Privacy Proxy - Privacy Proxy metrics now available via GraphQL Analytics API
Key Points
- Privacy Proxy metrics available via GraphQL
- Four new GraphQL metric nodes
- GraphQL recommended over OpenTelemetry
Summary
Cloudflare now exposes Privacy Proxy observability via the GraphQL Analytics API (POST https://api.cloudflare.com/client/v4/graphql). This single, recommended endpoint lets engineers query Privacy Proxy metrics without running a collector—OpenTelemetry export remains available for existing pipelines.
Key Points
- Endpoint: POST
https://api.cloudflare.com/client/v4/graphqlwith headerAuthorization: Bearer <API_TOKEN>and JSONquery/variablespayload. - Four metric nodes available:
privacyProxyRequestMetricsAdaptiveGroups— request volume, error rates, status codes, proxy-status breakdowns.privacyProxyIngressConnMetricsAdaptiveGroups— client→proxy connection counts, bytes, latency percentiles.privacyProxyEgressConnMetricsAdaptiveGroups— proxy→origin connection counts, bytes, latency percentiles.privacyProxyAuthMetricsAdaptiveGroups— authentication attempt counts by method and result.
- Supported filters: time range (
date_geq/date_leq),coloCode(data center),endpoint; nodes add extra dimensions (e.g., transport protocol, auth method). - Query options: supports
limit(example uses 10000) andorderBy(e.g.,date_ASC) for time-series aggregation. - Migration notes: GraphQL is the recommended default (plug-and-play, no collector infra). Keep OpenTelemetry exports while migrating dashboards/alerts.
Actionable guidance
- Update dashboards and alert queries to call the GraphQL Analytics API and map the new node names to existing metrics.
- Use time and colo filters to limit data returned and control costs; paginate or cap
limitfor large ranges. - Retain OpenTelemetry export until parity is validated, then decommission collectors if desired.