{ "id":"/axapi/v3/ddos/protection", "type":"object", "node-type":"scalar", "title":"protection", "auto-created-object":1, "description":"DDOS protection", "properties":{ "toggle":{ "type":"string", "format":"enum", "default":"disable", "description":"'enable': enable; 'disable': disable; ", "enum":[ "enable", "disable" ], "optional":true }, "rate-interval":{ "type":"string", "format":"enum", "default":"100ms", "description":"'100ms': 100ms; '1sec': 1sec; ", "enum":[ "100ms", "1sec" ], "optional":true }, "traffic-distribution-mode":{ "type":"string", "format":"enum", "plat-pos-list":["chassis-duo"], "default":"dest-ip-based", "description":"'dest-ip-based': Distribute traffic to one slot using default distribution mechanism (Destination IP based); 'source-ip-based': Distribute traffic between slots, based on source ip; ", "enum":[ "dest-ip-based", "source-ip-based" ], "optional":true }, "interblade-sync-accuracy":{ "type":"string", "format":"enum", "default":"Medium", "description":"'High': Enforced limit will be the same as configured value, but has worst under-commit issue in certain situations; 'Medium': Enforced limit is close to configured value, but has worse under-commit issue in certain situations; 'Low': Enforced limit is less close to configured value, but has least under-commit issue in certain situations; ", "enum":[ "High", "Medium", "Low" ], "optional":true }, "force-routing-on-transp":{ "type":"number", "format":"flag", "default":0, "description":"Force use of routing in transparent mode", "optional":true }, "disable-on-reboot":{ "type":"number", "format":"flag", "default":0, "description":"Disable DDoS protection upon reboot/reload", "optional":true }, "use-route":{ "type":"number", "format":"flag", "default":0, "description":"Use route table, default use receive hop for device initiated traffic", "optional":true }, "enable-now":{ "type":"number", "format":"flag", "default":0, "description":"Override disable-on-reboot to enable runtime DDOS protection", "optional":true }, "mpls":{ "type":"number", "format":"flag", "default":0, "description":"Enable MPLS packet inspection", "optional":true }, "fast-aging":{ "type":"object", "properties":{ "half-open-conn-ratio":{ "type":"number", "format":"number", "minimum":1, "maximum":99, "default":25, "description":"Minimum half-open session to total session ratio before session fast aging will take effect (default 25)" }, "half-open-conn-threshold":{ "type":"number", "format":"number", "minimum":1, "maximum":99, "default":1, "description":"Minimum half-open session (percentage) before session fast aging will take effect (default 1)" } } }, "src-dst-entry-limit":{ "type":"string", "format":"enum", "default":"16M", "description":"'8M': 8 Million; '16M': 16 Million; 'unlimited': Unlimited; 'platform-default': Half of platform maximum; ", "enum":[ "8M", "16M", "unlimited", "platform-default" ], "optional":true }, "src-zone-port-entry-limit":{ "type":"string", "format":"enum", "default":"16M", "description":"'8M': 8 Million; '16M': 16 Million; 'unlimited': Unlimited; 'platform-default': Half of platform maximum; ", "enum":[ "8M", "16M", "unlimited", "platform-default" ], "optional":true }, "hw-blocking-enable":{ "type":"number", "format":"flag", "default":0, "description":"Enable hardware blacklist blocking for src or dst default entries (default disabled)", "optional":true }, "uuid":{ "type":"string", "format":"string", "minLength":1, "maxLength":64, "modify-not-allowed":1, "description":"uuid of the object", "optional":true } } }