The Artica Reverse Proxy exposes a built-in Prometheus-compatible metrics endpoint on port 9925, providing real-time visibility into reverse proxy traffic, security posture, and flood mitigation effectiveness across all protected services.
This feature is available on Artica v4.50 Service Pack 7 or Artica v4.50 Service Pack 6 Hotfix 20260213-00
¶ Technical Specification – Monitoring & Telemetry Features
- Per-Service Real-Time Traffic Monitoring
Exposes detailed traffic metrics per upstream service with a fixed 10-second scrape interval, enabling fine-grained operational analysis and short detection latency.
- Request Security Classification Engine
Classifies every processed request into three primary categories: legitimate, illegitimate, and server error.
Metrics are further segmented by HTTP status code, allowing precise behavioral and anomaly analysis at protocol level.
- Flood Attack Telemetry & Live Counters
Provides real-time visibility into volumetric and abusive traffic patterns, including:- Blocked source IP counters
- DNS resolution activity metrics
- Deduplication efficiency ratios
This enables quantitative evaluation of mitigation effectiveness.
- Zero-Configuration Exposure Model
Metrics endpoint is automatically initialized and exposed during reverse proxy daemon startup.
No additional configuration, reload, or external instrumentation is required.
- Prometheus & Grafana Compatibility
Exposes a standard/metricsendpoint compliant with Prometheus scraping conventions.
Fully compatible with Prometheus-based monitoring stacks and Grafana dashboards without adaptation layers.
¶ Metrics Reference
Window Metrics (gauges, reset every 10 minutes)
| Metric | Labels | Description |
|---|---|---|
reverseproxy_window_elapsed_seconds |
none | Seconds elapsed in the current 10-minute aggregation window |
reverseproxy_window_requests_total |
service_id, status |
Request count per service per HTTP status code |
reverseproxy_window_unique_clients |
service_id |
Unique client IP count per service |
reverseproxy_window_legit_total |
service_id |
Legitimate requests per service |
reverseproxy_window_illegit_total |
service_id |
Illegitimate requests per service |
reverseproxy_window_server_err_total |
service_id |
Server error requests per service |
ASN Metrics (gauges, reset every 1 hour)
| Metric | Labels | Description |
|---|---|---|
reverseproxy_asn_window_elapsed_seconds |
none | Seconds elapsed in the current ASN metrics window (resets hourly) |
reverseproxy_asn_requests_total |
asn, service_id |
Total requests per ASN per service |
reverseproxy_asn_unique_ips |
asn, service_id |
Unique client IPs per ASN per service |
reverseproxy_asn_legit_total |
asn, service_id |
Legitimate requests per ASN per service |
reverseproxy_asn_illegit_total |
asn, service_id |
Illegitimate requests per ASN per service |
reverseproxy_asn_server_err_total |
asn, service_id |
Server error requests per ASN per service |
ASN metrics use the same status code classification as per-service metrics (see below). The ASN is resolved via Team Cymru DNS lookups and cached for 1 hour.
Flood-Block Counters (monotonically increasing, use rate())
| Metric | Description |
|---|---|
reverseproxy_flood_blocked_total |
IPs blocked via ASN-based flood blocking |
reverseproxy_flood_skipped_total |
IPs skipped (already blocked recently, dedup) |
reverseproxy_flood_dns_fail_total |
DNS lookup failures during ASN resolution |
reverseproxy_flood_dropped_total |
Events dropped due to flood-block channel overflow |
reverseproxy_update_dropped_total |
Events dropped due to main update channel overflow |
Flood-Block Gauges (current state)
| Metric | Description |
|---|---|
reverseproxy_flood_channel_length |
Current number of events waiting in the flood-block queue |
reverseproxy_flood_dedup_size |
Number of recently-blocked IPs in the dedup map |
reverseproxy_flood_asn_cache_size |
Number of IPs with cached ASN lookup results |
¶
¶ Enable Prometheus Exporter service
By default the Prometheus Exporter service is disabled
- On
Web services > Statistics,click on Prometheus button. - Turn on The Enable Prometheus option and set the port
