{
    "id":"/axapi/v3/ddos/dst/entry/{dst-entry-name}/port-range/{port-range-start}+{port-range-end}+{protocol}",
    "type":"object",
    "node-type":"list",
    "title":"port-range",
    "partition-visibility":"shared",
    "description":"DDOS Port-Range & Protocol configuration",
    "properties":{
        "port-range-start":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":65535,
            "partition-visibility":"shared",
            "description":"Port-Range Start Port Number",
            "optional":false
        },
        "port-range-end":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":65535,
            "partition-visibility":"shared",
            "description":"Port-Range End Port Number",
            "optional":false
        },
        "protocol":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "description":"'dns-tcp': DNS-TCP Port; 'dns-udp': DNS-UDP Port; 'http': HTTP Port; 'tcp': TCP Port; 'udp': UDP Port; 'ssl-l4': SSL-L4 Port; 'sip-udp': SIP-UDP Port; 'sip-tcp': SIP-TCP Port; ",
            "enum":[
                "dns-tcp",
                "dns-udp",
                "http",
                "tcp",
                "udp",
                "ssl-l4",
                "sip-udp",
                "sip-tcp"
            ],
            "optional":false
        },
        "deny":{
            "type":"number",
            "format":"flag",
            "plat-neg-list":["softax-ddet"],
            "default":0,
            "partition-visibility":"shared",
            "description":"Blacklist and Drop all incoming packets for protocol",
            "optional":true
        },
        "detection-enable":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Enable ddos detection",
            "optional":true
        },
        "enable-top-k":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Enable ddos top-k entries",
            "optional":true
        },
        "topk-num-records":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":100,
            "default":20,
            "partition-visibility":"shared",
            "description":"Maximum number of records to show in topk",
            "optional":true
        },
        "topk-sort-key":{
            "type":"string",
            "format":"enum",
            "default":"avg",
            "partition-visibility":"shared",
            "description":"'avg': window average; 'max-peak': max peak; ",
            "enum":[
                "avg",
                "max-peak"
            ],
            "optional":true
        },
        "glid":{
            "type":"string",
            "format":"string-rlx",
            "plat-neg-list":["softax-ddet"],
            "minLength":1,
            "maxLength":63,
            "partition-visibility":"shared",
            "$ref":"/axapi/v3/glid",
            "description":"Global limit ID",
            "optional":true
        },
        "glid-exceed-action":{
            "type":"object",
            "properties":{
                "stateless-encap-action-cfg":{
                    "type":"object",
                    "properties":{
                        "stateless-encap-action":{
                            "type":"string",
                            "format":"enum",
                            "plat-neg-list":["softax-ddet"],
                            "partition-visibility":"shared",
                            "description":"'stateless-tunnel-encap': Encapsulate all packets; 'stateless-tunnel-encap-scrubbed': Encapsulate all packets and allow packets to go through other DDoS checks before sent (conn-limit exceeded packet can not be scrubbed, it will default to stateless-tunnel-encap); ",
                            "enum":[
                                "stateless-tunnel-encap",
                                "stateless-tunnel-encap-scrubbed"
                            ]
                        },
                        "encap-template":{
                            "type":"string",
                            "format":"string-rlx",
                            "plat-neg-list":["softax-ddet"],
                            "minLength":1,
                            "maxLength":128,
                            "partition-visibility":"shared",
                            "$ref":"/axapi/v3/ddos/template/encap",
                            "description":"Apply legacy encap template for encap action"
                        }
                    }
                }
            }
        },
        "template":{
            "type":"object",
            "properties":{
                "dns":{
                    "type":"string",
                    "format":"string-rlx",
                    "plat-neg-list":["softax-ddet"],
                    "minLength":1,
                    "maxLength":128,
                    "partition-visibility":"shared",
                    "description":"DDOS dns template"
                },
                "http":{
                    "type":"string",
                    "format":"string-rlx",
                    "plat-neg-list":["softax-ddet"],
                    "minLength":1,
                    "maxLength":128,
                    "partition-visibility":"shared",
                    "description":"DDOS http template"
                },
                "ssl-l4":{
                    "type":"string",
                    "format":"string-rlx",
                    "plat-neg-list":["softax-ddet"],
                    "minLength":1,
                    "maxLength":128,
                    "partition-visibility":"shared",
                    "description":"DDOS SSL-L4 template"
                },
                "sip":{
                    "type":"string",
                    "format":"string-rlx",
                    "plat-neg-list":["softax-ddet"],
                    "minLength":1,
                    "maxLength":128,
                    "partition-visibility":"shared",
                    "description":"DDOS sip template"
                },
                "tcp":{
                    "type":"string",
                    "format":"string-rlx",
                    "plat-neg-list":["softax-ddet"],
                    "minLength":1,
                    "maxLength":128,
                    "partition-visibility":"shared",
                    "description":"DDOS tcp template"
                },
                "udp":{
                    "type":"string",
                    "format":"string-rlx",
                    "plat-neg-list":["softax-ddet"],
                    "minLength":1,
                    "maxLength":128,
                    "partition-visibility":"shared",
                    "description":"DDOS udp template"
                }
            }
        },
        "sflow":{
            "type":"object",
            "properties":{
                "polling":{
                    "type":"object",
                    "properties":{
                        "sflow-packets":{
                            "type":"number",
                            "format":"flag",
                            "plat-neg-list":["softax-ddet"],
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Enable sFlow packet-level counter polling"
                        },
                        "sflow-tcp":{
                            "type":"object",
                            "properties":{
                                "sflow-tcp-basic":{
                                    "type":"number",
                                    "format":"flag",
                                    "plat-neg-list":["softax-ddet"],
                                    "default":0,
                                    "partition-visibility":"shared",
                                    "description":"Enable sFlow basic TCP counter polling"
                                },
                                "sflow-tcp-stateful":{
                                    "type":"number",
                                    "format":"flag",
                                    "plat-neg-list":["softax-ddet"],
                                    "default":0,
                                    "partition-visibility":"shared",
                                    "description":"Enable sFlow stateful TCP counter polling"
                                }
                            }
                        },
                        "sflow-http":{
                            "type":"number",
                            "format":"flag",
                            "plat-neg-list":["softax-ddet"],
                            "default":0,
                            "partition-visibility":"shared",
                            "description":"Enable sFlow HTTP counter polling"
                        }
                    }
                }
            }
        },
        "capture-config":{
            "type":"object",
            "properties":{
                "capture-config-name":{
                    "type":"string",
                    "format":"string-rlx",
                    "plat-neg-list":["softax-ddet"],
                    "minLength":1,
                    "maxLength":128,
                    "partition-visibility":"shared",
                    "description":"Capture-config name"
                },
                "capture-config-mode":{
                    "type":"string",
                    "format":"enum",
                    "plat-neg-list":["softax-ddet"],
                    "partition-visibility":"shared",
                    "description":"'drop': Apply capture-config to dropped packets; 'forward': Apply capture-config to forwarded packets; 'all': Apply capture-config to both dropped and forwarded packets; ",
                    "enum":[
                        "drop",
                        "forward",
                        "all"
                    ]
                }
            }
        },
        "ip-filtering-policy":{
            "type":"string",
            "format":"string-rlx",
            "minLength":1,
            "maxLength":63,
            "partition-visibility":"shared",
            "$ref":"/axapi/v3/ddos/ip-filtering-policy",
            "description":"Configure IP Filter",
            "optional":true
        },
        "uuid":{
            "type":"string",
            "format":"string",
            "minLength":1,
            "maxLength":64,
            "partition-visibility":"shared",
            "modify-not-allowed":1,
            "description":"uuid of the object",
            "optional":true
        },
        "user-tag":{
            "type":"string",
            "format":"string-rlx",
            "minLength":1,
            "maxLength":127,
            "partition-visibility":"shared",
            "description":"Customized tag",
            "optional":true
        },
        "port-ind":{
            "type":"object",
            "$ref":"/axapi/v3/ddos/dst/entry/{dst-entry-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/port-ind",
            "properties":{
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        },
        "topk-sources":{
            "type":"object",
            "$ref":"/axapi/v3/ddos/dst/entry/{dst-entry-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/topk-sources",
            "properties":{
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        },
        "pattern-recognition":{
            "type":"object",
            "$ref":"/axapi/v3/ddos/dst/entry/{dst-entry-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/pattern-recognition",
            "properties":{
                "algorithm":{
                    "type":"string",
                    "format":"enum",
                    "partition-visibility":"shared",
                    "description":"'heuristic': heuristic algorithm; ",
                    "enum":[
                        "heuristic"
                    ]
                },
                "mode":{
                    "type":"string",
                    "format":"enum",
                    "partition-visibility":"shared",
                    "description":"'capture-never-expire': War-time capture without rate exceeding and never expires; 'manual': Manual mode; ",
                    "enum":[
                        "capture-never-expire",
                        "manual"
                    ]
                },
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        },
        "pattern-recognition-pu-details":{
            "type":"object",
            "$ref":"/axapi/v3/ddos/dst/entry/{dst-entry-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/pattern-recognition-pu-details",
            "properties":{
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        }
    },
    "object-keys":[
        "port-range-start",
        "port-range-end",
        "protocol"
    ],
    "required":[
        "port-range-start",
        "port-range-end",
        "protocol"
    ]
}