Private Zone Traffic Analysis lets you monitor DNS traffic from your private zones. After enabling this feature, you can view detailed analytics, including querying source analysis, resolution line hit analysis, response analysis, and response logs. Data is aggregated by VPC and domain name.
Billing
This feature is billed on a pay-as-you-go basis based on the number of analyzed log entries from DNS resolution queries. This includes all types of DNS traffic processed by your DNS. For details, see DNS traffic analysis.
Enable traffic analysis
Go to the Alibaba Cloud DNS - Private Zone console.
In the upper-right corner, click Private Zone Traffic Analysis Disabled to enable the feature.
Complete and submit the form.
Parameter
Description
Regions
Select regions where you want to enable traffic analysis.
VPCs
Choose specific VPCs for analysis. Leave empty to analyze all VPCs in selected regions.
Location of processing dns resolution log
The region where the log analysis server is deployed. You do not need to select this.
Log Storage and Analysis
Private Zone stores and analyzes logs: Store logs and generate reports.
Deliver to Log Service only: Forward logs directly to Simple Log Service (SLS).
Private Zone stores, analyzes, and delivers to Log Service: Both store logs and forward to SLS.
Delivery Configuration
If you select Deliver to Log Service only, specify the SLS details.
Region: Where logs are stored.
SLS Project: Create or select existing project.
Logstore: Select or create logstore.
Disable traffic analysis
Go to the Alibaba Cloud DNS - Private Zone console.
In the upper-right corner, click Private Zone Traffic Analysis Enabled.
NoteDisabling traffic analysis stops new log collection and analysis. However, if you configured log delivery to Simple Log Service (SLS), your existing logs will continue to incur storage charges. To stop all charges, delete the associated Logstore in SLS.
Forward logs to SLS
Navigate to the Alibaba Cloud DNS - Private Zone console.
In the upper-right corner, click Private Zone Traffic Analysis Enabled to open the configuration settings.
Change the Log Storage and Analysis option and complete the Delivery Configuration section.
Parameter
Description
Log Storage and Analysis
Choose one of the following options:
Deliver to Log Service only: Forward logs directly to Simple Log Service (SLS).
Private Zone stores, analyzes, and delivers to Log Service: Both store logs and forward to SLS.
Delivery Configuration
Specify the SLS details:
Region: Where logs are stored.
SLS Project: Create or select existing project.
Logstore: Select or create logstore.
Click OK. The logs for the domain names are forwarded to SLS.
Go to the Logstore on the SLS console to verify that logs are being delivered.
