a10_ddos_detection_settings

Synopsis

Configure ddos detection settings

Parameters

Parameters

Choices/Defaults

Comment

state

str/required

[‘noop’, ‘present’, ‘absent’]

State of the object to be created.

ansible_host

str/required

Host for AXAPI authentication

ansible_username

str/required

Username for AXAPI authentication

ansible_password

str/required

Password for AXAPI authentication

ansible_port

int/required

Port for AXAPI authentication

a10_device_context_id

int

[‘1-8’]

Device ID for aVCS configuration

a10_partition

str

Destination/target partition for object/command

detector_mode

str

‘standalone’= Standalone detector; ‘on-box’= Mitigator and Detector on the same box; ‘auto-svc-discovery’= Auto Service discovery using Visibility module (Deprecatd);

dedicated_cpus

int

Configure the number of dedicated cores for detection

ctrl_cpu_usage

int

Control cpu usage threshold for DDoS detection

full_core_enable

bool

Enable full core

top_k_reset_interval

int

Configure top-k reset interval

pkt_sampling

dict

Field pkt_sampling

override_rate

int

Sample 1 in X packets (default= X=1)

assign_index

int

Lower index is more aggressive sampling

assign_rate

int

Assign rate to given index

histogram_escalate_percentage

int

histogram escalate sensitivity for DDoS detection

histogram_de_escalate_percentage

int

histogram de-escalate sensitivity for DDoS detection

detection_window_size

int

Configure detection window size in seconds (DDoS detection window size in seconds(default= 1))

initial_learning_interval

int

Initial learning interval (in hours) before processing

export_interval

int

Configure Baselining and export interval in seconds (DDoS Baselining and export interval in seconds(default= 20))

notification_debug_log

str

‘enable’= Enable detection notification debug log (default= disabled);

network_object_window_size

str

‘5’= 5 seconds; ‘10’= 10 seconds; ‘15’= 15 seconds; ‘30’= 30 seconds; (DDoS detection window size in seconds(default= 30))

network_object_flooding_multiple

int

multiplier for flooding detection threshold in network objects (default 2x threshold)

de_escalation_quiet_time

int

Configure de-escalation needed time in minutes from level 1 to 0.(default 1 minutes)

uuid

str

uuid of the object

entry_saving

dict

Field entry_saving

interval

int

Configure periodical auto-saving interval in minutes

manual_save

bool

Manually save network-object-based detection entries and learned indicators

manual_restore

bool

Manually restore network-object-based detection entries and learned indicators

uuid

str

uuid of the object

standalone_settings

dict

Field standalone_settings

action

str

‘enable’= Enable standalone detector; ‘disable’= Disable standalone detector (default);

de_escalation_quiet_time

int

Configure de-escalation needed time in minutes from level 1 to 0.(legacy)

uuid

str

uuid of the object

sflow

dict

Field sflow

netflow

dict

Field netflow

Examples


Return Values

modified_values (changed, dict, )

Values modified (or potential changes if using check_mode) as a result of task operation

axapi_calls (always, list, )

Sequential list of AXAPI calls made by the task

endpoint (, str, [‘/axapi/v3/slb/virtual_server’, ‘/axapi/v3/file/ssl-cert’])

The AXAPI endpoint being accessed.

http_method (, str, [‘POST’, ‘GET’])

HTTP method being used by the primary task to interact with the AXAPI endpoint.

request_body (, complex, )

Params used to query the AXAPI

response_body (, complex, )

Response from the AXAPI

Status

  • This module is not guaranteed to have a backwards compatible interface. [preview]

  • This module is maintained by community.

Authors

  • A10 Networks