Monitoring in Smart Web Security

Monitoring allows you to track the rate of requests to a protected resource: allowed, blocked, routed to SmartCaptcha, and processed by an ARL profile. You can also set up alerts to get notifications when request rate thresholds are exceeded.

Yandex Cloud offers pre-configured dashboards for Smart Web Security monitoring.

You can view the dashboards using one of the following options:

• On the Smart Web Security page, select Monitoring.
• Under Monitoring, click Open in Monium at the top right.
• On the Application Load Balancer page:
  1. Select the load balancer with an associated security profile.
  2. Navigate to Monitoring.
  3. Go to the Smart Web Security tab.

Description of Smart Web Security monitoring dashboardsDescription of Smart Web Security monitoring dashboards

• Inbound total RPS: Total number of incoming requests per second (RPS) reaching the load balancer with the security profile.

  Metric: load_balancer.requests_count_per_second.

• Allowed by Security Profile RPS: Number of incoming requests per second the security profile has checked and allowed.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by antirobot_verdict=allow.

• Denied by Security Profile RPS: Number of incoming requests per second the security profile has checked and blocked.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by antirobot_verdict=deny.

• Redirected to SmartCaptcha RPS: Number of incoming requests per second routed to SmartCaptcha for additional verification.

  Metric: load_balancer.smart_web_security.requests_per_second filtered by the antirobot_verdict=captcha label.

  Note

  The total number of requests for Allowed by Security Profile RPS, Denied by Security Profile RPS, and Redirected to SmartCaptcha RPS matches the Inbound total RPS value at any given time. However, not all the requests allowed at this stage and labeled with antirobot_verdict=allow will reach the protected node. They may get blocked by the ARL profile limiting the incoming request rate.

• Allowed by ARL Profile RPS: Number of incoming requests per second not exceeding the ARL profile limit.

  Metric: load_balancer.smart_web_security.arl_requests_per_second filtered by the arl_verdict=allow label.

• Denied by ARL Profile RPS: Number of incoming requests per second exceeding the ARL profile limit and blocked.

  Metric: load_balancer.smart_web_security.arl_requests_per_second filtered by the arl_verdict=deny label.

  Note

  The total number of requests for Allowed by ARL Profile RPS and Denied by ARL Profile RPS matches the Allowed by Security Profile RPS value at any given time.

• Redirected to SmartCaptcha by ARL Profile RPS: Number of incoming requests per second the ARL profile routes to SmartCaptcha for additional verification.

  Metric: load_balancer.smart_web_security.arl_requests_per_second filtered by arl_verdict=captcha.

You can combine multiple metrics in a single chart and configure your own dashboards in Monitoring.

Useful linksUseful links

• Yandex Monitoring metric reference
• Dashboards in Monitoring