Alibaba Cloud DDoS New BGP Anti-DDoS¶

The displayed metrics of Alibaba Cloud DDoS New BGP Anti-DDoS include attack protection capability, cleaning capability, response time, and reliability. These metrics reflect the performance and credibility of the New BGP Anti-DDoS service in dealing with large-scale DDoS attacks.

Configuration¶

Install Func¶

It is recommended to activate TrueWatch Integration - Extensions - DataFlux Func (Automata): all prerequisites are automatically installed, please proceed with the script installation.

If deploying Func manually, refer to Manual Deployment of Func

Install Func¶

It is recommended to activate TrueWatch Integration - Extensions - DataFlux Func (Automata).

If deploying Func manually, refer to Manual Deployment of Func

Activate Script¶

Note: Please prepare the Alibaba Cloud AK that meets the requirements in advance (for simplicity, you can directly grant the global read-only permission ReadOnlyAccess).

Activate Script in DataFlux Func (Automata)¶

1. Log in to the TrueWatch console.
2. Click the 【Integration】 menu and select 【Cloud Account Management】.
3. Click 【Add Cloud Account】, select 【Alibaba Cloud】, and fill in the required information on the interface. If the cloud account information has been configured before, ignore this step.
4. Click 【Test】, and after the test is successful, click 【Save】. If the test fails, please check whether the relevant configuration information is correct and test again.
5. Click 【Cloud Account Management】, and you can see the added cloud account in the list. Click the corresponding cloud account to enter the details page.
6. Click the 【Integration】 button on the cloud account details page, and under the Not Installed list, find Alibaba Cloud DDoS New BGP Anti-DDoS, click the 【Install】 button, and the installation interface will pop up for installation.

Activate Script Manually¶

1. Log in to the Func console, click 【Script Market】, enter the TrueWatch script market, and search for: integration_alibabacloud_ddoscoo.

2. Click 【Install】, then enter the corresponding parameters: Alibaba Cloud AK ID, AK Secret, and account name.

3. Click 【Deploy Startup Script】, the system will automatically create the Startup script set and automatically configure the corresponding startup script.

4. After activation, you can see the corresponding automatic trigger configuration in 「Manage / Automatic Trigger Configuration」. Click 【Execute】 to execute immediately without waiting for the scheduled time. After a while, you can check the execution task records and corresponding logs.

Verification¶

1. In 「Manage / Automatic Trigger Configuration」, confirm whether the corresponding task has the corresponding automatic trigger configuration, and you can also check the corresponding task records and logs to check for any abnormalities.
2. In TrueWatch, check whether asset information exists in 「Infrastructure / Custom」.
3. In TrueWatch, check whether there is corresponding monitoring data in 「Metrics」.

Metrics¶

After configuring Alibaba Cloud CloudMonitor, the default measurement is as follows. More metrics can be collected through configuration Alibaba Cloud CloudMonitor Metrics Details

Objects¶

The collected Alibaba Cloud DDoS New BGP Anti-DDoS object data structure can be seen in 「Infrastructure - Custom」.

{
  "measurement": "aliyun_ddoscoo",
  "tags": {
    "name"      : "rg-acfm2pz25js****",
    "InstanceId": "rg-acfm2pz25js****",
    "RegionId"  : "cn-hangzhou",
    "Status"    : "1",
    "Edition"   : "9",
    "IpVersion" : "Ipv4",
    "Enabled"   : "1"
  },
  "fields": {
    "ExpireTime": "1637812279000",
    "CreateTime": "1637812279000",
    "message"   : "{Instance JSON Data}"
  }
}