Introduction
The Web Application Firewall (WAF) safeguards websites and applications by continuously monitoring, filtering, and blocking malicious traffic. It protects against common web-based attacks such as SQL injection, cross-site scripting (XSS), and malicious bots.
WAF intelligently inspects incoming requests, scrubbing harmful traffic and allowing only legitimate and safe requests to reach backend servers. By preventing malicious requests from impacting application availability or performance, WAF helps ensure business continuity, application reliability, and data security.
Setup
To set up the Alibaba integration and discover the Alibaba service, navigate to Alibaba Integration Discovery Profile and select WAF Instance.
External Reference
What is WAF - Alibaba Cloud Documentation
Supported Metrics
Alibaba WAF Instance
| Opsramp Metric | Metric Display Name | Unit | Aggregation Type | Description |
|---|---|---|---|---|
| acs_waf_4XX_ratio_wafv3 | 4XX ratio-wafv3 | % | NULL | Percentage of 4XX client error responses for WAF v3 |
| acs_waf_4XX_ratio_wafv3_v2 | 4XX ratio-wafv3 v2 | % | NULL | Percentage of 4XX client error responses for WAF v3 (version 2) |
| acs_waf_5XX_ratio_wafv3 | 5XX ratio-wafv3 | % | NULL | Percentage of 5XX server error responses for WAF v3 |
| acs_waf_5XX_ratio_wafv3_v2 | 5XX ratio-wafv3 v2 | % | NULL | Percentage of 5XX server error responses for WAF v3 (version 2) |
| acs_waf_acl_blocks_5m_wafv3 | acl blocks 5m-wafv3 | count | NULL | Number of requests blocked by ACL rules in 5-minute window for WAF v3 |
| acs_waf_acl_rate_5m_wafv3 | acl rate 5m-wafv3 | % | NULL | Rate of ACL blocks as percentage of total requests in 5-minute window for WAF v3 |
| acs_waf_acl_rate_5m_wafv3_v2 | acl rate 5m-wafv3 v2 | % | NULL | Rate of ACL blocks as percentage of total requests in 5-minute window for WAF v3 (version 2) |
| acs_waf_cc_blocks_5m_wafv3 | cc blocks 5m-wafv3 | count | NULL | Number of requests blocked by CC protection in 5-minute window for WAF v3 |
| acs_waf_cc_rate_5m_wafv3 | cc rate 5m-wafv3 | % | NULL | Rate of CC protection blocks as percentage of total requests in 5-minute window for WAF v3 |
| acs_waf_cc_rate_5m_wafv3_v2 | cc rate 5m-wafv3 v2 | % | NULL | Rate of CC protection blocks as percentage of total requests in 5-minute window for WAF v3 (version 2) |
| acs_waf_qps_wafv3 | qps-wafv3 | countS | NULL | Queries per second processed by WAF v3 |
| acs_waf_qps_ratio_wafv3 | qps ratio-wafv3 | % | NULL | QPS ratio compared to baseline for WAF v3 |
| acs_waf_qps_ratio_down_wafv3 | qps ratio down-wafv3 | % | NULL | Percentage decrease in QPS from baseline for WAF v3 |
| acs_waf_waf_blocks_5m_wafv3 | waf blocks 5m-wafv3 | count | NULL | Number of requests blocked by WAF protection rules in 5-minute window for WAF v3 |
| acs_waf_waf_qps_wafv3 | waf qps-wafv3 | countS | NULL | Queries per second processed through WAF protection for WAF v3 |
| acs_waf_waf_qps_wafv3_max | waf qps-wafv3 max | countS | NULL | Maximum queries per second processed through WAF protection for WAF v3 |
| acs_waf_waf_rate_5m_wafv3 | waf rate 5m-wafv3 | % | NULL | Rate of WAF protection blocks as percentage of total requests in 5-minute window for WAF v3 |
| acs_waf_waf_rate_5m_wafv3_v2 | waf rate 5m-wafv3 v2 | % | NULL | Rate of WAF protection blocks as percentage of total requests in 5-minute window for WAF v3 (version 2) |
| acs_waf_waf_qps | waf qps | countS | NULL | Queries per second processed through WAF protection |
WAF Domain
| Opsramp Metric | Metric Display Name | Unit | Aggregation Type | Description |
|---|---|---|---|---|
| acs_waf_4XX_ratio | 4XX ratio | NULL | Percentage of 4XX client error responses for WAF domain | |
| acs_waf_5XX_ratio | 5XX ratio | NULL | Percentage of 5XX server error responses for WAF domain | |
| acs_waf_acl_blocks_5m | acl blocks 5m | count | NULL | Number of requests blocked by ACL rules in 5-minute window for WAF domain |
| acs_waf_acl_rate_5m | acl rate 5m | NULL | Rate of ACL blocks as percentage of total requests in 5-minute window for WAF domain | |
| acs_waf_cc_blocks_5m | cc blocks 5m | count | NULL | Number of requests blocked by CC protection in 5-minute window for WAF domain |
| acs_waf_cc_rate_5m | cc rate 5m | NULL | Rate of CC protection blocks as percentage of total requests in 5-minute window for WAF domain | |
| acs_waf_qps | qps | countS | NULL | Queries per second processed by WAF domain |
| acs_waf_qps_ratio | qps ratio | % | NULL | QPS ratio compared to baseline for WAF domain |
| acs_waf_qps_ratio_down | qps ratio down | % | NULL | Percentage decrease in QPS from baseline for WAF domain |
| acs_waf_waf_blocks_5m | waf blocks 5m | count | NULL | Number of requests blocked by WAF protection rules in 5-minute window for WAF domain |
| acs_waf_waf_rate_5m | waf rate 5m | NULL | Rate of WAF protection blocks as percentage of total requests in 5-minute window for WAF domain |