_instance_id	Every minute
ips_deny_count	IPS Rule Block Count	Number of times that traffic is blocked based on IPS rules.	≥ 0 Value type: Int	/	N/A	fw_instance_id	Every minute
acl_hit_count	ACL Rule Hits	Number of times that traffic matches ACL rules.	≥ 0 Value type: Int	/	N/A	fw_instance_id	Every minute
acl_deny_count	ACL Rule Block Count	Number of times that traffic is blocked based on ACL rules.	≥ 0 Value type: Int	/	N/A	fw_instance_id	Every minute
internet_protection_bandwidth_usage_inbound	Inbound Protection Bandwidth	Inbound Internet protection bandwidth of the firewall.	≥ 0 Value type: Float	Bit/s	1000(SI)	fw_instance_id	Every minute
internet_protection_bandwidth_usage_outbound	Outbound Protection Bandwidth	Outbound Internet protection bandwidth of the firewall.	≥ 0 Value type: Float	Bit/s	1000(SI)	fw_instance_id	Every minute
internet_protection_bandwidth_usage_rate_inbound	Inbound Protection Bandwidth Usage	This metric = Inbound Internet protection bandwidth of the firewall/Internet Border Protection Bandwidth	≥ 0 Value type: Float	%	N/A	fw_instance_id	Every minute
internet_protection_bandwidth_usage_rate_outbound	Outbound Protection Bandwidth Usage	Outbound Internet protection bandwidth usage (%).	≥ 0 Value type: Float	%	N/A	fw_instance_id	Every minute
internet_protection_pps_inbound	Inbound PPS	PPS of Internet access to firewall-protected objects.	≥ 0 Value type: Float	/	N/A	fw_instance_id	Every minute
internet_protection_pps_outbound	Outbound PPS	PPS of firewall-protected objects accessing the Internet.	≥ 0 Value type: Float	/	N/A	fw_instance_id	Every minute
internet_protection_traffic	Internet Protection Traffic	Traffic of the protected objects of a firewall.	≥ 0 Value type: Float	KB MB GB Byte	1000(SI)	fw_instance_id	Every minute
vpc_protection_traffic	Inter-VPC Protection Traffic	Traffic between the VPCs protected by a firewall.	≥ 0 Value type: Float	KB MB GB Byte	1000(SI)	fw_instance_id	Every minute
internet_protection_traffic_inbound	Inbound Internet Protection Traffic	Inbound Internet protection traffic of a firewall.	≥ 0 Value type: Float	KB MB GB Byte	1000(SI)	fw_instance_id	Every minute
internet_protection_traffic_outbound	Outbound Internet Protection Traffic	Outbound Internet protection traffic of a firewall.	≥ 0 Value type: Float	KB MB GB Byte	1000(SI)	fw_instance_id	Every minute
ips_allow_count	IPS Rule Allow Count	Number of times that traffic is allowed based on IPS rules.	≥ 0 Value type: int	/	N/A	fw_instance_id	Every minute

Dimension

Key	Value
fw_instance_id	A firewall ID is a CFW instance ID. It is automatically generated by the system after CFW is created. You can obtain the value of this parameter by referring to Querying the Firewall List. By default, if fw_instance_Id is not specified, information about the first firewall under the account is returned. If fw_instance_Id is specified, information about the firewall with this fw_instance_Id is returned. If object_Id is specified, information about the firewall with this object_Id is returned by default. If both fw_instance_Id and object_Id are specified, the specified object_Id must belong to the specified firewall.

Key

Value

fw_instance_id

A firewall ID is a CFW instance ID. It is automatically generated by the system after CFW is created.

You can obtain the value of this parameter by referring to Querying the Firewall List.

By default, if fw_instance_Id is not specified, information about the first firewall under the account is returned. If fw_instance_Id is specified, information about the firewall with this fw_instance_Id is returned.
If object_Id is specified, information about the firewall with this object_Id is returned by default. If both fw_instance_Id and object_Id are specified, the specified object_Id must belong to the specified firewall.