Overview
Flow Logs (FL) offers a continuous, comprehensive, and non-intrusive traffic collection service, allowing real-time storage and analysis of network traffic. This aids in troubleshooting, architecture optimization, security detection, and compliance auditing. FL enhances the stability, security, and intelligence of your cloud networks.
Benefits
Zero Performance Loss
Non-intrusive data collection fundamentally avoids the high bandwidth and CPU resource consumption on CVMs associated with traditional methods, helping you build an efficient and stable cloud-based network monitoring system.
Security
Bypass collection eliminates the need to install any plug-ins on CVMs, addresses security concerns, and protects the collecting party from liability in case of failures.
Full-time and Full-flow Service
Advanced packet processing captures ENI traffic across the entire network, enabling continuous, network-wide flow analysis. This facilitates security auditing and troubleshooting with comprehensive tracking capabilities.
Real-time Data Collection
Collecting high volumes of network flows in real time enables immediate business network analysis, supporting prompt decision-making, strategic responses, and reduced network downtime.
Easy Management
FL can be activated within seconds and is easy to manage, improving OPS efficiency and allowing you to focus on core business innovations to enhance corporate competitiveness.
Features
Flow Log Collection
Flow logs can be generated for Virtual Private Clouds (VPCs), subnets, and Elastic Network Interfaces (ENIs). When created for VPCs or subnets, the flow logs for every individual ENI within those VPCs or subnets are collected. Each flow log record includes the following fields: source IP, destination IP, protocol, packet size, traffic volume, collection time window, and security group or Access Control List (ACL) permissions.
Flow Log Query
Collected flow log data can be sent to the Cloud Log Service (CLS) for storage and analysis. CLS supports viewing flow logs and performing multi-keyword searches on hundreds of millions of entries, providing results in seconds.
Flow Log Delivery
If CLS’s capacity is insufficient for your log storage and analysis needs, you can use CLS to transfer logs to alternative storage solutions:
- COS: Store and manage logs in a COS bucket under your account.
- CAS (coming soon): Archive logs in a CAS bucket under your account for backup storage.
Scenarios
Network Failure Troubleshooting
Network Architecture Optimization
Network Threat Alarms
Network quality is fundamental to business stability. FL enhances this by enabling snapshotting of failure sites, allowing for quick identification of issues, network rewinding for tracking, and reduced downtime. FL can specifically be used to swiftly determine:
1. The CVMs responsible for issues like broadcast storms or excessive bandwidth usage.
2. Whether CVM inaccessibility is caused by improper security group or ACL settings.
FL gathers comprehensive ENI traffic data across the entire network, around the clock. By leveraging big data analytics and visualization, it enhances your data-driven network operations capabilities and optimizes your network architecture to:
1. Analyze historical network data to establish business network benchmarks.
2. Quickly identify performance bottlenecks to adjust scaling effectively.
3. Assess end users’ access regions to expand business coverage appropriately.
4. Examine network traffic to refine network security policies.
Implementing additional traditional traffic checkpoints can negatively impact the performance of CVMs. Conversely, FL’s continuous, comprehensive, and non-intrusive collection method enables the timely identification of the following network threats, enhancing system security without compromising CVM performance:
1. Attempts to connect to numerous IP addresses.
2. Communications with known malicious IPs.
3. Use of uncommon protocols.
Compute
Edge Computing
Container
Distributed Cloud
Microservice
Serverless
Essential Storage Service
Data Migration
Data Process and Analysis
Relational Database
NoSQL Database
Enterprise Distributed DBMS
Database SaaS Tool
Networking
CDN and Edge platform
Network Security
Data Security
Application Security
Endpoint Security
Business Security
Security Services
Security Management
Domains & Websites
Office Collaboration
Enterprise Applications
Data Analysis
Image Recognition
Face Recognition
Voice Technology
AI Platform Service
Natural Language Processing
Optical Character Recognition
Internet of Things
Message Queue
Middleware
Communication
Interactive Video Services
Stream Services
Media On-Demand
Media Process Services
Media SDK
Cloud Real-time Rendering
Game Services
Game Video Service
Education Services
Blockchain Service
Building Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
Education