Huawei Cloud WAF Web Application Firewall

Collect Huawei Cloud WAF Metrics data

Configuration¶

Install Func¶

It is recommended to activate the Guance integration - extensions - hosted Func: all prerequisites are automatically installed, please proceed with the script installation

If you need to deploy Func yourself, refer to Self-deploy Func

Install Script¶

Note: Please prepare the Huawei Cloud AK in advance (for simplicity, you can directly grant the global read-only permission Tenant Guest)

Hosted Version Activation Script¶

1. Log in to the Guance console
2. Click the 【Integration】 menu, select 【Cloud Account Management】
3. Click 【Add Cloud Account】, select 【Huawei Cloud】, and fill in the required information on the interface. If the cloud account information has been configured before, skip this step
4. Click 【Test】, and if the test is successful, click 【Save】. If the test fails, please check the relevant configuration information and retest
5. Click 【Cloud Account Management】, and you can see the added cloud account in the list. Click the corresponding cloud account to enter the details page
6. Click the 【Integration】 button on the cloud account details page, find Huawei Cloud WAF Web Application Firewall in the Not Installed list, and click the 【Install】 button to pop up the installation interface for installation.

Manual Activation Script¶

1. Log in to the Func console, click 【Script Market】, enter the Guance script market, and search for integration_huaweicloud_waf

2. Click 【Install】, and enter the corresponding parameters: Huawei Cloud AK, SK, and account name

3. Click 【Deploy Startup Script】, the system will automatically create the Startup script set and automatically configure the corresponding startup script

4. After enabling, you can see the corresponding automatic trigger configuration in 「Manage / Automatic Trigger Configuration」. Click 【Execute】 to immediately execute once without waiting for the scheduled time. After a while, you can check the execution task records and corresponding logs

Verification¶

1. In 「Manage / Automatic Trigger Configuration」, confirm whether the corresponding task has the corresponding automatic trigger configuration, and check the corresponding task records and logs for any abnormalities
2. In Guance, check whether asset information exists in 「Infrastructure / Custom」
3. In Guance, check whether there is corresponding monitoring data in 「Metrics」

Metrics¶

Collect Huawei Cloud WAF Metrics, you can collect more metrics by configuration Huawei Cloud WAF Metrics Details

Object¶

The collected Huawei Cloud WAF object data structure can be seen in 「Infrastructure - Custom」.

{
  "measurement": "huaweicloud_waf",
  "tags": {
    "RegionId"          : "cn-south-1",
    "hostname"          : "xxxxxxxxx.cn",
    "id"                : "9c877f3c83594d10af5aec52bcc1c707",
    "paid_type"         : "prePaid",
    "project_id"        : "756ada1aa17e4049b2a16ea41912e52d"
  },
  "fields": {
    "flag"              : "[JSON data]",
    "proxy"             : "False",
    "timestamp"         : "1731653371361",
    "protect_status"    : "1",
    "access_status"     : "1",
    "exclusive_ip"      : "False",
    "web_tag"           : "waf"
  }
}

Note: The fields in tags and fields may change with subsequent updates

Note: The id value is the protected domain ID, used as a unique identifier ```