All Products
Search
Document Center

PrivateLink:Monitoring and alerts

Last Updated:Nov 26, 2025

PrivateLink is deeply integrated with CloudMonitor to provide monitoring and alerting capabilities for endpoints and EPSs (EPS). By collecting and analyzing key metrics, such as bandwidth and packet rate, you can promptly detect and resolve issues such as network congestion and packet loss to ensure service stability and reliability.

Monitoring overview

PrivateLink monitoring is available for both service consumers and service providers. The hierarchy of monitored objects is shown in the following figure:

image

Monitored objects

  • Endpoint: Created and managed by the service consumer.

    An endpoint zone has only one elastic network interface (ENI). The endpoint zone and its ENI have a one-to-one correspondence.
    • Endpoint instance: The sum of metrics of all its endpoint zones.

    • Endpoint zone: The sum of metrics of all its ENI.

    • Endpoint ENI: The metrics of a specific ENI within a zone.

  • EPS: Created and managed by the service provider.

    • EPS instance: The sum of metrics for all its associated endpoint connections.

    • Service resource: Metrics for a specific backend resource of EPS.

    • Connected endpoint instance: Metrics for a connected endpoint, including all its zone and ENI details.

      Endpoints are created and managed by the service consumer. Service providers can view the metrics of a specific endpoint only through the associated EPS.

Monitoring metrics

Each monitored object has metrics that fall into two categories: bandwidth and packet rate. These categories include eight key metrics to help you assess network quality.

Endpoint monitoring metrics

Object

Metric

Monitoring metrics

Description

Unit

Aggregation method

Endpoint

VpcEndpointInBps

Endpoint inbound bandwidth

The bandwidth for accessing the endpoint from the VPC.

bit/s

Average

VpcEndpointOutBps

Endpoint outbound bandwidth

The bandwidth for accessing the VPC from the endpoint.

bit/s

Average

VpcEndpointInPps

Endpoint inbound packet rate

The packet rate for accessing the endpoint from the VPC.

packet/s

Average

VpcEndpointOutPps

Endpoint outbound packet rate

The packet rate for accessing the VPC from the endpoint.

packet/s

Average

VpcEndpointInDropBps

Endpoint inbound bandwidth dropped

The bandwidth dropped when accessing the endpoint from the VPC.

bit/s

Average

VpcEndpointOutDropBps

Endpoint outbound bandwidth dropped

The bandwidth dropped when accessing the VPC from the endpoint.

bit/s

Average

VpcEndpointInDropPps

Endpoint rate of inbound packets dropped

The rate of packets dropped when accessing the endpoint from the VPC.

packet/s

Average

VpcEndpointOutDropPps

Endpoint rate of outbound packets dropped

The rate of packets dropped when accessing the VPC from the endpoint.

packet/s

Average

Endpoint zone

VpcEndpointZoneInBps

Endpoint zone inbound bandwidth

The bandwidth for accessing the endpoint zone from the VPC.

bit/s

Average

VpcEndpointZoneOutBps

Endpoint zone outbound bandwidth

The bandwidth for accessing the VPC from the endpoint zone.

bit/s

Average

VpcEndpointZoneInPps

Endpoint zone inbound packet rate

The packet rate for accessing the endpoint zone from the VPC.

packet/s

Average

VpcEndpointZoneOutPps

Endpoint zone outbound packet rate

The packet rate for accessing the VPC from the endpoint zone.

packet/s

Average

VpcEndpointZoneInDropBps

Endpoint zone inbound bandwidth dropped

The bandwidth dropped when accessing the endpoint zone from the VPC.

bit/s

Average

VpcEndpointZoneOutDropBps

Endpoint zone outbound bandwidth dropped

The bandwidth dropped when accessing the VPC from the endpoint zone.

bit/s

Average

VpcEndpointZoneInDropPps

Endpoint zone rate of inbound packets dropped

The rate of packets dropped when accessing the endpoint zone from the VPC.

packet/s

Average

VpcEndpointZoneOutDropPps

Endpoint zone rate of outbound packets dropped

The rate of packets dropped when accessing the VPC from the endpoint zone.

packet/s

Average

Endpoint ENI

VpcEndpointENIInBps

Endpoint ENI inbound bandwidth

The bandwidth for accessing the ENI attached to the endpoint zone from the VPC.

bit/s

Average

VpcEndpointENIOutBps

Endpoint ENI outbound bandwidth

The bandwidth for accessing the VPC from the ENI attached to the endpoint zone.

bit/s

Average

VpcEndpointENIInPps

Endpoint ENI inbound packet rate

The packet rate for accessing the ENI attached to the endpoint zone from the VPC.

packet/s

Average

VpcEndpointENIOutPps

Endpoint ENI outbound packet rate

The packet rate for accessing the VPC from the ENI attached to the endpoint zone.

packet/s

Average

VpcEndpointENIInDropBps

Endpoint ENI inbound bandwidth dropped

The bandwidth dropped when accessing the ENI attached to the endpoint zone from the VPC.

bit/s

Average

VpcEndpointENIOutDropBps

Endpoint ENI outbound bandwidth dropped

The bandwidth dropped when accessing the VPC from the ENI attached to the endpoint zone.

bit/s

Average

VpcEndpointENIInDropPps

Endpoint ENI rate of inbound packets dropped

The rate of packets dropped when accessing the ENI attached to the endpoint zone from the VPC.

packet/s

Average

VpcEndpointENIOutDropPps

Endpoint ENI rate of outbound packets dropped

The rate of packets dropped when accessing the VPC from the ENI attached to the endpoint zone.

packet/s

Average

EPS monitoring metrics

Monitored object

Metric

Monitoring metrics

Description

Unit

Aggregation method

EPS instance

VpcEndpointServiceInBps

EPS inbound bandwidth

The bandwidth for accessing the EPS from the VPC.

bit/s

Average

VpcEndpointServiceOutBps

EPS outbound bandwidth

The bandwidth for accessing the VPC from the EPS.

bit/s

Average

VpcEndpointServiceInPps

EPS inbound packet rate

The packet rate for accessing the EPS from the VPC.

packet/s

Average

VpcEndpointServiceOutPps

EPS outbound packet rate

The packet rate for accessing the VPC from the EPS.

packet/s

Average

VpcEndpointServiceInDropBps

EPS inbound bandwidth dropped

The bandwidth dropped when accessing the EPS from the VPC.

bit/s

Average

VpcEndpointServiceOutDropBps

EPS outbound bandwidth dropped

The bandwidth dropped when accessing the VPC from the EPS.

bit/s

Average

VpcEndpointServiceInDropPps

EPS rate of inbound packets dropped

The rate of packets dropped when accessing the EPS from the VPC.

packet/s

Average

VpcEndpointServiceOutDropPps

EPS rate of outbound packets dropped

The rate of packets dropped when accessing the VPC from the EPS.

packet/s

Average

Service resource

VpcEndpointServiceResourceInBps

Service resource inbound bandwidth

The bandwidth for accessing the service resource associated with the EPS from the VPC.

bit/s

Average

VpcEndpointServiceResourceOutBps

Service resource outbound bandwidth

The bandwidth for accessing the VPC from the service resource associated with the EPS.

bit/s

Average

VpcEndpointServiceResourceInPps

Service resource inbound packet rate

The packet rate for accessing the service resource associated with the EPS from the VPC.

packet/s

Average

VpcEndpointServiceResourceOutPps

Service resource outbound packet rate

The packet rate for accessing the VPC from the service resource associated with the EPS.

packet/s

Average

VpcEndpointServiceResourceInDropBps

Service resource inbound bandwidth dropped

The bandwidth dropped when accessing the service resource associated with the EPS from the VPC.

bit/s

Average

VpcEndpointServiceResourceOutDropBps

Service resource outbound bandwidth dropped

The bandwidth dropped when accessing the VPC from the service resource associated with the EPS.

bit/s

Average

VpcEndpointServiceResourceInDropPps

Service resource rate of inbound packets dropped

The rate of packets dropped when accessing the service resource associated with the EPS from the VPC.

packet/s

Average

VpcEndpointServiceResourceOutDropPps

Service resource rate of outbound packets dropped

The rate of packets dropped when accessing the VPC from the service resource associated with the EPS.

packet/s

Average

Endpoint ENI of EPS connection

VpcEndpointServiceEndpointEniInBps

Inbound bandwidth of the endpoint ENI under the EPS

The bandwidth for accessing the endpoint zone ENI under the EPS from the VPC.

bit/s

Average

VpcEndpointServiceEndpointEniOutBps

Outbound bandwidth of the endpoint ENI under the EPS

The bandwidth for accessing the VPC from the endpoint zone ENI under the EPS.

bit/s

Average

VpcEndpointServiceEndpointEniInPps

Inbound packet rate of the endpoint ENI under the EPS

The packet rate for accessing the endpoint zone ENI under the EPS from the VPC.

packet/s

Average

VpcEndpointServiceEndpointEniOutPps

Outbound packet rate of the endpoint ENI under the EPS

The packet rate for accessing the VPC from the endpoint zone ENI under the EPS.

packet/s

Average

VpcEndpointServiceEndpointEniInDropBps

Inbound bandwidth dropped of the endpoint ENI under the EPS

The bandwidth dropped when accessing the endpoint zone ENI under the EPS from the VPC.

bit/s

Average

VpcEndpointServiceEndpointEniOutDropBps

Outbound bandwidth dropped of the endpoint ENI under the EPS

The bandwidth dropped when accessing the VPC from the endpoint zone ENI under the EPS.

bit/s

Average

VpcEndpointServiceEndpointEniInDropPps

Rate of inbound packets dropped of the endpoint ENI under the EPS

The rate of packets dropped when accessing the endpoint zone ENI under the EPS from the VPC.

packet/s

Average

VpcEndpointServiceEndpointEniOutDropPps

Rate of outbound packets dropped of the endpoint ENI under the EPS

The rate of packets dropped when accessing the VPC from the endpoint zone ENI under the EPS.

packet/s

Average

Endpoint instance of EPS connection

VpcEndpointServiceEndpointInBps

Endpoint inbound bandwidth under the EPS

The bandwidth for accessing the endpoint under the EPS from the VPC.

bit/s

Average

VpcEndpointServiceEndpointOutBps

Endpoint outbound bandwidth under the EPS

The bandwidth for accessing the VPC from the endpoint under the EPS.

bit/s

Average

VpcEndpointServiceEndpointInPps

Endpoint inbound packet rate under the EPS

The packet rate for accessing the endpoint under the EPS from the VPC.

packet/s

Average

VpcEndpointServiceEndpointOutPps

Endpoint outbound packet rate under the EPS

The packet rate for accessing the VPC from the endpoint under the EPS.

packet/s

Average

VpcEndpointServiceEndpointInDropBps

Endpoint inbound bandwidth dropped under the EPS

The bandwidth dropped when accessing the endpoint under the EPS from the VPC.

bit/s

Average

VpcEndpointServiceEndpointOutDropBps

Endpoint outbound bandwidth dropped under the EPS

The bandwidth dropped when accessing the VPC from the endpoint under the EPS.

bit/s

Average

VpcEndpointServiceEndpointInDropPps

Rate of inbound packets dropped of the endpoint under the EPS

The rate of packets dropped when accessing the endpoint under the EPS from the VPC.

packet/s

Average

VpcEndpointServiceEndpointOutDropPps

Rate of outbound packets dropped of the endpoint under the EPS

The rate of packets dropped when accessing the VPC from the endpoint under the EPS.

packet/s

Average

Endpoint zone of EPS connection

VpcEndpointServiceEndpointZoneInBps

Endpoint zone inbound bandwidth under the EPS

The bandwidth for accessing the endpoint zone under the EPS from the VPC.

bit/s

Average

VpcEndpointServiceEndpointZoneOutBps

Endpoint zone outbound bandwidth under the EPS

The bandwidth for accessing the VPC from the endpoint zone under the EPS.

bit/s

Average

VpcEndpointServiceEndpointZoneInPps

Endpoint zone inbound packet rate under the EPS

The packet rate for accessing the endpoint zone under the EPS from the VPC.

packet/s

Average

VpcEndpointServiceEndpointZoneOutPps

Endpoint zone outbound packet rate under the EPS

The packet rate for accessing the VPC from the endpoint zone under the EPS.

packet/s

Average

VpcEndpointServiceEndpointZoneInDropBps

Endpoint zone inbound bandwidth dropped under the EPS

The bandwidth dropped when accessing the endpoint zone under the EPS from the VPC.

bit/s

Average

VpcEndpointServiceEndpointZoneOutDropBps

Endpoint zone outbound bandwidth dropped under the EPS

The bandwidth dropped when accessing the VPC from the endpoint zone under the EPS.

bit/s

Average

VpcEndpointServiceEndpointZoneInDropPps

Rate of inbound packets dropped of the endpoint zone under the EPS

The rate of packets dropped when accessing the endpoint zone under the EPS from the VPC.

packet/s

Average

VpcEndpointServiceEndpointZoneOutDropPps

Rate of outbound packets dropped of the endpoint zone under the EPS

The rate of packets dropped when accessing the VPC from the endpoint zone under the EPS.

packet/s

Average

View instance monitoring

Based on your role as a service consumer or provider, you can quickly view instance monitoring charts in the PrivateLink console or the CloudMonitor console.

By default, the system displays data from the last hour. You can select a longer time range from the list.

Service consumer: View endpoint monitoring

  • Go to the Endpoints page. In the top menu bar, select the region where the instance is located. In the Monitor column for the desired endpoint instance, click the image icon, or click the instance ID and then click the Monitor tab.

  • Go to the CloudMonitor console - Endpoint page. Select the region where the instance is located. Click the desired endpoint instance ID or Monitoring Chart in the Actions column.

Service provider: View EPS monitoring

  • Go to the Endpoint Service console. In the top menu bar, select the region where the instance is located. In the Monitor column for the desired EPS, click the image icon, or click the instance ID and then click the Monitor tab.

  • Go to the CloudMonitor console - Endpoint services page. Select the region where the instance is located. Click the target EPS ID or Monitoring Chart in the Actions column.

Alert subscription

Create threshold alerts for key PrivateLink metrics or subscribe to system events to automatically monitor instance status.

Set metric threshold alerts

To monitor the usage of PrivateLink resources, for example, to check whether bandwidth limits are exceeded, you can create an alert rule. If a resource's monitoring metrics meet the alert conditions, CloudMonitor automatically sends an alert notification. This helps you promptly identify and address abnormal monitoring data.

  1. Go to the CloudMonitor console - Alert Rules page. Click Create Alert Rule.

  2. Set Product to PrivateLink-Endpoint or PrivateLink-EPSs. Configure thresholds for each alert level of the monitoring metrics. For more information, see Add a rule.

  3. When a metric reaches its threshold, the Alert Contact Group receives an alert notification. You can also view the alert timeline by clicking Alert History in the Actions column for the alert rule.

  4. After creating the rule, you can Modify, Disable, or Delete the rule in the Actions column for the alert rule.

Subscribe to system events

PrivateLink generates a system event when the status of an endpoint connection changes, such as when it is accepted or rejected. You can create a subscription policy to receive notifications about these changes.

  1. Go to the CloudMonitor console - Event Subscription page. Click Create Subscription Policy.

  2. Set Subscription Type to System Events. Set Products to PrivateLink. Select the desired events.

  3. Customize the alert notifications:

    • Noise reduction: Consolidate alerts based on the subscription scope and use conditional noise reduction to filter alerts. This helps prevent alert storms caused by many duplicate alerts.

    • Alert escalation: CloudMonitor sends notifications to the specified alert contact. If an alert is not resolved within a specified time, CloudMonitor automatically sends the notification to the next alert contact group.

    • Custom notification methods: You can define the level and template for notification channels. You can also push all alert data to services such as Simple Message Queue (formerly MNS), Simple Log Service (SLS), and Function Compute (FC), or to a webhook.

  4. After creating the policy, you can Edit, Disable, or Delete the policy in the Actions column for the policy.

System events

PrivateLink system events

Event name

Event information

Example

Endpoint:Connection:Accept

Description: The endpoint connection is accepted.

Level: INFO

Type: Accept

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:ap-northeast-1:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Endpoint:Connection:Accept",
    "content": {
        "message": "Ac***"
    },
    "status": "Executed"
}

Endpoint:Connection:Reject

Description: The endpoint connection is rejected.

Level: INFO

Type: Reject

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:cn-shenzhen:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Endpoint:Connection:Reject",
    "content": {
        "message": "Re***"
    },
    "status": "Executed"
}

Endpoint:Connection:Zone:Accept

Description: A connection is established for a new endpoint zone.

Level: INFO

Type: Accept

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:cn-guangzhou:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Endpoint:Connection:Zone:Accept",
    "content": {
        "message": "Ac***"
    },
    "status": "Executed"
}

Endpoint:Connection:Zone:Delete

Description: The endpoint connection zone is deleted.

Level: INFO

Type: Delete

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:cn-shanghai-finance-1:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Endpoint:Connection:Zone:Delete",
    "content": {
        "message": "De***"
    },
    "status": "Executed"
}

Service:Connection:Auto_Accept

Description: Automatically accept endpoint connections.

Level: CRITICAL

Type: Accept

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:us-east-1:1754923513653316:<resource-id>",
    "level": "CRITICAL",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Service:Connection:Auto_Accept",
    "content": {
        "message": "Ac***"
    },
    "status": "Executed"
}

Service:Connection:Delete

Description: The endpoint connection is deleted.

Level: INFO

Type: Delete

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:us-east-1:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Service:Connection:Delete",
    "content": {
        "message": "De***"
    },
    "status": "Executed"
}

Service:Connection:Manual_Accept

Description: Manually accept endpoint connections.

Level: INFO

Type: Accept

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:cn-shenzhen:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Service:Connection:Manual_Accept",
    "content": {
        "message": "Ac***"
    },
    "status": "Executed"
}

Service:Connection:Reject

Description: Reject endpoint connection.

Level: INFO

Type: Reject

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:us-east-1:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Service:Connection:Reject",
    "content": {
        "message": "Re***"
    },
    "status": "Executed"
}

Service:Connection:Zone:Accept

Description: The endpoint connection zone is accepted.

Level: INFO

Type: Accept

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:us-east-1:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Service:Connection:Zone:Accept",
    "content": {
        "message": "Ac***"
    },
    "status": "Executed"
}

Service:Connection:Zone:Delete

Description: The endpoint connection zone is deleted.

Level: INFO

Type: Delete

{
    "product": "event_privatelink",
    "resourceId": "acs:privatelink:cn-shanghai-finance-1:1754923513653316:<resource-id>",
    "level": "INFO",
    "instanceName": "instanceName",
    "regionId": "cn-hangzhou",
    "name": "Service:Connection:Zone:Delete",
    "content": {
        "message": "De***"
    },
    "status": "Executed"
}

Parameter

Description

Example

product

The Alibaba Cloud service to which the system event belongs.

event_privatelink

resourceId

The affected resource.

Starts with acs:privatelink: and contains information such as the instance region, Alibaba Cloud account ID, and instance ID.

acs:privatelink:ap-northeast-1:175492351365****:<resource-id>

level

The level of the system event.

  • CRITICAL: A critical severity level.

  • INFO: Informational.

INFO

instanceName

The name of the affected instance.

instanceName

regionId

The region where the affected instance is located.

cn-hangzhou

name

The name of the system event.

Endpoint:Connection:Accept

content

The content of the system event.

Ac***

status

The status of the system event: Executed.

Executed