Docs

Volcengine Managed Service for Prometheus

Throttling

Managing PromQL blocking policies

The PromQL blocking policy is a query-control feature of VMP. It can precisely block specific PromQL queries based on request patterns (query statement matching rules) and request sources (accounts).

Creating PromQL blocking policies

Limits

Each workspace supports at most 10 PromQL blocking policies.

Procedure

In the top navigation bar, select the project and region where your business is located.

In the left navigation pane, select Workspaces .

Click the name of the target workspace.

In the left navigation bar, click Traffic control.

Click the PromQL ban tab and click Create policy. Specify the related parameters based on the following table.

Parameter	Description
Name	Enter a name for the PromQL blocking policy.
PromQL matching rules	Enter the PromQL blocking match rule. When a pending PromQL query statement matches this rule, the system will trigger the blocking mechanism and intercept the query operation. Click here to learn more. tip The PromQL match rule must be a valid statement.
Matching pattern	Select the matching mode for the PromQL blocking policy. Supported modes are Exact match and Regex match. Exact Matching: The PromQL query statement to be executed must be the same as the blocking match rule. Regex match: Uses regular expressions to match PromQL query statements, supporting flexible scenarios such as fuzzy matching and range matching. Learn more.
Blocking target	Select the IAM users or roles that are now allowed to execute PromQL queries in this workspace. tip If no IAM user or role is configured, the workspace will block all IAM users and roles that initiate queries.

Click Confirm to complete the configuration.

What to do next

After a blocking policy is created, you need to verify whether the policy is effective. Procedure:

Go to the Explore page.

Select the workspace to which the target policy belongs.

tip

The selected workspace must be consistent with the workspace of the PromQL blocking policy.

Enter the query statement and click Query.

tip

The entered query statement must be consistent with the PromQL match rule in the target PromQL blocking policy.

If the following message is displayed, the blocking policy is effective.

Enable or disable PromQL blocking policy

tip

If you disable a PromQL blocking policy, the blocking capability becomes invalid.

In the top navigation bar, select the project and region where your business is located.

In the left navigation pane, select Workspaces .

Click the name of the target workspace.

In the left navigation bar, click Traffic control.

Click the PromQL ban tab.

Click Enable or Disable in the Actions column of the target policy to complete the operation.

Editing PromQL blocking policies

In the top navigation bar, select the project and region where your business is located.

In the left navigation pane, select Workspaces .

Click the name of the target workspace.

In the left navigation bar, click Traffic control.

Click the PromQL ban tab.

Click Edit in the Actions column of the target policy to modify the related parameters.

Deleting PromQL blocking policies

tip

After you delete a PromQL blocking policy, it cannot be restored. Proceed with caution.

If you delete a PromQL blocking policy, the blocking capability becomes invalid.

In the top navigation bar, select the project and region where your business is located.

In the left navigation pane, select Workspaces .

Click the name of the target workspace.

In the left navigation bar, click Traffic control.

Click the PromQL ban tab.

Click Delete in the Actions column of the target policy.

After you confirm that the policy to be deleted is correct, click Confirm to delete the policy.

Last updated: 2026.07.20 10:17:51