ddos system-default¶

Configure system default values for DDOS

system-default Specification¶

Type Configuration Resource

Element Name system-default

Element URI /axapi/v3/ddos/system-default

Element Attributes system-default_attributes

Operational Data URI /axapi/v3/ddos/system-default/oper

Schema system-default schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/ddos/system-default	system-default attributes
POST /axapi/v3/ddos/system-default Payload: { "system-default": { "limit-list": [ { "limit-type": "dst-entry", "user-tag": "a" } ] } }
Get Object	GET	/axapi/v3/ddos/system-default	system-default attributes
GET /axapi/v3/ddos/system-default Reponse: { "system-default": { "uuid": "50161a92-e75a-11ea-a6db-2d31bbbed67e", "limit-list": [ { "limit-type": "dst-entry", "default-over-limit-action": { "drop": 0 }, "uuid": "37df96ee-e8cf-11ea-ae4a-4fccd8f3a847", "user-tag": "a", "a10-url": "/axapi/v3/ddos/system-default/limit/dst-entry" } ], "a10-url": "/axapi/v3/ddos/system-default" } }
Modify Object	POST	/axapi/v3/ddos/system-default	system-default attributes
Replace Object	PUT	/axapi/v3/ddos/system-default	system-default attributes
PUT /axapi/v3/ddos/system-default Payload: { "system-default": { "limit-list": [ { "limit-type": "dst-entry", "default-over-limit-action": { "drop": 0 } } ] } }
Delete Object	DELETE	/axapi/v3/ddos/system-default	system-default attributes
DELETE /axapi/v3/ddos/system-default Reponse: { "response": { "status": "OK" } }

system-default attributes¶

limit-list

Type: List

Refernce Object: /axapi/v3/ddos/system-default/limit/{limit-type}

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

limit-list¶

Specification

Type list

Block object keys

default-bit-rate-limit

Description Configure Default Kibit (kibibit / 1024-bit) rate limit

Type: number

Range: 1-16000000

default-conn-limit

Description Configure Default Connection limit

Type: number

Range: 1-16000000

default-conn-rate-limit

Description Configure Default Connection rate limit

Type: number

Range: 1-16000000

default-frag-pkt-rate-limit

Description Configure Default Fragmented packet rate limit

Type: number

Range: 1-16000000

default-over-limit-action

Description: default-over-limit-action is a JSON Block. Please see below for limit-list_default-over-limit-action

Type: Object

default-pkt-rate-limit

Description Configure Default Packet rate limit

Type: number

Range: 1-16000000

limit-type

Description ‘dst-entry’: dst-entry; ‘dst-icmp’: dst-icmp; ‘dst-other’: dst-other; ‘dst-tcp’: dst-tcp; ‘dst-udp’: dst-udp; ‘src-entry’: src-entry; ‘src-icmp’: src-icmp; ‘src-other’: src-other; ‘src-tcp’: src-tcp; ‘src-udp’: src-udp;

Type: string

Supported Values: dst-entry, dst-icmp, dst-other, dst-tcp, dst-udp, src-entry, src-icmp, src-other, src-tcp, src-udp

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

limit-list_default-over-limit-action¶

Specification

Type object

drop

Description Silently Drop the new connection / new packet when it exceeds limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

operational data¶

Counter	Size	Description

dst-frag-other	string	dst-frag-other
src-bit-icmp	string	src-bit-icmp
src-conn-r-entry	string	src-conn-r-entry
dst-pkt-icmp	string	dst-pkt-icmp
src-frag-udp	string	src-frag-udp
src-conn-r-udp	string	src-conn-r-udp
src-bit-entry	string	src-bit-entry
src-conn-r-icmp	string	src-conn-r-icmp
dst-pkt-other	string	dst-pkt-other
src-bit-udp	string	src-bit-udp
dst-conn-udp	string	dst-conn-udp
dst-conn-other	string	dst-conn-other
src-pkt-icmp	string	src-pkt-icmp
src-pkt-udp	string	src-pkt-udp
dst-bit-other	string	dst-bit-other
dst-frag-tcp	string	dst-frag-tcp
dst-conn-entry	string	dst-conn-entry
src-conn-other	string	src-conn-other
dst-bit-udp	string	dst-bit-udp
src-conn-udp	string	src-conn-udp
src-frag-other	string	src-frag-other
dst-pkt-entry	string	dst-pkt-entry
dst-conn-icmp	string	dst-conn-icmp
src-conn-entry	string	src-conn-entry
dst-bit-icmp	string	dst-bit-icmp
src-conn-icmp	string	src-conn-icmp
src-conn-r-other	string	src-conn-r-other
dst-pkt-tcp	string	dst-pkt-tcp
dst-conn-r-other	string	dst-conn-r-other
dst-frag-icmp	string	dst-frag-icmp
dst-conn-r-tcp	string	dst-conn-r-tcp
dst-conn-tcp	string	dst-conn-tcp
src-conn-tcp	string	src-conn-tcp
dst-frag-entry	string	dst-frag-entry
src-bit-other	string	src-bit-other
dst-bit-entry	string	dst-bit-entry
src-frag-tcp	string	src-frag-tcp
dst-frag-udp	string	dst-frag-udp
src-bit-tcp	string	src-bit-tcp
src-pkt-entry	string	src-pkt-entry
src-pkt-tcp	string	src-pkt-tcp
src-frag-entry	string	src-frag-entry
dst-bit-tcp	string	dst-bit-tcp
dst-conn-r-udp	string	dst-conn-r-udp
dst-conn-r-icmp	string	dst-conn-r-icmp
src-frag-icmp	string	src-frag-icmp
src-pkt-other	string	src-pkt-other
dst-pkt-udp	string	dst-pkt-udp
src-conn-r-tcp	string	src-conn-r-tcp
dst-conn-r-entry	string	dst-conn-r-entry