Enable disable configure DNS traffic analysis - Alibaba Cloud DNS

Enable DNS network traffic analysis for a domain to view query sources, resolution line hits, response characteristics, and resolution logs.

Billing

Domain names with DNS network traffic analysis enabled are billed by DNS query volume. 2. DNS network traffic analysis (pay-as-you-go).

Enable DNS traffic analysis

Domain list page

Go to the Alibaba Cloud DNS - public authoritative resolution page.
In the Traffic Analysis column, click the enable icon for the target domain.

The Traffic Analysis column shows In-depth Analysis when enabled or Basic Statistics when disabled (default).
In the Enable Notification dialog box, click Enable to enable DNS network traffic analysis.

Statistics dashboard

Go to Alibaba Cloud DNS - Statistics Dashboard. The Resolution Dashboard > Public Zone page opens by default.

Click the toggle switch on the right. The Traffic Analysis Settings dialog box opens.

Go to Resolution Dashboard > Global Resolution Statistics. The Traffic Analysis switch is in the upper-right corner, off by default.

Parameter	Description
Domains with Network Traffic Analysis Enabled	Lists all domain names in public authoritative resolution.
Log Storage and Analysis	Store and analyze by Alibaba Cloud DNS: Alibaba Cloud DNS stores logs and provides reporting and analysis. Delivers to SLS only: Resolution logs are delivered directly to SLS without storage. Alibaba Cloud DNS stores, analyzes, and delivers to SLS: Logs are stored for reporting and analysis, and a copy is delivered to SLS.
Delivery Configuration	If you select Delivers to SLS only or Alibaba Cloud DNS stores, analyzes, and delivers to SLS, configure the following SLS settings. Region: Select the log storage region. Project: Create or select a Project. Logstore: Create or select a Logstore.

Click OK to enable DNS network traffic analysis for the selected domains.

Disable DNS traffic analysis

Domain list page

Go to the Alibaba Cloud DNS - public authoritative resolution page.
Click the close button for the Traffic Analysis of the target domain, then click Confirm.

Statistics dashboard

Go to Alibaba Cloud DNS - Statistics Dashboard. The Resolution Dashboard > Public Zone page opens by default.
Click Traffic Analysis Enabled on the right to disable traffic analysis for all domains with this feature enabled.
To disable traffic analysis for specific domains, click Settings and adjust the list under Domains with Network Traffic Analysis Enabled.

Warning

After you disable traffic analysis, DNS resolution logs are no longer collected or stored. You cannot use these logs to troubleshoot future issues such as inaccurate resolution or resolution errors.

Log delivery to SLS

Go to the Alibaba Cloud DNS - statistics dashboard page. The Resolution Dashboard > public authoritative resolution tab opens by default.

On the right, click the Settings button next to the Settings switch to open the Traffic Analysis Settings dialog box, and then update the Log Storage and Analysis settings.

Parameter

Description

Log Storage and Analysis

Select one of the following options:

Delivers to SLS only: Resolution logs are delivered directly to SLS without storage.
Alibaba Cloud DNS stores, analyzes, and delivers to SLS: Logs are stored for reporting and analysis, and a copy is delivered to SLS.

delivery configuration

Specify the following SLS settings:

Region: Select the log storage region.

Log Project: Create or select a Project.

Logstore: Create or select a Logstore.

Click OK. Resolution logs for the selected domains are delivered to Simple Log Service.
Verify log delivery in the corresponding SLS Logstore.

On the query page, select the raw logs tab. Log fields include query_name, query_type, rcode, answer_rrset, authority_rrset, dst_addr, and dst_port. If the log count and records display correctly, log delivery to SLS is successful.