All Products
Search
Document Center

Cloud Enterprise Network:Monitor CEN resources

Last Updated:Dec 01, 2025

Cloud Enterprise Network (CEN) monitors multiple metrics for various resources by default. You can use the monitoring data to learn about the traffic rate and bandwidth usage of your resources. Alibaba Cloud Monitor automatically collects the monitoring data of CEN resources. You can also use Cloud Monitor to create threshold-based alert rules for these metrics. If a metric value exceeds the specified threshold, the system sends you an alert notification. This helps you promptly address issues and ensure that your services run as expected.

Supported resources

Note

You can view monitoring metrics for VPC, ECR, VPN, and VBR connections only on the Enterprise Edition transit routers to which these connections are attached.

Resource

Supported monitoring granularity

Enterprise Edition transit router

  • View monitoring metrics for an Enterprise Edition transit router.

  • View monitoring metrics for an Enterprise Edition transit router in a specific zone.

VPC connection

  • View monitoring metrics for a VPC connection.

  • View monitoring metrics for a VPC connection on an Enterprise Edition transit router in a specific zone.

ECR connection

  • View monitoring metrics for an ECR connection.

  • View monitoring metrics for an ECR connection on an Enterprise Edition transit router in a specific zone.

VPN connection

  • View monitoring metrics for a VPN connection.

  • View monitoring metrics for a VPN connection on an Enterprise Edition transit router in a specific zone.

VBR connection

  • View monitoring metrics for a VBR connection.

  • View monitoring metrics for a VBR connection on an Enterprise Edition transit router in a specific zone.

Inter-region connection

  • View monitoring metrics for an inter-region connection.

  • If you configure a QoS policy for an inter-region connection, you can view the monitoring metrics of a specific QoS queue under the inter-region connection.

    You can view the monitoring metrics of QoS queues only for inter-region connections on Enterprise Edition transit routers.

Express Connect circuit

View monitoring metrics for an Express Connect circuit associated with a VBR instance.

The system monitors only the traffic rate and bandwidth usage of the VBR instance on the Express Connect circuit.

Bandwidth plan

View monitoring metrics for a bandwidth plan instance.

Zone-level monitoring

When an Enterprise Edition transit router connects to a VPC-connected instance, ECR instance, VBR instance, or IPsec-VPN connection, the system deploys resources in the zones supported by the Enterprise Edition transit router to establish the network connection.

When you create a VPC connection, you can specify the zones where resources are deployed. When you create an ECR connection, VBR connection, or VPN connection, you cannot specify the zones. The system automatically selects zones and deploys the required resources.

For zone-level monitoring, CEN automatically monitors all zones that are supported by the Enterprise Edition transit router and have connected resources. If a zone is not monitored, it indicates that the Enterprise Edition transit router has not connected to any resources in that zone, and no traffic has been transmitted through it.

Description of monitoring metrics

  • Each data point of a metric is the average value of data collected within a 1-minute period.

  • For metrics related to the peak bandwidth rate, the system collects a bandwidth rate data point every 10 seconds within a 1-minute period. A total of six data points are collected. The maximum of the six data points is used as the peak bandwidth rate for that minute. You can use the peak bandwidth rate to observe micro-burst traffic at the per-second level.

  • For metrics related to the average bandwidth rate, the system calculates the average of the bandwidth rates within a 1-minute period and uses it as the average rate for that minute.

Transit router metrics

Metric

Instance-level description

Zone-level description

Inbound Bytes

The total number of bytes that the transit router receives from network instance connections. Unit: Byte.

The number of bytes that the transit router receives from network instance connections in a specific zone. Unit: Byte.

Inbound Traffic Rate

The total rate of traffic that the transit router receives from network instance connections. Unit: bps.

The rate of traffic that the transit router receives from network instance connections in a specific zone. Unit: bps.

Inbound Packets

The total number of packets that the transit router receives from network instance connections. Unit: packets.

The number of packets that the transit router receives from network instance connections in a specific zone. Unit: packets.

Inbound Packet Rate

The total rate of packets that the transit router receives from network instance connections. Unit: pps.

The rate of packets that the transit router receives from network instance connections in a specific zone. Unit: pps.

Outbound Bytes

The total number of bytes that the transit router sends to network instance connections. Unit: Byte.

The number of bytes that the transit router sends to network instance connections in a specific zone. Unit: Byte.

Outbound Traffic Rate

The total rate of traffic that the transit router sends to network instance connections. Unit: bps.

The rate of traffic that the transit router sends to network instance connections in a specific zone. Unit: bps.

Outbound Packets

The total number of packets that the transit router sends to network instance connections. Unit: packets.

The number of packets that the transit router sends to network instance connections in a specific zone. Unit: packets.

Outbound Packet Rate

The total rate of packets that the transit router sends to network instance connections. Unit: pps.

The rate of packets that the transit router sends to network instance connections in a specific zone. Unit: pps.

Bytes Dropped Due to Missing Route

The total number of bytes of traffic that is forwarded to the transit router and then dropped because no matching route is found. Unit: Byte.

The number of bytes of traffic that is forwarded to a specific zone of the transit router and then dropped because no matching route is found. Unit: Byte.

Rate of Traffic Dropped Due to Missing Routes

The total rate of traffic that is forwarded to the transit router and then dropped because no matching route is found. Unit: bps.

The rate of traffic that is forwarded to a specific zone of the transit router and then dropped because no matching route is found. Unit: bps.

Packets Dropped Due to Missing Routes

The total number of packets that are forwarded to the transit router and then dropped because no matching route is found. Unit: packets.

The number of packets that are forwarded to a specific zone of the transit router and then dropped because no matching route is found. Unit: packets.

Rate of Packets Dropped Due to Missing Routes

The total rate of packets that are forwarded to the transit router and then dropped because no matching route is found. Unit: pps.

The rate of packets that are forwarded to a specific zone of the transit router and then dropped because no matching route is found. Unit: pps.

Packets Dropped Due to Missing Routes

The total number of bytes of traffic that is forwarded to the transit router and then dropped because a blackhole route is matched. Unit: Byte.

The number of bytes of traffic that is forwarded to a specific zone of the transit router and then dropped because a blackhole route is matched. Unit: Byte.

Rate Of Packets Dropped Due to Missing Routes

The total rate of traffic that is forwarded to the transit router and then dropped because a blackhole route is matched. Unit: bps.

The rate of traffic that is forwarded to a specific zone of the transit router and then dropped because a blackhole route is matched. Unit: bps.

Bytes Dropped Due to Balckhole Routes

The total number of packets that are forwarded to the transit router and then dropped because a blackhole route is matched. Unit: packets.

The number of packets that are forwarded to a specific zone of the transit router and then dropped because a blackhole route is matched. Unit: packets.

Rate of Packets Dropped due to Blackhole Routes

The total rate of packets that are forwarded to the transit router and then dropped because a blackhole route is matched. Unit: pps.

The rate of packets that are forwarded to a specific zone of the transit router and then dropped because a blackhole route is matched. Unit: pps.

Intra-region connection metrics

VPC connections, ECR connections, VPN connections, and VBR connections support the same monitoring metrics. The following table describes the metrics.

Metric

Network instance connection-level description

Zone-level description

AttachmentInBytes

The total number of bytes transmitted from the network instance to the transit router. Unit: Byte.

The number of bytes transmitted from the network instance to a specific zone of the transit router. Unit: Byte.

AttachmentInRates

The total traffic rate from the network instance to the transit router. Unit: bps.

The traffic rate from the network instance to a specific zone of the transit router. Unit: bps.

AttachmentInPackets

The total number of packets transmitted from the network instance to the transit router. Unit: packets.

The number of packets transmitted from the network instance to a specific zone of the transit router. Unit: packets.

AttachmentInPacketsRate

The total packet rate from the network instance to the transit router. Unit: pps.

The packet rate from the network instance to a specific zone of the transit router. Unit: pps.

AttachmentOutBytes

The total number of bytes transmitted from the transit router to the network instance. Unit: Byte.

The number of bytes transmitted from a specific zone of the transit router to the network instance. Unit: Byte.

AttachmentOutRate

The total traffic rate from the transit router to the network instance. Unit: bps.

The traffic rate from a specific zone of the transit router to the network instance. Unit: bps.

AttachmentOutPackets

The total number of packets transmitted from the transit router to the network instance. Unit: packets.

The number of packets transmitted from a specific zone of the transit router to the network instance. Unit: packets.

AttachmentOutPacketsRate

The total packet rate from the transit router to the network instance. Unit: pps.

The packet rate from a specific zone of the transit router to the network instance. Unit: pps.

AttachmentNoRouteDropBytes

The total number of bytes of traffic from the network instance to the transit router that is dropped because no matching route is found. Unit: Byte.

The number of bytes of traffic from the network instance to the transit router that is dropped in a specific zone because no matching route is found. Unit: Byte.

AttachmentNoRouteDropRate

The total rate of traffic from the network instance to the transit router that is dropped because no matching route is found. Unit: bps.

The rate of traffic from the network instance to the transit router that is dropped in a specific zone because no matching route is found. Unit: bps.

AttachmentNoRouteDropPackets

The total number of packets from the network instance to the transit router that are dropped because no matching route is found. Unit: packets.

The number of packets from the network instance to the transit router that are dropped in a specific zone because no matching route is found. Unit: packets.

AttachmentNoRouteDropPacketsRate

The total rate of packets from the network instance to the transit router that are dropped because no matching route is found. Unit: pps.

The rate of packets from the network instance to the transit router that are dropped in a specific zone because no matching route is found. Unit: pps.

AttachmentBlackHoleDropBytes

The total number of bytes of traffic from the network instance to the transit router that is dropped because a blackhole route is matched. Unit: Byte.

The number of bytes of traffic from the network instance to the transit router that is dropped in a specific zone because a blackhole route is matched. Unit: Byte.

AttachmentBlackHoleDropRate

The total rate of traffic from the network instance to the transit router that is dropped because a blackhole route is matched. Unit: bps.

The rate of traffic from the network instance to the transit router that is dropped in a specific zone because a blackhole route is matched. Unit: bps.

AttachmentBlackHoleDropPackets

The total number of packets from the network instance to the transit router that are dropped because a blackhole route is matched. Unit: packets.

The number of packets from the network instance to the transit router that are dropped in a specific zone because a blackhole route is matched. Unit: packets.

AttachmentBlackHoleDropPacketsRate

The total rate of packets from the network instance to the transit router that are dropped because a blackhole route is matched. Unit: pps.

The rate of packets from the network instance to the transit router that are dropped in a specific zone because a blackhole route is matched. Unit: pps.

Inter-region connection metrics

Inter-region connection metrics

Metric

Description

InterRegionPeakBandwidthRate

This metric contains four groups of information. For example, if Region A and Region B are communicating, the system displays the following information:

  • The peak bandwidth rate from Region A to Region B. Unit: bps.

  • The peak bandwidth rate from Region B to Region A. Unit: bps.

  • The average bandwidth rate from Region A to Region B. Unit: bps.

  • The average bandwidth rate from Region B to Region A. Unit: bps.

InterRegionPeakBandwidthUtilization

This metric contains four groups of information. For example, if Region A and Region B are communicating, the system displays the following information:

  • The percentage of the inter-region connection bandwidth that is consumed by the peak traffic from Region A to Region B.

  • The percentage of the inter-region connection bandwidth that is consumed by the peak traffic from Region B to Region A.

  • The percentage of the inter-region connection bandwidth that is consumed by the average traffic from Region A to Region B.

  • The percentage of the inter-region connection bandwidth that is consumed by the average traffic from Region B to Region A.

InterRegionRateLimitDropPackets

This metric contains two groups of information. For example, if Region A and Region B are communicating, the system displays the following information:

  • The packet loss rate due to throttling in the outbound direction from Region A to Region B. Unit: pps.

  • The packet loss rate due to throttling in the outbound direction from Region B to Region A. Unit: pps.

LatencyByConnectionRegion

The average communication latency between regions. Unit: ms.

You can also view the communication latency of inter-region connections that use Platinum or Gold links on an Enterprise Edition transit router in the Network Intelligence Service console. For more information, see View network performance between regions.

Note

The legacy metrics Outbound Bandwidth by Region, Outbound Bandwidth Percentage by Region, and Inter-region Throttling Packet Loss Rate are deprecated.

QoS queue metrics

Metric

Description

InterRegionQosQueuePeakBandwidthRate

This metric contains the following two groups of information:

  • Rate of Outbound Bandwidth: The peak bandwidth rate of the current queue when traffic is sent from the local transit router to the peer transit router. Unit: bps.

  • Average Rate of Outbound Bandwidth: The average bandwidth rate of the current queue when traffic is sent from the local transit router to the peer transit router. Unit: bps.

InterRegionQosQueuePeakBandwidthUtilization

This metric contains the following two groups of information:

  • Usage of Outbound Bandwidth: The percentage of the inter-region connection bandwidth that is consumed by the peak traffic of the current queue when traffic is sent from the local transit router to the peer transit router.

  • Average Usage of Outbound Bandwidth: The percentage of the inter-region connection bandwidth that is consumed by the average traffic of the current queue when traffic is sent from the local transit router to the peer transit router.

InterRegionQosQueueRateLimitDropPackets

The packet loss rate of the current queue due to throttling when traffic is sent from the local transit router to the peer transit router. Unit: pps.

Express Connect circuit metrics

Important

After a transit router is connected to a VBR instance, you can view the VBRInternetOutRate and VBRInternetInRate of the Express Connect circuit by default. To view the circuit's VBRHealthyCheckLatency and VBRHealthyCheckLossRate, you must configure a health check. For more information, see Configure health checks for a VBR.

Metric

Description

VBRInternetOutRate

The bandwidth used for traffic from Alibaba Cloud to your data center. Unit: bps.

VBRInternetInRate

The bandwidth used for traffic from your data center to Alibaba Cloud. Unit: bps.

VBRHealthyCheckLatency

The communication latency between Alibaba Cloud and your data center. Unit: ms.

VBRHealthyCheckLossRate

The packet loss rate for communication between Alibaba Cloud and your data center.

Bandwidth plan metrics

Metric

Description

CENBandwidthPackagePeakBandwidthRate

This metric contains the following two groups of information:

  • Outbound Peak Bandwidth Rate: The peak rate of the used bandwidth of the bandwidth plan. Unit: bps.

  • Outbound Average Bandwidth Rate: The average rate of the used bandwidth of the bandwidth plan. Unit: bps.

CENBandwidthPackagePeakBandwidthUtilization

This metric contains the following two groups of information:

  • Outbound Peak Bandwidth Usage: The percentage of the total bandwidth that is consumed by the peak used bandwidth of the bandwidth plan.

  • Outbound Average Bandwidth Usage: The percentage of the total bandwidth that is consumed by the average used bandwidth of the bandwidth plan.

Note

The legacy metrics Outbound Bandwidth By Area and Outbound Bandwidth Percentage By Area have been deprecated.

View monitoring data

View monitoring data of all resources on the Monitoring Chart page

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the instance details page, click the Charts tab. The tab displays the monitoring metrics for the corresponding resources.可用区级别监控

    • By default, the Charts tab displays monitoring data for resources from the last hour. The default time interval is 1 minute.

      Above the line chart for a metric, you can view monitoring data from the last 3 hours, 6 hours, 12 hours, 1 day, 7 days, or 30 days, or from a custom time range. You can also change the Time Interval.

    • You can automatically refresh monitoring data.

      Above the line chart for a metric, you can enable Auto Refresh to automatically refresh the chart with the latest monitoring data every minute.

    • For transit routers and network instance connections (such as VPC, ECR, VPN, and VBR connections), you can view monitoring data at the zone level.

      Above the line chart for a metric, you can enable Zone-level Results to display monitoring metrics by zone. In this view, each line represents a different zone.

View monitoring data on the monitoring tab of each resource

View monitoring metrics for a transit router

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Information > Transit Router tab, find the transit router and click the Monitoring icon in the Monitoring column.

  4. In the Monitoring panel, you can view the monitoring metrics for the transit router.

View monitoring metrics for a network instance connection

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Information > Transit Router tab, find the transit router with the attached network instance connection and click its instance ID.

  4. On the Intra-region Connections tag, find the target network instance connection and click the Monitoring icon in the Monitoring column. In the Monitoring panel, view the monitoring data for the connection.

View monitoring metrics for an inter-region connection

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Information > Transit Router tab, find the transit router to which the inter-region connection is attached and click the instance ID.

  4. On the details page for the transit router, click the Inter-region Connections tab.

  5. On the Cross-region Connections tab, find the inter-region connection that you want to manage, and in the Monitoring column, click the Monitoring icon.

    • In the upper-left corner of the Monitoring panel, select All Queues to view the monitoring metrics for the inter-region connection.

    • In the upper-left corner of the Monitoring panel, select Default Queue or a specific queue to view monitoring metrics for a QoS queue.

View monitoring metrics for an Express Connect circuit

  1. Log on to the CEN console.

  2. In the left-side navigation pane, click VBR Health Check.

  3. On the VBR Health Check page, select the region where you deployed the VBR instance.

  4. To view the monitoring metrics of the Express Connect circuit, find the target health check configuration and click the Monitoring icon in the Monitoring column.

View monitoring metrics for a bandwidth plan

View monitoring metrics for a bandwidth plan bound to a CEN instance

  1. Log on to the CEN console.

  2. On the Instances page, find the CEN instance that is bound to the target bandwidth plan and click the instance ID.

  3. On the instance details page, find the target bandwidth plan on the Basic Information > Bandwidth Plans tab.

  4. In the Monitoring column, click the Monitoring icon to view monitoring data for the bandwidth plan.

View monitoring metrics for any bandwidth plan

  1. Log on to the CEN console.

  2. In the navigation pane on the left, click Bandwidth Plans. On the Bandwidth Plans page, find the target bandwidth plan instance.

  3. In the Monitoring column, click the Monitoring icon to view the metrics for the bandwidth plan instance.

Create a threshold-based alert rule for a metric

You can use Cloud Monitor to create threshold-based alert rules for metrics. If a metric value exceeds the specified threshold, the system automatically sends you an alert notification. This helps you promptly address issues and prevent service interruptions.

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Information > Transit Router tab, find an Enterprise Edition transit router and click Set Alert in the Monitoring column.

  4. In the Configure Rule Description panel, click Cancel.

  5. In the Create Alert Rule panel, configure the parameters and click Confirm.

    This topic describes only the parameters that are most relevant to this task. For information about the other parameters, see Create an alert rule.

    • Product: The resource type to monitor.

      • CEN - Area: Used to monitor bandwidth plan instances.

      • CEN - Region: monitors inter-region connections and QoS queues.

      • CEN - VBR: monitors Express Connect circuits.

      • CEN - TR: monitors transit routers and connections to network instances.

    • Associated Resources: The scope of resources to monitor.

    • Rule Description: Click Add Rule. Select a metric type from the drop-down list and set the rule conditions in the Configure Rule Description panel.

      Note

      You cannot create alert rules based on the Latency metric for inter-region connections.

References

  • After you create an alert rule, you can view the alert history and manage alert rules in the Cloud Monitor console. For more information, see Alert Service.

  • If you want to compare the monitoring metrics of different resources for more detailed monitoring, you can create a custom monitoring dashboard in the Cloud Monitor console. For more information, see Visualization overview.

  • To query the monitoring data of CEN resources by calling API operations, you can use the API operations of Cloud Monitor.

  • If you want to monitor specific traffic information, you can configure flow logs for your resources. Flow logs can record traffic information transmitted through Enterprise Edition transit routers, VPC connections, ECR connections, VPN connections, VBR connections, and inter-region connections. For more information, see Configure flow logs.