ddos l7-http¶
DDOS HTTP Statistics
l7-http Specification¶
Type Configuration Resource Element Name l7-http Element URI /axapi/v3/ddos/l7-http Element Attributes l7-http_attributes Statistics Data URI /axapi/v3/ddos/l7-http/stats Schema l7-http schemaOperations Allowed:
| Operation | Method | URI | Payload | |
|---|---|---|---|---|
Create Object | POST | /axapi/v3/ddos/l7-http | ||
Get Object | GET | /axapi/v3/ddos/l7-http | ||
Modify Object | POST | /axapi/v3/ddos/l7-http | ||
Replace Object | PUT | /axapi/v3/ddos/l7-http | ||
Delete Object | DELETE | /axapi/v3/ddos/l7-http |
l7-http attributes¶
sampling-enable
Type: Listuuid
Description uuid of the object
Type: string
Maximum Length: 64 characters
Maximum Length: 1 characters
sampling-enable¶
Specification Type list Block object keys counters1
Description ‘all’: all; ‘req_processed’: Packets Processed; ‘req_ofo’: Out-Of-Order Request; ‘ofo_timer_expired’: Out-Of-Order Timeout; ‘ofo_queue_exceed’: Out-Of-Order Queue Exceeded; ‘ofo’: Out-Of-Order Packets; ‘partial_hdr’: Partial Header; ‘http_idle_timeout’: Http Idle Timeout; ‘new_syn’: TCP SYN; ‘retrans’: TCP Retransmit; ‘retrans_fin’: TCP Retransmit FIN; ‘retrans_push’: TCP Retransmit PSH; ‘retrans_rst’: TCP Retransmit RST; ‘req_retrans’: Retransmit Request; ‘request’: Request Total; ‘req_content_len’: Request Content-Length Received; ‘src_req_rate_exceed’: Src Request Rate Exceeded; ‘dst_req_rate_exceed’: Dst Request Rate Exceeded; ‘lower_than_mss_exceed’: Min Payload Size Fail Exceeded; ‘parsereq_fail’: Parse Request Failed; ‘neg_req_remain’: Negative Request Remain; ‘neg_rsp_remain’: Negative Response Remain; ‘invalid_header’: HTTP Header Invalid; ‘too_many_headers’: HTTP Header Too Many; ‘header_name_too_long’: HTTP Header Name Too Long; ‘invalid_hdr_name’: HTTP Header Name Invalid; ‘invalid_hdr_val’: HTTP Header Value Invalid; ‘line_too_long’: Line Too Long; ‘client_rst’: Client TCP RST Received; ‘hps_server_rst’: Server TCP RST Received; ‘ddos_policy_violation’: Policy Violation; ‘policy_drop’: Policy Dropped; ‘error_condition’: Error Condition; ‘http11’: Request HTTP 1.1; ‘http10’: Request HTTP 1.0; ‘rsp_chunk’: Response Chunk; ‘http_get’: Request Method GET; ‘http_head’: Request Method HEAD; ‘http_put’: Request Method PUT; ‘http_post’: Request Method POST; ‘http_trace’: Request Method TRACE; ‘http_options’: Request Method OPTIONS; ‘http_connect’: Request Method CONNECT; ‘http_del’: Request Method DELETE; ‘http_unknown’: Request Method UNKNOWN; ‘hps_req_sz_1k’: Request Payload Size Less Than or Equal to 1K; ‘hps_req_sz_2k’: Request Payload Size Less Than or Equal to 2K; ‘hps_req_sz_4k’: Request Payload Size Less Than or Equal to 4K; ‘hps_req_sz_8k’: Request Payload Size Less Than or Equal to 8K; ‘hps_req_sz_16k’: Request Payload Size Less Than or Equal to 16K; ‘hps_req_sz_32k’: Request Payload Size Less THan or Equal to 32K; ‘hps_req_sz_64k’: Request Payload Size Less Than or Equal to 64K; ‘hps_req_sz_256k’: Request Payload Size Less Than or Equla to 256K; ‘hps_req_sz_256k_plus’: Request Payload Size Larger Than 256K; ‘hps_rsp_11’: Response HTTP 1.1; ‘hps_rsp_10’: Response HTTP 1.0; ‘hps_rsp_sz_1k’: Response Payload Size Less Than or Equal to 1K; ‘hps_rsp_sz_2k’: Response Payload Size Less Than or Equal to 2K; ‘hps_rsp_sz_4k’: Response Payload Size Less Than or Equal to 4K; ‘hps_rsp_sz_8k’: Response Payload Size Less Than or Equal to 8K; ‘hps_rsp_sz_16k’: Response Payload Size Less Than or Equal to 16K; ‘hps_rsp_sz_32k’: Response Payload Size Less Than or Equal to 32K; ‘hps_rsp_sz_64k’: Response Payload Size Less Than or Equal to 64K; ‘hps_rsp_sz_256k’: Response Payload Size Less Than or Equal to 256K; ‘hps_rsp_sz_256k_plus’: Response Payload Size Larger Than 256K; ‘hps_rsp_status_1xx’: Status Code 1XX; ‘hps_rsp_status_2xx’: Status Code 2XX; ‘hps_rsp_status_3xx’: Status Code 3XX; ‘hps_rsp_status_4xx’: Status Code 4XX; ‘hps_rsp_status_5xx’: Status Code 5XX; ‘hps_rsp_status_504_AX’: Status Code 504 AX-Gen; ‘hps_rsp_status_6xx’: Status Code 6XX; ‘hps_rsp_status_unknown’: Status Code Unknown; ‘chunk_sz_512’: Payload Chunk Size Less Than or Equal to 512; ‘chunk_sz_1k’: Payload Chunk Size Less Than or Equal to 1K; ‘chunk_sz_2k’: Payload Chunk Size Less Than or Equal to 2K; ‘chunk_sz_4k’: Payload Chunk Size Less Than or Equal to 4K; ‘chunk_sz_gt_4k’: Payload Chunk Size Larger Than 4K; ‘chunk_bad’: Bad HTTP Chunk; ‘challenge_fail’: Challenge Failed; ‘challenge_ud_sent’: Challenge URL Redirect Sent; ‘challenge_ud_fail’: Challenge URL Redirect Failed; ‘challenge_js_sent’: Challenge Javascript Sent; ‘challenge_js_fail’: Challenge Javascript Failed; ‘malform_bad_chunk’: Malform Bad Chunk; ‘malform_content_len_too_long’: Malform Content Length Too Long; ‘malform_header_name_too_long’: Malform Header Name Too Long; ‘malform_line_too_long’: Malform Line Too Long; ‘malform_req_line_too_long’: Malform Request Line Too Long; ‘malform_too_many_headers’: Malform Too Many Headers; ‘window_small’: Window Size Small; ‘window_small_drop’: Window Size Small Dropped; ‘alloc_fail’: Alloc Failed; ‘alloc_hdr_fail’: FAIL_ALLOC_HDR (deprecated); ‘use_hdr_ip_as_source’: Use IP In Header As Src; ‘agent_filter_match’: Agent Filter Match; ‘agent_filter_blacklist’: Agent Filter Blacklisted; ‘referer_filter_match’: Referer Filter Match; ‘referer_filter_blacklist’: Referer Filter Blacklisted; ‘dst_filter_match’: Dst Filter Match; ‘dst_filter_not_match’: Dst Filter No Match; ‘dst_filter_action_blacklist’: Dst Filter Action Blacklist; ‘dst_filter_action_drop’: Dst Filter Action Drop; ‘dst_filter_action_default_pass’: Dst Filter Action Default Pass; ‘dst_post_rate_exceed’: Dst Post Rate Exceeded; ‘src_post_rate_exceed’: Src Post Rate Exceeded; ‘dst_resp_rate_exceed’: Dst Response Rate Exceeded; ‘dst_filter_action_whitelist’: Dst Filter Action WL; ‘src_filter_match’: Src Filter Match; ‘src_filter_not_match’: Src Filter No Match; ‘src_filter_action_blacklist’: Src Filter Action Blacklist; ‘src_filter_action_drop’: Src Filter Action Drop; ‘src_filter_action_default_pass’: Src Filter Action Default Pass; ‘src_filter_action_whitelist’: Src Filter Action WL; ‘src_dst_filter_match’: SrcDst Filter Match; ‘src_dst_filter_not_match’: SrcDst Filter No Match; ‘src_dst_filter_action_blacklist’: SrcDst Filter Action Blacklist; ‘src_dst_filter_action_drop’: SrcDst Filter Action Drop; ‘src_dst_filter_action_default_pass’: SrcDst Filter Action Default Pass; ‘src_dst_filter_action_whitelist’: SrcDst Filter Action WL; ‘dst_filter_rate_exceed’: Dst Filter Rate Exceed; ‘dst_filter_action_ignore’: Dst Filter Action Ignore; ‘dst_filter_action_reset’: Dst Filter Action Reset; ‘uri_filter_match’: URI Filter Match; ‘http_auth_drop’: HTTP Auth Dropped; ‘http_auth_resp’: HTTP Auth Responded; ‘header_processing_time_0’: Header Process Time Less Than 1s; ‘header_processing_time_1’: Header Process Time Less Than 10s; ‘header_processing_time_2’: Header Process Time Less Than 30s; ‘header_processing_time_3’: Header Process Time Larger or Equal to 30s; ‘header_processing_incomplete’: Header Process Incomplete; ‘malform_req_line_too_small’: Malform Request Line Too Small; ‘malform_req_line_invalid_method’: Malform Request Line Invalid Method;
Type: string
Supported Values: all, req_processed, req_ofo, ofo_timer_expired, ofo_queue_exceed, ofo, partial_hdr, http_idle_timeout, new_syn, retrans, retrans_fin, retrans_push, retrans_rst, req_retrans, request, req_content_len, src_req_rate_exceed, dst_req_rate_exceed, lower_than_mss_exceed, parsereq_fail, neg_req_remain, neg_rsp_remain, invalid_header, too_many_headers, header_name_too_long, invalid_hdr_name, invalid_hdr_val, line_too_long, client_rst, hps_server_rst, ddos_policy_violation, policy_drop, error_condition, http11, http10, rsp_chunk, http_get, http_head, http_put, http_post, http_trace, http_options, http_connect, http_del, http_unknown, hps_req_sz_1k, hps_req_sz_2k, hps_req_sz_4k, hps_req_sz_8k, hps_req_sz_16k, hps_req_sz_32k, hps_req_sz_64k, hps_req_sz_256k, hps_req_sz_256k_plus, hps_rsp_11, hps_rsp_10, hps_rsp_sz_1k, hps_rsp_sz_2k, hps_rsp_sz_4k, hps_rsp_sz_8k, hps_rsp_sz_16k, hps_rsp_sz_32k, hps_rsp_sz_64k, hps_rsp_sz_256k, hps_rsp_sz_256k_plus, hps_rsp_status_1xx, hps_rsp_status_2xx, hps_rsp_status_3xx, hps_rsp_status_4xx, hps_rsp_status_5xx, hps_rsp_status_504_AX, hps_rsp_status_6xx, hps_rsp_status_unknown, chunk_sz_512, chunk_sz_1k, chunk_sz_2k, chunk_sz_4k, chunk_sz_gt_4k, chunk_bad, challenge_fail, challenge_ud_sent, challenge_ud_fail, challenge_js_sent, challenge_js_fail, malform_bad_chunk, malform_content_len_too_long, malform_header_name_too_long, malform_line_too_long, malform_req_line_too_long, malform_too_many_headers, window_small, window_small_drop, alloc_fail, alloc_hdr_fail, use_hdr_ip_as_source, agent_filter_match, agent_filter_blacklist, referer_filter_match, referer_filter_blacklist, dst_filter_match, dst_filter_not_match, dst_filter_action_blacklist, dst_filter_action_drop, dst_filter_action_default_pass, dst_post_rate_exceed, src_post_rate_exceed, dst_resp_rate_exceed, dst_filter_action_whitelist, src_filter_match, src_filter_not_match, src_filter_action_blacklist, src_filter_action_drop, src_filter_action_default_pass, src_filter_action_whitelist, src_dst_filter_match, src_dst_filter_not_match, src_dst_filter_action_blacklist, src_dst_filter_action_drop, src_dst_filter_action_default_pass, src_dst_filter_action_whitelist, dst_filter_rate_exceed, dst_filter_action_ignore, dst_filter_action_reset, uri_filter_match, http_auth_drop, http_auth_resp, header_processing_time_0, header_processing_time_1, header_processing_time_2, header_processing_time_3, header_processing_incomplete, malform_req_line_too_small, malform_req_line_invalid_method
stats data¶
| Counter | Size | Description | |
|---|---|---|---|
| hps_req_sz_1k | 8 | Request Payload Size Less Than or Equal to 1K | |
| retrans | 8 | TCP Retransmit | |
| src_filter_match | 8 | Src Filter Match | |
| hps_rsp_sz_1k | 8 | Response Payload Size Less Than or Equal to 1K | |
| chunk_sz_2k | 8 | Payload Chunk Size Less Than or Equal to 2K | |
| dst_filter_action_reset | 8 | Dst Filter Action Reset | |
| invalid_hdr_val | 8 | HTTP Header Value Invalid | |
| http_get | 8 | Request Method GET | |
| dst_filter_action_blacklist | 8 | Dst Filter Action Blacklist | |
| retrans_rst | 8 | TCP Retransmit RST | |
| parsereq_fail | 8 | Parse Request Failed | |
| window_small | 8 | Window Size Small | |
| http_put | 8 | Request Method PUT | |
| hps_rsp_status_504_AX | 8 | Status Code 504 AX-Gen | |
| hps_req_sz_256k | 8 | Request Payload Size Less Than or Equla to 256K | |
| window_small_drop | 8 | Window Size Small Dropped | |
| rsp_chunk | 8 | Response Chunk | |
| dst_filter_match | 8 | Dst Filter Match | |
| req_ofo | 8 | Out-Of-Order Request | |
| chunk_sz_1k | 8 | Payload Chunk Size Less Than or Equal to 1K | |
| dst_filter_action_default_pass | 8 | Dst Filter Action Default Pass | |
| lower_than_mss_exceed | 8 | Min Payload Size Fail Exceeded | |
| src_dst_filter_action_default_pass | 8 | SrcDst Filter Action Default Pass | |
| http_post | 8 | Request Method POST | |
| hps_rsp_sz_32k | 8 | Response Payload Size Less Than or Equal to 32K | |
| http_idle_timeout | 8 | Http Idle Timeout | |
| hps_rsp_sz_4k | 8 | Response Payload Size Less Than or Equal to 4K | |
| src_filter_action_blacklist | 8 | Src Filter Action Blacklist | |
| hps_req_sz_2k | 8 | Request Payload Size Less Than or Equal to 2K | |
| header_processing_incomplete | 8 | Header Process Incomplete | |
| malform_header_name_too_long | 8 | Malform Header Name Too Long | |
| header_processing_time_0 | 8 | Header Process Time Less Than 1s | |
| client_rst | 8 | Client TCP RST Received | |
| header_processing_time_2 | 8 | Header Process Time Less Than 30s | |
| dst_filter_action_drop | 8 | Dst Filter Action Drop | |
| chunk_sz_512 | 8 | Payload Chunk Size Less Than or Equal to 512 | |
| src_filter_not_match | 8 | Src Filter No Match | |
| chunk_sz_4k | 8 | Payload Chunk Size Less Than or Equal to 4K | |
| malform_req_line_too_small | 8 | Malform Request Line Too Small | |
| src_filter_action_default_pass | 8 | Src Filter Action Default Pass | |
| malform_bad_chunk | 8 | Malform Bad Chunk | |
| http11 | 8 | Request HTTP 1.1 | |
| http10 | 8 | Request HTTP 1.0 | |
| invalid_hdr_name | 8 | HTTP Header Name Invalid | |
| ddos_policy_violation | 8 | Policy Violation | |
| hps_rsp_status_4xx | 8 | Status Code 4XX | |
| challenge_js_sent | 8 | Challenge Javascript Sent | |
| src_req_rate_exceed | 8 | Src Request Rate Exceeded | |
| dst_filter_action_whitelist | 8 | Dst Filter Action WL | |
| hps_rsp_status_1xx | 8 | Status Code 1XX | |
| src_dst_filter_action_whitelist | 8 | SrcDst Filter Action WL | |
| error_condition | 8 | Error Condition | |
| header_processing_time_3 | 8 | Header Process Time Larger or Equal to 30s | |
| src_dst_filter_match | 8 | SrcDst Filter Match | |
| neg_rsp_remain | 8 | Negative Response Remain | |
| hps_rsp_status_2xx | 8 | Status Code 2XX | |
| dst_filter_action_ignore | 8 | Dst Filter Action Ignore | |
| src_post_rate_exceed | 8 | Src Post Rate Exceeded | |
| hps_req_sz_8k | 8 | Request Payload Size Less Than or Equal to 8K | |
| hps_rsp_sz_16k | 8 | Response Payload Size Less Than or Equal to 16K | |
| req_retrans | 8 | Retransmit Request | |
| challenge_fail | 8 | Challenge Failed | |
| malform_req_line_invalid_method | 8 | Malform Request Line Invalid Method | |
| hps_rsp_sz_2k | 8 | Response Payload Size Less Than or Equal to 2K | |
| challenge_js_fail | 8 | Challenge Javascript Failed | |
| hps_rsp_sz_256k | 8 | Response Payload Size Less Than or Equal to 256K | |
| hps_rsp_status_5xx | 8 | Status Code 5XX | |
| too_many_headers | 8 | HTTP Header Too Many | |
| retrans_fin | 8 | TCP Retransmit FIN | |
| hps_rsp_sz_256k_plus | 8 | Response Payload Size Larger Than 256K | |
| alloc_fail | 8 | Alloc Failed | |
| src_dst_filter_action_drop | 8 | SrcDst Filter Action Drop | |
| hps_rsp_status_unknown | 8 | Status Code Unknown | |
| ofo_timer_expired | 8 | Out-Of-Order Timeout | |
| req_content_len | 8 | Request Content-Length Received | |
| challenge_ud_sent | 8 | Challenge URL Redirect Sent | |
| new_syn | 8 | TCP SYN | |
| http_options | 8 | Request Method OPTIONS | |
| hps_req_sz_256k_plus | 8 | Request Payload Size Larger Than 256K | |
| http_connect | 8 | Request Method CONNECT | |
| hps_req_sz_32k | 8 | Request Payload Size Less THan or Equal to 32K | |
| src_filter_action_whitelist | 8 | Src Filter Action WL | |
| referer_filter_match | 8 | Referer Filter Match | |
| dst_req_rate_exceed | 8 | Dst Request Rate Exceeded | |
| partial_hdr | 8 | Partial Header | |
| http_auth_drop | 8 | HTTP Auth Dropped | |
| dst_post_rate_exceed | 8 | Dst Post Rate Exceeded | |
| src_dst_filter_not_match | 8 | SrcDst Filter No Match | |
| ofo_queue_exceed | 8 | Out-Of-Order Queue Exceeded | |
| http_trace | 8 | Request Method TRACE | |
| hps_req_sz_64k | 8 | Request Payload Size Less Than or Equal to 64K | |
| hps_server_rst | 8 | Server TCP RST Received | |
| retrans_push | 8 | TCP Retransmit PSH | |
| req_processed | 8 | Packets Processed | |
| hps_rsp_sz_8k | 8 | Response Payload Size Less Than or Equal to 8K | |
| header_processing_time_1 | 8 | Header Process Time Less Than 10s | |
| malform_line_too_long | 8 | Malform Line Too Long | |
| src_dst_filter_action_blacklist | 8 | SrcDst Filter Action Blacklist | |
| http_unknown | 8 | Request Method UNKNOWN | |
| challenge_ud_fail | 8 | Challenge URL Redirect Failed | |
| dst_resp_rate_exceed | 8 | Dst Response Rate Exceeded | |
| use_hdr_ip_as_source | 8 | Use IP In Header As Src | |
| http_head | 8 | Request Method HEAD | |
| hps_rsp_sz_64k | 8 | Response Payload Size Less Than or Equal to 64K | |
| http_del | 8 | Request Method DELETE | |
| hps_req_sz_16k | 8 | Request Payload Size Less Than or Equal to 16K | |
| header_name_too_long | 8 | HTTP Header Name Too Long | |
| chunk_bad | 8 | Bad HTTP Chunk | |
| dst_filter_not_match | 8 | Dst Filter No Match | |
| agent_filter_blacklist | 8 | Agent Filter Blacklisted | |
| invalid_header | 8 | HTTP Header Invalid | |
| malform_too_many_headers | 8 | Malform Too Many Headers | |
| policy_drop | 8 | Policy Dropped | |
| malform_req_line_too_long | 8 | Malform Request Line Too Long | |
| agent_filter_match | 8 | Agent Filter Match | |
| uri_filter_match | 8 | URI Filter Match | |
| malform_content_len_too_long | 8 | Malform Content Length Too Long | |
| neg_req_remain | 8 | Negative Request Remain | |
| referer_filter_blacklist | 8 | Referer Filter Blacklisted | |
| chunk_sz_gt_4k | 8 | Payload Chunk Size Larger Than 4K | |
| hps_rsp_11 | 8 | Response HTTP 1.1 | |
| hps_rsp_10 | 8 | Response HTTP 1.0 | |
| line_too_long | 8 | Line Too Long | |
| dst_filter_rate_exceed | 8 | Dst Filter Rate Exceed | |
| request | 8 | Request Total | |
| ofo | 8 | Out-Of-Order Packets | |
| http_auth_resp | 8 | HTTP Auth Responded | |
| hps_rsp_status_3xx | 8 | Status Code 3XX | |
| hps_rsp_status_6xx | 8 | Status Code 6XX | |
| src_filter_action_drop | 8 | Src Filter Action Drop | |
| hps_req_sz_4k | 8 | Request Payload Size Less Than or Equal to 4K |