{ "id":"/axapi/v3/ddos/protection", "type":"object", "node-type":"scalar", "title":"protection", "partition-visibility":"shared", "auto-created-object":1, "description":"DDOS protection", "properties":{ "toggle":{ "type":"string", "format":"enum", "plat-neg-list":["softax-ddet"], "default":"disable", "partition-visibility":"shared", "description":"'enable': enable; 'disable': disable; ", "enum":[ "enable", "disable" ], "optional":true }, "rate-interval":{ "type":"string", "format":"enum", "plat-neg-list":["softax-ddet"], "default":"100ms", "partition-visibility":"shared", "description":"'100ms': 100ms; '1sec': 1sec; ", "enum":[ "100ms", "1sec" ], "optional":true }, "src-ip-hash-bit":{ "type":"number", "format":"number", "plat-neg-list":["softax-ddet"], "minimum":0, "maximum":31, "default":2, "partition-visibility":"shared", "description":"Configure which bit hashed on", "optional":true }, "src-ipv6-hash-bit":{ "type":"number", "format":"number", "plat-neg-list":["softax-ddet"], "minimum":0, "maximum":127, "default":2, "partition-visibility":"shared", "description":"Configure which bit hashed on", "optional":true }, "force-routing-on-transp":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Force use of routing in transparent mode", "optional":true }, "disable-on-reboot":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Disable DDoS protection upon reboot/reload", "optional":true }, "rexmit-syn-log":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Enable ddos per flow rexmit syn exceeded log", "optional":true }, "use-route":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Use route table, default use receive hop for device initiated traffic", "optional":true }, "enable-now":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Override disable-on-reboot to enable runtime DDOS protection", "optional":true }, "disable-advanced-core-analysis":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Disable advanced context info in coredump file", "optional":true }, "mpls":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Enable MPLS packet inspection", "optional":true }, "disable-delay-dynamic-src-learning":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Disable delay dynamic src entry learning", "optional":true }, "fast-aging":{ "type":"object", "properties":{ "half-open-conn-ratio":{ "type":"number", "format":"number", "minimum":1, "maximum":99, "default":25, "partition-visibility":"shared", "description":"Minimum half-open session to total session ratio before session fast aging will take effect (default 25)" }, "half-open-conn-threshold":{ "type":"number", "format":"number", "minimum":1, "maximum":99, "default":1, "partition-visibility":"shared", "description":"Minimum half-open session (percentage) before session fast aging will take effect (default 1)" } } }, "src-dst-entry-limit":{ "type":"string", "format":"enum", "default":"16M", "partition-visibility":"shared", "description":"'8M': 8 Million; '16M': 16 Million; 'unlimited': Unlimited; 'platform-default': Half of platform maximum; ", "enum":[ "8M", "16M", "unlimited", "platform-default" ], "optional":true }, "src-zone-port-entry-limit":{ "type":"string", "format":"enum", "default":"16M", "partition-visibility":"shared", "description":"'8M': 8 Million; '16M': 16 Million; 'unlimited': Unlimited; 'platform-default': Half of platform maximum; ", "enum":[ "8M", "16M", "unlimited", "platform-default" ], "optional":true }, "force-traffic-to-same-blade-disable":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Allow traffic to be distributed among blades on Chassis", "optional":true }, "hw-blocking-enable":{ "type":"number", "format":"flag", "plat-neg-list":["softax-ddet"], "default":0, "partition-visibility":"shared", "description":"Enable hardware blacklist blocking for src or dst default entries (default disabled)", "optional":true }, "hw-blocking-threshold-limit":{ "type":"number", "format":"number", "plat-neg-list":["softax-ddet"], "minimum":1, "maximum":16000000, "default":10000, "partition-visibility":"shared", "description":"Threshold to initiate hardware blocking (default 10000)", "optional":true }, "progression-tracking":{ "type":"string", "format":"enum", "default":"enable", "partition-visibility":"shared", "description":"'enable': enable; 'disable': disable; ", "enum":[ "enable", "disable" ], "optional":true }, "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "partition-visibility":"shared", "modify-not-allowed":1, "description":"uuid of the object", "optional":true }, "ipv6-src-hash-mask-bits":{ "type":"object", "$ref":"/axapi/v3/ddos/protection/ipv6-src-hash-mask-bits", "properties":{ "mask-bit-offset-1":{ "type":"number", "format":"number", "minimum":0, "maximum":127, "partition-visibility":"shared", "description":"Configure mask bits" }, "mask-bit-offset-2":{ "type":"number", "format":"number", "minimum":0, "maximum":127, "partition-visibility":"shared", "description":"Configure mask bits" }, "mask-bit-offset-3":{ "type":"number", "format":"number", "minimum":0, "maximum":127, "partition-visibility":"shared", "description":"Configure mask bits" }, "mask-bit-offset-4":{ "type":"number", "format":"number", "minimum":0, "maximum":127, "partition-visibility":"shared", "description":"Configure mask bits" }, "mask-bit-offset-5":{ "type":"number", "format":"number", "minimum":0, "maximum":127, "partition-visibility":"shared", "description":"Configure mask bits" }, "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "partition-visibility":"shared", "modify-not-allowed":1, "description":"uuid of the object" } } } } }