.. _ddos_dst_zone:

ddos dst zone
=============

Configure a static zone entry


zone Specification
------------------

	===================================== ==================================================================
	 **Parameter**                         **Value** 

	===================================== ==================================================================
	 **Type**                              *Collection*

	 **Object Key(s)**                     *zone-name*

	 **Collection Name**                   :ref:`404_zone_list`

	 **Collection URI**                    /axapi/v3/ddos/dst/zone

	                                       

	 **Element Name**                      zone

	 **Element URI**                       /axapi/v3/ddos/dst/zone/{zone-name}

	 **Element Attributes**                zone_attributes

	 **Partition Visibility**              shared

	 **Statistics Data URI**               /axapi/v3/ddos/dst/zone/{zone-name}/stats

	 **Operational Data URI**              /axapi/v3/ddos/dst/zone/{zone-name}/oper

	 **Schema**                             :download:`zone schema <ddos-dst-zone/ddos-dst-zone.txt>`
	===================================== ==================================================================





	**Operations Allowed:**




.. raw:: html

   <script type="text/javascript">
 function showExample(a,b) { document.getElementById(a+'_div').style.display = 'block'; document.getElementById(a+'_cl').style.display = 'block'; document.getElementById(a+'_eg').style.display = 'none';}
   function closeExample(a,b) { document.getElementById(a+'_div').style.display = 'none'; document.getElementById(a+'_cl').style.display = 'none'; document.getElementById(a+'_eg').style.display = 'block';}
 </script>
   <table width='90%' style='margin-left:5%'>



.. raw:: html

   <tr style='border-bottom: thin solid; border-top: thin solid'><th width=15%>Operation</th><th width=10%>Method</th><th>URI</th><th width=15%>Payload</th><th width=10%></th></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_attributes`



.. raw:: html

   </td><td><button id='post_eg' onClick="showExample('post')">example</button> <button id='post_cl' onClick="closeExample('post')" style='display:none'>close</button></td></tr>




.. raw:: html

   <tr><td colspan=5 style='padding: 0         % 0    %;' valign = 'top'><div id='post_div' style='display:none'>


.. include:: ../artifacts/ddos_dst_zone_POST.txt
   :literal:




.. raw:: html

   </div></td></tr>


.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create List



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get Object



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone/{zone-name}



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_attributes`



.. raw:: html

   </td><td><button id='get_eg' onClick="showExample('get')">example</button> <button id='get_cl' onClick="closeExample('get')" style='display:none'>close</button></td></tr>




.. raw:: html

   <tr><td colspan=5 style='padding: 0         % 0    %;' valign = 'top'><div id='get_div' style='display:none'>


.. include:: ../artifacts/ddos_dst_zone_GET.txt
   :literal:




.. raw:: html

   </div></td></tr>


.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get List



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_list`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Modify Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone/{zone-name}



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace Object



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone/{zone-name}



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_attributes`



.. raw:: html

   </td><td><button id='put_eg' onClick="showExample('put')">example</button> <button id='put_cl' onClick="closeExample('put')" style='display:none'>close</button></td></tr>




.. raw:: html

   <tr><td colspan=5 style='padding: 0         % 0    %;' valign = 'top'><div id='put_div' style='display:none'>


.. include:: ../artifacts/ddos_dst_zone_PUT.txt
   :literal:




.. raw:: html

   </div></td></tr>


.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace List



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_list`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Delete Object



.. raw:: html

   </td><td valign = 'top'>


DELETE



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/ddos/dst/zone/{zone-name}



.. raw:: html

   </td><td valign = 'top'>


:ref:`404_zone_attributes`



.. raw:: html

   </td><td><button id='delete_eg' onClick="showExample('delete')">example</button> <button id='delete_cl' onClick="closeExample('delete')" style='display:none'>close</button></td></tr>




.. raw:: html

   <tr><td colspan=5 style='padding: 0         % 0    %;' valign = 'top'><div id='delete_div' style='display:none'>


.. include:: ../artifacts/ddos_dst_zone_DELETE.txt
   :literal:




.. raw:: html

   </div></td></tr>


.. raw:: html

   </table>

.. _404_zone_list:

zone-list
---------


    zone-list is **JSON List** of :ref:`404_zone_attributes` 

        zone-list : [

             { :ref:`404_zone_attributes` },

             { :ref:`404_zone_attributes` },

             ...

         ]

.. _404_zone_attributes:

zone attributes
---------------

    **action-list**

        **Description** Configure action-list to take

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **advertised-enable**

        **Description** BGP advertised

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **capture-config-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/capture-config/{name} <ddos_dst_zone>`

    **collector**

        **Type:** List

    **continuous-learning**

        **Description** Continuous learning of detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **description**

        **Description** Description for this Destination Zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **dest-nat-ip**

        **Description** Destination NAT IP address

        **Type:** string

        **Format:** ipv4-address

    **dest-nat-ipv6**

        **Description** Destination NAT IPv6 address

        **Type:** string

        **Format:** ipv6-address

    **detection**

        **Description:** detection is a **JSON Block**.  Please see below for :ref:`404_detection` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection <ddos_dst_zone>`

    **drop-frag-pkt**

        **Description** Drop fragmented packets

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k**

        **Type:** List

    **glid**

        **Description** Global limit ID for the whole zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **hw-blacklist-blocking**

        **Description:** hw-blacklist-blocking is a **JSON Block**.  Please see below for :ref:`404_hw-blacklist-blocking` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/hw-blacklist-blocking <ddos_dst_zone>`

    **inbound-forward-dscp**

        **Description** To set dscp value for inbound packets (DSCP Value for the clear traffic marking)

        **Type:** number

        **Range:** 1-63

    **ip**

        **Type:** List

    **ip-proto**

        **Description:** ip-proto is a **JSON Block**.  Please see below for :ref:`404_ip-proto` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto <ddos_dst_zone>`

    **ipv6**

        **Type:** List

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-high-frequency**

        **Description** Enable High frequency logging for non-event logs per zone

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **operational-mode**

        **Description** 'idle': Idle mode; 'monitor': Monitor mode; 'learning': Learning mode; 

        **Type:** string

        **Supported Values:** idle, monitor, learning

        **Default:** idle

    **outbound-forward-dscp**

        **Description** To set dscp value for outbound

        **Type:** number

        **Range:** 1-63

    **outbound-policy**

        **Description:** outbound-policy is a **JSON Block**.  Please see below for :ref:`404_outbound-policy` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/outbound-policy <ddos_dst_zone>`

    **packet-anomaly-detection**

        **Description:** packet-anomaly-detection is a **JSON Block**.  Please see below for :ref:`404_packet-anomaly-detection` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/packet-anomaly-detection <ddos_dst_zone>`

    **pattern-recognition-hw-filter-enable**

        **Description** to enable pattern recognition hardware filter

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **per-addr-glid**

        **Description** Global limit ID per address

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **port**

        **Description:** port is a **JSON Block**.  Please see below for :ref:`404_port` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port <ddos_dst_zone>`

    **port-range-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol} <ddos_dst_zone>`

    **rate-limit**

        **Description** Rate limit per second per zone(Default : 1 per second)

        **Type:** number

        **Range:** 1-1000

        **Default:** 1

    **reporting-disabled**

        **Description** Disable Reporting

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **sflow-common**

        **Description** Enable sFlow counter polling packets, tcp-basic, tcp-stateful and http. WARNING: Zone level Sflow polling might induce heavy CP

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-common,sflow-packets, sflow-layer-4, sflow-tcp-basic,  sflow-tcp-stateful, and sflow-http are mutually exclusive

    **sflow-http**

        **Description** Enable sFlow HTTP counter polling. WARNING: Zone level Sflow polling might induce heavy CPU load depending on the total number 

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-http and sflow-common are mutually exclusive

    **sflow-layer-4**

        **Description** Enable sFlow Layer 4 counter polling. WARNING: Zone level Sflow polling might induce heavy CPU load depending on the number of 

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-layer-4 and sflow-common are mutually exclusive

    **sflow-packets**

        **Description** Enable sFlow packet-level counter polling. WARNING: Zone level Sflow polling might induce heavy CPU load depending on the total

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-packets and sflow-common are mutually exclusive

    **sflow-tcp**

        **Description:** sflow-tcp is a **JSON Block**.  Please see below for :ref:`404_sflow-tcp` 

        **Type:** Object

    **source-nat-pool**

        **Description** Configure source NAT

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **src-port**

        **Description:** src-port is a **JSON Block**.  Please see below for :ref:`404_src-port` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port <ddos_dst_zone>`

    **src-port-range-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port-range/{src-port-range-start}+{src-port-range-end}+{protocol} <ddos_dst_zone>`

    **src-prefix-len**

        **Description** Specify src prefix length for IPv6 (default: not set)

        **Type:** number

        **Range:** 32-127

    **telemetry-enable**

        **Description** Enable from-l3-peer flag for the zone, thus all the ip entries in the zone will be dynamically created/deleted based on the BGP

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **topk-destinations**

        **Description:** topk-destinations is a **JSON Block**.  Please see below for :ref:`404_topk-destinations` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/topk-destinations <ddos_dst_zone>`

    **traffic-distribution-mode**

        **Description** 'default': Distribute traffic to one slot using default distribution mechanism; 'source-ip-based': Distribute traffic between slots, based on source ip; 'slot': Assign traffic to a specific slot; 

        **Type:** string

        **Supported Values:** default, source-ip-based

        **Default:** default

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **web-gui**

        **Description:** web-gui is a **JSON Block**.  Please see below for :ref:`404_web-gui` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui <ddos_dst_zone>`

    **zone-name**

        **Description** 

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **zone-profile**

        **Description** Apply threshold profile

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/zone-profile <ddos_zone_profile>`

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_zone-template` 

        **Type:** Object

.. _404_outbound-policy:

outbound-policy
^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **name**

        **Description** Specify name of the outbound policy

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/outbound-policy <ddos_outbound_policy>`

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip:

ip
^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **expand-ip-subnet**

        **Description** Expand this subnet to individual IP address

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **expand-ip-subnet-mode**

        **Description** 'default': Default learning mechanism (Default: Dynamic); 'dynamic': Dynamic learning; 'static': Static learning; 

        **Type:** string

        **Supported Values:** default, dynamic, static

        **Default:** default

    **ip-addr**

        **Description** Specify IP address

        **Type:** string

        **Format:** ipv4-address

    **subnet-ip-addr**

        **Description** IP Subnet

        **Type:** string

        **Format:** ipv4-cidr

.. _404_detection:

detection
^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **notification**

        **Description:** notification is a **JSON Block**.  Please see below for :ref:`404_detection_notification` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection/notification <ddos_dst_zone>`

    **outbound-detection**

        **Description:** outbound-detection is a **JSON Block**.  Please see below for :ref:`404_detection_outbound-detection` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection <ddos_dst_zone>`

    **packet-anomaly-detection**

        **Description:** packet-anomaly-detection is a **JSON Block**.  Please see below for :ref:`404_detection_packet-anomaly-detection` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection/packet-anomaly-detection <ddos_dst_zone>`

    **service-discovery**

        **Description:** service-discovery is a **JSON Block**.  Please see below for :ref:`404_detection_service-discovery` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection/service-discovery <ddos_dst_zone>`

    **settings**

        **Description** 'settings': settings; 

        **Type:** string

        **Supported Values:** settings

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_detection_packet-anomaly-detection:

detection_packet-anomaly-detection
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **configuration**

        **Description** 'configuration': configuration; 

        **Type:** string

        **Supported Values:** configuration

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection/packet-anomaly-detection/indicator/{type} <ddos_dst_zone>`

    **toggle**

        **Description** 'enable': Enable packet anomaly; 'disable': Disable packet anomaly; 

        **Type:** string

        **Supported Values:** enable, disable

        **Default:** enable

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_detection_packet-anomaly-detection_indicator-list:

detection_packet-anomaly-detection_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **threshold-num**

        **Description** Threshold for each indicator

        **Type:** number

        **Range:** 1-65535

        **Default:** 100

    **type**

        **Description** 'port-zero-pkt-rate': Port Zero Packet Rate (default 100 packet per second); 

        **Type:** string

        **Supported Values:** port-zero-pkt-rate

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_detection_notification:

detection_notification
^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **configuration**

        **Description** 'configuration': configuration; 

        **Type:** string

        **Supported Values:** configuration

    **notification**

        **Type:** List

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_detection_notification_notification:

detection_notification_notification
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **notification-template-name**

        **Description** Specify the notification template name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/notification-template <ddos_notification_template>`

.. _404_detection_service-discovery:

detection_service-discovery
^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **configuration**

        **Description** 'configuration': configuration; 

        **Type:** string

        **Supported Values:** configuration

    **pkt-rate-threshold**

        **Description** packet rate threshold for discovery (default 10 packets per second)

        **Type:** number

        **Range:** 1-255

        **Default:** 10

    **toggle**

        **Description** 'enable': Enable service discovery; 'disable': Disable service discovery; 

        **Type:** string

        **Supported Values:** enable, disable

        **Default:** disable

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_detection_outbound-detection:

detection_outbound-detection
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **configuration**

        **Description** 'configuration': configuration; 

        **Type:** string

        **Supported Values:** configuration

    **discovery-method**

        **Description** 'asn': Autonomous Systems number; 'country': Country; 

        **Type:** string

        **Supported Values:** asn, country

    **discovery-record**

        **Description** Maximum number of top locations

        **Type:** number

        **Range:** 1-100

        **Default:** 10

    **enable-top-k**

        **Type:** List

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection/indicator/{type} <ddos_dst_zone>`

    **toggle**

        **Description** 'enable': Enable outbound detection; 'disable': Disable outbound detection; 

        **Type:** string

        **Supported Values:** enable, disable

        **Default:** disable

    **topk-source-subnet**

        **Description:** topk-source-subnet is a **JSON Block**.  Please see below for :ref:`404_detection_outbound-detection_topk-source-subnet` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection/topk-source-subnet <ddos_dst_zone>`

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_detection_outbound-detection_topk-source-subnet:

detection_outbound-detection_topk-source-subnet
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_detection_outbound-detection_enable-top-k:

detection_outbound-detection_enable-top-k
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **topk-netmask**

        **Description** Subnet mask. The value should be less than or equal to the minimum zone subnet mask + 8 (IPv6 Subnet mask)

        **Type:** number

        **Range:** 1-128

        **Default:** 128

    **topk-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-type**

        **Description** 'source-subnet': Topk source subnet; 

        **Type:** string

        **Supported Values:** source-subnet

.. _404_detection_outbound-detection_indicator-list:

detection_outbound-detection_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **data-packet-size**

        **Description** Expected minimal data size

        **Type:** number

        **Range:** 1-1500

    **tcp-window-size**

        **Description** Expected minimal window size

        **Type:** number

        **Range:** 1-500

    **threshold-large-num**

        **Description** Threshold for each geo-location

        **Type:** number

        **Range:** 1-10995116277760

    **threshold-num**

        **Description** Threshold for each geo-location

        **Type:** number

        **Range:** 1-2147483647

    **threshold-str**

        **Description** Threshold for each geo-location (Non-zero floating point)

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'pkt-drop-rate': rate of packets got dropped; 'bit-rate': rate of incoming bits; 'pkt-drop-ratio': ratio of incoming packet rate divided by the rate of dropping packets; 'bytes-to-bytes-from-ratio': ratio of incoming packet rate divided by the rate of outgoing packets; 'syn-rate': rate on incoming SYN packets; 'fin-rate': rate on incoming FIN packets; 'rst-rate': rate of incoming RST packets; 'small-window-ack-rate': rate of small window advertisement; 'empty-ack-rate': rate of incoming packets which have no payload; 'small-payload-rate': rate of short payload packet; 'syn-fin-ratio': ratio of incoming SYN packet rate divided by the rate of incoming FIN packets; 

        **Type:** string

        **Supported Values:** pkt-rate, pkt-drop-rate, bit-rate, pkt-drop-ratio, bytes-to-bytes-from-ratio, syn-rate, fin-rate, rst-rate, small-window-ack-rate, empty-ack-rate, small-payload-rate, syn-fin-ratio

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_packet-anomaly-detection:

packet-anomaly-detection
^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto:

ip-proto
^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **proto-name-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol} <ddos_dst_zone>`

    **proto-number-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num} <ddos_dst_zone>`

    **proto-tcp-udp-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-tcp-udp/{protocol} <ddos_dst_zone>`

.. _404_ip-proto_proto-number-list:

ip-proto_proto-number-list
^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **age**

        **Description** Idle age for ip entry

        **Type:** number

        **Range:** 2-1023

        **Default:** 5

    **apply-policy-on-overflow**

        **Description** Enable this flag to apply overflow policy when dynamic entry count overflows

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **deny**

        **Description** Blacklist and Drop all incoming packets for this ip-proto

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **drop-frag-pkt**

        **Description** Drop fragmented packets

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **dynamic-entry-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/dynamic-entry-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **enable-class-list-overflow**

        **Description** Apply class-list overflow policy upon exceeding dynamic entry count specified for zone-port or class-list

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k**

        **Description** Enable ddos top-k detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k-destination**

        **Description** Enable ddos top-k destination IP detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **esp-inspect**

        **Description:** esp-inspect is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_esp-inspect` 

        **Type:** Object

    **faster-de-escalation**

        **Description** De-escalate faster in standalone mode

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_glid-cfg` 

        **Type:** Object

    **ip-filtering-policy**

        **Description** Configure IP Filter

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/ip-filtering-policy <ddos_ip_filtering_policy>`

    **ip-filtering-policy-statistics**

        **Description:** ip-filtering-policy-statistics is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_ip-filtering-policy-statistics` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/ip-filtering-policy-statistics <ddos_dst_zone>`

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/level/{level-num} <ddos_dst_zone>`

    **manual-mode-enable**

        **Description** Toggle manual mode to use fix templates

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **manual-mode-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/manual-mode/{config} <ddos_dst_zone>`

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry

        **Type:** number

        **Range:** 0-2147483647

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/port-ind <ddos_dst_zone>`

    **protocol-num**

        **Description** Protocol Number

        **Type:** number

        **Range:** 0-255

    **src-based-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/src-based-policy/{src-based-policy-name} <ddos_dst_zone>`

    **topk-destinations**

        **Description:** topk-destinations is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_topk-destinations` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/topk-destinations <ddos_dst_zone>`

    **topk-dst-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-dst-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-sources**

        **Description:** topk-sources is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_topk-sources` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/topk-sources <ddos_dst_zone>`

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_dynamic-entry-overflow-policy-list:

ip-proto_proto-number-list_dynamic-entry-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_dynamic-entry-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-number-list_dynamic-entry-overflow-policy-list_zone-template:

ip-proto_proto-number-list_dynamic-entry-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_glid-cfg:

ip-proto_proto-number-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **action-list**

        **Description** Configure action-list to take

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Mutual Exclusion:** action-list and glid-action are mutually exclusive

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **glid**

        **Description** Global limit ID for the whole zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

        **Mutual Exclusion:** glid-action and action-list are mutually exclusive

    **per-addr-glid**

        **Description** Global limit ID per address

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

.. _404_ip-proto_proto-number-list_level-list:

ip-proto_proto-number-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; '2': Policy level 2; '3': Policy level 3; '4': Policy level 4; 

        **Type:** string

        **Supported Values:** 0, 1, 2, 3, 4

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **src-escalation-score**

        **Description** Source activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **src-violation-actions**

        **Description** Violation actions apply due to source escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-escalation-score**

        **Description** Zone activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_level-list_zone-template` 

        **Type:** Object

    **zone-violation-actions**

        **Description** Violation actions apply due to zone escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_ip-proto_proto-number-list_level-list_zone-template:

ip-proto_proto-number-list_level-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_level-list_indicator-list:

ip-proto_proto-number-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **data-packet-size**

        **Description** Expected minimal data size

        **Type:** number

        **Range:** 1-1500

    **score**

        **Description** Score corresponding to the indicator

        **Type:** number

        **Range:** 1-1000000

    **src-threshold-large-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-10995116277760

    **src-threshold-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-2147483647

    **src-threshold-str**

        **Description** Indicator per-src threshold

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-violation-actions**

        **Description** Violation actions to use when this src indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'pkt-drop-rate': rate of packets got dropped; 'pkt-drop-ratio': ratio of incoming packet rate divided by the rate of dropping packets; 'bytes-to-bytes-from-ratio': ratio of incoming packet rate divided by the rate of outgoing packets; 'frag-rate': rate of incoming fragmented packets; 'cpu-utilization': average data CPU utilization; 'interface-utilization': outside interface utilization; 

        **Type:** string

        **Supported Values:** pkt-rate, pkt-drop-rate, bit-rate, pkt-drop-ratio, bytes-to-bytes-from-ratio, frag-rate, cpu-utilization, interface-utilization, learnt-sources

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-2147483647

    **zone-threshold-str**

        **Description** Threshold for the entire zone

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **zone-violation-actions**

        **Description** Violation actions to use when this zone indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_ip-proto_proto-number-list_manual-mode-list:

ip-proto_proto-number-list_manual-mode-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **config**

        **Description** 'configuration': Manual-mode configuration; 

        **Type:** string

        **Supported Values:** configuration

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_manual-mode-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-number-list_manual-mode-list_zone-template:

ip-proto_proto-number-list_manual-mode-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_src-based-policy-list:

ip-proto_proto-number-list_src-based-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **policy-class-list-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name} <ddos_dst_zone>`

    **src-based-policy-name**

        **Description** Specify name of the policy

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list:

ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **class-list-name**

        **Description** Class-list name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **class-list-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-number/{protocol-num}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name}/class-list-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry allowed for this class-list

        **Type:** number

        **Range:** 0-2147483647

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_zone-template:

ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list:

ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy for class-list; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template:

ip-proto_proto-number-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_port-ind:

ip-proto_proto-number-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_ip-filtering-policy-statistics:

ip-proto_proto-number-list_ip-filtering-policy-statistics
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_topk-sources:

ip-proto_proto-number-list_topk-sources
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-number-list_esp-inspect:

ip-proto_proto-number-list_esp-inspect
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **auth-algorithm**

        **Description** 'AUTH_NULL': No Integrity Check Value; 'HMAC-SHA-1-96': 96 bit Auth Algo; 'HMAC-SHA-256-96': 96 bit Auth Algo; 'HMAC-SHA-256-128': 128 bit Auth Algo; 'HMAC-SHA-384-192': 192 bit Auth Algo; 'HMAC-SHA-512-256': 256 bit Auth Algo; 'HMAC-MD5-96': 96 bit Auth Algo; 'MAC-RIPEMD-160-96': 96 bit Auth Algo; 

        **Type:** string

        **Supported Values:** AUTH_NULL, HMAC-SHA-1-96, HMAC-SHA-256-96, HMAC-SHA-256-128, HMAC-SHA-384-192, HMAC-SHA-512-256, HMAC-MD5-96, MAC-RIPEMD-160-96

    **encrypt-algorithm**

        **Description** 'NULL': Null Encryption Algorithm; 

        **Type:** string

        **Supported Values:** NULL

    **mode**

        **Description** 'transport': Transport mode; 

        **Type:** string

        **Supported Values:** transport

.. _404_ip-proto_proto-number-list_topk-destinations:

ip-proto_proto-number-list_topk-destinations
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list:

ip-proto_proto-name-list
^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **age**

        **Description** Idle age for ip entry

        **Type:** number

        **Range:** 2-1023

        **Default:** 5

    **apply-policy-on-overflow**

        **Description** Enable this flag to apply overflow policy when dynamic entry count overflows

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **deny**

        **Description** Blacklist and Drop all incoming packets for ip-proto icmp-v4

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **drop-frag-pkt**

        **Description** Drop fragmented packets

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **dynamic-entry-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/dynamic-entry-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **enable-class-list-overflow**

        **Description** Apply class-list overflow policy upon exceeding dynamic entry count specified for zone-port or class-list

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k**

        **Description** Enable ddos top-k detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k-destination**

        **Description** Enable ddos top-k destination IP detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **faster-de-escalation**

        **Description** De-escalate faster in standalone mode

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_glid-cfg` 

        **Type:** Object

    **ip-filtering-policy**

        **Description** Configure IP Filter

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/ip-filtering-policy <ddos_ip_filtering_policy>`

    **ip-filtering-policy-statistics**

        **Description:** ip-filtering-policy-statistics is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_ip-filtering-policy-statistics` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/ip-filtering-policy-statistics <ddos_dst_zone>`

    **key-cfg**

        **Type:** List

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/level/{level-num} <ddos_dst_zone>`

    **manual-mode-enable**

        **Description** Toggle manual mode to use fix templates

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **manual-mode-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/manual-mode/{config} <ddos_dst_zone>`

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry

        **Type:** number

        **Range:** 0-2147483647

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/port-ind <ddos_dst_zone>`

    **protocol**

        **Description** 'icmp-v4': ip-proto icmp-v4; 'icmp-v6': ip-proto icmp-v6; 'other': ip-proto other; 'gre': ip-proto gre; 'ipv4-encap': ip-proto IPv4 Encapsulation; 'ipv6-encap': ip-proto IPv6 Encapsulation; 

        **Type:** string

        **Supported Values:** icmp-v4, icmp-v6, other, gre, ipv4-encap, ipv6-encap

    **src-based-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/src-based-policy/{src-based-policy-name} <ddos_dst_zone>`

    **topk-destinations**

        **Description:** topk-destinations is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_topk-destinations` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/topk-destinations <ddos_dst_zone>`

    **topk-dst-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-dst-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-sources**

        **Description:** topk-sources is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_topk-sources` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/topk-sources <ddos_dst_zone>`

    **tunnel-decap**

        **Description** Enable tunnel decapsulation

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **tunnel-rate-limit**

        **Description** Enable DDOS-protection on tunnel traffic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_dynamic-entry-overflow-policy-list:

ip-proto_proto-name-list_dynamic-entry-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_dynamic-entry-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-name-list_dynamic-entry-overflow-policy-list_zone-template:

ip-proto_proto-name-list_dynamic-entry-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v4**

        **Description** DDOS icmp-v4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v6**

        **Description** DDOS icmp-v6 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_key-cfg:

ip-proto_proto-name-list_key-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **key**

        **Description** Only decapsulate GRE packet with this key (Hexadecimal 0x0-0xFFFFFFFF,decimal 0-4294967295)

        **Type:** string

        **Maximum Length:** 10 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_glid-cfg:

ip-proto_proto-name-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **action-list**

        **Description** Configure action-list to take

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Mutual Exclusion:** action-list and glid-action are mutually exclusive

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **glid**

        **Description** Global limit ID for the whole zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

        **Mutual Exclusion:** glid-action and action-list are mutually exclusive

    **per-addr-glid**

        **Description** Global limit ID per address

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

.. _404_ip-proto_proto-name-list_level-list:

ip-proto_proto-name-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; '2': Policy level 2; '3': Policy level 3; '4': Policy level 4; 

        **Type:** string

        **Supported Values:** 0, 1, 2, 3, 4

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **src-escalation-score**

        **Description** Source activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **src-violation-actions**

        **Description** Violation actions apply due to source escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-escalation-score**

        **Description** Zone activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_level-list_zone-template` 

        **Type:** Object

    **zone-violation-actions**

        **Description** Violation actions apply due to zone escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_ip-proto_proto-name-list_level-list_zone-template:

ip-proto_proto-name-list_level-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v4**

        **Description** DDOS icmp-v4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v6**

        **Description** DDOS icmp-v6 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_level-list_indicator-list:

ip-proto_proto-name-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **data-packet-size**

        **Description** Expected minimal data size

        **Type:** number

        **Range:** 1-1500

    **score**

        **Description** Score corresponding to the indicator

        **Type:** number

        **Range:** 1-1000000

    **src-threshold-large-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-10995116277760

    **src-threshold-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-2147483647

    **src-threshold-str**

        **Description** Indicator per-src threshold

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-violation-actions**

        **Description** Violation actions to use when this src indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'pkt-drop-rate': rate of packets got dropped; 'pkt-drop-ratio': ratio of incoming packet rate divided by the rate of dropping packets; 'bytes-to-bytes-from-ratio': ratio of incoming packet rate divided by the rate of outgoing packets; 'frag-rate': rate of incoming fragmented packets; 'cpu-utilization': average data CPU utilization; 'interface-utilization': outside interface utilization; 

        **Type:** string

        **Supported Values:** pkt-rate, pkt-drop-rate, bit-rate, pkt-drop-ratio, bytes-to-bytes-from-ratio, frag-rate, cpu-utilization, interface-utilization, learnt-sources

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-2147483647

    **zone-threshold-str**

        **Description** Threshold for the entire zone

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **zone-violation-actions**

        **Description** Violation actions to use when this zone indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_ip-proto_proto-name-list_manual-mode-list:

ip-proto_proto-name-list_manual-mode-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **config**

        **Description** 'configuration': Manual-mode configuration; 

        **Type:** string

        **Supported Values:** configuration

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_manual-mode-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-name-list_manual-mode-list_zone-template:

ip-proto_proto-name-list_manual-mode-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v4**

        **Description** DDOS icmp-v4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v6**

        **Description** DDOS icmp-v6 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_src-based-policy-list:

ip-proto_proto-name-list_src-based-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **policy-class-list-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name} <ddos_dst_zone>`

    **src-based-policy-name**

        **Description** Specify name of the policy

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list:

ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **class-list-name**

        **Description** Class-list name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **class-list-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-name/{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name}/class-list-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry allowed for this class-list

        **Type:** number

        **Range:** 0-2147483647

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_zone-template:

ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v4**

        **Description** DDOS icmp-v4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v6**

        **Description** DDOS icmp-v6 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list:

ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy for class-list; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template:

ip-proto_proto-name-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v4**

        **Description** DDOS icmp-v4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **icmp-v6**

        **Description** DDOS icmp-v6 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ip-proto**

        **Description** DDOS ip-proto template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_port-ind:

ip-proto_proto-name-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_ip-filtering-policy-statistics:

ip-proto_proto-name-list_ip-filtering-policy-statistics
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_topk-sources:

ip-proto_proto-name-list_topk-sources
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-name-list_topk-destinations:

ip-proto_proto-name-list_topk-destinations
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-tcp-udp-list:

ip-proto_proto-tcp-udp-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **deny**

        **Description** Blacklist and Drop all incoming packets for this ip-proto

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **drop-frag-pkt**

        **Description** Drop fragmented packets

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-tcp-udp-list_glid-cfg` 

        **Type:** Object

    **ip-filtering-policy**

        **Description** Configure IP Filter

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/ip-filtering-policy <ddos_ip_filtering_policy>`

    **ip-filtering-policy-statistics**

        **Description:** ip-filtering-policy-statistics is a **JSON Block**.  Please see below for :ref:`404_ip-proto_proto-tcp-udp-list_ip-filtering-policy-statistics` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/ip-proto/proto-tcp-udp/{protocol}/ip-filtering-policy-statistics <ddos_dst_zone>`

    **protocol**

        **Description** 'tcp': ip-proto tcp; 'udp': ip-proto udp; 

        **Type:** string

        **Supported Values:** tcp, udp

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-tcp-udp-list_ip-filtering-policy-statistics:

ip-proto_proto-tcp-udp-list_ip-filtering-policy-statistics
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ip-proto_proto-tcp-udp-list_glid-cfg:

ip-proto_proto-tcp-udp-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **action-list**

        **Description** Configure action-list to take

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Mutual Exclusion:** action-list and glid-action are mutually exclusive

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **glid**

        **Description** Global limit ID for the whole zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

        **Mutual Exclusion:** glid-action and action-list are mutually exclusive

    **per-addr-glid**

        **Description** Global limit ID per address

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

.. _404_port-range-list:

port-range-list
^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **age**

        **Description** Idle age for ip entry

        **Type:** number

        **Range:** 2-1023

        **Default:** 5

    **apply-policy-on-overflow**

        **Description** Enable this flag to apply overflow policy when dynamic entry count overflows

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **capture-config**

        **Description:** capture-config is a **JSON Block**.  Please see below for :ref:`404_port-range-list_capture-config` 

        **Type:** Object

    **default-action-list**

        **Description** Configure default-action-list

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **dynamic-entry-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/dynamic-entry-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **enable-class-list-overflow**

        **Description** Apply class-list overflow policy upon exceeding dynamic entry count specified under zone port or each class-list

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k**

        **Description** Enable ddos top-k detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k-destination**

        **Description** Enable ddos top-k destination IP detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **faster-de-escalation**

        **Description** De-escalate faster in standalone mode

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_port-range-list_glid-cfg` 

        **Type:** Object

    **ip-filtering-policy**

        **Description** Configure IP Filter

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/ip-filtering-policy <ddos_ip_filtering_policy>`

    **ip-filtering-policy-statistics**

        **Description:** ip-filtering-policy-statistics is a **JSON Block**.  Please see below for :ref:`404_port-range-list_ip-filtering-policy-statistics` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/ip-filtering-policy-statistics <ddos_dst_zone>`

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/level/{level-num} <ddos_dst_zone>`

    **manual-mode-enable**

        **Description** Toggle manual mode to use fix templates

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **manual-mode-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/manual-mode/{config} <ddos_dst_zone>`

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry

        **Type:** number

        **Range:** 0-2147483647

    **outbound-only**

        **Description** Only allow outbound traffic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **pattern-recognition**

        **Description:** pattern-recognition is a **JSON Block**.  Please see below for :ref:`404_port-range-list_pattern-recognition` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/pattern-recognition <ddos_dst_zone>`

    **pattern-recognition-pu-details**

        **Description:** pattern-recognition-pu-details is a **JSON Block**.  Please see below for :ref:`404_port-range-list_pattern-recognition-pu-details` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/pattern-recognition-pu-details <ddos_dst_zone>`

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_port-range-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/port-ind <ddos_dst_zone>`

    **port-range-end**

        **Description** Port-Range End Port Number

        **Type:** number

        **Range:** 1-65535

    **port-range-start**

        **Description** Port-Range Start Port Number

        **Type:** number

        **Range:** 1-65535

    **protocol**

        **Description** 'dns-tcp': DNS-TCP Port; 'dns-udp': DNS-UDP Port; 'http': HTTP Port; 'tcp': TCP Port; 'udp': UDP Port; 'ssl-l4': SSL-L4 Port; 'sip-udp': SIP-UDP Port; 'sip-tcp': SIP-TCP Port; 'quic': QUIC Port; 

        **Type:** string

        **Supported Values:** dns-tcp, dns-udp, http, tcp, udp, ssl-l4, sip-udp, sip-tcp, quic

    **sflow-common**

        **Description** Enable all sFlow polling options under this zone port

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-common,sflow-packets, sflow-tcp-basic,  sflow-tcp-stateful, and sflow-http are mutually exclusive

    **sflow-http**

        **Description** Enable sFlow HTTP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-http and sflow-common are mutually exclusive

    **sflow-packets**

        **Description** Enable sFlow packet-level counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-packets and sflow-common are mutually exclusive

    **sflow-tcp**

        **Description:** sflow-tcp is a **JSON Block**.  Please see below for :ref:`404_port-range-list_sflow-tcp` 

        **Type:** Object

    **src-based-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/src-based-policy/{src-based-policy-name} <ddos_dst_zone>`

    **stateful**

        **Description** Enable stateful tracking of sessions (Default is stateless)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **topk-destinations**

        **Description:** topk-destinations is a **JSON Block**.  Please see below for :ref:`404_port-range-list_topk-destinations` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/topk-destinations <ddos_dst_zone>`

    **topk-dst-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-dst-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-sources**

        **Description:** topk-sources is a **JSON Block**.  Please see below for :ref:`404_port-range-list_topk-sources` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/topk-sources <ddos_dst_zone>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **virtualhosts**

        **Description:** virtualhosts is a **JSON Block**.  Please see below for :ref:`404_port-range-list_virtualhosts` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/virtualhosts <ddos_dst_zone>`

.. _404_port-range-list_pattern-recognition:

port-range-list_pattern-recognition
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **algorithm**

        **Description** 'heuristic': heuristic algorithm; 

        **Type:** string

        **Supported Values:** heuristic

    **capture-traffic**

        **Description** 'all': Capture all packets; 'dropped': Capture dropped packets (default); 

        **Type:** string

        **Supported Values:** all, dropped

    **triggered-by**

        **Description** 'zone-escalation': Zone escalation trigger pattern recognition; 'packet-rate-exceeds': Packet rate limit exceeds trigger pattern recognition (default); 

        **Type:** string

        **Supported Values:** zone-escalation, packet-rate-exceeds

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_dynamic-entry-overflow-policy-list:

port-range-list_dynamic-entry-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port-range-list_dynamic-entry-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_port-range-list_dynamic-entry-overflow-policy-list_zone-template:

port-range-list_dynamic-entry-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_glid-cfg:

port-range-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **action-list**

        **Description** Configure action-list to take

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Mutual Exclusion:** action-list and glid-action are mutually exclusive

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **glid**

        **Description** Global limit ID for the whole zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default if default-action-list is not configured); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

        **Mutual Exclusion:** glid-action and action-list are mutually exclusive

    **per-addr-glid**

        **Description** Global limit ID per address

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

.. _404_port-range-list_level-list:

port-range-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **apply-extracted-filters**

        **Description** Apply extracted filters from this level

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **clear-sources-upon-deescalation**

        **Description** Clear sources upon de-escalation from level 1 to 0 or manual to 0

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **close-sessions-for-all-sources**

        **Description** Close session for all sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **close-sessions-for-unauth-sources**

        **Description** Close session for unauthenticated sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; '2': Policy level 2; '3': Policy level 3; '4': Policy level 4; 

        **Type:** string

        **Supported Values:** 0, 1, 2, 3, 4

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **src-escalation-score**

        **Description** Source activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **src-violation-actions**

        **Description** Violation actions apply due to source escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **start-pattern-recognition**

        **Description** Start pattern recognition from this level

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-escalation-score**

        **Description** Zone activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port-range-list_level-list_zone-template` 

        **Type:** Object

    **zone-violation-actions**

        **Description** Violation actions apply due to zone escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_port-range-list_level-list_zone-template:

port-range-list_level-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_level-list_indicator-list:

port-range-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **data-packet-size**

        **Description** Expected minimal data size

        **Type:** number

        **Range:** 1-1500

    **score**

        **Description** Score corresponding to the indicator

        **Type:** number

        **Range:** 1-1000000

    **src-threshold-large-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-10995116277760

    **src-threshold-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-2147483647

    **src-threshold-str**

        **Description** Indicator per-src threshold

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-violation-actions**

        **Description** Violation actions to use when this src indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **tcp-window-size**

        **Description** Expected minimal window size

        **Type:** number

        **Range:** 1-500

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'pkt-drop-rate': rate of packets got dropped; 'pkt-drop-ratio': ratio of incoming packet rate divided by the rate of dropping packets; 'bytes-to-bytes-from-ratio': ratio of incoming packet rate divided by the rate of outgoing packets; 'concurrent-conns': number of concurrent connections; 'conn-miss-rate': rate of incoming packets for which no previously established connection exists; 'syn-rate': rate on incoming SYN packets; 'fin-rate': rate on incoming FIN packets; 'rst-rate': rate of incoming RST packets; 'small-window-ack-rate': rate of small window advertisement; 'empty-ack-rate': rate of incoming packets which have no payload; 'small-payload-rate': rate of short payload packet; 'syn-fin-ratio': ratio of incoming SYN packet rate divided by the rate of incoming FIN packets; 'cpu-utilization': average data CPU utilization; 'interface-utilization': outside interface utilization; 

        **Type:** string

        **Supported Values:** pkt-rate, pkt-drop-rate, bit-rate, pkt-drop-ratio, bytes-to-bytes-from-ratio, concurrent-conns, conn-miss-rate, syn-rate, fin-rate, rst-rate, small-window-ack-rate, empty-ack-rate, small-payload-rate, syn-fin-ratio, cpu-utilization, interface-utilization, learnt-sources

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-2147483647

    **zone-threshold-str**

        **Description** Threshold for the entire zone

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **zone-violation-actions**

        **Description** Violation actions to use when this zone indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_port-range-list_virtualhosts:

port-range-list_virtualhosts
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **vhosts-config**

        **Description** 'configuration': configure virtualhost based mitigation for ssl services; 

        **Type:** string

        **Supported Values:** configuration

    **virtualhost-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/virtualhosts/virtualhost/{vhost} <ddos_dst_zone>`

.. _404_port-range-list_virtualhosts_virtualhost-list:

port-range-list_virtualhosts_virtualhost-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_port-range-list_virtualhosts_virtualhost-list_glid-cfg` 

        **Type:** Object

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/virtualhosts/virtualhost/{vhost}/level/{level-num} <ddos_dst_zone>`

    **servername**

        **Type:** List

    **servername-list**

        **Description** Class List to match servername (Class List Name)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **servername-match-any**

        **Description** Match when there is no SNI or other servernames are not matched

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **vhost**

        **Description** name for virtualhost

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_virtualhosts_virtualhost-list_servername:

port-range-list_virtualhosts_virtualhost-list_servername
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **host-match-string**

        **Description** SNI String

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **match-type**

        **Description** 'contains': match servername extension when contains this string; 'ends-with': match servername extension when ends with this string; 'equals': match servername extension when equals this string; 'starts-with': match servername extension when starts with this string; 

        **Type:** string

        **Supported Values:** contains, ends-with, equals, starts-with

.. _404_port-range-list_virtualhosts_virtualhost-list_glid-cfg:

port-range-list_virtualhosts_virtualhost-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

.. _404_port-range-list_virtualhosts_virtualhost-list_level-list:

port-range-list_virtualhosts_virtualhost-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **level-num**

        **Description** '0': Default policy level; 

        **Type:** string

        **Supported Values:** 0

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port-range-list_virtualhosts_virtualhost-list_level-list_zone-template` 

        **Type:** Object

.. _404_port-range-list_virtualhosts_virtualhost-list_level-list_zone-template:

port-range-list_virtualhosts_virtualhost-list_level-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_manual-mode-list:

port-range-list_manual-mode-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **close-sessions-for-all-sources**

        **Description** Close session for all sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **config**

        **Description** 'configuration': Manual-mode configuration; 

        **Type:** string

        **Supported Values:** configuration

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port-range-list_manual-mode-list_zone-template` 

        **Type:** Object

.. _404_port-range-list_manual-mode-list_zone-template:

port-range-list_manual-mode-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_src-based-policy-list:

port-range-list_src-based-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **policy-class-list-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name} <ddos_dst_zone>`

    **src-based-policy-name**

        **Description** Specify name of the policy

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_src-based-policy-list_policy-class-list-list:

port-range-list_src-based-policy-list_policy-class-list-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **class-list-name**

        **Description** Class-list name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **class-list-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port-range/{port-range-start}+{port-range-end}+{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name}/class-list-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry allowed for this class-list

        **Type:** number

        **Range:** 0-2147483647

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port-range-list_src-based-policy-list_policy-class-list-list_zone-template` 

        **Type:** Object

.. _404_port-range-list_src-based-policy-list_policy-class-list-list_zone-template:

port-range-list_src-based-policy-list_policy-class-list-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ips**

        **Description** IPS template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list:

port-range-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy for class-list; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port-range-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_port-range-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template:

port-range-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_pattern-recognition-pu-details:

port-range-list_pattern-recognition-pu-details
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_port-ind:

port-range-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_ip-filtering-policy-statistics:

port-range-list_ip-filtering-policy-statistics
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_sflow-tcp:

port-range-list_sflow-tcp
^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **sflow-tcp-basic**

        **Description** Enable sFlow basic TCP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-basic and sflow-common are mutually exclusive

    **sflow-tcp-stateful**

        **Description** Enable sFlow stateful TCP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-stateful and sflow-common are mutually exclusive

.. _404_port-range-list_topk-sources:

port-range-list_topk-sources
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_capture-config:

port-range-list_capture-config
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **capture-config-mode**

        **Description** 'drop': Apply capture-config to dropped packets; 'forward': Apply capture-config to forwarded packets; 'all': Apply capture-config to both dropped and forwarded packets; 

        **Type:** string

        **Supported Values:** drop, forward, all

    **capture-config-name**

        **Description** Capture-config name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _404_port-range-list_topk-destinations:

port-range-list_topk-destinations
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_collector:

collector
^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **sflow-name**

        **Description** Name of configured custom sFlow collector

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/sflow/collector/custom <sflow_collector_custom>`

.. _404_port:

port
^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **zone-service-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol} <ddos_dst_zone>`

    **zone-service-other-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol} <ddos_dst_zone>`

.. _404_port_zone-service-list:

port_zone-service-list
^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **age**

        **Description** Idle age for ip entry

        **Type:** number

        **Range:** 2-1023

        **Default:** 5

    **apply-policy-on-overflow**

        **Description** Enable this flag to apply overflow policy when dynamic entry count overflows

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **capture-config**

        **Description:** capture-config is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_capture-config` 

        **Type:** Object

    **default-action-list**

        **Description** Configure default-action-list

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **dynamic-entry-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/dynamic-entry-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **enable-class-list-overflow**

        **Description** Apply class-list overflow policy upon exceeding dynamic entry count specified for zone-port or class-list

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k**

        **Description** Enable ddos top-k detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k-destination**

        **Description** Enable ddos top-k destination IP detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **faster-de-escalation**

        **Description** De-escalate faster in standalone mode

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_glid-cfg` 

        **Type:** Object

    **ip-filtering-policy**

        **Description** Configure IP Filter

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/ip-filtering-policy <ddos_ip_filtering_policy>`

    **ip-filtering-policy-statistics**

        **Description:** ip-filtering-policy-statistics is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_ip-filtering-policy-statistics` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/ip-filtering-policy-statistics <ddos_dst_zone>`

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/level/{level-num} <ddos_dst_zone>`

    **manual-mode-enable**

        **Description** Toggle manual mode to use fix templates

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **manual-mode-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/manual-mode/{config} <ddos_dst_zone>`

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry

        **Type:** number

        **Range:** 0-2147483647

    **outbound-only**

        **Description** Only allow outbound traffic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **pattern-recognition**

        **Description:** pattern-recognition is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_pattern-recognition` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/pattern-recognition <ddos_dst_zone>`

    **pattern-recognition-pu-details**

        **Description:** pattern-recognition-pu-details is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_pattern-recognition-pu-details` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/pattern-recognition-pu-details <ddos_dst_zone>`

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/port-ind <ddos_dst_zone>`

    **port-num**

        **Description** Port Number

        **Type:** number

        **Range:** 1-65535

    **protocol**

        **Description** 'dns-tcp': DNS-TCP Port; 'dns-udp': DNS-UDP Port; 'http': HTTP Port; 'tcp': TCP Port; 'udp': UDP Port; 'ssl-l4': SSL-L4 Port; 'sip-udp': SIP-UDP Port; 'sip-tcp': SIP-TCP Port; 'quic': QUIC Port; 

        **Type:** string

        **Supported Values:** dns-tcp, dns-udp, http, tcp, udp, ssl-l4, sip-udp, sip-tcp, quic

    **sflow-common**

        **Description** Enable all sFlow polling options under this zone port

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-common,sflow-packets, sflow-tcp-basic,  sflow-tcp-stateful, and sflow-http are mutually exclusive

    **sflow-http**

        **Description** Enable sFlow HTTP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-http and sflow-common are mutually exclusive

    **sflow-packets**

        **Description** Enable sFlow packet-level counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-packets and sflow-common are mutually exclusive

    **sflow-tcp**

        **Description:** sflow-tcp is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_sflow-tcp` 

        **Type:** Object

    **signature-extraction**

        **Description:** signature-extraction is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_signature-extraction` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/signature-extraction <ddos_dst_zone>`

    **src-based-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/src-based-policy/{src-based-policy-name} <ddos_dst_zone>`

    **stateful**

        **Description** Enable stateful tracking of sessions (Default is stateless)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **topk-destinations**

        **Description:** topk-destinations is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_topk-destinations` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/topk-destinations <ddos_dst_zone>`

    **topk-dst-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-dst-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-sources**

        **Description:** topk-sources is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_topk-sources` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/topk-sources <ddos_dst_zone>`

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **virtualhosts**

        **Description:** virtualhosts is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_virtualhosts` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts <ddos_dst_zone>`

.. _404_port_zone-service-list_pattern-recognition:

port_zone-service-list_pattern-recognition
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **algorithm**

        **Description** 'heuristic': heuristic algorithm; 

        **Type:** string

        **Supported Values:** heuristic

    **capture-traffic**

        **Description** 'all': Capture all packets; 'dropped': Capture dropped packets (default); 

        **Type:** string

        **Supported Values:** all, dropped

    **triggered-by**

        **Description** 'zone-escalation': Zone escalation trigger pattern recognition; 'packet-rate-exceeds': Packet rate limit exceeds trigger pattern recognition (default); 

        **Type:** string

        **Supported Values:** zone-escalation, packet-rate-exceeds

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_dynamic-entry-overflow-policy-list:

port_zone-service-list_dynamic-entry-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_dynamic-entry-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-list_dynamic-entry-overflow-policy-list_zone-template:

port_zone-service-list_dynamic-entry-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_glid-cfg:

port_zone-service-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **action-list**

        **Description** Configure action-list to take

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Mutual Exclusion:** action-list and glid-action are mutually exclusive

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **glid**

        **Description** Global limit ID for the whole zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default if default-action-list is not configured); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

        **Mutual Exclusion:** glid-action and action-list are mutually exclusive

    **per-addr-glid**

        **Description** Global limit ID per address

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

.. _404_port_zone-service-list_signature-extraction:

port_zone-service-list_signature-extraction
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **algorithm**

        **Description** 'heuristic': heuristic algorithm; 

        **Type:** string

        **Supported Values:** heuristic

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_level-list:

port_zone-service-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **apply-extracted-filters**

        **Description** Apply extracted filters from this level

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **clear-sources-upon-deescalation**

        **Description** Clear sources upon de-escalation from level 1 to 0 or manual to 0

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **close-sessions-for-all-sources**

        **Description** Close session for all sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **close-sessions-for-unauth-sources**

        **Description** Close session for unauthenticated sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; '2': Policy level 2; '3': Policy level 3; '4': Policy level 4; 

        **Type:** string

        **Supported Values:** 0, 1, 2, 3, 4

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **src-escalation-score**

        **Description** Source activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **src-violation-actions**

        **Description** Violation actions apply due to source escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **start-pattern-recognition**

        **Description** Start pattern recognition from this level

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-escalation-score**

        **Description** Zone activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_level-list_zone-template` 

        **Type:** Object

    **zone-violation-actions**

        **Description** Violation actions apply due to zone escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_port_zone-service-list_level-list_zone-template:

port_zone-service-list_level-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_level-list_indicator-list:

port_zone-service-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **data-packet-size**

        **Description** Expected minimal data size

        **Type:** number

        **Range:** 1-1500

    **score**

        **Description** Score corresponding to the indicator

        **Type:** number

        **Range:** 1-1000000

    **src-threshold-large-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-10995116277760

    **src-threshold-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-2147483647

    **src-threshold-str**

        **Description** Indicator per-src threshold

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-violation-actions**

        **Description** Violation actions to use when this src indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **tcp-window-size**

        **Description** Expected minimal window size

        **Type:** number

        **Range:** 1-500

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'pkt-drop-rate': rate of packets got dropped; 'pkt-drop-ratio': ratio of incoming packet rate divided by the rate of dropping packets; 'bytes-to-bytes-from-ratio': ratio of incoming packet rate divided by the rate of outgoing packets; 'concurrent-conns': number of concurrent connections; 'conn-miss-rate': rate of incoming packets for which no previously established connection exists; 'syn-rate': rate on incoming SYN packets; 'fin-rate': rate on incoming FIN packets; 'rst-rate': rate of incoming RST packets; 'small-window-ack-rate': rate of small window advertisement; 'empty-ack-rate': rate of incoming packets which have no payload; 'small-payload-rate': rate of short payload packet; 'syn-fin-ratio': ratio of incoming SYN packet rate divided by the rate of incoming FIN packets; 'cpu-utilization': average data CPU utilization; 'interface-utilization': outside interface utilization; 

        **Type:** string

        **Supported Values:** pkt-rate, pkt-drop-rate, bit-rate, pkt-drop-ratio, bytes-to-bytes-from-ratio, concurrent-conns, conn-miss-rate, syn-rate, fin-rate, rst-rate, small-window-ack-rate, empty-ack-rate, small-payload-rate, syn-fin-ratio, cpu-utilization, interface-utilization, learnt-sources

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-2147483647

    **zone-threshold-str**

        **Description** Threshold for the entire zone

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **zone-violation-actions**

        **Description** Violation actions to use when this zone indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_port_zone-service-list_virtualhosts:

port_zone-service-list_virtualhosts
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **vhosts-config**

        **Description** 'configuration': configure virtualhost based mitigation for ssl services; 

        **Type:** string

        **Supported Values:** configuration

    **virtualhost-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost} <ddos_dst_zone>`

.. _404_port_zone-service-list_virtualhosts_virtualhost-list:

port_zone-service-list_virtualhosts_virtualhost-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_virtualhosts_virtualhost-list_glid-cfg` 

        **Type:** Object

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}/level/{level-num} <ddos_dst_zone>`

    **servername**

        **Type:** List

    **servername-list**

        **Description** Class List to match servername (AC type Class List Name)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **servername-match-any**

        **Description** Match when there is no SNI or other servernames are not matched

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **servername-no-sni**

        **Description** Match when there is no SNI extension found

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **vhost**

        **Description** name for virtualhost

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_virtualhosts_virtualhost-list_servername:

port_zone-service-list_virtualhosts_virtualhost-list_servername
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **host-match-string**

        **Description** SNI String

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **match-type**

        **Description** 'contains': match servername extension when contains this string; 'ends-with': match servername extension when ends with this string; 'equals': match servername extension when equals this string; 'starts-with': match servername extension when starts with this string; 

        **Type:** string

        **Supported Values:** contains, ends-with, equals, starts-with

.. _404_port_zone-service-list_virtualhosts_virtualhost-list_glid-cfg:

port_zone-service-list_virtualhosts_virtualhost-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

.. _404_port_zone-service-list_virtualhosts_virtualhost-list_level-list:

port_zone-service-list_virtualhosts_virtualhost-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **level-num**

        **Description** '0': Default policy level; 

        **Type:** string

        **Supported Values:** 0

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_virtualhosts_virtualhost-list_level-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-list_virtualhosts_virtualhost-list_level-list_zone-template:

port_zone-service-list_virtualhosts_virtualhost-list_level-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_manual-mode-list:

port_zone-service-list_manual-mode-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **close-sessions-for-all-sources**

        **Description** Close session for all sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **config**

        **Description** 'configuration': Manual-mode configuration; 

        **Type:** string

        **Supported Values:** configuration

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_manual-mode-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-list_manual-mode-list_zone-template:

port_zone-service-list_manual-mode-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_src-based-policy-list:

port_zone-service-list_src-based-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **policy-class-list-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name} <ddos_dst_zone>`

    **src-based-policy-name**

        **Description** Specify name of the policy

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_src-based-policy-list_policy-class-list-list:

port_zone-service-list_src-based-policy-list_policy-class-list-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **class-list-name**

        **Description** Class-list name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **class-list-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name}/class-list-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry allowed for this class-list

        **Type:** number

        **Range:** 0-2147483647

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_src-based-policy-list_policy-class-list-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-list_src-based-policy-list_policy-class-list-list_zone-template:

port_zone-service-list_src-based-policy-list_policy-class-list-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list:

port_zone-service-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy for class-list; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template:

port_zone-service-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **quic**

        **Description** DDOS quic template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_pattern-recognition-pu-details:

port_zone-service-list_pattern-recognition-pu-details
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_port-ind:

port_zone-service-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_ip-filtering-policy-statistics:

port_zone-service-list_ip-filtering-policy-statistics
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_sflow-tcp:

port_zone-service-list_sflow-tcp
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **sflow-tcp-basic**

        **Description** Enable sFlow basic TCP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-basic and sflow-common are mutually exclusive

    **sflow-tcp-stateful**

        **Description** Enable sFlow stateful TCP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-stateful and sflow-common are mutually exclusive

.. _404_port_zone-service-list_topk-sources:

port_zone-service-list_topk-sources
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_capture-config:

port_zone-service-list_capture-config
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **capture-config-mode**

        **Description** 'drop': Apply capture-config to dropped packets; 'forward': Apply capture-config to forwarded packets; 'all': Apply capture-config to both dropped and forwarded packets; 

        **Type:** string

        **Supported Values:** drop, forward, all

    **capture-config-name**

        **Description** Capture-config name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-list_topk-destinations:

port_zone-service-list_topk-destinations
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list:

port_zone-service-other-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **age**

        **Description** Idle age for ip entry

        **Type:** number

        **Range:** 2-1023

        **Default:** 5

    **apply-policy-on-overflow**

        **Description** Enable this flag to apply overflow policy when dynamic entry count overflows

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **default-action-list**

        **Description** Configure default-action-list

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **dynamic-entry-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/dynamic-entry-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **enable-class-list-overflow**

        **Description** Apply class-list overflow policy upon exceeding dynamic entry count specified for this zone port or each class-list

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k**

        **Description** Enable ddos top-k detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **enable-top-k-destination**

        **Description** Enable ddos top-k destination IP detection

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **faster-de-escalation**

        **Description** De-escalate faster in standalone mode

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_glid-cfg` 

        **Type:** Object

    **ip-filtering-policy**

        **Description** Configure IP Filter

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/ip-filtering-policy <ddos_ip_filtering_policy>`

    **ip-filtering-policy-statistics**

        **Description:** ip-filtering-policy-statistics is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_ip-filtering-policy-statistics` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/ip-filtering-policy-statistics <ddos_dst_zone>`

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/level/{level-num} <ddos_dst_zone>`

    **manual-mode-enable**

        **Description** Toggle manual mode to use fix templates

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **manual-mode-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/manual-mode/{config} <ddos_dst_zone>`

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry

        **Type:** number

        **Range:** 0-2147483647

    **outbound-only**

        **Description** Only allow outbound traffic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **pattern-recognition**

        **Description:** pattern-recognition is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_pattern-recognition` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/pattern-recognition <ddos_dst_zone>`

    **pattern-recognition-pu-details**

        **Description:** pattern-recognition-pu-details is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_pattern-recognition-pu-details` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/pattern-recognition-pu-details <ddos_dst_zone>`

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/port-ind <ddos_dst_zone>`

    **port-other**

        **Description** 'other': other; 

        **Type:** string

        **Supported Values:** other

    **protocol**

        **Description** 'tcp': TCP Port; 'udp': UDP Port; 

        **Type:** string

        **Supported Values:** tcp, udp

    **sflow-common**

        **Description** Enable all sFlow polling options under this zone port

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-common,sflow-packets,  sflow-tcp-basic, and sflow-tcp-stateful are mutually exclusive

    **sflow-packets**

        **Description** Enable sFlow packet-level counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-packets and sflow-common are mutually exclusive

    **sflow-tcp**

        **Description:** sflow-tcp is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_sflow-tcp` 

        **Type:** Object

    **src-based-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/src-based-policy/{src-based-policy-name} <ddos_dst_zone>`

    **stateful**

        **Description** Enable stateful tracking of sessions (Default is stateless)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **topk-destinations**

        **Description:** topk-destinations is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_topk-destinations` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/topk-destinations <ddos_dst_zone>`

    **topk-dst-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-dst-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-sources**

        **Description:** topk-sources is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_topk-sources` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/topk-sources <ddos_dst_zone>`

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_pattern-recognition:

port_zone-service-other-list_pattern-recognition
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **algorithm**

        **Description** 'heuristic': heuristic algorithm; 

        **Type:** string

        **Supported Values:** heuristic

    **capture-traffic**

        **Description** 'all': Capture all packets; 'dropped': Capture dropped packets (default); 

        **Type:** string

        **Supported Values:** all, dropped

    **triggered-by**

        **Description** 'zone-escalation': Zone escalation trigger pattern recognition; 'packet-rate-exceeds': Packet rate limit exceeds trigger pattern recognition (default); 

        **Type:** string

        **Supported Values:** zone-escalation, packet-rate-exceeds

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_dynamic-entry-overflow-policy-list:

port_zone-service-other-list_dynamic-entry-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_dynamic-entry-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-other-list_dynamic-entry-overflow-policy-list_zone-template:

port_zone-service-other-list_dynamic-entry-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_glid-cfg:

port_zone-service-other-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **action-list**

        **Description** Configure action-list to take

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Mutual Exclusion:** action-list and glid-action are mutually exclusive

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **glid**

        **Description** Global limit ID for the whole zone

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default if default-action-list is not configured); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

        **Mutual Exclusion:** glid-action and action-list are mutually exclusive

    **per-addr-glid**

        **Description** Global limit ID per address

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

.. _404_port_zone-service-other-list_level-list:

port_zone-service-other-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **apply-extracted-filters**

        **Description** Apply extracted filters from this level

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **clear-sources-upon-deescalation**

        **Description** Clear sources upon de-escalation from level 1 to 0 or manual to 0

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **close-sessions-for-all-sources**

        **Description** Close session for all sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **close-sessions-for-unauth-sources**

        **Description** Close session for unauthenticated sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; '2': Policy level 2; '3': Policy level 3; '4': Policy level 4; 

        **Type:** string

        **Supported Values:** 0, 1, 2, 3, 4

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **src-escalation-score**

        **Description** Source activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **src-violation-actions**

        **Description** Violation actions apply due to source escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **start-pattern-recognition**

        **Description** Start pattern recognition from this level

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-escalation-score**

        **Description** Zone activation score of this level

        **Type:** number

        **Range:** 1-1000000

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_level-list_zone-template` 

        **Type:** Object

    **zone-violation-actions**

        **Description** Violation actions apply due to zone escalate from this level

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_port_zone-service-other-list_level-list_zone-template:

port_zone-service-other-list_level-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_level-list_indicator-list:

port_zone-service-other-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **data-packet-size**

        **Description** Expected minimal data size

        **Type:** number

        **Range:** 1-1500

    **score**

        **Description** Score corresponding to the indicator

        **Type:** number

        **Range:** 1-1000000

    **src-threshold-large-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-10995116277760

    **src-threshold-num**

        **Description** Indicator per-src threshold

        **Type:** number

        **Range:** 1-2147483647

    **src-threshold-str**

        **Description** Indicator per-src threshold

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-violation-actions**

        **Description** Violation actions to use when this src indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

    **tcp-window-size**

        **Description** Expected minimal window size

        **Type:** number

        **Range:** 1-500

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'pkt-drop-rate': rate of packets got dropped; 'pkt-drop-ratio': ratio of incoming packet rate divided by the rate of dropping packets; 'bytes-to-bytes-from-ratio': ratio of incoming packet rate divided by the rate of outgoing packets; 'concurrent-conns': number of concurrent connections; 'conn-miss-rate': rate of incoming packets for which no previously established connection exists; 'syn-rate': rate on incoming SYN packets; 'fin-rate': rate on incoming FIN packets; 'rst-rate': rate of incoming RST packets; 'small-window-ack-rate': rate of small window advertisement; 'empty-ack-rate': rate of incoming packets which have no payload; 'small-payload-rate': rate of short payload packet; 'syn-fin-ratio': ratio of incoming SYN packet rate divided by the rate of incoming FIN packets; 'cpu-utilization': average data CPU utilization; 'interface-utilization': outside interface utilization; 

        **Type:** string

        **Supported Values:** pkt-rate, pkt-drop-rate, bit-rate, pkt-drop-ratio, bytes-to-bytes-from-ratio, concurrent-conns, conn-miss-rate, syn-rate, fin-rate, rst-rate, small-window-ack-rate, empty-ack-rate, small-payload-rate, syn-fin-ratio, cpu-utilization, interface-utilization, learnt-sources

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold for the entire zone

        **Type:** number

        **Range:** 1-2147483647

    **zone-threshold-str**

        **Description** Threshold for the entire zone

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **zone-violation-actions**

        **Description** Violation actions to use when this zone indicator threshold reaches

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/violation-actions <ddos_violation_actions>`

.. _404_port_zone-service-other-list_manual-mode-list:

port_zone-service-other-list_manual-mode-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **close-sessions-for-all-sources**

        **Description** Close session for all sources

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **config**

        **Description** 'configuration': Manual-mode configuration; 

        **Type:** string

        **Supported Values:** configuration

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **src-default-glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_manual-mode-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-other-list_manual-mode-list_zone-template:

port_zone-service-other-list_manual-mode-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_src-based-policy-list:

port_zone-service-other-list_src-based-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **policy-class-list-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name} <ddos_dst_zone>`

    **src-based-policy-name**

        **Description** Specify name of the policy

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_src-based-policy-list_policy-class-list-list:

port_zone-service-other-list_src-based-policy-list_policy-class-list-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **class-list-name**

        **Description** Class-list name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **class-list-overflow-policy-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service-other/{port-other}+{protocol}/src-based-policy/{src-based-policy-name}/policy-class-list/{class-list-name}/class-list-overflow-policy/{dummy-name} <ddos_dst_zone>`

    **dynamic-entry-count-warn-threshold**

        **Description** Set threshold percentage of "max-src-dst-entry" for generating warning logs. Including start and end.

        **Type:** number

        **Range:** 1-100

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'blacklist-src': Blacklist-src for glid exceed; 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, blacklist-src, ignore

    **max-dynamic-entry-count**

        **Description** Maximum count for dynamic source zone service entry allowed for this class-list

        **Type:** number

        **Range:** 0-2147483647

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_src-based-policy-list_policy-class-list-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-other-list_src-based-policy-list_policy-class-list-list_zone-template:

port_zone-service-other-list_src-based-policy-list_policy-class-list-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list:

port_zone-service-other-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **action**

        **Description** 'bypass': Always permit for the Source to bypass all feature & limit checks; 'deny': Blacklist incoming packets for service; 

        **Type:** string

        **Supported Values:** bypass, deny

    **dummy-name**

        **Description** 'configuration': Configure overflow policy for class-list; 

        **Type:** string

        **Supported Values:** configuration

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **log-enable**

        **Description** Enable logging

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **log-periodic**

        **Description** Enable log periodic

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_port_zone-service-other-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template` 

        **Type:** Object

.. _404_port_zone-service-other-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template:

port_zone-service-other-list_src-based-policy-list_policy-class-list-list_class-list-overflow-policy-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dns**

        **Description** DDOS dns template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **encap**

        **Description** DDOS encap template (IPv6-over-IPv4 / IPv4-over-IPv6 are not supported.)

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **http**

        **Description** DDOS http template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **sip**

        **Description** DDOS sip template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **ssl-l4**

        **Description** DDOS ssl-l4 template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **tcp**

        **Description** DDOS tcp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

    **udp**

        **Description** DDOS udp template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_pattern-recognition-pu-details:

port_zone-service-other-list_pattern-recognition-pu-details
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_port-ind:

port_zone-service-other-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_ip-filtering-policy-statistics:

port_zone-service-other-list_ip-filtering-policy-statistics
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_sflow-tcp:

port_zone-service-other-list_sflow-tcp
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **sflow-tcp-basic**

        **Description** Enable sFlow basic TCP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-basic and sflow-common are mutually exclusive

    **sflow-tcp-stateful**

        **Description** Enable sFlow stateful TCP counter polling

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-stateful and sflow-common are mutually exclusive

.. _404_port_zone-service-other-list_topk-sources:

port_zone-service-other-list_topk-sources
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_port_zone-service-other-list_topk-destinations:

port_zone-service-other-list_topk-destinations
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_capture-config-list:

capture-config-list
^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **mode**

        **Description** 'drop': Apply capture-config to dropped packets; 'forward': Apply capture-config to forwarded packets; 'all': Apply capture-config to both dropped and forwarded packets; 

        **Type:** string

        **Supported Values:** drop, forward, all

    **name**

        **Description** Capture-config name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/capture-config <capture_config>`

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_zone-template:

zone-template
^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **logging**

        **Description** DDOS logging template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _404_hw-blacklist-blocking:

hw-blacklist-blocking
^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **dst-enable**

        **Description** Enable Dst side hardware blocking

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **src-enable**

        **Description** Enable Src side hardware blocking

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_src-port-range-list:

src-port-range-list
^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **capture-config**

        **Description:** capture-config is a **JSON Block**.  Please see below for :ref:`404_src-port-range-list_capture-config` 

        **Type:** Object

    **default-action-list**

        **Description** Configure default-action-list

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_src-port-range-list_glid-cfg` 

        **Type:** Object

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port-range/{src-port-range-start}+{src-port-range-end}+{protocol}/level/{level-num} <ddos_dst_zone>`

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_src-port-range-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port-range/{src-port-range-start}+{src-port-range-end}+{protocol}/port-ind <ddos_dst_zone>`

    **protocol**

        **Description** 'udp': UDP port; 'tcp': TCP Port; 

        **Type:** string

        **Supported Values:** udp, tcp

    **src-port-range-end**

        **Description** Src Port-Range End Port Number

        **Type:** number

        **Range:** 2-65535

    **src-port-range-start**

        **Description** Src Port-Range Start Port Number

        **Type:** number

        **Range:** 1-65535

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_src-port-range-list_zone-template` 

        **Type:** Object

.. _404_src-port-range-list_capture-config:

src-port-range-list_capture-config
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **capture-config-mode**

        **Description** 'drop': Apply capture-config to dropped packets; 'forward': Apply capture-config to forwarded packets; 'all': Apply capture-config to both dropped and forwarded packets; 

        **Type:** string

        **Supported Values:** drop, forward, all

    **capture-config-name**

        **Description** Capture-config name

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _404_src-port-range-list_glid-cfg:

src-port-range-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

.. _404_src-port-range-list_zone-template:

src-port-range-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **src-tcp**

        **Description** DDOS tcp src template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-udp**

        **Description** DDOS udp src template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _404_src-port-range-list_port-ind:

src-port-range-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_src-port-range-list_level-list:

src-port-range-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port-range/{src-port-range-start}+{src-port-range-end}+{protocol}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; 

        **Type:** string

        **Supported Values:** 0, 1

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_src-port-range-list_level-list_indicator-list:

src-port-range-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'bit-rate': rate of incoming bits; 

        **Type:** string

        **Supported Values:** pkt-rate, bit-rate

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold of the entire zone for the port-range

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold of the entire zone for the port-range

        **Type:** number

        **Range:** 1-2147483647

.. _404_sflow-tcp:

sflow-tcp
^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **sflow-tcp-basic**

        **Description** Enable sFlow basic TCP counter polling. WARNING: Zone level Sflow polling might induce heavy CPU load depending on the total nu

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-basic and sflow-common are mutually exclusive

    **sflow-tcp-stateful**

        **Description** Enable sFlow stateful TCP counter polling. WARNING: Zone level Sflow polling might induce heavy CPU load depending on the total

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

        **Mutual Exclusion:** sflow-tcp-stateful and sflow-common are mutually exclusive

.. _404_src-port:

src-port
^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **zone-src-port-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port/{port-num}+{protocol} <ddos_dst_zone>`

    **zone-src-port-other-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port-other/{port-other}+{protocol} <ddos_dst_zone>`

.. _404_src-port_zone-src-port-list:

src-port_zone-src-port-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **default-action-list**

        **Description** Configure default-action-list

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_src-port_zone-src-port-list_glid-cfg` 

        **Type:** Object

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port/{port-num}+{protocol}/level/{level-num} <ddos_dst_zone>`

    **outbound-src-tracking**

        **Description** 'enable': enable; 'disable': disable; 

        **Type:** string

        **Supported Values:** enable, disable

        **Default:** disable

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_src-port_zone-src-port-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port/{port-num}+{protocol}/port-ind <ddos_dst_zone>`

    **port-num**

        **Description** Source Port Number

        **Type:** number

        **Range:** 1-65535

    **protocol**

        **Description** 'dns-udp': DNS-UDP Port; 'dns-tcp': DNS-TCP Port; 'udp': UDP port; 'tcp': TCP Port; 

        **Type:** string

        **Supported Values:** dns-udp, dns-tcp, udp, tcp

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_src-port_zone-src-port-list_zone-template` 

        **Type:** Object

.. _404_src-port_zone-src-port-list_glid-cfg:

src-port_zone-src-port-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

.. _404_src-port_zone-src-port-list_zone-template:

src-port_zone-src-port-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **src-dns**

        **Description** DDOS dns src template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-tcp**

        **Description** DDOS tcp src template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-udp**

        **Description** DDOS udp src template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _404_src-port_zone-src-port-list_port-ind:

src-port_zone-src-port-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_src-port_zone-src-port-list_level-list:

src-port_zone-src-port-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port/{port-num}+{protocol}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; 

        **Type:** string

        **Supported Values:** 0, 1

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_src-port_zone-src-port-list_level-list_indicator-list:

src-port_zone-src-port-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'bit-rate': rate of incoming bits; 

        **Type:** string

        **Supported Values:** pkt-rate, bit-rate

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold of the entire zone for the src-port

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold of the entire zone for the src-port

        **Type:** number

        **Range:** 1-2147483647

.. _404_src-port_zone-src-port-other-list:

src-port_zone-src-port-other-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **default-action-list**

        **Description** Configure default-action-list

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/ddos/action-list <ddos_action_list>`

    **deny**

        **Description** Blacklist and Drop all incoming packets for protocol

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **glid-cfg**

        **Description:** glid-cfg is a **JSON Block**.  Please see below for :ref:`404_src-port_zone-src-port-other-list_glid-cfg` 

        **Type:** Object

    **level-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port-other/{port-other}+{protocol}/level/{level-num} <ddos_dst_zone>`

    **port-ind**

        **Description:** port-ind is a **JSON Block**.  Please see below for :ref:`404_src-port_zone-src-port-other-list_port-ind` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port-other/{port-other}+{protocol}/port-ind <ddos_dst_zone>`

    **port-other**

        **Description** 'other': other; 

        **Type:** string

        **Supported Values:** other

    **protocol**

        **Description** 'udp': UDP port; 'tcp': TCP Port; 

        **Type:** string

        **Supported Values:** udp, tcp

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-template**

        **Description:** zone-template is a **JSON Block**.  Please see below for :ref:`404_src-port_zone-src-port-other-list_zone-template` 

        **Type:** Object

.. _404_src-port_zone-src-port-other-list_glid-cfg:

src-port_zone-src-port-other-list_glid-cfg
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **glid**

        **Description** Global limit ID

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 63 characters

        **Maximum Length:** 1 characters

        **Reference Object:** :doc:`/axapi/v3/glid <glid>`

    **glid-action**

        **Description** 'drop': Drop packets for glid exceed (Default); 'ignore': Do nothing for glid exceed; 

        **Type:** string

        **Supported Values:** drop, ignore

.. _404_src-port_zone-src-port-other-list_zone-template:

src-port_zone-src-port-other-list_zone-template
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **src-tcp**

        **Description** DDOS tcp src template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **src-udp**

        **Description** DDOS udp src template

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

.. _404_src-port_zone-src-port-other-list_port-ind:

src-port_zone-src-port-other-list_port-ind
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_src-port_zone-src-port-other-list_level-list:

src-port_zone-src-port-other-list_level-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **indicator-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/src-port/zone-src-port-other/{port-other}+{protocol}/level/{level-num}/indicator/{type} <ddos_dst_zone>`

    **level-num**

        **Description** '0': Default policy level; '1': Policy level 1; 

        **Type:** string

        **Supported Values:** 0, 1

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_src-port_zone-src-port-other-list_level-list_indicator-list:

src-port_zone-src-port-other-list_level-list_indicator-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **type**

        **Description** 'pkt-rate': rate of incoming packets; 'bit-rate': rate of incoming bits; 

        **Type:** string

        **Supported Values:** pkt-rate, bit-rate

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

    **zone-threshold-large-num**

        **Description** Threshold of the entire zone for the src-port

        **Type:** number

        **Range:** 1-10995116277760

    **zone-threshold-num**

        **Description** Threshold of the entire zone for the src-port

        **Type:** number

        **Range:** 1-2147483647

.. _404_web-gui:

web-gui
^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **activated-after-learning**

        **Description** Activate it after learning

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **create-time**

        **Description** Configure create time

        **Type:** string

        **Maximum Length:** 13 characters

        **Maximum Length:** 1 characters

    **learning**

        **Description:** learning is a **JSON Block**.  Please see below for :ref:`404_web-gui_learning` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/learning <ddos_dst_zone>`

    **modify-time**

        **Description** Configure modify time

        **Type:** string

        **Maximum Length:** 13 characters

        **Maximum Length:** 1 characters

    **protection**

        **Description:** protection is a **JSON Block**.  Please see below for :ref:`404_web-gui_protection` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/protection <ddos_dst_zone>`

    **sensitivity**

        **Description** '5': Low; '3': Medium; '1.5': High; 

        **Type:** string

        **Supported Values:** 5, 3, 1.5

        **Default:** 3

    **status**

        **Description** 'newly': newly; 'learning': learning; 'learned': learned; 'activated': activated; 

        **Type:** string

        **Supported Values:** newly, learning, learned, activated

        **Default:** newly

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_web-gui_protection:

web-gui_protection
^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **ip-proto**

        **Description:** ip-proto is a **JSON Block**.  Please see below for :ref:`404_web-gui_protection_ip-proto` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/protection/ip-proto <ddos_dst_zone>`

    **port**

        **Description:** port is a **JSON Block**.  Please see below for :ref:`404_web-gui_protection_port` 

        **Type:** Object

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/protection/port <ddos_dst_zone>`

    **port-range-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/protection/port-range/{port-range-start}+{port-range-end}+{protocol} <ddos_dst_zone>`

.. _404_web-gui_protection_port-range-list:

web-gui_protection_port-range-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **pbe**

        **Description** Peak Bandwidth Expected

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **port-range-end**

        **Description** Port-Range End Port Number

        **Type:** number

        **Range:** 1-65535

    **port-range-start**

        **Description** Port-Range Start Port Number

        **Type:** number

        **Range:** 1-65535

    **protocol**

        **Description** 'dns-tcp': DNS-TCP Port; 'dns-udp': DNS-UDP Port; 'http': HTTP Port; 'tcp': TCP Port; 'udp': UDP Port; 'ssl-l4': SSL-L4 Port; 

        **Type:** string

        **Supported Values:** dns-tcp, dns-udp, http, tcp, udp, ssl-l4

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_web-gui_protection_port:

web-gui_protection_port
^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **zone-service-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/protection/port/zone-service/{port-num}+{protocol} <ddos_dst_zone>`

    **zone-service-other-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/protection/port/zone-service-other/{port-other}+{protocol} <ddos_dst_zone>`

.. _404_web-gui_protection_port_zone-service-list:

web-gui_protection_port_zone-service-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **pbe**

        **Description** Peak Bandwidth Expected

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **port-num**

        **Description** Port Number

        **Type:** number

        **Range:** 1-65535

    **protocol**

        **Description** 'dns-tcp': DNS-TCP Port; 'dns-udp': DNS-UDP Port; 'http': HTTP Port; 'tcp': TCP Port; 'udp': UDP Port; 'ssl-l4': SSL-L4 Port; 

        **Type:** string

        **Supported Values:** dns-tcp, dns-udp, http, tcp, udp, ssl-l4

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_web-gui_protection_port_zone-service-other-list:

web-gui_protection_port_zone-service-other-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **pbe**

        **Description** Peak Bandwidth Expected

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **port-other**

        **Description** 'other': other; 

        **Type:** string

        **Supported Values:** other

    **protocol**

        **Description** 'tcp': TCP Port; 'udp': UDP Port; 

        **Type:** string

        **Supported Values:** tcp, udp

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_web-gui_protection_ip-proto:

web-gui_protection_ip-proto
^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **proto-name-list**

        **Type:** List

        **Reference Object:** :doc:`/axapi/v3/ddos/dst/zone/{zone-name}/web-gui/protection/ip-proto/proto-name/{protocol} <ddos_dst_zone>`

.. _404_web-gui_protection_ip-proto_proto-name-list:

web-gui_protection_ip-proto_proto-name-list
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **pbe**

        **Description** Peak Bandwidth Expected

        **Type:** string

        **Maximum Length:** 128 characters

        **Maximum Length:** 1 characters

    **protocol**

        **Description** 'icmp-v4': ip-proto icmp-v4; 'icmp-v6': ip-proto icmp-v6; 

        **Type:** string

        **Supported Values:** icmp-v4, icmp-v6

    **user-tag**

        **Description** Customized tag

        **Type:** string

        **Format:** string-rlx

        **Maximum Length:** 127 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_web-gui_learning:

web-gui_learning
^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **duration**

        **Description** '1minute': 1 minute; '6hour': 6 hours; '12hour': 12 hours; '24hour': 24 hours; '7day': 7 days; 

        **Type:** string

        **Supported Values:** 1minute, 6hour, 12hour, 24hour, 7day

        **Default:** 6hour

    **starting-time**

        **Description** Configure learning starting time

        **Type:** string

        **Maximum Length:** 13 characters

        **Maximum Length:** 1 characters

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _404_ipv6:

ipv6
^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **expand-ipv6-subnet**

        **Description** Expand this subnet to individual IPv6 address

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **expand-ipv6-subnet-mode**

        **Description** 'default': Default learning mechanism (Default: Dynamic); 'dynamic': Dynamic learning; 'static': Static learning; 

        **Type:** string

        **Supported Values:** default, dynamic, static

        **Default:** default

    **ip6-addr**

        **Description** Specify IPv6 address

        **Type:** string

        **Format:** ipv6-address

    **subnet-ipv6-addr**

        **Description** IPV6 Subnet

        **Type:** string

        **Format:** ipv6-address-plen

.. _404_enable-top-k:

enable-top-k
^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **topk-num-records**

        **Description** Maximum number of records to show in topk

        **Type:** number

        **Range:** 1-100

        **Default:** 20

    **topk-sort-key**

        **Description** 'avg': window average; 'max-peak': max peak; 

        **Type:** string

        **Supported Values:** avg, max-peak

        **Default:** avg

    **topk-type**

        **Description** 'destination': Topk destination IP; 

        **Type:** string

        **Supported Values:** destination

.. _404_topk-destinations:

topk-destinations
^^^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**                 **Value**
	=============================== ===================================================
	 **Type**                        *object*

	=============================== ===================================================

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters