How to view traffic rankings, open port usage, and more-Cloud Firewall(Cloud Firewall)-阿里云帮助中心

The VPC Access feature of Cloud Firewall gives you visibility into traffic between your VPCs. It helps you monitor network traffic in real time, identify and troubleshoot anomalies, and quickly detect potential attacks. This topic describes how to view traffic rankings, session rankings, open ports, and assets.

Prerequisites

The VPC Border firewall is enabled. For more information, see Configure a VPC Border firewall for an Enterprise Edition transit router.

Procedure

Log on to the Cloud Firewall console.
In the navigation pane on the left, choose Analysis > VPC Access.
In the upper-right corner of the VPC Access page, select a time range.
You can select a predefined time range from the drop-down list or specify a custom time range within the last seven days.

In the upper-left corner of the VPC Access page, select a local VPC and a peer VPC to view the following data.

You can select a specific peer VPC or all VPCs that have a VPC Border firewall enabled.

Data	Description	Actions
Traffic Between VPCs	Displays peak traffic, average traffic, and inbound/outbound trend charts for the selected VPCs.	View top traffic ranking information: Click a point on the traffic trend chart to view the top-ranked traffic at that time in the Ranking of IP Addresses by Traffic section.
Ranking of IP Addresses by Traffic	By default, this section displays the top 10, 20, or 50 IP addresses ranked by traffic, including details such as IP address, inbound traffic, and outbound traffic.	View logs: Find the desired IP address and click View Logs in the Actions column. This redirects you to the VPC Border traffic log page, where you can view detailed logs for that IP address.
Ranking of Sessions Between VPCs	Displays traffic ranking data for sessions between VPCs. Details include traffic ranking, IP session, number of sessions, traffic volume, port, and proportion.	View port proportion details: Find the desired IP session and click View in the View Proportion column to display the port usage details for that session in the Open Port Proportion section.
Open Port Proportion	By default, this section displays the proportion details for all open ports.	None
Exposed Port	Displays open ports accessed by traffic between VPCs, including details such as local open port, protocol, application, access traffic, number of requests, local asset IP address, and risk level.	View open port details: Find the target local open port and click View Details in the Actions column. This opens the Port Access Details panel, which shows detailed information about the port. View log information: In the Port Access Details panel, find the target peer IP address and click View Logs in the Actions column. This redirects you to the VPC Border traffic log page to view detailed logs for that IP address. Note Click the icon in the upper-right corner of the list to download the open port data as a CSV file.
Asset	Displays assets accessed by traffic between VPCs, including details such as local asset IP address, local instance ID, local port, access traffic, number of requests, and risk level.	View asset access details: Find the target local asset IP address and click View Details in the Actions column. This opens the Asset Access Details panel, which shows detailed information about the asset. View log information: In the Asset Access Details panel, find the target peer IP address and click View Logs in the Actions column. This redirects you to the VPC Border traffic log page to view detailed logs for that IP address. Note Click the icon in the upper-right corner of the list to download the asset data as a CSV file.