.. _ddos_l7_dns:

ddos l7-dns
===========

DDOS DNS Statistics


l7-dns Specification
--------------------

	===================================== ====================================================
	===================================== ====================================================
	 **Type**                              *Configuration Resource*

	 **Element Name**                      l7-dns

	 **Element URI**                       /axapi/v3/ddos/l7-dns

	 **Element Attributes**                l7-dns_attributes

	 **Statistics Data URI**               /axapi/v3/ddos/l7-dns/stats

	 **Schema**                             :download:`l7-dns schema <ddos-l7-dns/ddos-l7-dns.txt>`
	===================================== ====================================================





	**Operations Allowed:**




.. raw:: html

   <script type="text/javascript">
 function showExample(a,b) { document.getElementById(a+'_div').style.display = 'block'; document.getElementById(a+'_cl').style.display = 'block'; document.getElementById(a+'_eg').style.display = 'none';}
   function closeExample(a,b) { document.getElementById(a+'_div').style.display = 'none'; document.getElementById(a+'_cl').style.display = 'none'; document.getElementById(a+'_eg').style.display = 'block';}
 </script>
   <table width='90%' style='margin-left:5%'>



.. raw:: html

   <tr style='border-bottom: thin solid; border-top: thin solid'><th width=15%>Operation</th><th width=10%>Method</th><th>URI</th><th width=15%>Payload</th><th width=10%></th></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/l7-dns



.. raw:: html

   </td><td valign = 'top'>


:ref:`390_l7-dns_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get Object



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/l7-dns



.. raw:: html

   </td><td valign = 'top'>


:ref:`390_l7-dns_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Modify Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/l7-dns



.. raw:: html

   </td><td valign = 'top'>


:ref:`390_l7-dns_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace Object



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/l7-dns



.. raw:: html

   </td><td valign = 'top'>


:ref:`390_l7-dns_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Delete Object



.. raw:: html

   </td><td valign = 'top'>


DELETE



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/l7-dns



.. raw:: html

   </td><td valign = 'top'>


:ref:`390_l7-dns_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   </table>

.. _390_l7-dns_attributes:

l7-dns attributes
-----------------

    **sampling-enable**

        **Type:** List

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _390_sampling-enable:

sampling-enable
^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **counters1**

        **Description** 'all': all; 'force_tcp_auth': DNS Auth Force-TCP; 'dns_auth_udp': DNS Auth UDP; 'dns_malform_drop': DNS Malform Query Dropped; 'dns_qry_any_drop': DNS Query ANY Dropped; 'dst_rate_limit0': Dst Request Rate 1 Exceeded; 'dst_rate_limit1': Dst Request Rate 2 Exceeded; 'dst_rate_limit2': Dst Request Rate 3 Exceeded; 'dst_rate_limit3': Dst Request Rate 4 Exceeded; 'dst_rate_limit4': Dst Request Rate 5 Exceeded; 'src_rate_limit0': Src Request Rate 1 Exceeded; 'src_rate_limit1': Src Request Rate 2 Exceeded; 'src_rate_limit2': Src Request Rate 3 Exceeded; 'src_rate_limit3': Src Request Rate 4 Exceeded; 'src_rate_limit4': Src Request Rate 5 Exceeded; 'dns_auth_udp_pass': DNS Auth UDP Passed; 'dns_fqdn_stage2_exceed': FQDN Rate Exceeded; 'dns_is_nx': NXDOMAIN Response; 'dns_nx_drop': NXDOMAIN Query Dropped; 'dns_nx_bl': NXDOMAIN Query Blacklisted; 'dns_tcp_auth_pass': DNS Auth Force-TCP Passed; 'dns_auth_udp_fail': DNS Auth UDP Failed; 'dns_auth_udp_timeout': DNS Auth UDP Timeout; 'dns_fqdn_label_len_exceed': FQDN Label Length Exceeded; 'dns_pkt_processed': DNS Packets Processed; 'dns_query_type_a': DNS Query Type A; 'dns_query_type_aaaa': DNS Query Type AAAA; 'dns_query_type_ns': DNS Query Type NS; 'dns_query_type_cname': DNS Query Type CNAME; 'dns_query_type_any': DNS Query Type ANY; 'dns_query_type_srv': DNS Query Type SRV; 'dns_query_type_mx': DNS Query Type MX; 'dns_query_type_soa': DNS Query Type SOA; 'dns_query_type_opt': DNS Query Type OPT; 'dns_dg_action_permit': DNS Domain Group Action Permit; 'dns_dg_action_deny': DNS Domain Group Action Deny; 'dns_fqdn_rate_by_label_count_check': FQDN Rate by Label Count Checked; 'dns_fqdn_rate_by_label_count_exceed': FQDN Rate by Label Count Exceeded; 'dns_udp_auth_retry_gap_drop': DNS Auth UDP Retry-Gap Drop; 'dns_policy_drop': DNS Policy Dropped; 'dns_fqdn_label_count_exceed': FQDN Label Count Exceeded; 'dns_rrtype_drop': DNS Record Type Dropped; 'force_tcp_auth_timeout': DNS Auth Force-TCP With UDP Auth Timeout; 'dns_auth_drop': DNS Auth Dropped; 'dns_auth_resp': DNS Auth Responded; 'force_tcp_auth_conn_hit': DNS Auth Force-TCP With UDP Auth Connection Hit; 'dns_auth_udp_fail_bl': DNS Auth UDP Fail Blacklisted; 'dns_nx_exceed': NXDOMAIN Response Rate Exceeded; 'dns_query_class_whitelist_miss': DNS Query Class Whitelist Miss; 'dns_malform': DNS Malform Query (deprecated); 'dns_query_class_in': DNS Query Class INTERNET; 'dns_query_class_csnet': DNS Query Class CSNET; 'dns_query_class_chaos': DNS Query Class CHAOS; 'dns_query_class_hs': DNS Query Class HESIOD; 'dns_query_class_none': DNS Query Class NONE; 'dns_query_class_any': DNS Query Class ANY; 'dns_dg_rate_exceed': dns_dg_rate_exceed; 'dns_outbound_query_response_size_exceed': DNS Outbound Query Resp Size Exceeded; 'dns_outbound_query_sess_timed_out': DNS Outbound Query Session Timed Out; 

        **Type:** string

        **Supported Values:** all, force_tcp_auth, dns_auth_udp, dns_malform_drop, dns_qry_any_drop, dst_rate_limit0, dst_rate_limit1, dst_rate_limit2, dst_rate_limit3, dst_rate_limit4, src_rate_limit0, src_rate_limit1, src_rate_limit2, src_rate_limit3, src_rate_limit4, dns_auth_udp_pass, dns_fqdn_stage2_exceed, dns_is_nx, dns_nx_drop, dns_nx_bl, dns_tcp_auth_pass, dns_auth_udp_fail, dns_auth_udp_timeout, dns_fqdn_label_len_exceed, dns_pkt_processed, dns_query_type_a, dns_query_type_aaaa, dns_query_type_ns, dns_query_type_cname, dns_query_type_any, dns_query_type_srv, dns_query_type_mx, dns_query_type_soa, dns_query_type_opt, dns_dg_action_permit, dns_dg_action_deny, dns_fqdn_rate_by_label_count_check, dns_fqdn_rate_by_label_count_exceed, dns_udp_auth_retry_gap_drop, dns_policy_drop, dns_fqdn_label_count_exceed, dns_rrtype_drop, force_tcp_auth_timeout, dns_auth_drop, dns_auth_resp, force_tcp_auth_conn_hit, dns_auth_udp_fail_bl, dns_nx_exceed, dns_query_class_whitelist_miss, dns_malform, dns_query_class_in, dns_query_class_csnet, dns_query_class_chaos, dns_query_class_hs, dns_query_class_none, dns_query_class_any, dns_dg_rate_exceed, dns_outbound_query_response_size_exceed, dns_outbound_query_sess_timed_out

.. _390_stats_data:

stats data
----------
.. list-table::
   :widths: 10 20 30 80
   :header-rows: 2
   :stub-columns: 1

   *  - 
      - Counter
      - Size
      - Description

   *  - 
      - 
      - 
      - 

   *  - 
      - dst_rate_limit1
      - 8
      - Dst Request Rate 2 Exceeded

   *  - 
      - dst_rate_limit0
      - 8
      - Dst Request Rate 1 Exceeded

   *  - 
      - dst_rate_limit3
      - 8
      - Dst Request Rate 4 Exceeded

   *  - 
      - dst_rate_limit2
      - 8
      - Dst Request Rate 3 Exceeded

   *  - 
      - dst_rate_limit4
      - 8
      - Dst Request Rate 5 Exceeded

   *  - 
      - dns_query_type_srv
      - 8
      - DNS Query Type SRV

   *  - 
      - dns_qry_any_drop
      - 8
      - DNS Query ANY Dropped

   *  - 
      - dns_auth_udp_fail_bl
      - 8
      - DNS Auth UDP Fail Blacklisted

   *  - 
      - dns_fqdn_rate_by_label_count_exceed
      - 8
      - FQDN Rate by Label Count Exceeded

   *  - 
      - dns_auth_udp_timeout
      - 8
      - DNS Auth UDP Timeout

   *  - 
      - dns_malform_drop
      - 8
      - DNS Malform Query Dropped

   *  - 
      - dns_query_class_in
      - 8
      - DNS Query Class INTERNET

   *  - 
      - dns_query_type_ns
      - 8
      - DNS Query Type NS

   *  - 
      - dns_query_type_soa
      - 8
      - DNS Query Type SOA

   *  - 
      - dns_auth_udp
      - 8
      - DNS Auth UDP

   *  - 
      - non_query_opcode_pass_through
      - 8
      - DNS Non Query Opcode Pass Through

   *  - 
      - force_tcp_auth_timeout
      - 8
      - DNS Auth Force-TCP With UDP Auth Timeout

   *  - 
      - dns_dg_action_permit
      - 8
      - DNS Domain Group Action Permit

   *  - 
      - dns_query_class_chaos
      - 8
      - DNS Query Class CHAOS

   *  - 
      - dns_tcp_auth_pass
      - 8
      - DNS Auth Force-TCP Passed

   *  - 
      - dns_query_class_whitelist_miss
      - 8
      - DNS Query Class Whitelist Miss

   *  - 
      - dns_nx_drop
      - 8
      - NXDOMAIN Query Dropped

   *  - 
      - dns_query_type_any
      - 8
      - DNS Query Type ANY

   *  - 
      - dns_is_nx
      - 8
      - NXDOMAIN Response

   *  - 
      - dns_query_type_opt
      - 8
      - DNS Query Type OPT

   *  - 
      - dns_fqdn_label_len_exceed
      - 8
      - FQDN Label Length Exceeded

   *  - 
      - dns_query_class_any
      - 8
      - DNS Query Class ANY

   *  - 
      - dns_query_type_cname
      - 8
      - DNS Query Type CNAME

   *  - 
      - dns_auth_udp_pass
      - 8
      - DNS Auth UDP Passed

   *  - 
      - dns_auth_udp_fail
      - 8
      - DNS Auth UDP Failed

   *  - 
      - dns_dg_rate_exceed
      - 8
      - DNS Domain Group Domain Query Rate Exceeded

   *  - 
      - dns_nx_bl
      - 8
      - NXDOMAIN Query Blacklisted

   *  - 
      - src_rate_limit4
      - 8
      - Src Request Rate 5 Exceeded

   *  - 
      - src_rate_limit2
      - 8
      - Src Request Rate 3 Exceeded

   *  - 
      - src_rate_limit3
      - 8
      - Src Request Rate 4 Exceeded

   *  - 
      - src_rate_limit0
      - 8
      - Src Request Rate 1 Exceeded

   *  - 
      - src_rate_limit1
      - 8
      - Src Request Rate 2 Exceeded

   *  - 
      - dns_nx_exceed
      - 8
      - NXDOMAIN Response Rate Exceeded

   *  - 
      - dns_query_type_aaaa
      - 8
      - DNS Query Type AAAA

   *  - 
      - dns_query_class_csnet
      - 8
      - DNS Query Class CSNET

   *  - 
      - dns_auth_resp
      - 8
      - DNS Auth Responded

   *  - 
      - dns_query_type_mx
      - 8
      - DNS Query Type MX

   *  - 
      - dns_policy_drop
      - 8
      - DNS Policy Dropped

   *  - 
      - force_tcp_auth_conn_hit
      - 8
      - DNS Auth Force-TCP With UDP Auth Connection Hit

   *  - 
      - dns_rrtype_drop
      - 8
      - DNS Record Type Dropped

   *  - 
      - dns_outbound_query_response_size_exceed
      - 8
      - DNS Outbound Query Resp Size Exceeded

   *  - 
      - dns_udp_auth_retry_gap_drop
      - 8
      - DNS Auth UDP Retry-Gap Drop

   *  - 
      - dns_dg_action_deny
      - 8
      - DNS Domain Group Action Deny

   *  - 
      - force_tcp_auth
      - 8
      - DNS Auth Force-TCP

   *  - 
      - dns_query_type_a
      - 8
      - DNS Query Type A

   *  - 
      - dns_query_class_none
      - 8
      - DNS Query Class NONE

   *  - 
      - dns_outbound_query_sess_timed_out
      - 8
      - DNS Outbound Query Session Timed Out

   *  - 
      - dns_query_class_hs
      - 8
      - DNS Query Class HESIOD

   *  - 
      - dns_fqdn_stage2_exceed
      - 8
      - FQDN Rate Exceeded

   *  - 
      - dns_auth_drop
      - 8
      - DNS Auth Dropped

   *  - 
      - dns_pkt_processed
      - 8
      - DNS Packets Processed

   *  - 
      - dns_fqdn_label_count_exceed
      - 8
      - FQDN Label Count Exceeded