Alibaba Cloud NAT¶

Alibaba Cloud NAT metrics display, including concurrent connections, new connections, VPC traffic, VPC packets, etc.

Configuration¶

Install Func¶

It is recommended to enable Guance integration - extension - hosted Func

If you deploy Func yourself, refer to Self-deployed Func

Enable Script¶

Note: Please prepare the required Alibaba Cloud AK in advance (for simplicity, you can directly grant global read-only permission ReadOnlyAccess)

Hosted Version Enable Script¶

Log in to Guance Console
Click on the 【Integration】 menu, select 【Cloud Account Management】
Click 【Add Cloud Account】, select 【Alibaba Cloud】, fill in the information required on the interface; if cloud account information has been configured before, ignore this step
Click 【Test】, after a successful test, click 【Save】; if the test fails, check whether the related configuration information is correct and retest
Click on the 【Cloud Account Management】 list to see the added cloud accounts, click the corresponding cloud account to enter the details page
Click the 【Integration】 button on the cloud account details page, find Alibaba Cloud NAT under the Not Installed list, click the 【Install】 button, and install it via the pop-up installation interface.

Manual Enable Script¶

Log in to the Func console, click 【Script Market】, enter the official script market, search for: guance_aliyun_nat
After clicking 【Install】, input the corresponding parameters: Alibaba Cloud AK ID, AK Secret, and account name.
Click 【Deploy Startup Script】, the system will automatically create a Startup script set and automatically configure the corresponding startup script.
After enabling, you can see the corresponding automatic trigger configuration in 「Management / Automatic Trigger Configuration」. Click 【Execute】 to immediately execute once without waiting for the scheduled time. Wait a moment, then you can view the execution task records and corresponding logs.

We default to collecting some configurations, see the metrics section for details.

Configure Custom Cloud Object Metrics

Verification¶

In 「Management / Automatic Trigger Configuration」 confirm whether the corresponding task has an automatic trigger configuration, and at the same time, you can check the corresponding task records and logs for any anomalies.
In Guance, 「Infrastructure / Custom」 check if asset information exists.
In Guance, 「Metrics」 check if there are corresponding monitoring data.

Metrics¶

After configuring Alibaba Cloud - Cloud Monitoring, the default metric set is as follows. You can collect more metrics through configuration Alibaba Cloud Cloud Monitoring Metric Details

Metric Id	Metric Name	Dimensions	Statistics	Unit	Min Periods
BWRateInFromInside	Traffic rate from VPC	userId,instanceId	Value	bps	60 s
BWRateInFromOutside	Traffic rate from public network	userId,instanceId	Value	bps	60 s
BWRateOutToInside	Outgoing VPC traffic rate	userId,instanceId	Value	bps	60 s
BWRateOutToOutside	Outgoing public network traffic rate	userId,instanceId	Value	bps	60 s
BytesInFromInside	Traffic from VPC	userId,instanceId	Value	bytes	60 s
BytesInFromOutside	Traffic from public network	userId,instanceId	Value	bytes	60 s
BytesOutToInside	Incoming VPC traffic	userId,instanceId	Value	bytes	60 s
BytesOutToOutside	Incoming public network traffic	userId,instanceId	Value	bytes	60 s
DropTotalBps	Total packet drop bandwidth	userId,instanceId	Value	bit/s	60 s
DropTotalPps	Total packet drop rate	userId,instanceId	Value	countS	60 s
EniBytesDropRx	Interface inbound dropped traffic	userId,instanceId,eniId	Value	bytes	60 s
EniBytesDropTx	Interface outbound dropped traffic	userId,instanceId,eniId	Value	bytes	60 s
EniBytesRx	Interface inbound traffic	userId,instanceId,eniId	Value	bytes	60 s
EniBytesTx	Interface outbound traffic	userId,instanceId,eniId	Value	bytes	60 s
EniPacketsDropPortAllocationFail	Interface port allocation failed packet count	userId,instanceId,eniId	Value	count	60 s
EniPacketsDropRx	Interface inbound dropped packet count	userId,instanceId,eniId	Value	count	60 s
EniPacketsDropTx	Interface outbound dropped packet count	userId,instanceId,eniId	Value	count	60 s
EniPacketsRx	Interface inbound packet count	userId,instanceId,eniId	Value	count	60 s
EniPacketsTx	Interface outbound packet count	userId,instanceId,eniId	Value	count	60 s
EniSessionActiveConnection	Interface concurrent connection count	userId,instanceId,eniId	Value	count	60 s
EniSessionLimitDropConnection	Interface new dropped connection rate	userId,instanceId,eniId	Value	countS	60 s
EniSessionNewConnection	Interface new connection rate	userId,instanceId,eniId	Value	countS	60 s
EniSessionNewLimitDropConnection	Interface concurrent dropped connection rate	userId,instanceId,eniId	Value	countS	60 s
ErrorPortAllocationCount	Number of port allocation failures within the interval	userId,instanceId	Value	count	60 s
ErrorPortAllocationRate	Port allocation failure rate within the interval	userId,instanceId	Value	countS	60 s
InBpsSum	Throughput	userId,instanceId	Value	bit/s	60 s
PPSRateInFromInside	Packet rate from VPC	userId,instanceId	Value	countS	60 s
PPSRateInFromOutside	Packet rate from public network	userId,instanceId	Value	countS	60 s
PPSRateOutToInside	Incoming VPC packet rate	userId,instanceId	Value	countS	60 s
PPSRateOutToOutside	Incoming public network packet rate	userId,instanceId	Value	countS	60 s
PacketsInFromInside	Packet volume from VPC	userId,instanceId	Value	count	60 s
PacketsInFromOutside	Packet volume from public network	userId,instanceId	Value	count	60 s
PacketsOutToInside	Incoming VPC packet volume	userId,instanceId	Value	count	60 s
PacketsOutToOutside	Incoming public network packet volume	userId,instanceId	Value	count	60 s
SessionActiveConnection	Concurrent connection count	userId,instanceId	Value	count	60 s
SessionActiveConnectionWaterLever	Concurrent connection water level	userId,instanceId	Value	%	60 s
SessionLimitDropConnection	Concurrent dropped connection rate	userId,instanceId	Value	countS	60 s
SessionNewConnection	New connection rate	userId,instanceId	Value	countS	60 s
SessionNewConnectionWaterLever	New connection water level	userId,instanceId	Value	%	60 s
SessionNewLimitDropConnection	New dropped connection rate	userId,instanceId	Value	countS	60 s

Objects¶

The collected Alibaba Cloud SLB object data structure can be seen from 「Infrastructure - Custom」

{
  "measurement": "aliyun_nat",
  "tags": {
    "name"              : "ngw-bp1b3urqh0t7xxxxx",
    "NatGatewayId"      : "ngw-bp1b3urqh0t7xxxxx",
    "instance_name"     : "Operator",
    "VpcId"             : "vpc-bp1l3jzwhv8cnu9p8u4yh",
    "Spec"              : "Small",
    "InstanceChargeType": "PrePaid",
    "RegionId"          : "cn-hangzhou",
    "BusinessStatus"    : "Normal"
  },
  "fields": {
    "CreationTime": "2021-01-27T06:15:48Z",
    "ExpiredTime" : "2022-04-27T16:00Z",
    "message"     : "{JSON instance data}"
  }
}