Smarter by Design.Simpler for Business
Bot/DDoS Protected vServices
What Is Bot/DDoS Protected vServices?
Bot/DDoS Protected vServices lists in the Left Monitor Panel the vServices on which Bot/DDoS protection is enabled together with their statuses and the value of a selected Bot/DDoS metric. Every row is a vService; the colored strip on the left of the row shows the status of the vService and the column on the right shows the value of the selected metric. When a row is clicked, the Bot/DDoS Dashboard tab of that vService opens on the main screen.
By default the category shows the total of the Bot Score Distribution metric over the last one day in the Total column and refreshes the values every 5 seconds. Since this metric is not a single number but a distribution that consists of bot score buckets, a colored bar is drawn in the cell instead of a number; in this way the list shows the traffic coming to which vService shifts to the bot side. The list is filtered by name, by vService type and by status. The selected category, the filters and the view settings are stored per user; when the session is opened again, the panel comes in the same state.
Bot/DDoS Enabled
Scope
Only the vServices on which Bot/DDoS protection is enabled are listed
6
Statuses
OK, Warning, Error, Disabled, Evaluating, Unknown
3
Filter Tabs
Name, Type, Status
5s
Refresh
The default refresh interval; 10s, 30s and 60s are also selected
Accessing the Screen
- Left Monitor Panel is opened.
- Bot/DDoS Protected vServices is selected from the category tabs at the top left.
- The vServices defined on TR7 on which Bot/DDoS protection is enabled are listed.
- The vService to be monitored is clicked; the screen opens with the Dashboard tab that carries the vService's name.
If Bot/DDoS Protected vServices is not seen in the category list, the user has no Load Balancer authorization or the category has been removed with the Edit Tabs arrangement in the category list; a removed category is added again from the same arrangement. When Bot/DDoS protection is enabled on a vService, the vService is added to the list by itself, and when it is disabled, it goes out of the list.
The Bot/DDoS Protected vServices Screen
The Bot/DDoS Protected vServices Screen
At the top part of the screen there are the category selector and the toolbar, below them the status strip, the search box and the vService table, and at the very bottom the metric information row and the total strip. By default the table opens with the following columns:
| Column | Description |
|---|---|
| The status strip | The colored strip on the left of the row shows the status of the vService; the colors are the same as the colors in the status strip. When it is hovered over, the status name is displayed. |
| vService | The name of the vService. Long names are shortened; when they are hovered over, the full name is displayed. |
| Total | The bot score distribution of the requests coming to the vService (Bot Score Distribution, Total). The cell is a bar that shows, of the score buckets of five points each from 0 to 100 (20 buckets in total), the ones that have a value, in a width proportional to their values and in score order; every bucket is in the color of the class it belongs to (Clean, Suspicious, Bot, Bad Bot). In the middle of the bar the total value is written; if there is no measurement, the bar stays gray and 0 is written. When the cell is hovered over, the distribution of the buckets is displayed with a ring chart. |
The Total column belongs to the default Primary Metric value; when another metric is selected in the View Settings window, the columns of that metric come in place of this column. The metrics that carry many data sources are shown with a single bar cell, like Bot Score Distribution. For the score classes see Bot Score Distribution. When a metric cell is hovered over, the vService name, the metric, the period and the value are displayed. When the value changes, an arrow of two seconds appears in the metric cell, and when the status changes, in the name cell.
By default the table is sorted by name from A to Z. The sorting is changed by clicking a column header: the first click on a column that is not sorted sorts the name and status strip columns from the smallest to the largest and the metric columns from the largest to the smallest; a second click on the same column reverses the order and a third click removes the sorting. In the table one navigates between the rows with the ↑ and ↓ keys; the selected row opens half a second later and the Enter key opens the row immediately. The ← and → keys pass to the previous or the next category.
When a row is clicked, the Bot/DDoS Dashboard tab that carries the name of the vService opens on the main screen; the Dashboard comes with the Display Period value in the panel.
The Category Selector
Which object group the panel will list is selected. When the label or the arrow next to it is clicked, the category list opens; the default order is Load Balancer vServices, WAF-Protected vServices, AGS-Enabled vServices, Bot/DDoS Protected vServices, Backend Services, Backend Service Groups, GTM, Interfaces and Route Tables & L4 DDoS. The categories for which the user has no authorization are not displayed in the list.
With the Edit Tabs button in the list, the categories are reordered by dragging, are added with Add Tab and are edited or deleted with the buttons on the right of the row. The changes are saved with the check mark; Discard changes undoes the changes made and Reset to Defaults returns to the default category list.
vService List
By clicking the vService list button, the Bot/DDoS Protected vService List screen opens on the main screen. While the listing screen is open, the button is displayed as active.
Search
The Search button shows or hides the search box above the table. The search is made only in the vService name and the table is filtered as it is typed. The cross mark in the box clears the search; the Esc key or clicking the button again hides the box and clears the search. Whether the box is open or closed is stored per user; by default it is open.
Filter
By clicking the Filter button, the Filter window opens. While a filter is active, a dot appears on the button and the tooltip of the button writes how many vServices are shown in the form Showing X of Y.
View Settings
By clicking the Settings button, the View Settings window opens.
Collapse
The Collapse button collapses the panel. The collapsed panel turns into a narrow icon strip: every category is shown with an icon and the small status dots below it. When the icon is hovered over, the category name and the status distribution are displayed; when the icon is clicked, the panel expands again with that category. The width of the panel is changed by dragging its right edge and is stored per user.
The Metric Information Row
It shows the selected metric of the table, its calculation type and its period; by default it writes Bot Score Distribution — Total, last 1 day(s). By clicking the row, the View Settings window opens. While the data is loading, the settings icon in the row turns; the ring around the icon shows the time remaining until the next refresh.
The total strip below it gives the total of the rows that are visible in the table at that moment (with the filter and the search applied). In the default metric the strip is displayed as a single bar that combines the score buckets of all the vServices and, next to it, the total value (Σ); only the buckets that have a value take place in the bar and, when the bar is hovered over, the total of every bucket is displayed. In the metrics that cannot be added up, such as a percentage or a ratio, the average (x̄) is shown instead of the total.
The Status Strip
The strip below the toolbar shows the number of the vServices in the list by status; there is a box for every status that has a vService at that moment. The boxes are counted according to the name and type filters; the search and the Status filter do not change the numbers, so all the statuses continue to be seen on the strip.
| Status | Color | Meaning |
|---|---|---|
| OK | Green | The vService is running and receiving traffic. |
| Warning | Yellow | Some Backend Services are unreachable or in maintenance state, or there is a problem in the frontend IP addresses. |
| Error | Red | The vService process is not up, no Backend Service is healthy, the frontend IP address or interface cannot be found, or there is a configuration error. |
| Disabled | Gray | The vService has been disabled manually or the vDevice it is bound to is off. |
| Evaluating | The accent color | The vService is being created, edited or its configuration is being reloaded. |
| Unknown | The dark accent color | No status record has been read yet for the vService. |
The colors come from the selected theme; for the details of the statuses see vService Status.
When a box is clicked, that status is added to the Status filter in the Filter window and the table shows only the vServices in that status; when it is clicked again, the status is removed from the filter. More than one box can be selected and the selected boxes are displayed highlighted. The strip is hidden with the Show status bar option in the View Settings window.
The Filter Window
In the window that opens by clicking the Filter button, the vServices in the table are filtered according to the values in the tabs.
The Filter Window
In the header of every tab the number of values in that tab is written, and next to every value the number of vServices that have that value. When no value is selected in a tab, that tab does not filter the list. When more than one value is selected in a tab, the vServices that match any one of them are listed, and when a selection is made in different tabs, the vServices that match the condition of all the tabs are listed.
Tabs
INFO
Name Default: All
The name of every vService on which Bot/DDoS protection is enabled is listed; the selected vServices are shown in the table.
INFO
Type Default: All
It is filtered by vService type; the types of the vServices that are in the list (HTTP, L7 TCP; Network if it has been opened from the protection adding window) are listed. Since the components of Bot/DDoS protection that work on the HTTP and L7 TCP vServices are different, this tab has been added to this category; it is not present in the WAF-Protected and AGS-Enabled categories.
INFO
Status Default: All
It is filtered by vService status; the statuses in the status strip are listed as colored labels. Clicking a box in the status strip also changes the selection in this tab.
Window Controls
INFO
Select All
The Select all button selects all the values displayed in the tab; while all the values are selected, the button becomes Deselect all and removes the selection.
INFO
Search
In the Name tab the values are filtered according to the text typed in the search box; Select all is applied only to the filtered values. In the other tabs there is no search box.
INFO
Save
By clicking the Save button, the selected filters are applied and stored per user. If the window is closed without the Save button being clicked, the selections made are not applied.
The View Settings Window
In the window that opens by clicking the Settings button or the metric information row, which metric the table will show, its sorting and its refresh period are set.
The View Settings Window
The settings are stored per category and per user; a setting made for Bot/DDoS Protected vServices does not affect the other categories.
Metrics
INFO
View Type Default: Basic
The view of the list is selected:
- Basic: the vServices are listed as a table with the columns of the selected metric.
- Advanced: every vService is shown as a card; on the card there are at most five additional metrics together with the Primary Metric. In this view the Additional Metrics field in which the additional metrics are selected is added to the window.
INFO
Primary Metric Default: Bot Score Distribution, Total
The metric to be shown in the table and the calculation type are selected. In the first box the Bot/DDoS metrics of the vServices are listed; these metrics are the panels on the Bot/DDoS Dashboard screen of the vService. The Load Balancer, WAF and AGS metrics are not listed in this category; these metrics are in their own categories. The Static group contains two pieces of information that do not depend on time:
- Threat Protection: the protections that are on on the vService and their modes; if the profile is in the learning phase, this is stated as well.
- Type: the type of the vService.
In the second box it is selected how the selected metric will be calculated. For Bot Score Distribution the options are Last value, Avg. value, Max. value and Total.
Sorting & Appearance
INFO
Sort By Default: Name
The sorting criterion of the table is selected: Default Order, Name, Status or one of the columns of the selected metric.
INFO
Ascending Default: Checked
While it is checked, the sorting is made from the smallest to the largest (from A to Z), and while it is not checked, from the largest to the smallest.
INFO
Group by Status Default: Not checked
When it is selected, the vServices are grouped by their statuses; the groups are arranged in the order Unknown, Disabled, Error, Warning, Evaluating and OK. At the beginning of every group the status name and the number of vServices are written; by clicking the group header, the group is opened or closed.
Data Refresh
INFO
Display Period Default: Last 1 day(s)
The period over which the metric value will be calculated is selected. The ready options are 1 minute, 5 minutes, 15 minutes, 30 minutes, 1 hour, 6 hours, 12 hours, 1 day, 1 week, 1 month, 3 months and 1 year; the period is also entered manually. The field is not displayed when no time-dependent metric is selected in the saved setting and in the window (e.g. when a metric is selected only from the Static group). The Bot/DDoS Dashboard that opens when a row is clicked comes with this period.
INFO
Refresh Interval Default: 5s
The refresh interval of the values in the table is selected: 5s, 10s, 30s, 60s.
INFO
Accept
By clicking the Accept button, the settings are saved and the table is refreshed with the new settings.
