ddos l4-tcp

l4 tcp counters

l4-tcp Specification

   
Type Configuration Resource
Element Name l4-tcp
Element URI /axapi/v3/ddos/l4-tcp
Element Attributes l4-tcp_attributes
Statistics Data URI /axapi/v3/ddos/l4-tcp/stats
Schema l4-tcp schema

Operations Allowed:

OperationMethodURIPayload

Create Object

POST

/axapi/v3/ddos/l4-tcp

l4-tcp attributes

Get Object

GET

/axapi/v3/ddos/l4-tcp

l4-tcp attributes

Modify Object

POST

/axapi/v3/ddos/l4-tcp

l4-tcp attributes

Replace Object

PUT

/axapi/v3/ddos/l4-tcp

l4-tcp attributes

Delete Object

DELETE

/axapi/v3/ddos/l4-tcp

l4-tcp attributes

l4-tcp attributes

sampling-enable

Type: List

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

sampling-enable

Specification  
Type list
Block object keys  

counters1

Description ‘all’: all; ‘tcp_sess_create’: TCP Sessions Created; ‘intcp’: TCP Total Packets Received; ‘tcp_syn_rcvd’: TCP SYN Received; ‘tcp_invalid_syn_rcvd’: TCP Invalid SYN Received; ‘tcp_syn_ack_rcvd’: TCP SYN ACK Received; ‘tcp_ack_rcvd’: TCP ACK Received; ‘tcp_fin_rcvd’: TCP FIN Received; ‘tcp_rst_rcvd’: TCP RST Received; ‘tcp_outrst’: TCP Outbound RST; ‘tcp_reset_client’: TCP Reset Client; ‘tcp_reset_server’: TCP Reset Server; ‘tcp_syn_rate’: TCP SYN Rate Per Sec; ‘tcp_total_drop’: TCP Total Packets Dropped; ‘tcp_dst_drop’: TCP Dst Packets Dropped; ‘tcp_exceed_drop_any_dst’: TCP Dst Exceed Drop (deprecated); ‘tcp_exceed_drop_prate_dst’: TCP Dst Packet Rate Drop (deprecated); ‘tcp_exceed_drop_crate_dst’: TCP Dst Connection Rate Drop (deprecated); ‘tcp_exceed_drop_climit_dst’: TCP Dst Connection Limit Drop (deprecated); ‘tcp_drop_black_dst’: TCP Dst Blacklist Drop (deprecated); ‘tcp_src_drop’: TCP Src Packets Dropped; ‘tcp_exceed_drop_any_src’: TCP Src Exceed Drop (deprecated); ‘tcp_exceed_drop_prate_src’: TCP Src Packet Rate Drop (deprecated); ‘tcp_exceed_drop_crate_src’: TCP Src Connection Rate Drop (deprecated); ‘tcp_exceed_drop_climit_src’: TCP Src Connection Limit Drop (deprecated); ‘tcp_drop_black_src’: TCP Src Blacklist Drop (deprecated); ‘tcp_drop_black_user_cfg_src’: TCP Src Blacklist User Packets Dropped; ‘tcp_src_dst_drop’: TCP SrcDst Packets Dropped; ‘tcp_exceed_drop_any_src_dst’: TCP SrcDst Exceed Drop (deprecated); ‘tcp_exceed_drop_prate_src_dst’: TCP SrcDst Packet Rate Drop (deprecated); ‘tcp_exceed_drop_crate_src_dst’: TCP SrcDst Connection Rate Drop (deprecated); ‘tcp_exceed_drop_climit_src_dst’: TCP SrcDst Connection Limit Drop (deprecated); ‘tcp_drop_black_src_dst’: TCP SrcDst Blacklist Drop (deprecated); ‘tcp_drop_black_user_cfg_src_dst’: TCP SrcDst Blacklist User Packets Dropped; ‘tcp_port_zero_drop’: TCP Port 0 Packets Dropped; ‘tcp_syncookie_sent’: TCP SYN Cookie Sent; ‘tcp_syncookie_sent_fail’: TCP SYN Cookie Send Failed; ‘tcp_syncookie_check_fail’: TCP SYN Cookie Check Failed; ‘tcp_syncookie_hw_missing’: TCP SYN Cookie HW Missed; ‘tcp_syncookie_fail_bl’: TCP SYN Cookie Blacklist Failed; ‘tcp_syncookie_pass’: TCP SYN Cookie Passed; ‘syn_auth_pass’: TCP SYN Auth Passed; ‘syn_auth_skip’: TCP SYN Auth Skipped; ‘tcp_over_limit_syn_auth_dst’: TCP Dst Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_cookie_dst’: TCP Dst Over Limit Cookie (deprecated); ‘tcp_over_limit_syn_auth_dst_port’: TCP Dst Port Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_cookie_dst_port’: TCP Dst Port Over Limit Cookie (deprecated); ‘tcp_action_on_ack_start’: TCP ACK Retry Init; ‘tcp_action_on_ack_matched’: TCP ACK Retry Matched; ‘tcp_action_on_ack_passed’: TCP ACK Retry Passed; ‘tcp_action_on_ack_failed’: TCP ACK Retry Dropped; ‘tcp_action_on_ack_timeout’: TCP ACK Retry Timeout; ‘tcp_action_on_ack_reset’: TCP ACK Retry Timeout Reset; ‘tcp_ack_no_syn’: TCP ACK No SYN; ‘tcp_out_of_seq’: TCP Out-Of-Seq Total; ‘tcp_zero_window’: TCP Zero-Window Total; ‘tcp_retransmit’: TCP Retransmit Total; ‘tcp_rexmit_syn_limit_drop’: TCP Retransmit SYN Exceed Dropped; ‘tcp_zero_window_bl’: TCP Zero-Window Blacklisted; ‘tcp_out_of_seq_bl’: TCP Out-Of-Seq Blacklisted; ‘tcp_retransmit_bl’: TCP Retransmit Blacklisted; ‘tcp_rexmit_syn_limit_bl’: TCP Retransmit SYN Exceed Blacklisted; ‘tcp_per_conn_prate_exceed’: TCP Conn Pkt Rate Dropped; ‘tcp_action_on_ack_gap_drop’: TCP ACK Retry Retry-Gap Dropped; ‘tcp_action_on_ack_gap_pass’: TCP ACK Retry Retry-Gap Passed; ‘tcp_new_conn_ack_retry_gap_start’: TCP New-Connection-Ack-Retry-Gap Initialize (deprecated); ‘tcp_new_conn_ack_retry_gap_passed’: TCP New-Connection-Ack-Retry-Gap Pass (deprecated); ‘tcp_new_conn_ack_retry_gap_failed’: TCP New-Connection-Ack-Retry-Gap Fail (deprecated); ‘tcp_new_conn_ack_retry_gap_timeout’: TCP New-Connection-Ack-Retry-Gap Timeout (deprecated); ‘tcp_new_conn_ack_retry_gap_reset’: TCP New-Connection-Ack-Retry-Gap Reset (deprecated); ‘tcp_new_conn_ack_retry_gap_drop’: TCP New-Connection-Ack-Retry-Gap Drop (deprecated); ‘tcp_action_on_syn_start’: TCP SYN Retry Init; ‘tcp_action_on_syn_passed’: TCP SYN Retry Passed; ‘tcp_action_on_syn_failed’: TCP SYN Retry Dropped; ‘tcp_action_on_syn_timeout’: TCP SYN Retry Timeout; ‘tcp_action_on_syn_reset’: TCP SYN Retry Timeout Reset; ‘tcp_action_on_syn_gap_drop’: TCP SYN Retry Retry-Gap Dropped; ‘tcp_action_on_syn_gap_pass’: TCP SYN Retry Retry-Gap Passed; ‘tcp_unauth_rst_drop’: TCP Unauth RST Dropped; ‘dst_tcp_filter_match’: Dst Filter Match; ‘dst_tcp_filter_not_match’: Dst Filter No Match; ‘dst_tcp_filter_action_blacklist’: Dst Filter Action Blacklist; ‘dst_tcp_filter_action_drop’: Dst Filter Action Drop; ‘dst_tcp_filter_action_default_pass’: Dst Filter Action Default Pass; ‘tcp_over_limit_syn_auth_src’: TCP Src Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_auth_src_dst’: TCP SrcDst Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_cookie_src’: TCP Src Over Limit Cookie (deprecated); ‘tcp_over_limit_syn_cookie_src_dst’: TCP SrcDst Over Limit Cookie (deprecated); ‘tcp_exceed_drop_brate_dst’: TCP Dst KiBit Rate Drop (KiBit) (deprecated); ‘tcp_exceed_drop_brate_src’: TCP Src KiBit Rate Drop (KiBit) (deprecated); ‘tcp_exceed_drop_brate_src_dst’: TCP SrcDst KiBit Rate Drop (KiBit) (deprecated); ‘tcp_concurrent’: TCP Concurrent Port Access; ‘dst_tcp_filter_action_whitelist’: Dst Filter Action WL; ‘src_tcp_filter_match’: Src Filter Match; ‘src_tcp_filter_not_match’: Src Filter No Match; ‘src_tcp_filter_action_blacklist’: Src Filter Action Blacklist; ‘src_tcp_filter_action_drop’: Src Filter Action Drop; ‘src_tcp_filter_action_default_pass’: Src Filter Action Default Pass; ‘src_tcp_filter_action_whitelist’: Src Filter Action WL; ‘src_dst_tcp_filter_match’: SrcDst Filter Match; ‘src_dst_tcp_filter_not_match’: SrcDst Filter No Match; ‘src_dst_tcp_filter_action_blacklist’: SrcDst Filter Action Blacklist; ‘src_dst_tcp_filter_action_drop’: SrcDst Filter Action Drop; ‘src_dst_tcp_filter_action_default_pass’: SrcDst Filter Action Default Pass; ‘src_dst_tcp_filter_action_whitelist’: SrcDst Filter Action WL; ‘syn_auth_pass_wl’: TCP SYN Auth Pass WL; ‘tcp_out_of_seq_drop’: TCP Out-Of-Seq Dropped; ‘tcp_zero_window_drop’: TCP Zero-Window Dropped; ‘tcp_retransmit_drop’: TCP Retransmit Dropped; ‘tcp_per_conn_prate_exceed_bl’: TCP Conn Pkt Rate Blacklisted; ‘tcp_any_exceed’: TCP Exceeded; ‘tcp_drop_bl’: TCP Blacklist Packets Dropped; ‘tcp_frag_rcvd’: TCP Fragmented Packets Received; ‘tcp_frag_drop’: TCP Fragmented Packets Dropped; ‘tcp_auth_drop’: TCP Auth Dropped; ‘tcp_auth_resp’: TCP Auth Responded; ‘tcp_total_bytes_rcv’: TCP Total Bytes Received; ‘tcp_total_bytes_drop’: TCP Total Bytes Dropped; ‘tcp_action_on_ack_bl’: TCP ACK Retry Timeout Blacklisted; ‘tcp_action_on_syn_bl’: TCP SYN Retry Timeout Blacklisted; ‘tcp_per_conn_ofo_rate_exceed_drop’: TCP Conn Out-Of-Seq Rate Dropped; ‘tcp_per_conn_ofo_rate_exceed_bl’: TCP Conn Out-Of-Seq Rate Blacklisted; ‘tcp_per_conn_rexmit_rate_exceed_drop’: TCP Conn Retransmit Rate Dropped; ‘tcp_per_conn_rexmit_rate_exceed_bl’: TCP Conn Retransmit Rate Blacklisted; ‘tcp_per_conn_zwindow_rate_exceed_drop’: TCP Conn Zero-Window Rate Dropped; ‘tcp_per_conn_zwindow_rate_exceed_bl’: TCP Conn Zero-Window Rate Blacklisted; ‘tcp_syn_tfo_rcvd’: TCP SYN TFO Received;

Type: string

Supported Values: all, tcp_sess_create, intcp, tcp_syn_rcvd, tcp_invalid_syn_rcvd, tcp_syn_ack_rcvd, tcp_ack_rcvd, tcp_fin_rcvd, tcp_rst_rcvd, tcp_outrst, tcp_reset_client, tcp_reset_server, tcp_syn_rate, tcp_total_drop, tcp_dst_drop, tcp_exceed_drop_any_dst, tcp_exceed_drop_prate_dst, tcp_exceed_drop_crate_dst, tcp_exceed_drop_climit_dst, tcp_drop_black_dst, tcp_src_drop, tcp_exceed_drop_any_src, tcp_exceed_drop_prate_src, tcp_exceed_drop_crate_src, tcp_exceed_drop_climit_src, tcp_drop_black_src, tcp_drop_black_user_cfg_src, tcp_src_dst_drop, tcp_exceed_drop_any_src_dst, tcp_exceed_drop_prate_src_dst, tcp_exceed_drop_crate_src_dst, tcp_exceed_drop_climit_src_dst, tcp_drop_black_src_dst, tcp_drop_black_user_cfg_src_dst, tcp_port_zero_drop, tcp_syncookie_sent, tcp_syncookie_sent_fail, tcp_syncookie_check_fail, tcp_syncookie_hw_missing, tcp_syncookie_fail_bl, tcp_syncookie_pass, syn_auth_pass, syn_auth_skip, tcp_over_limit_syn_auth_dst, tcp_over_limit_syn_cookie_dst, tcp_over_limit_syn_auth_dst_port, tcp_over_limit_syn_cookie_dst_port, tcp_action_on_ack_start, tcp_action_on_ack_matched, tcp_action_on_ack_passed, tcp_action_on_ack_failed, tcp_action_on_ack_timeout, tcp_action_on_ack_reset, tcp_ack_no_syn, tcp_out_of_seq, tcp_zero_window, tcp_retransmit, tcp_rexmit_syn_limit_drop, tcp_zero_window_bl, tcp_out_of_seq_bl, tcp_retransmit_bl, tcp_rexmit_syn_limit_bl, tcp_per_conn_prate_exceed, tcp_action_on_ack_gap_drop, tcp_action_on_ack_gap_pass, tcp_new_conn_ack_retry_gap_start, tcp_new_conn_ack_retry_gap_passed, tcp_new_conn_ack_retry_gap_failed, tcp_new_conn_ack_retry_gap_timeout, tcp_new_conn_ack_retry_gap_reset, tcp_new_conn_ack_retry_gap_drop, tcp_action_on_syn_start, tcp_action_on_syn_passed, tcp_action_on_syn_failed, tcp_action_on_syn_timeout, tcp_action_on_syn_reset, tcp_action_on_syn_gap_drop, tcp_action_on_syn_gap_pass, tcp_unauth_rst_drop, dst_tcp_filter_match, dst_tcp_filter_not_match, dst_tcp_filter_action_blacklist, dst_tcp_filter_action_drop, dst_tcp_filter_action_default_pass, tcp_over_limit_syn_auth_src, tcp_over_limit_syn_auth_src_dst, tcp_over_limit_syn_cookie_src, tcp_over_limit_syn_cookie_src_dst, tcp_exceed_drop_brate_dst, tcp_exceed_drop_brate_src, tcp_exceed_drop_brate_src_dst, tcp_concurrent, dst_tcp_filter_action_whitelist, src_tcp_filter_match, src_tcp_filter_not_match, src_tcp_filter_action_blacklist, src_tcp_filter_action_drop, src_tcp_filter_action_default_pass, src_tcp_filter_action_whitelist, src_dst_tcp_filter_match, src_dst_tcp_filter_not_match, src_dst_tcp_filter_action_blacklist, src_dst_tcp_filter_action_drop, src_dst_tcp_filter_action_default_pass, src_dst_tcp_filter_action_whitelist, syn_auth_pass_wl, tcp_out_of_seq_drop, tcp_zero_window_drop, tcp_retransmit_drop, tcp_per_conn_prate_exceed_bl, tcp_any_exceed, tcp_drop_bl, tcp_frag_rcvd, tcp_frag_drop, tcp_auth_drop, tcp_auth_resp, tcp_total_bytes_rcv, tcp_total_bytes_drop, tcp_action_on_ack_bl, tcp_action_on_syn_bl, tcp_per_conn_ofo_rate_exceed_drop, tcp_per_conn_ofo_rate_exceed_bl, tcp_per_conn_rexmit_rate_exceed_drop, tcp_per_conn_rexmit_rate_exceed_bl, tcp_per_conn_zwindow_rate_exceed_drop, tcp_per_conn_zwindow_rate_exceed_bl, tcp_syn_tfo_rcvd

stats data

  Counter Size Description
       
  tcp_rexmit_syn_limit_drop 8 TCP Retransmit SYN Exceed Dropped
  tcp_reset_client 8 TCP Reset Client
  tcp_syn_rcvd 8 TCP SYN Received
  tcp_action_on_ack_timeout 8 TCP ACK Retry Timeout
  tcp_port_zero_drop 8 TCP Port 0 Packets Dropped
  src_dst_tcp_filter_action_whitelist 8 SrcDst Filter Action WL
  tcp_auth_resp 8 TCP Auth Responded
  syn_auth_skip 8 TCP SYN Auth Skipped
  tcp_drop_black_user_cfg_src_dst 8 TCP SrcDst Blacklist User Packets Dropped
  tcp_action_on_syn_start 8 TCP SYN Retry Init
  tcp_per_conn_ofo_rate_exceed_drop 8 TCP Conn Out-Of-Seq Rate Dropped
  tcp_action_on_ack_passed 8 TCP ACK Retry Passed
  tcp_progression_violation_exceed 8 Progression: Violation Exceeded
  tcp_per_conn_prate_exceed 8 TCP Conn Pkt Rate Dropped
  tcp_total_bytes_rcv 8 TCP Total Bytes Received
  tcp_syncookie_hw_missing 8 TCP SYN Cookie HW Missed
  tcp_per_conn_zwindow_rate_exceed_bl 8 TCP Conn Zero-Window Rate Blacklisted
  tcp_zero_window_drop 8 TCP Zero-Window Dropped
  dst_tcp_filter_not_match 8 Dst Filter No Match
  tcp_sess_create 8 TCP Sessions Created
  tcp_frag_drop 8 TCP Fragmented Packets Dropped
  tcp_retransmit_bl 8 TCP Retransmit Blacklisted
  dst_tcp_filter_action_blacklist 8 Dst Filter Action Blacklist
  tcp_out_of_seq_drop 8 TCP Out-Of-Seq Dropped
  tcp_frag_rcvd 8 TCP Fragmented Packets Received
  tcp_drop_bl 8 TCP Blacklist Packets Dropped
  tcp_action_on_ack_reset 8 TCP ACK Retry Timeout Reset
  tcp_action_on_syn_bl 8 TCP SYN Retry Timeout Blacklisted
  tcp_per_conn_ofo_rate_exceed_bl 8 TCP Conn Out-Of-Seq Rate Blacklisted
  tcp_progression_violation_exceed_bl 8 Progression: Violation Exceeded Blacklisted
  src_tcp_filter_action_default_pass 8 Src Filter Action Default Pass
  tcp_auth_drop 8 TCP Auth Dropped
  tcp_rst_rcvd 8 TCP RST Received
  tcp_action_on_ack_gap_drop 8 TCP ACK Retry Retry-Gap Dropped
  tcp_drop_black_user_cfg_src 8 TCP Src Blacklist User Packets Dropped
  tcp_syn_tfo_rcvd 8 TCP SYN TFO Received
  tcp_per_conn_prate_exceed_bl 8 TCP Conn Pkt Rate Blacklisted
  tcp_progression_violation_exceed_drop 8 Progression: Violation Exceeded Dropped
  tcp_zero_window 8 TCP Zero-Window Total
  tcp_action_on_ack_failed 8 TCP ACK Retry Dropped
  tcp_rexmit_syn_limit_bl 8 TCP Retransmit SYN Exceed Blacklisted
  src_tcp_filter_action_drop 8 Src Filter Action Drop
  tcp_out_of_seq_bl 8 TCP Out-Of-Seq Blacklisted
  dst_tcp_filter_action_whitelist 8 Dst Filter Action WL
  src_dst_tcp_filter_not_match 8 SrcDst Filter No Match
  tcp_action_on_ack_start 8 TCP ACK Retry Init
  tcp_any_exceed 8 TCP Exceeded
  tcp_syncookie_fail_bl 8 TCP SYN Cookie Blacklist Failed
  tcp_src_drop 8 TCP Src Packets Dropped
  tcp_syncookie_sent_fail 8 TCP SYN Cookie Send Failed
  tcp_dst_drop 8 TCP Dst Packets Dropped
  syn_auth_pass_wl 8 TCP SYN Auth Pass WL
  tcp_concurrent 8 TCP Concurrent Port Access
  tcp_outrst 8 TCP Outbound RST
  tcp_unauth_rst_drop 8 TCP Unauth RST Dropped
  tcp_action_on_ack_bl 8 TCP ACK Retry Timeout Blacklisted
  dst_tcp_filter_action_default_pass 8 Dst Filter Action Default Pass
  tcp_per_conn_rexmit_rate_exceed_drop 8 TCP Conn Retransmit Rate Dropped
  dst_tcp_filter_action_drop 8 Dst Filter Action Drop
  syn_auth_pass 8 TCP SYN Auth Passed
  tcp_syncookie_pass 8 TCP SYN Cookie Passed
  tcp_ack_rcvd 8 TCP ACK Received
  tcp_ack_no_syn 8 TCP ACK No SYN
  src_dst_tcp_filter_action_drop 8 SrcDst Filter Action Drop
  src_tcp_filter_action_whitelist 8 Src Filter Action WL
  src_tcp_filter_action_blacklist 8 Src Filter Action Blacklist
  src_dst_tcp_filter_match 8 SrcDst Filter Match
  tcp_syn_rate 8 TCP SYN Rate Per Sec
  src_tcp_filter_not_match 8 Src Filter No Match
  src_dst_tcp_filter_action_default_pass 8 SrcDst Filter Action Default Pass
  tcp_action_on_syn_failed 8 TCP SYN Retry Dropped
  tcp_action_on_syn_gap_pass 8 TCP SYN Retry Retry-Gap Passed
  tcp_syncookie_check_fail 8 TCP SYN Cookie Check Failed
  src_dst_tcp_filter_action_blacklist 8 SrcDst Filter Action Blacklist
  tcp_out_of_seq 8 TCP Out-Of-Seq Total
  dst_tcp_filter_match 8 Dst Filter Match
  src_tcp_filter_match 8 Src Filter Match
  tcp_action_on_syn_reset 8 TCP SYN Retry Timeout Reset
  tcp_action_on_syn_gap_drop 8 TCP SYN Retry Retry-Gap Dropped
  tcp_reset_server 8 TCP Reset Server
  tcp_invalid_syn_rcvd 8 TCP Invalid SYN Received
  tcp_action_on_syn_passed 8 TCP SYN Retry Passed
  tcp_zero_window_bl 8 TCP Zero-Window Blacklisted
  tcp_fin_rcvd 8 TCP FIN Received
  tcp_retransmit_drop 8 TCP Retransmit Dropped
  tcp_total_drop 8 TCP Total Packets Dropped
  tcp_syn_ack_rcvd 8 TCP SYN ACK Received
  tcp_action_on_ack_gap_pass 8 TCP ACK Retry Retry-Gap Passed
  tcp_per_conn_rexmit_rate_exceed_bl 8 TCP Conn Retransmit Rate Blacklisted
  tcp_syncookie_sent 8 TCP SYN Cookie Sent
  tcp_action_on_ack_matched 8 TCP ACK Retry Matched
  tcp_retransmit 8 TCP Retransmit Total
  tcp_src_dst_drop 8 TCP SrcDst Packets Dropped
  tcp_total_bytes_drop 8 TCP Total Bytes Dropped
  tcp_action_on_syn_timeout 8 TCP SYN Retry Timeout
  intcp 8 TCP Total Packets Received
  tcp_per_conn_zwindow_rate_exceed_drop 8 TCP Conn Zero-Window Rate Dropped