Global Accelerator (GA) is integrated with Network Intelligence Service (NIS) and supports quick diagnostics at the instance level. You can use NIS to check the configurations and status of GA instances, and then troubleshoot issues based on the suggestions that are provided by NIS. The instance diagnostics feature checks the following items: configurations, resource limits, certificates, security policies, payment status, and service access. You can also view previous diagnostic results.
Prerequisites
NIS is activated. You can go to the service activation page to activate NIS.
The AliyunServiceRoleForNis service-linked role is created. The system automatically creates the AliyunServiceRoleForNis service-linked role the first time you diagnose a GA instance. For more information, see Service-linked roles.
A GA instance that you want to diagnose is created. For more information, see the "Create a standard GA instance" section of the Create and manage standard GA instances topic.
Instance diagnostics
Only standard GA instances support the instance diagnostics feature. Basic GA instances do not support the instance diagnostics feature.
Log on to the GA console.
On the Instances page, find the GA instance that you want to diagnose and click Diagnose in the Monitor/Diagnostics column.
In the Instance Diagnostics panel, view the diagnostic progress, diagnostic results, and diagnostic details of the GA instance.
If an exception is detected, the diagnostic item to which the exception belongs is displayed in the Instance Diagnostics panel. You can click the diagnostic item to view the details.
In the Diagnostic Items section, select Show All Diagnostic Items. All diagnostic items that are supported by GA are displayed. You can expand each diagnostic item to view the details.
You can also click Go to the NIS console to view diagnostic records in the Instance Diagnostics panel to go to the NIS console and view more information about the diagnostic task. The Overview page displays information about the diagnostic task.
For more information about how to use the instance diagnostics feature, see Work with instance diagnostics.
Diagnostic items and details
The following table describes the diagnostic items that are supported by standard GA instances.
Category | Diagnostic item and description |
Configuration Diagnostics | Check Instance Status: checks whether the service status of the GA instance is normal. Configuration Integrity: checks whether the acceleration configurations of the GA instance are complete. Configuration Correctness: checks whether the configurations of the GA instance are valid. Access Control: checks whether network access control lists (ACLs) are configured as whitelists or blacklists for the GA instance. For more information about ACLs, see Access control.
|
Quota Limit Diagnostics | High Bandwidth Usage of Acceleration IP: checks the inbound and outbound bandwidth utilization of accelerated IP addresses. ≤ 60%: normal. 61% to 80%: minor. 81% to 90%: major. > 90%: critical.
Packet Loss Rate Due to Throttling on Acceleration IP: checks the packet loss of accelerated IP addresses and calculates the packet loss rate. 0%: normal. 1% to 5%: minor. 6% to 10%: major. > 10%: critical.
High Bandwidth Usage of Endpoint Group: checks the inbound and outbound bandwidth usage of endpoint group IP addresses. ≤ 60%: normal. 61% to 80%: minor. 81% to 90%: major. > 90%: critical.
Packet Loss Rate Due to Throttling on Endpoint Group: checks the packet loss of endpoint group IP addresses and calculates the packet loss rate. 0%: normal. 1% to 5%: minor. 6% to 10%: major. > 10%: critical.
Bandwidth Usage Check for Inter-region Connection: checks the bandwidth usage of inter-region connections. ≤ 60%: normal. 61% to 80%: minor. 81% to 90%: major. > 90%: critical.
Packet Loss Check for Inter-region Connection: checks the packet loss of the inter-region connection and calculates the packet loss rate. 0%: normal. 1% to 5%: minor. 6% to 10%: major. > 10%: critical.
|
Certificate Diagnostics | Certification Expiration: checks whether the certificates of HTTPS listeners expire within 60 days. For more information about the certificates of GA, see Associate and manage certificates. |
Security Policy Diagnostics | Anti-DDoS Origin Basic Status: checks whether the accelerated IP addresses are protected by Anti-DDoS Origin Basic and whether traffic scrubbing or blackholing is triggered. Interception by Cloud Firewall: checks whether network activities that are related to accelerated IP addresses are protected by Cloud Firewall. Penalty for Security Control: checks whether network activities that are related to accelerated IP addresses are punished by Security Control of Alibaba Cloud Security. Suspension for Security Reasons: checks whether accelerated IP addresses are suspended due to security risks.
|
Cost Diagnostics | |
Access Diagnostics | Health Check Status: checks the health status of endpoints. For more information about endpoint health checks, see Enable and manage health checks. Access Errors: checks whether the backend service returns timeout errors or error codes. Traffic Check: checks whether traffic flows from the Internet to the GA instance based on the access logs of the acceleration region. If the GA instance does not have inbound traffic, access failure occurs. For more information about access logs, see Work with access logs.
|