BADoS Virtual Servers Statistics

Overview

Module Name in API

bigip-bados-vip-stats

Product Name in API

local-traffic

Dimensions

Dimension Name in API Description
Virtual Server virtual  
DOS Profile dos-profile-name Name of the DoS profile used in the BIG-IP
Service Scaling Group ssg The name of the Service Scaling Group
BIG-IP Host Name hostname The hostname given to the BIG-IP
Application Service applicationService  
BIG-IP Blade hostname-slot This is a combination of a BIG-IP hostname and its blade number
BADOS Protected Virtual Server Unique Identifier bados-virtual-identifier Virtual server full name connected to a device name, assigned DOS profile and cluster name, if one exists
Virtual Server Unique Name unique-virtual-name Virtual server full name connected to a device or cluster name
BIG-IP Service Cluster dsc-name Clusters of BIG-IPs grouped together to have the same config
Application applications  

MetricSets

Transactions Queue Size

Description

Number of transactions that sent through the BIG-IP to the server, but no response was yet for them

Name In API

transactions-queue

Metrics in the metricSet

Metric Name in API Unit Description
Transactions Queue Size avg-value-per-event trans The average number of transactions pending in queue to be served by the server

Other Mitigation

Description

TBD

Name In API

bados-other-mitigation

Metrics in the metricSet

Metric Name in API Unit Description
Other Mitigation avg-value-per-event   TBD

Unclassified IP’s (controlled DoS)

Description

TBD

Name In API

bados-conn-drops

Metrics in the metricSet

Metric Name in API Unit Description
Unclassified IP’s (controlled DoS) avg-value-per-event   TBD

Bad Actor’s IP’s

Description

TBD

Name In API

bados-gray-conn-drops

Metrics in the metricSet

Metric Name in API Unit Description
Bad Actor’s IP’s avg-value-per-event   TBD

TLS Signatures

Description

TBD

Name In API

bados-ssl-signature-drops

Metrics in the metricSet

Metric Name in API Unit Description
TLS Signatures avg-value-per-event   TBD

Concurrent Connections Baseline

Description

TBD

Name In API

bados-conns-baseline

Metrics in the metricSet

Metric Name in API Unit Description
Concurrent Connections Baseline avg-value-per-event   TBD

RPS Threshold

Description

TBD

Name In API

bados-rps-threshold

Metrics in the metricSet

Metric Name in API Unit Description
RPS Threshold avg-value-per-event   TBD

Server Stress Level

Description

This is the BADoS view of how stressed the service is, values less than 100 reflect normal activity

Name In API

bados-stress-level

Metrics in the metricSet

Metric Name in API Unit Description
Server Stress Level avg-value-per-event   The average server stress level as detected by BADoS

Uncontrolled DOS

Description

TBD

Name In API

bados-uncontrolled-dos

Metrics in the metricSet

Metric Name in API Unit Description
Uncontrolled DOS avg-value-per-event   TBD

Successful Transactions

Description

TBD

Name In API

bados-successful-transactions

Metrics in the metricSet

Metric Name in API Unit Description
Successful Transactions avg-value-per-event   TBD

RPS Baseline

Description

TBD

Name In API

bados-rps-baseline

Metrics in the metricSet

Metric Name in API Unit Description
RPS Baseline avg-value-per-event   TBD

Quarantine

Description

TBD

Name In API

bados-quarantine-drops

Metrics in the metricSet

Metric Name in API Unit Description
Quarantine avg-value-per-event   TBD

Requests

Description

TBD

Name In API

bados-server-requests

Metrics in the metricSet

Metric Name in API Unit Description
Requests avg-value-per-event   TBD

Dropped Packets

Description

TBD

Name In API

bados-gray-list-packet-drops

Metrics in the metricSet

Metric Name in API Unit Description
Dropped Packets avg-value-per-event   TBD

TLS Client Hello BaseLine

Description

TBD

Name In API

bados-ssl-client-hello-baseline

Metrics in the metricSet

Metric Name in API Unit Description
TLS Client Hello BaseLine avg-value-per-event   TBD

Signatures

Description

TBD

Name In API

bados-signature-drops

Metrics in the metricSet

Metric Name in API Unit Description
Signatures avg-value-per-event   TBD

Incoming Requests

Description

TBD

Name In API

bados-client-requests

Metrics in the metricSet

Metric Name in API Unit Description
Incoming Requests avg-value-per-event   TBD

Accelerated HTTP Signatures

Description

TBD

Name In API

bados-fast-signature-drops

Metrics in the metricSet

Metric Name in API Unit Description
Accelerated HTTP Signatures avg-value-per-event   TBD

Whitelist

Description

TBD

Name In API

bados-whitelist

Metrics in the metricSet

Metric Name in API Unit Description
Whitelist avg-value-per-event   TBD

Unclassified IP’s (Controlled DoS)

Description

TBD

Name In API

bados-global-drops

Metrics in the metricSet

Metric Name in API Unit Description
Unclassified IP’s (Controlled DoS) avg-value-per-event   TBD

Blacklist

Description

TBD

Name In API

bados-blacklist-drops

Metrics in the metricSet

Metric Name in API Unit Description
Blacklist avg-value-per-event   TBD

TLS Client Hello

Description

TBD

Name In API

bados-ssl-client-hello

Metrics in the metricSet

Metric Name in API Unit Description
TLS Client Hello avg-value-per-event   TBD

Bad Actors IP’s

Description

TBD

Name In API

bados-gray-list-drops

Metrics in the metricSet

Metric Name in API Unit Description
Bad Actors IP’s avg-value-per-event   TBD

Concurrent Connections

Description

TBD

Name In API

bados-conns

Metrics in the metricSet

Metric Name in API Unit Description
Concurrent Connections avg-value-per-event   TBD

Examples

By Time Query

A query by time returns a series of data points in time, based on optional filters, time range, and time granularity. This query kind is identified by the keyword: “ap:query:stats:byTime”

POST https://<address>/mgmt/ap/query/v1/tenants/default/products/local-traffic/metric-query

This example for JSON body in the post, filters by dimension virtual and get the avg-value-per-event of transactions-queue

{
    "kind": "ap:query:stats:byTime",
    "module": "bigip-bados-vip-stats",
    "timeRange": {
            "from": "-1h",
            "to": "now"
    },
    "timeGranularity": {
            "duration": 30,
            "unit": "SECONDS"
    },
    "aggregations": {
            "transactions-queue$avg-value-per-event": {
                    "metricSet": "transactions-queue",
                    "metric": "avg-value-per-event"
            }
    },
    "dimensionFilter": {
            "type": "eq",
            "dimension": "virtual",
            "value": "value to filter by"
    }
}

By Entities Query

A query by entities returns a sort set of entities, based on optional filters, time range, and choosen metric to sort by. This query kind is identified by the keyword: “ap:query:stats:byEntities”

POST https://<address>/mgmt/ap/query/v1/tenants/default/products/local-traffic/metric-query

This example for JSON body in the post, gets top entities of type virtual, sorted by avg-value-per-event of transactions-queue

{
    "kind": "ap:query:stats:byEntities",
    "module": "bigip-bados-vip-stats",
    "timeRange": {
            "from": "-1H",
            "to": "now"
    },
    "dimension": "virtual",
    "sortMetric": "transactions-queue$avg-value-per-event",
    "sortOrder": "desc",
    "aggregations": {
            "transactions-queue$avg-value-per-event": {
                    "metricSet": "transactions-queue",
                    "metric": "avg-value-per-event"
            }
    },
    "limit": 5
}

Entities Count Query

An entities count query returns the distinct count of entities, based on optional filters, time range, and choosen entity type. This query kind is identified by the keyword: “ap:query:stats:entitiesCount”

POST https://<address>/mgmt/ap/query/v1/tenants/default/products/local-traffic/metric-query

This example for JSON body in the post, gets the distinct count of entities of type virtual

{
    "kind": "ap:query:stats:entitiesCount",
    "module": "bigip-bados-vip-stats",
    "dimension": "virtual",
    "timeRange": {
            "from": "-1h",
            "to": "now"
    }
}