Huawei Cloud WAF Web Application Firewall

Collect Huawei Cloud WAF Metrics data

Configuration¶

Install Func¶

It is recommended to enable Guance Integration - Extensions - Managed Func: all prerequisites are automatically installed, please continue with the script installation.

If you deploy Func on your own, refer to Self-deployed Func

It is recommended to deploy the GSE version.

Install Script¶

Note: Please prepare a Huawei Cloud AK that meets the requirements in advance (for simplicity, you can directly grant global read-only permission ReadOnlyAccess).

To synchronize Huawei Cloud WAF monitoring data, we install the corresponding collection script: "Guance Integration (Huawei Cloud-WAF Collection)" (ID: guance_huaweicloud_waf)

After clicking 【Install】, enter the corresponding parameters: Huawei Cloud AK, Huawei Cloud account name.

Click 【Deploy Startup Script】, and the system will automatically create a Startup script set, and automatically configure the corresponding startup script.

After the script is installed, find the script "Guance Integration (Huawei Cloud-WAF Collection)" under "Development" in Func, and edit the content of region_projects in collector_configs and monitor_configs, changing the region and Project ID to the actual region and Project ID, then click Save and Publish.

In addition, you can see the corresponding automatic trigger configuration under "Management / Automatic Trigger Configuration". Click 【Execute】 to immediately execute once without waiting for the scheduled time. After a short while, you can view the execution task records and corresponding logs.

Verification¶

1. In "Management / Automatic Trigger Configuration", confirm whether the corresponding task has the corresponding automatic trigger configuration, and you can also check the corresponding task records and logs to see if there are any abnormalities.
2. On the Guance platform, under "Infrastructure / Custom", check if asset information exists.
3. On the Guance platform, under "Metrics", check if there is corresponding monitoring data.

Metrics¶

Collect Huawei Cloud WAF Metrics, more Metrics can be collected through configuration Huawei Cloud WAF Metrics Details

Objects¶

The structure of the collected Huawei Cloud WAF object data can be viewed under "Infrastructure - Custom".

{
  "measurement": "huaweicloud_waf",
  "tags": {
    "RegionId"          : "cn-south-1",
    "hostname"          : "xxxxxxxxx.cn",
    "id"                : "9c877f3c83594d10af5aec52bcc1c707",
    "paid_type"         : "prePaid",
    "project_id"        : "756ada1aa17e4049b2a16ea41912e52d"
  },
  "fields": {
    "flag"              : "[JSON Data]",
    "proxy"             : "False",
    "timestamp"         : "1731653371361",
    "protect_status"    : "1",
    "access_status"     : "1",
    "exclusive_ip"      : "False",
    "web_tag"           : "waf"
  }
}

Note: The fields in tags and fields may change with subsequent updates.

Hint: The id value is the ID of the protected domain, used as a unique identifier.