All Products
Search
Document Center

Cloud Enterprise Network:Monitor CEN resources

Last Updated:May 27, 2026

CEN automatically monitors key metrics for your network resources, including traffic rates and bandwidth usage. You can create Cloud Monitor alert rules to receive notifications when metrics exceed thresholds, helping you detect and resolve issues early.

Supported resources

Note

For VPC, ECR, VPN, and VBR connections, you can view metrics only on the Enterprise Edition transit routers to which they are attached.

Resource

Monitoring granularity

Enterprise Edition transit router

  • You can view metrics for the Enterprise Edition transit router instance.

  • You can view metrics for the Enterprise Edition transit router in a specific zone.

VPC connection

  • You can view metrics for the VPC connection.

  • You can view metrics for the VPC connection in a specific transit router zone.

ECR connection

  • You can view metrics for the ECR connection.

  • You can view metrics for the ECR connection in a specific transit router zone.

VPN connection

  • You can view metrics for the VPN connection.

  • You can view metrics for the VPN connection in a specific transit router zone.

VBR connection

  • You can view metrics for the VBR connection.

  • You can view metrics for the VBR connection in a specific transit router zone.

inter-region connection

  • You can view metrics for the inter-region connection.

  • If you configure a QoS policy for an inter-region connection, you can view metrics for a specific queue in the policy.

    QoS queue metrics are available only for inter-region connections on Enterprise Edition transit routers.

Express Connect circuit

You can view metrics for the Express Connect circuit associated with a VBR.

The monitoring includes only the traffic rate and bandwidth usage for traffic that passes through the VBR on the Express Connect circuit.

bandwidth plan

You can view metrics for the bandwidth plan instance.

Zone-level monitoring

When an Enterprise Edition transit router connects to a VPC, ECR instance, VBR, or IPsec connection, CEN deploys resources in the transit router's supported zones to establish the connection.

You can specify the deployment zone for VPC connections. For ECR, VBR, and VPN connections, you cannot specify the zone; the system automatically selects one.

CEN automatically monitors all zones with connected resources on the Enterprise Edition transit router. If a zone does not appear in the monitoring data, the transit router has no connected resources in that zone and no traffic passes through it.

How metrics are collected

  • Each data point represents the average value collected within a 1-minute period.

  • For peak bandwidth rate metrics, the system samples every 10 seconds within a 1-minute period. The highest of the six samples is reported as the peak bandwidth rate for that minute, enabling detection of second-level micro-burst traffic.

  • For average bandwidth rate metrics, the system calculates the average bandwidth rate across the 1-minute period.

Transit router metrics

Metric

Instance-level description

Zone-level description

AttachmentInBytes

The total number of bytes that the transit router receives from network instance connections. Unit: Byte.

The number of bytes that the transit router in a specific zone receives from network instance connections. Unit: Byte.

Inbound Traffic Rate

The total traffic rate that the transit router receives from network instance connections. Unit: bps.

The traffic rate that the transit router in a specific zone receives from network instance connections. Unit: bps.

AttachmentInPackets

The total number of packets that the transit router receives from network instance connections. Unit: packets.

The number of packets that the transit router in a specific zone receives from network instance connections. Unit: packets.

AttachmentInPacketsRate

The total packet rate that the transit router receives from network instance connections. Unit: pps.

The packet rate that the transit router in a specific zone receives from network instance connections. Unit: pps.

AttachmentOutBytes

The total number of bytes that the transit router sends to network instance connections. Unit: Byte.

The number of bytes that the transit router in a specific zone sends to network instance connections. Unit: Byte.

Outbound Traffic Rate

The total traffic rate that the transit router sends to network instance connections. Unit: bps.

The traffic rate that the transit router in a specific zone sends to network instance connections. Unit: bps.

AttachmentOutPackets

The total number of packets that the transit router sends to network instance connections. Unit: packets.

The number of packets that the transit router in a specific zone sends to network instance connections. Unit: packets.

AttachmentOutPacketsRate

The total packet rate that the transit router sends to network instance connections. Unit: pps.

The packet rate that the transit router in a specific zone sends to network instance connections. Unit: pps.

AttachmentNoRouteDropBytes

Total bytes dropped by the transit router because the traffic had no matching route. Unit: Byte.

Bytes dropped by the transit router in a specific zone because the traffic had no matching route. Unit: Byte.

AttachmentNoRouteDropRate

Total traffic rate dropped by the transit router because the traffic had no matching route. Unit: bps.

Traffic rate dropped by the transit router in a specific zone because the traffic had no matching route. Unit: bps.

Packets Dropped Due to Missing Routes

Total packets dropped by the transit router because the packets had no matching route. Unit: packets.

Packets dropped by the transit router in a specific zone because the packets had no matching route. Unit: packets.

Rate of Packets Dropped Due to Missing Routes

Total packet rate dropped by the transit router because the packets had no matching route. Unit: pps.

Packet rate dropped by the transit router in a specific zone because the packets had no matching route. Unit: pps.

Bytes Dropped Due to Blackhole Routes

Total bytes dropped by the transit router because the traffic matched a blackhole route. Unit: Byte.

Bytes dropped by the transit router in a specific zone because the traffic matched a blackhole route. Unit: Byte.

AttachmentBlackHoleDropRate

Total traffic rate dropped by the transit router because the traffic matched a blackhole route. Unit: bps.

Traffic rate dropped by the transit router in a specific zone because the traffic matched a blackhole route. Unit: bps.

AttachmentBlackHoleDropPackets

Total packets dropped by the transit router because the packets matched a blackhole route. Unit: packets.

Packets dropped by the transit router in a specific zone because the packets matched a blackhole route. Unit: packets.

AttachmentBlackHoleDropPacketsRate

Total packet rate dropped by the transit router because the packets matched a blackhole route. Unit: pps.

Packet rate dropped by the transit router in a specific zone because the packets matched a blackhole route. Unit: pps.

Network instance connection metrics

VPC, ECR, VPN, and VBR connections share the same monitoring metrics.

Metric

Connection-level description

Zone-level description

AttachmentInBytes

The total number of bytes transmitted from the network instance to the transit router. Unit: Byte.

The number of bytes transmitted from the network instance to a specific transit router zone. Unit: Byte.

Inbound Rate of TR Connection

The total traffic rate from the network instance to the transit router. Unit: bps.

The traffic rate from the network instance to a specific transit router zone. Unit: bps.

AttachmentInPackets

The total number of packets transmitted from the network instance to the transit router. Unit: packets.

The number of packets transmitted from the network instance to a specific transit router zone. Unit: packets.

AttachmentInPacketsRate

The total packet rate from the network instance to the transit router. Unit: pps.

The packet rate from the network instance to a specific transit router zone. Unit: pps.

AttachmentOutBytes

The total number of bytes transmitted from the transit router to the network instance. Unit: Byte.

The number of bytes transmitted from a specific transit router zone to the network instance. Unit: Byte.

Outbound Rate of TR Connection

The total traffic rate from the transit router to the network instance. Unit: bps.

The traffic rate from a specific transit router zone to the network instance. Unit: bps.

AttachmentOutPackets

The total number of packets transmitted from the transit router to the network instance. Unit: packets.

The number of packets transmitted from a specific transit router zone to the network instance. Unit: packets.

AttachmentOutPacketsRate

The total packet rate from the transit router to the network instance. Unit: pps.

The packet rate from a specific transit router zone to the network instance. Unit: pps.

AttachmentNoRouteDropBytes

Total bytes dropped because traffic from the network instance had no matching route. Unit: Byte.

Bytes dropped in a specific transit router zone because traffic from the network instance had no matching route. Unit: Byte.

AttachmentNoRouteDropRate

Total rate of traffic dropped because traffic from the network instance had no matching route. Unit: bps.

Rate of traffic dropped in a specific transit router zone because traffic from the network instance had no matching route. Unit: bps.

AttachmentNoRouteDropPackets

Total packets dropped because traffic from the network instance had no matching route. Unit: packets.

Packets dropped in a specific transit router zone because traffic from the network instance had no matching route. Unit: packets.

AttachmentNoRouteDropPacketsRate

Total rate of packets dropped because traffic from the network instance had no matching route. Unit: pps.

Rate of packets dropped in a specific transit router zone because traffic from the network instance had no matching route. Unit: pps.

AttachmentBlackHoleDropBytesByAZ

Total bytes dropped because traffic from the network instance matched a blackhole route. Unit: Byte.

Bytes dropped in a specific transit router zone because traffic from the network instance matched a blackhole route. Unit: Byte.

Bytes Dropped After TR Connects to Blackhole Routes

Total rate of traffic dropped because traffic from the network instance matched a blackhole route. Unit: bps.

Rate of traffic dropped in a specific transit router zone because traffic from the network instance matched a blackhole route. Unit: bps.

AttachmentBlackHoleDropPackets

Total packets dropped because traffic from the network instance matched a blackhole route. Unit: packets.

Packets dropped in a specific transit router zone because traffic from the network instance matched a blackhole route. Unit: packets.

AttachmentBlackHoleDropPacketsRate

Total rate of packets dropped because traffic from the network instance matched a blackhole route. Unit: pps.

Rate of packets dropped in a specific transit router zone because traffic from the network instance matched a blackhole route. Unit: pps.

Inter-region connection metrics

Inter-region connection metrics

Metric

Description

InterRegionPeakBandwidthRate

This metric provides four values for traffic between two regions, such as Region A and Region B:

  • Peak bandwidth rate from Region A to Region B. Unit: bps.

  • Peak bandwidth rate from Region B to Region A. Unit: bps.

  • Average bandwidth rate from Region A to Region B. Unit: bps.

  • Average bandwidth rate from Region B to Region A. Unit: bps.

InterRegionPeakBandwidthUtilization

This metric provides four values for traffic between two regions, such as Region A and Region B:

  • The percentage of the inter-region connection bandwidth that is consumed by peak traffic from Region A to Region B.

  • The percentage of the inter-region connection bandwidth that is consumed by peak traffic from Region B to Region A.

  • The percentage of the inter-region connection bandwidth that is consumed by average traffic from Region A to Region B.

  • The percentage of the inter-region connection bandwidth that is consumed by average traffic from Region B to Region A.

Outbound Rate-Limited Packet Drop Rate

This metric provides two values for traffic between two regions, such as Region A and Region B:

  • The rate of packets dropped due to rate limiting from Region A to Region B. Unit: pps.

  • The rate of packets dropped due to rate limiting from Region B to Region A. Unit: pps.

Latency

The average communication latency between regions. Unit: ms.

You can also view latency for inter-region connections on Enterprise Edition transit routers that use Platinum or Gold links in the Network Intelligence Service console. View network performance between regions.

Note

The legacy metrics Region Internet Out Rate, Region Internet Out Rate Percent, and InterRegion Packets Drop Rate are deprecated.

QoS policy queue metrics

Metric

Description

InterRegionQosQueuePeakBandwidthRate

This metric includes the following two values:

  • Outbound Peak Bandwidth Rate: The peak bandwidth rate of the current queue for traffic sent from the local transit router to the peer transit router. Unit: bps.

  • Outbound Average Bandwidth Rate: The average bandwidth rate of the current queue for traffic sent from the local transit router to the peer transit router. Unit: bps.

InterRegionQosQueuePeakBandwidthUtilization

This metric includes the following two values:

  • Outbound Peak Bandwidth Usage: The percentage of the inter-region connection bandwidth that is consumed by the peak traffic of the current queue for traffic sent from the local transit router to the peer transit router.

  • Outbound Average Bandwidth Usage: The percentage of the inter-region connection bandwidth that is consumed by the average traffic of the current queue for traffic sent from the local transit router to the peer transit router.

Outbound Rate-Limited Packet Drop Rate

The rate of packets dropped due to rate limiting in the current queue for traffic sent from the local transit router to the peer transit router. Unit: pps.

Express Connect circuit metrics

Important

When you connect a transit router to a VBR, the Outbound Bandwidth and Inbound Bandwidth metrics for the Express Connect circuit are available by default. To view the Latency and Packet Loss Rate metrics, you must first Configure health checks for a VBR.

Metric

Description

Outbound Bandwidth

The bandwidth used for traffic from Alibaba Cloud to your data center. Unit: bps.

Inbound Bandwidth

The bandwidth used for traffic from your data center to Alibaba Cloud. Unit: bps.

Latency

The communication latency between Alibaba Cloud and your data center. Unit: ms.

Packet Loss Rate

The packet loss rate for communication between Alibaba Cloud and your data center.

Bandwidth plan metrics

Metric

Description

CENBandwidthPackagePeakBandwidthRate

This metric includes the following two values:

  • Outbound Peak Bandwidth Rate: The peak rate of the bandwidth that is used by the bandwidth plan. Unit: bps.

  • Outbound Average Bandwidth Rate: The average rate of the bandwidth that is used by the bandwidth plan. Unit: bps.

CENBandwidthPackagePeakBandwidthUtilization

This metric includes the following two values:

  • Outbound Peak Bandwidth Usage: The percentage of the total bandwidth that is consumed by the peak usage of the bandwidth plan.

  • Outbound Average Bandwidth Usage: The percentage of the total bandwidth that is consumed by the average usage of the bandwidth plan.

Note

The legacy metrics Outbound Bandwidth by Region and Percentage of Outbound Bandwidth by Region are deprecated.

View monitoring data

View metrics for all resources

  1. Log on to the CEN console.

  2. On the CEN Instance page, click the ID of the CEN instance that you want to manage.

  3. On the instance details page, click the Charts tab. On the Charts tab, select a sub-tab: Transit router metrics, Intra-region connection metrics, Inter-region connection metrics, Bandwidth plan metrics, or VBR Health Check. Use filters such as Region and Transit Router Connection Instance to locate your target resource.

    • By default, the Charts tab displays data from the last hour at 1-minute intervals.

      Above the chart, you can change the time range to 3 hours, 6 hours, 12 hours, 1 day, 7 days, 30 days, or a custom range. You can also adjust the Interval to view data at different intervals.

    • You can automatically refresh monitoring data.

      To refresh data every minute, enable Auto Refresh above the chart.

    • For transit routers and network instance connections (VPC, ECR, VPN, and VBR), you can view zone-level monitoring data.

      To view zone-level data, enable Zone-level Results above the chart. Each line represents a different zone.

View metrics on resource tabs

Transit router

  1. Log on to the CEN console.

  2. On the CEN Instance page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Settings > Transit Router tab, find the target transit router and click the Monitoring icon in the Status column.

  4. In the Monitoring panel, view the monitoring metrics of the transit router.

Network instance connection

  1. Log on to the CEN console.

  2. On the CEN Instance page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Settings > Transit Router tab, find the transit router to which the network instance connection is attached and click the transit router ID.

  4. On the Intra-Region Connections page, find the target network instance connection, click the Monitoring icon in the Status column, and then view the monitoring metrics in the Monitoring panel.

Inter-region connection

  1. Log on to the CEN console.

  2. On the CEN Instance page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Settings > Transit Router tab, find the transit router to which the inter-region connection is attached and click the transit router ID.

  4. On the transit router details page, click the Inter-Region Connections tab.

  5. On the Inter-Region Connections page, find the target inter-region connection and click the Monitoring icon in the Status column.

    • In the upper-left corner of the Monitoring panel, select All Queues to view the monitoring metrics of the inter-region connection.

    • In the upper-left corner of the Monitoring panel, select Default Queue or a specific queue to view the monitoring metrics of the QoS policy queue.

Express Connect circuit

  1. Log on to the CEN console.

  2. In the left-side navigation pane, click VBR Health Check.

  3. On the VBR Health Check page, select the region where the VBR is deployed.

  4. Find the target health check configuration and click the Monitoring icon in the Status column to view the monitoring metrics of the Express Connect circuit.

Bandwidth plan

Bandwidth plan associated with CEN

  1. Log on to the CEN console.

  2. On the CEN Instance page, find the CEN instance to which the target bandwidth plan is associated and click the CEN instance ID.

  3. On the instance details page, choose Basic Settings > Bandwidth Plans and find the target bandwidth plan.

  4. Click the Monitoring icon in the Monitoring column to view the monitoring metrics of the bandwidth plan.

Any bandwidth plan

  1. Log on to the CEN console.

  2. In the left-side navigation pane, click Bandwidth Plans. On the Bandwidth Plans page, find the target bandwidth plan.

  3. Click the Monitoring icon in the Monitoring column to view the monitoring metrics of the bandwidth plan.

Create an alert rule

Create Cloud Monitor alert rules to receive notifications when metrics exceed thresholds, helping you detect and resolve issues before service interruptions occur.

  1. Log on to the CEN console.

  2. On the CEN Instance page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Settings > Transit Router tab, find an Enterprise Edition transit router and click Set Alarm in the Monitoring column.

  4. In the Configure Rule Description panel, click Cancel.

  5. In the Create Alert Rule panel, configure the parameters based on your business requirements and click OK.

    Only the most relevant parameters are described here. For all parameters, see Create an alert rule.

    • Product: Select the type of resource that you want to monitor.

      • CEN-Area: monitors bandwidth plan instances.

      • CEN-Region: monitors inter-region connections and QoS policy queues.

      • CEN-VBR: monitors Express Connect circuits.

      • CEN-TR: monitors transit router instances and network instance connections.

    • Resource Range: Select the scope of resources to monitor.

    • Rule Description: Click Add Rule, select a metric from the drop-down list, and then set the rule conditions in the Configure Rule Description panel.

      Note

      You cannot create an alert rule for the Latency metric of inter-region connections.

References

  • After you create an alert rule, view the alert history and manage rules in the Cloud Monitor console. Alert Service.

  • To compare metrics across resources, create a custom monitoring dashboard in Cloud Monitor. Visualization overview.

  • To query CEN monitoring data programmatically, use the Cloud Monitor API.

  • To monitor specific traffic patterns, configure Flow logs. Flow logs record traffic for Enterprise Edition transit routers, inter-region connections, and network instance connections (VPC, ECR, VPN, and VBR).