Grafana CloudFront Dashboards

本文缩写（英文全称与中文含义）

缩写	英文全称／名称	中文含义
AWS	Amazon Web Services	亚马逊云服务
CDN	Content Delivery Network	内容分发网络
TLS	Transport Layer Security	传输层安全协议
TTL	Time To Live	存活时间；具体指缓存有效期或记录过期时间
URL	Uniform Resource Locator	统一资源定位符，通常指访问地址
WAF	Web Application Firewall	Web 应用防火墙
YACE	Yet Another CloudWatch Exporter	把 CloudWatch 指标转换为 Prometheus 指标的采集器

Links#

1. Dashboard Rule#

Folder: Edge
Dashboard: CloudFront - Overview

Rows:
    Overview:
        requests、error rate、cache hit、origin latency、traffic

    Drilldown:
        按 distribution / status code / cache behavior / region 拆开看

    Capacity:
        request / bandwidth trend、cache efficiency、origin pressure

    Debug:
        real-time metrics、TLS、origin status、geo / cache behavior 细节，不放第一屏；排查 CDN 行为异常时查看

2. Overview#

Panel	Metrics	Why
Requests	`Requests`	CDN traffic 基线
Total error rate	`TotalErrorRate`	用户侧错误总览
4xx / 5xx error rate	`4xxErrorRate`, `5xxErrorRate`	区分 client / server / origin 问题
Cache hit rate	`CacheHitRate`	CDN 是否有效减轻 origin 压力
Origin latency	`OriginLatency` if enabled	origin 慢会直接影响 miss 请求
Traffic bytes	`BytesDownloaded`, `BytesUploaded`	带宽趋势和成本信号

3. Drilldown#

Panel	Metrics	Why
Error by distribution	error rate by distribution	找到异常 distribution
Status code split	4xx / 5xx metrics	区分 client、edge、origin 问题
Cache behavior split	cache hit / miss by behavior if collected	找到命中率差的 path pattern
Origin pressure	origin latency and origin request metrics if enabled	找到 origin 承压点
Geo / edge split	real-time logs / metrics if enabled	区域性故障排查

4. Capacity#

Panel	Metrics	Why
Request trend	`Requests`	业务增长
Bandwidth trend	`BytesDownloaded`, `BytesUploaded`	成本和容量规划
Cache hit trend	`CacheHitRate`	评估 cache policy / TTL 效果
Origin latency trend	`OriginLatency`	识别 origin 长期变慢
Error rate trend	`TotalErrorRate`, `5xxErrorRate`	观察发布或流量增长后的质量变化

5. Debug#

Panel	Metrics	Why
Real-time metrics	real-time metrics if enabled	秒级排障，成本更高，不默认放 overview
TLS / cert expiry	external blackbox / certificate exporter	CloudFront 证书有效期需要外部补充监控
Origin status sample	CloudFront logs / real-time logs	dashboard 看趋势，日志看具体 URL
WAF signals	WAF metrics if attached	只有接入 WAF 时展示

6. YACE Metrics#

如果 CloudFront dashboard 使用 aws_cloudfront_* metrics，需要 YACE 采集 AWS/CloudFront。CloudFront 的 CloudWatch metrics 通常在 us-east-1 查询。

YACE config:

apiVersion: v1alpha1
sts-region: us-east-1
discovery:
  jobs:
    - type: AWS/CloudFront
      regions:
        - us-east-1
      customTags:
        - key: environment
          value: uat
      period: 300
      length: 600
      nilToZero: true
      metrics:
        - name: Requests
          statistics: [Sum]
        - name: TotalErrorRate
          statistics: [Average]
        - name: 4xxErrorRate
          statistics: [Average]
        - name: 5xxErrorRate
          statistics: [Average]
        - name: CacheHitRate
          statistics: [Average]
        - name: OriginLatency
          statistics: [Average, p95, p99]
        - name: BytesDownloaded
          statistics: [Sum]
        - name: BytesUploaded
          statistics: [Sum]

确认 metric name:

{__name__=~"aws_cloudfront_.*"}

7. Do Not Put In Overview#

Cache hit 与 origin latency 一起看：命中缓存时可能不回源，不能拿 CDN 整体延迟直接代表源站处理时间。

不要放:
    每个 URL / User-Agent / edge location 明细
    real-time logs 内容
    WAF rule 明细

原因:
    CloudFront overview 重点是 request、error rate、cache hit、origin latency、traffic