What Is the Specific Latency of the CFW Traffic Bandwidth Chart?
Typically, the delay is 1 minute.
How Often Is Traffic Center Updated? How Often Are Traffic Logs Updated?
The traffic center list is updated every 10 minutes, and traffic logs are updated in real time.
Why Does the CFW Traffic Peak Not Match?
The traffic graph displays the average bandwidth, where average bandwidth refers to the mean value within the statistical time interval.
The peak value is calculated based on traffic statistics within 10 seconds: the average value of a single IP address is reported every 10 seconds, and then the maximum value within a period of time is taken as the peak value.
Both alarms and billing are based on the traffic statistics displayed on the page.
Why Do Some Traffic Logs for Requests to Destination Port 443 Not Include Domain Information?
1. The TCP handshake is not completed or the connection fails to be established.
2. The access did not pass through the domain name.
3. The client request does not carry the SNI.
In Which Regions Is the CFW Traffic Analysis VPC Deployed, and Is Nearby Analysis Used?
Currently, it is deployed only in the Guangzhou region. In fact, based on customer business requirements, a cluster is set up in each region for local processing.
What Are the Performance Limits of CFW NDR and the Private Link Used for Traffic Mirroring?
The performance upper limit of Private Link fails to reach the theoretical value, and the actual upper limit depends on the private network bandwidth of the server.
How to Determine Whether Traffic Is Private or Public, and How to Identify Traffic from Other Clouds Imported via Direct Connect?
The determination is based on the IP address type of the source address. Because the peer VPC connected through the dedicated line belongs to the private network, the traffic is identified as private network traffic.
If Most Traffic Is HTTPS, Are the Rules Passed to the Intrusion Defense Engine for Traffic Analysis Still Effective?
Intrusion Defense rules include rules that are effective for HTTPS. In particular, exploit traffic can be matched by characteristics through regular expressions. Therefore, some alarms can be detected even for encrypted traffic.
What Is the Size of Logs Recorded by Traffic Analysis?
The maximum record for a single session is 1000 bytes. Data is compressed, and not all transmitted packets are recorded.