Updated on 2025-05-23 GMT+08:00

CFW Monitored Metrics

Description

This topic describes metrics reported by CFW to Cloud Eye as well as their namespaces. You can use Cloud Eye to query the metrics of the monitored object and alarms generated for CFW.

Namespace

SYS.CFW

A namespace is an abstract collection of resources and objects. Multiple namespaces can be created in a single cluster with the data isolated from each other. This enables namespaces to share the same cluster services without affecting each other.

Constraints

The following metrics are supported only in CN North-Ulanqab1, CN-Hong Kong, and CN East-Shanghai1:
  • internet_protection_traffic
  • vpc_protection_traffic
  • internet_protection_traffic_inbound
  • internet_protection_traffic_outbound
  • ips_allow_count

Metrics

The metrics described in Table 1 are old. You are advised to use the metric in Table 2.

Table 1 CFW metrics (not recommended)

Metric ID

Metric Name

Description

Value Range

Unit

Number System

Monitored Object (Dimension)

Monitoring Period (Original Metric)

used_protection_bandwidth

Boundary Protection Bandwidth Usage (Mbps)

Used Internet bandwidth detected by CFW in the last 5 minutes

≥ 0

Value type: Float

KB/s

1000(SI)

CFW

5 minutes

protection_bandwidth_usage

Boundary Protection Bandwidth Usage (%)

Internet bandwidth usage rate detected by CFW within 5 minutes.

Usage rate = Use bandwidth/Percentage of the used bandwidth to the bandwidth quota.

≥ 0

Value type: Float

Percentage

N/A

CFW

5 minutes

Table 2 CFW metrics

Metric ID

Metric Name

Description

Value Range

Unit

Number System

Monitored Object (Dimension)

Monitoring Period (Original Metric)

internet_protection_bandwidth_usage

Internet Boundary Protection Bandwidth Usage (Mbps)

Bandwidth usage (Mbps) for protection at the Internet boundary.

≥ 0

Value type: Float

Bit/s

1000(SI)

CFW

Every minute

vpc_protection_bandwidth_usage

Inter-VPC Protection Bandwidth Usage (Mbps)

Bandwidth usage (Mbps) for inter-VPC protection.

≥ 0

Value type: Float

Bit/s

1000(SI)

CFW

Every minute

internet_protection_bandwidth_usage_rate

Internet Boundary Protection Bandwidth Usage (%)

Bandwidth usage (%) for protection at the Internet boundary.

≥ 0

Value type: Float

%

N/A

CFW

Every minute

vpc_protection_bandwidth_usage_rate

Inter-VPC Protection Bandwidth Usage (%)

Bandwidth usage (%) for inter-VPC protection.

≥ 0

Value type: Float

%

N/A

CFW

Every minute

internet_protection_pps

Internet Boundary Firewall PPS

PPS of protected objects at the Internet border.

≥ 0

Value type: Float

/

N/A

CFW

Every minute

vpc_protection_pps

Inter-VPC Firewall PPS

PPS of inter-VPC protected objects.

≥ 0

Value type: Float

/

N/A

CFW

Every minute

ips_hit_count

IPS Rule Hits

Number of times that traffic matches IPS rules.

≥ 0

Value type: Int

/

N/A

CFW

Every minute

ips_deny_count

IPS Rule Block Count

Number of times that traffic is blocked based on IPS rules.

≥ 0

Value type: Int

/

N/A

CFW

Every minute

acl_hit_count

ACL Rule Hits

Number of times that traffic matches ACL rules.

≥ 0

Value type: Int

/

N/A

CFW

Every minute

acl_deny_count

ACL Rule Block Count

Number of times that traffic is blocked based on ACL rules.

≥ 0

Value type: Int

/

N/A

CFW

Every minute

internet_protection_bandwidth_usage_inbound

Inbound Protection Bandwidth

Inbound Internet protection bandwidth of the firewall.

≥ 0

Value type: Float

Bit/s

1000(SI)

CFW

Every minute

internet_protection_bandwidth_usage_outbound

Outbound Protection Bandwidth

Outbound Internet protection bandwidth of the firewall.

≥ 0

Value type: Float

Bit/s

1000(SI)

CFW

Every minute

internet_protection_bandwidth_usage_rate_inbound

Inbound Protection Bandwidth Usage

This metric = Inbound Internet protection bandwidth of the firewall/Internet Border Protection Bandwidth

≥ 0

Value type: Float

%

N/A

CFW

Every minute

internet_protection_bandwidth_usage_rate_outbound

Outbound Protection Bandwidth Usage

Outbound Internet protection bandwidth usage (%).

≥ 0

Value type: Float

%

N/A

CFW

Every minute

internet_protection_pps_inbound

Inbound PPS

PPS of Internet access to firewall-protected objects.

≥ 0

Value type: Float

/

N/A

CFW

Every minute

internet_protection_pps_outbound

Outbound PPS

PPS of firewall-protected objects accessing the Internet.

≥ 0

Value type: Float

/

N/A

CFW

Every minute

internet_protection_traffic

Internet Protection Traffic

Traffic of the protected objects of a firewall.

≥ 0

Value type: Float

  • KB
  • MB
  • GB
  • Byte

1000(SI)

CFW

Every minute

vpc_protection_traffic

Inter-VPC Protection Traffic

Traffic between the VPCs protected by a firewall.

≥ 0

Value type: Float

  • KB
  • MB
  • GB
  • Byte

1000(SI)

CFW

Every minute

internet_protection_traffic_inbound

Inbound Internet Protection Traffic

Inbound Internet protection traffic of a firewall.

≥ 0

Value type: Float

  • KB
  • MB
  • GB
  • Byte

1000(SI)

CFW

Every minute

internet_protection_traffic_outbound

Outbound Internet Protection Traffic

Outbound Internet protection traffic of a firewall.

≥ 0

Value type: Float

  • KB
  • MB
  • GB
  • Byte

1000(SI)

CFW

Every minute

ips_allow_count

IPS Rule Allow Count

Number of times that traffic is allowed based on IPS rules.

≥ 0

Value type: int

/

N/A

CFW

Every minute

Dimension

Key

Value

fw_instance_id

Firewall ID