By analyzing flow logs of virtual private cloud (VPC) and transit routers (TR), Traffic Analyzer provides multi-dimensional traffic visibility, performance monitoring, and troubleshooting to help you manage complex cloud network environments efficiently.
With NIS Traffic Analyzer, you can:
Enhance network performance: Provide data for network architecture enhancement and capacity planning for Internet, cross-region, and cross-VPC traffic.
Troubleshoot issues: Pinpoint specific traffic during bursts for faster troubleshooting.
Enhance security: Analyze traffic, such as 5-tuple, to identify unexpected network connections and potential security threats.
Optimize costs: Identify top traffic and provide dashboards by city, Internet Service Provider (ISP), IP, protocol, and VPC. Provide data for internal cost allocation and optimization.
Use cases
Monitoring, managing, and understanding your network is crucial for your business's stability, security, and performance. A clear picture of your network is needed: Who is connecting to the network? Which ports and services are being accessed? Is there any anomalous behavior? Are there sudden traffic spikes? Traffic Analyzer is designed to answer these questions.
Use case 1: Fast troubleshooting in complex networks
Challenge: When a sudden traffic burst saturates your Internet bandwidth, Express Connect circuits, or NAT Gateway connections, traditional troubleshooting methods are time-consuming and hinder the quick identification of the business, application, or IP address causing the anomalous traffic.
Solution: Use Traffic Analyzer to analyze the traffic with minute-level precision. It quickly identifies the top traffic flows, IP addresses, or application ports. Provide insights to conduct rate limiting or capacity expansion on the business side.
Use case 2: Granular IT cost allocation for business lines
Challenge: Multiple business departments or subsidiaries often share a single network infrastructure. Fairly and transparently allocating costs based on each business's actual usage is a major challenge for IT financial management.
Solution: Traffic Analyzer provides granular, diverse traffic statistics, letting you clearly see the network resources that each application consumes. This provides reliable data for internal cost allocation.
Use case 3: Compliance and security audit
Challenge: Industries with high security requirements, such as the finance and public sector, require strictly control and traffic auditing. This involves promptly detecting unauthorized, unexpected traffic to prevent data leaks and potential security risks.
Solution: Traffic Analyzer records and analyzes the 5-tuple of network connections. Create a traffic whitelist based on the 5-tuple, analyze unexpected accesses, and identify abnormal traffic patterns, thereby enhancing security and compliance.
Product advantages
Traffic Analyzer combines the convenience of a cloud-native architecture with powerful analytical capabilities.
Cloud-native and agentless deployment
As a cloud-native service, Traffic Analyzer does not require installing any agents in your virtual machines or containers. Integrate it by enabling the flow log feature on cloud products. This simplifies deployment and maintenance, eliminates any impact on your business performance, and removes stability risks.
High-performance and minute-level latency
Using an industry-leading streaming big data processing engine, Traffic Analyzer achieves data analysis latency at the minute level. You can gain insights, make decisions, and respond promptly to network anomalies.
Unified analysis of multi-source logs
Traffic Analyzer supports the unified analysis of flow logs from various network products, including VPC flow logs and TR flow log. This covers key use cases for hybrid cloud, intra-VPC, inter-VPC, and Internet access.
Comprehensive data and scenario-based insights
Beyond traditional 5-tuple analysis based on IP, port, and protocol, it provides supplementary data such as geolocation (country, province, city), ISPs, and resource topology. It provides scenario-based analysis that turns raw data into actionable insights.
How it works
Traffic Analyzer collects, processes, complements, and analyzes raw flow logs, and presents the results in a visual format. The process is as follows:
Collect logs
Log collection is handled by the source products, instead of Traffic Analyzer. ATo perform traffic analysis, you must first connect a collected flow log source to Traffic Analyzer. Currently, VPC flow log and TR flow log can be incorporated.
Aggregate and complement data
Traffic Analyzer aggregates the raw data. Within a sampling period, it combines communications between two hosts with the same protocol and port into a record. To add more contextual dimensions, the system complements the aggregated logs with data such as resource topology, geolocation, ISP, and baseline data.
Analyze and store data
The enriched data is stored in a high-performance analysis engine. Run fast, flexible, and multi-dimensional queries on this data. You can also customize the data retention period for different historical analysis requirements.
Visualization
Finally, Traffic Analyzer presents analysis results in intuitive formats, such as charts, maps, and topologies, letting you view like top traffic rankings, performance trends, and traffic distribution.
Supported regions
Regions that support connecting VPC flow log data into Traffic Analyzer
China (Hangzhou), China (Shanghai), China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Shenzhen), China (Guangzhou), China (Chengdu), China (Hong Kong), Japan (Tokyo), South Korea (Seoul), Singapore, Malaysia (Kuala Lumpur), Indonesia (Jakarta), Thailand (Bangkok), Germany (Frankfurt), UK (London), US (Silicon Valley), and US (Virginia).
Regions that support connecting TR flow log data into Traffic Analyzer
China (Hangzhou), China (Shanghai), China (Shenzhen), China (Guangzhou), China (Qingdao), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Chengdu), China (Hong Kong), Singapore, Malaysia (Kuala Lumpur), Indonesia (Jakarta), Japan (Tokyo), South Korea (Seoul), Thailand (Bangkok), Germany (Frankfurt), UK (London), US (Virginia), and US (Silicon Valley).
Billing
Connecting a data source to Traffic Analyzer incurs the processing fee and storage fee. For details, see Billing Rules.