Monitoring and logging - NAT Gateway - Alibaba Cloud Documentation Center

Alibaba Cloud provides various services for monitoring and log auditing, such as Network Intelligence Service (NIS), CloudMonitor, and CloudConfig. You can use these services to monitor your NAT Gateway resources in real time and respond promptly to alerts. This helps ensure the availability and health of your NAT Gateway resources and business operations.

Diagnostics

Instance diagnostics

Internet NAT Gateway works with Network Intelligence Service (NIS) to support instance-level quick diagnostics. You can use this feature to detect the configuration and running status of an instance. The service also provides suggestions for quick fixes to any detected issues. The diagnosis covers connectivity, configuration, capacity limits, and costs. You can also view historical diagnosis details.

CloudMonitor

NAT Gateway integrates with CloudMonitor, a basic service provided by Alibaba Cloud. You can use CloudMonitor to monitor metrics of Internet NAT gateways and VPC NAT gateways in real time at no cost.

Queries of real-time monitoring data

CloudMonitor collects real-time monitoring metrics from Internet NAT gateways and VPC NAT gateways and displays the data as time-series charts in the console.

Threshold-triggered alerts

You can create threshold-based alert rules in CloudMonitor for Internet NAT gateways and VPC NAT gateways. By monitoring metric thresholds, you can be promptly notified of data abnormalities and resolve them.

Subscribe to threshold events

When a metric triggers a threshold-based alert, CloudMonitor automatically sends a notification to the specified alert contact. You can subscribe to threshold events to customize alert notifications:

Merge alerts and reduce noise: You can merge alerts that are generated for the same threshold event. You can also use conditional noise reduction to control the validity of alerts and prevent alert storms that are caused by repeated alerts.
Send effective alert notifications: After alerts are merged and noise is reduced, CloudMonitor sends effective alerts to an alert contact. If an alert is not resolved within a specified time, CloudMonitor automatically sends the notification to the next alert contact group.
Customize notification methods: You can define notification channel levels and templates as needed. You can also push all alert data to Simple Message Queue (formerly MNS), Simple Log Service (SLS), Function Compute (FC), and webhooks through push notifications and integrations.

Monitorable metrics

Product	Metric type	Monitorable metrics
Enhanced NAT gateway	Instance dimension	Rate of traffic from VPC, rate of traffic from the Internet, rate of traffic to VPC, rate of traffic to the Internet, traffic from VPC, traffic from the Internet, traffic to VPC, traffic to the Internet, total bandwidth of dropped messages, total rate of dropped messages, number of failed port allocations in an interval, rate of failed port allocations in an interval, throughput, packet rate from VPC, packet rate from the Internet, packet rate to VPC, packet rate to the Internet, number of packets from VPC, number of packets from the Internet, number of packets to VPC, number of packets to the Internet, concurrent connections, ratio of concurrent connections, rate of dropped concurrent connections, rate of new connections, ratio of new connections, rate of dropped new connections
Enhanced NAT gateway	eniId	Interface inbound dropped traffic, interface outbound dropped traffic, interface inbound traffic, interface outbound traffic, number of packets with failed port allocation, number of inbound dropped messages, number of outbound dropped messages, number of inbound messages, number of outbound messages, interface concurrent connections, interface rate of dropped new connections, interface rate of new connections, interface rate of dropped concurrent connections
NAT Gateway bandwidth plan	Instance dimension	Inbound packet rate, outbound packet rate, inbound bandwidth, outbound bandwidth, network outbound bandwidth usage

Health status monitoring

You can check the Alibaba Cloud Status page to view the status of Alibaba Cloud services in each region and subscribe to RSS feeds for service status updates. This helps you promptly handle exceptions.

Cloud resource configuration auditing

CloudConfig is a resource audit service that lets you track the configuration history of your resources and audit them for compliance. This service helps you supervise your infrastructure and ensure continuous compliance across all your resources.

NAT Gateway integrates with CloudConfig and is available for a free trial. Because CloudConfig supports only a limited number of Alibaba Cloud services, the resource checklist includes only some of your resources.
CloudConfig provides a resource checklist that is aggregated across regions. This lets you quickly retrieve resources and view their configuration information and configuration history.
You can deliver the configuration history and non-compliance event data of your NAT Gateway resources to a specified Logstore in Simple Log Service (SLS). You can then use SLS to query and analyze log data in a unified manner.