How to Monitor Web Application Firewall in Huawei Cloud
Site24x7 monitors Huawei Cloud's Web Application Firewall (WAF) metrics, providing insights into CPU, memory, disk, network throughput, connections, and policy sync to help you detect saturation and ensure consistent traffic inspection.
Use cases
Resource stability: Prevent inspection gaps by monitoring CPU, memory, and disk usage, enabling timely scaling before resource limits impact security.
Traffic control: Detect spikes early by tracking network throughput, enabling capacity assessment during attacks or sudden traffic surges.
Policy integrity: Ensure up-to-date protection by monitoring policy sync status, helping detect failed updates before vulnerabilities are exposed.
Setup and configuration
Web Application Firewall resources are auto-discovered and monitored during the Huawei Cloud integration. To enable monitoring, follow the steps below:
- Navigate to Cloud > Huawei > Add Huawei Monitor. Follow the steps to add a Huawei Cloud monitor.
- While adding or editing a Huawei Cloud monitor, select WAF from the Service/Resource Types drop-down and click Save.
- Navigate to Cloud > Huawei, select the created Huawei monitor, and then click Web Application Firewall.
Supported metrics
CPU and memory
Metric name |
Description |
Units |
| CPU Utilization | The percentage of CPU capacity currently consumed by the WAF instance. | Percentage |
| Memory Utilization | The percentage of memory capacity currently consumed by the WAF instance. | Percentage |
Disk
Metric name |
Description |
Units |
| Disk Utilization | The percentage of total disk capacity currently consumed by the WAF instance. | Percentage |
| Disk Available Size | The amount of disk storage currently available on the WAF instance. | Byte |
| Disk Read Throughput | The rate of data read from disk by the WAF instance per second. | Byte/second |
| Disk Write Throughput | The rate of data written to disk by the WAF instance per second. | Byte/second |
| Disk Read Requests Rate | The rate of read I/O requests processed by the disk per second. | Request/second |
| Disk Write Requests Rate | The rate of write I/O requests processed by the disk per second. | Request/second |
Network
Metric name |
Description |
Units |
| Network Incoming Throughput | The rate of data received by the WAF instance over the network per second. | Byte/second |
| Network Outgoing Throughput | The rate of data transmitted by the WAF instance over the network per second. | Byte/second |
| Network Incoming Packets Rate | The rate of packets received by the WAF instance per second. | Packets/second |
| Network Outgoing Packets Rate | The rate of packets transmitted by the WAF instance per second. | Packets/second |
Connections
Metric name |
Description |
Units |
| Active Connections | The number of connections currently active and processing traffic on the WAF instance. | Count |
| Concurrent Connections | The number of connections simultaneously open on the WAF instance at a given point in time. | Count |
Policy
Metric name |
Description |
Units |
| Latest Policy Sync Time | The time elapsed since the most recent security policy was synchronized to the WAF instance. | Millisecond |
Threshold configuration
You can configure thresholds and alerts for all Web Application Firewall metrics to detect performance degradation proactively or connection issues.
Go to Admin > Configuration Profiles > Threshold and Availability to create or modify your alert profiles.
IT Automation
Use Site24x7's IT automation to resolve common issues with Web Application Firewall performance automatically:
- Go to Admin > IT Automation Templates (+) > Add Automation Templates.
- Add tasks, such as restarting Web Application Firewall related services or executing custom scripts.
- Trigger the Web Application Firewall to perform these tasks based on specific alert events.
Configuration rules
You can streamline the monitor setup for multiple Web Application Firewalls using configuration rules. These rules allow you to automatically apply:
- Threshold profiles
- Notification profiles
- Tags
- Monitor group associations
Run a scan and associate the rule that matches your resource configurations when new Web Application Firewall monitors are added.