.. _slb_l4: slb l4 ====== Configure L4 l4 Specification ---------------- ===================================== =============================================== ===================================== =============================================== **Type** *Configuration Resource* **Element Name** l4 **Element URI** /axapi/v3/slb/l4 **Element Attributes** l4_attributes **Statistics Data URI** /axapi/v3/slb/l4/stats **Operational Data URI** /axapi/v3/slb/l4/oper **Schema** :download:`l4 schema ` ===================================== =============================================== **Operations Allowed:** .. raw:: html .. raw:: html .. raw:: html .. raw:: html .. raw:: html .. raw:: html .. raw:: html .. raw:: html
OperationMethodURIPayload
Create Object .. raw:: html POST .. raw:: html /axapi/v3/slb/l4 .. raw:: html :ref:`1684_l4_attributes` .. raw:: html
Get Object .. raw:: html GET .. raw:: html /axapi/v3/slb/l4 .. raw:: html :ref:`1684_l4_attributes` .. raw:: html
Modify Object .. raw:: html POST .. raw:: html /axapi/v3/slb/l4 .. raw:: html :ref:`1684_l4_attributes` .. raw:: html
Replace Object .. raw:: html PUT .. raw:: html /axapi/v3/slb/l4 .. raw:: html :ref:`1684_l4_attributes` .. raw:: html
Delete Object .. raw:: html DELETE .. raw:: html /axapi/v3/slb/l4 .. raw:: html :ref:`1684_l4_attributes` .. raw:: html
.. _1684_l4_attributes: l4 attributes ------------- **sampling-enable** **Type:** List **uuid** **Description** uuid of the object **Type:** string **Maximum Length:** 64 characters **Maximum Length:** 1 characters .. _1684_sampling-enable: sampling-enable ^^^^^^^^^^^^^^^ =============================== =================================================== **Specification** =============================== =================================================== **Type** *list* **Block object keys** =============================== =================================================== **counters1** **Description** 'all': all; 'intcp': TCP received; 'synreceived': TCP SYN received; 'tcp_fwd_last_ack': L4 rcv fwd last ACK; 'tcp_rev_last_ack': L4 rcv rev last ACK; 'tcp_rev_fin': L4 rcv rev FIN; 'tcp_fwd_fin': L4 rcv fwd FIN; 'tcp_fwd_ackfin': L4 rcv fwd FIN|ACK; 'inudp': UDP received; 'syncookiessent': TCP SYN cookie snt; 'syncookiessent_ts': TCP SYN cookie snt ts; 'syncookiessentfailed': TCP SYN cookie snt fail; 'outrst': TCP out RST; 'outrst_nosyn': TCP out RST no SYN; 'outrst_broker': TCP out RST L4 proxy; 'outrst_ack_attack': TCP out RST ACK attack; 'outrst_aflex': TCP out RST aFleX; 'outrst_stale_sess': TCP out RST stale sess; 'syn_stale_sess': SYN stale sess drop; 'outrst_tcpproxy': TCP out RST TCP proxy; 'svrselfail': Server sel failure; 'noroute': IP out noroute; 'snat_fail': Source NAT failure; 'snat_no_fwd_route': Source NAT no fwd route; 'snat_no_rev_route': Source NAT no rev route; 'snat_icmp_error_process': Source NAT ICMP Process; 'snat_icmp_no_match': Source NAT ICMP No Match; 'smart_nat_id_mismatch': Auto NAT id mismatch; 'syncookiescheckfailed': TCP SYN cookie failed; 'novport_drop': NAT no session drops; 'no_vport_drop': vport not matching drops; 'nosyn_drop': No SYN pkt drops; 'nosyn_drop_fin': No SYN pkt drops - FIN; 'nosyn_drop_rst': No SYN pkt drops - RST; 'nosyn_drop_ack': No SYN pkt drops - ACK; 'connlimit_drop': Conn Limit drops; 'connlimit_reset': Conn Limit resets; 'conn_rate_limit_drop': Conn rate limit drops; 'conn_rate_limit_reset': Conn rate limit resets; 'proxy_nosock_drop': Proxy no sock drops; 'drop_aflex': aFleX drops; 'sess_aged_out': Session aged out; 'tcp_sess_aged_out': TCP Session aged out; 'udp_sess_aged_out': UDP Session aged out; 'other_sess_aged_out': Other Session aged out; 'tcp_no_slb': TCP no SLB; 'udp_no_slb': UDP no SLB; 'throttle_syn': SYN Throttle; 'drop_gslb': Drop GSLB; 'inband_hm_retry': Inband HM retry; 'inband_hm_reassign': Inband HM reassign; 'auto_reassign': Auto-reselect server; 'fast_aging_set': Fast aging set; 'fast_aging_reset': Fast aging reset; 'dns_policy_drop': DNS Policy Drop; 'tcp_invalid_drop': TCP invalid drop; 'anomaly_out_seq': Anomaly out of sequence; 'anomaly_zero_win': Anomaly zero window; 'anomaly_bad_content': Anomaly bad content; 'anomaly_pbslb_drop': Anomaly pbslb drop; 'no_resourse_drop': No resource drop; 'reset_unknown_conn': Reset unknown conn; 'reset_l7_on_failover': RST L7 on failover; 'ignore_msl': ignore msl; 'l2_dsr': L2 DSR received; 'l3_dsr': L3 DSR received; 'port_preserve_attempt': NAT Port Preserve Try; 'port_preserve_succ': NAT Port Preserve Succ; 'tcpsyndata_drop': TCP SYN With Data Drop; 'tcpotherflags_drop': TCP SYN Other Flags Drop; 'bw_rate_limit_exceed': BW-Limit Exceed drop; 'bw_watermark_drop': BW-Watermark drop; 'l4_cps_exceed': L4 CPS exceed drop; 'nat_cps_exceed': NAT CPS exceed drop; 'l7_cps_exceed': L7 CPS exceed drop; 'ssl_cps_exceed': SSL CPS exceed drop; 'ssl_tpt_exceed': SSL TPT exceed drop; 'ssl_watermark_drop': SSL TPT-Watermark drop; 'concurrent_conn_exceed': L3V Conn Limit Drop; 'svr_syn_handshake_fail': L4 server handshake fail; 'stateless_conn_timeout': L4 stateless Conn TO; 'tcp_ax_rexmit_syn': L4 AX re-xmit SYN; 'tcp_syn_rcv_ack': L4 rcv ACK on SYN; 'tcp_syn_rcv_rst': L4 rcv RST on SYN; 'tcp_sess_noest_aged_out': TCP no-Est Sess aged out; 'tcp_sess_noest_csyn_rcv_aged_out': no-Est CSYN rcv aged out; 'tcp_sess_noest_ssyn_xmit_aged_out': no-Est SSYN snt aged out; 'tcp_rexmit_syn': L4 rcv rexmit SYN; 'tcp_rexmit_syn_delq': L4 rcv rexmit SYN (delq); 'tcp_rexmit_synack': L4 rcv rexmit SYN|ACK; 'tcp_rexmit_synack_delq': L4 rcv rexmit SYN|ACK DQ; 'tcp_fwd_fin_dup': L4 rcv fwd FIN dup; 'tcp_rev_fin_dup': L4 rcv rev FIN dup; 'tcp_rev_ackfin': L4 rcv rev FIN|ACK; 'tcp_fwd_rst': L4 rcv fwd RST; 'tcp_rev_rst': L4 rcv rev RST; 'udp_req_oneplus_no_resp': L4 UDP reqs no rsp; 'udp_req_one_oneplus_resp': L4 UDP req rsps; 'udp_req_resp_notmatch': L4 UDP req/rsp not match; 'udp_req_more_resp': L4 UDP req greater than rsps; 'udp_resp_more_req': L4 UDP rsps greater than reqs; 'udp_req_oneplus': L4 UDP reqs; 'udp_resp_oneplus': L4 UDP rsps; 'out_seq_ack_drop': Out of sequence ACK drop; 'tcp_est': L4 TCP Established; 'synattack': L4 SYN attack; 'syn_rate': TCP SYN rate per sec; 'syncookie_buff_drop': TCP SYN cookie buff drop; 'syncookie_buff_queue': TCP SYN cookie buff queue; 'skip_insert_client_ip': Skip Insert-client-ip; 'synreceived_hw': TCP SYN (HW SYN cookie); 'dns_id_switch': DNS query id switch; 'server_down_del': Server Down Del switch; 'dnssec_switch': DNSSEC SG switch; 'rate_drop_reset_unkn': Rate Drop reset; 'tcp_connections_closed': TCP Connections Closed; 'gtp_c_invalid_port': Invalid Packet Received on GTP VIP; 'gtp_c_invalid_header': Invalid Header Received on GTP VIP; 'gtp_c_invalid_message': Non Create Session/PDP Context Request/Response Received on GTP VIP; 'reselect_svrselfail': Server reselect failure; 'snat_port_overload_fail': Snat port overload fail; 'snat_force_preserve_alloc': Snat port preserve allocated; 'snat_force_preserve_free': Snat port preserve freed; 'slb_gtp_proxy_pkt_rcv_rr': SLB GTP proxy packet received on RR; 'slb_gtp_proxy_smp_match': SLB GTP proxy helper session found; 'slb_gtp_proxy_smp_no_match': SLB GTP proxy helper session not found; 'slb_gtp_proxy_c_process_local_rr': SLB GTP proxy messageprocessed locally on RR; 'slb_gtp_proxy_smp_creation_failed': SLB GTP proxy helper session creation failed; 'slb_gtp_proxy_smp_created': SLB GTP proxy helper session created; 'slb_gtp_proxy_smp_free_not_found': SLB GTP proxy session helper not found during cleanup; 'slb_gtp_proxy_smp_freed': SLB GTP proxy session helper freed; 'slb_gtp_proxy_retx_requests': SLB GTP proxy retx requests; **Type:** string **Supported Values:** all, intcp, synreceived, tcp_fwd_last_ack, tcp_rev_last_ack, tcp_rev_fin, tcp_fwd_fin, tcp_fwd_ackfin, inudp, syncookiessent, syncookiessent_ts, syncookiessentfailed, outrst, outrst_nosyn, outrst_broker, outrst_ack_attack, outrst_aflex, outrst_stale_sess, syn_stale_sess, outrst_tcpproxy, svrselfail, noroute, snat_fail, snat_no_fwd_route, snat_no_rev_route, snat_icmp_error_process, snat_icmp_no_match, smart_nat_id_mismatch, syncookiescheckfailed, novport_drop, no_vport_drop, nosyn_drop, nosyn_drop_fin, nosyn_drop_rst, nosyn_drop_ack, connlimit_drop, connlimit_reset, conn_rate_limit_drop, conn_rate_limit_reset, proxy_nosock_drop, drop_aflex, sess_aged_out, tcp_sess_aged_out, udp_sess_aged_out, other_sess_aged_out, tcp_no_slb, udp_no_slb, throttle_syn, drop_gslb, inband_hm_retry, inband_hm_reassign, auto_reassign, fast_aging_set, fast_aging_reset, dns_policy_drop, tcp_invalid_drop, anomaly_out_seq, anomaly_zero_win, anomaly_bad_content, anomaly_pbslb_drop, no_resourse_drop, reset_unknown_conn, reset_l7_on_failover, ignore_msl, l2_dsr, l3_dsr, port_preserve_attempt, port_preserve_succ, tcpsyndata_drop, tcpotherflags_drop, bw_rate_limit_exceed, bw_watermark_drop, l4_cps_exceed, nat_cps_exceed, l7_cps_exceed, ssl_cps_exceed, ssl_tpt_exceed, ssl_watermark_drop, concurrent_conn_exceed, svr_syn_handshake_fail, stateless_conn_timeout, tcp_ax_rexmit_syn, tcp_syn_rcv_ack, tcp_syn_rcv_rst, tcp_sess_noest_aged_out, tcp_sess_noest_csyn_rcv_aged_out, tcp_sess_noest_ssyn_xmit_aged_out, tcp_rexmit_syn, tcp_rexmit_syn_delq, tcp_rexmit_synack, tcp_rexmit_synack_delq, tcp_fwd_fin_dup, tcp_rev_fin_dup, tcp_rev_ackfin, tcp_fwd_rst, tcp_rev_rst, udp_req_oneplus_no_resp, udp_req_one_oneplus_resp, udp_req_resp_notmatch, udp_req_more_resp, udp_resp_more_req, udp_req_oneplus, udp_resp_oneplus, out_seq_ack_drop, tcp_est, synattack, syn_rate, syncookie_buff_drop, syncookie_buff_queue, skip_insert_client_ip, synreceived_hw, dns_id_switch, server_down_del, dnssec_switch, rate_drop_reset_unkn, tcp_connections_closed, gtp_c_invalid_port, gtp_c_invalid_header, gtp_c_invalid_message, reselect_svrselfail, snat_port_overload_fail, snat_force_preserve_alloc, snat_force_preserve_free, slb_gtp_proxy_pkt_rcv_rr, slb_gtp_proxy_smp_match, slb_gtp_proxy_smp_no_match, slb_gtp_proxy_c_process_local_rr, slb_gtp_proxy_smp_creation_failed, slb_gtp_proxy_smp_created, slb_gtp_proxy_smp_free_not_found, slb_gtp_proxy_smp_freed, slb_gtp_proxy_retx_requests .. _1684_stats_data: stats data ---------- .. list-table:: :widths: 10 20 30 80 :header-rows: 2 :stub-columns: 1 * - - Counter - Size - Description * - - - - * - - conn_rate_limit_drop - 8 - Conn rate limit drops * - - outrst_stale_sess - 8 - TCP out RST stale sess * - - connlimit_reset - 8 - Conn Limit resets * - - snat_port_overload_fail - 8 - Snat port overload fail * - - tcp_sess_aged_out - 8 - TCP Session aged out * - - slb_gtp_proxy_smp_created - 8 - SLB GTP proxy helper session created * - - bw_rate_limit_exceed - 8 - BW-Limit Exceed drop * - - no_vport_drop - 8 - vport not matching drops * - - slb_gtp_proxy_smp_freed - 8 - SLB GTP proxy session helper freed * - - snat_icmp_error_process - 8 - Source NAT ICMP Process * - - port_preserve_attempt - 8 - NAT Port Preserve Try * - - anomaly_pbslb_drop - 8 - Anomaly pbslb drop * - - proxy_nosock_drop - 8 - Proxy no sock drops * - - svr_syn_handshake_fail - 8 - L4 server handshake fail * - - snat_icmp_no_match - 8 - Source NAT ICMP No Match * - - drop_gslb - 8 - Drop GSLB * - - outrst_aflex - 8 - TCP out RST aFleX * - - anomaly_zero_win - 8 - Anomaly zero window * - - concurrent_conn_exceed - 8 - L3V Conn Limit Drop * - - slb_gtp_proxy_retx_requests - 8 - SLB GTP proxy retx requests * - - slb_gtp_proxy_smp_free_not_found - 8 - SLB GTP proxy session helper not found during cleanup * - - reset_l7_on_failover - 8 - RST L7 on failover * - - nosyn_drop_rst - 8 - No SYN pkt drops - RST * - - anomaly_bad_content - 8 - Anomaly bad content * - - ignore_msl - 8 - ignore msl * - - tcpsyndata_drop - 8 - TCP SYN With Data Drop * - - nosyn_drop_fin - 8 - No SYN pkt drops - FIN * - - anomaly_out_seq - 8 - Anomaly out of sequence * - - tcp_rev_ackfin - 8 - L4 rcv rev FIN|ACK * - - tcp_rev_fin - 8 - L4 rcv rev FIN * - - conn_rate_limit_reset - 8 - Conn rate limit resets * - - out_seq_ack_drop - 8 - Out of sequence ACK drop * - - slb_gtp_proxy_smp_creation_failed - 8 - SLB GTP proxy helper session creation failed * - - bw_watermark_drop - 8 - BW-Watermark drop * - - sess_aged_out - 8 - Session aged out * - - tcp_invalid_drop - 8 - TCP invalid drop * - - syn_stale_sess - 8 - SYN stale sess drop * - - slb_gtp_proxy_c_process_local_rr - 8 - SLB GTP proxy messageprocessed locally on RR * - - syncookie_buff_drop - 8 - TCP SYN cookie buff drop * - - inudp - 8 - UDP received * - - tcpotherflags_drop - 8 - TCP SYN Other Flags Drop * - - udp_sess_aged_out - 8 - UDP Session aged out * - - auto_reassign - 8 - Auto-reselect server * - - dns_id_switch - 8 - DNS query id switch * - - fast_aging_set - 8 - Fast aging set * - - outrst_ack_attack - 8 - TCP out RST ACK attack * - - connlimit_drop - 8 - Conn Limit drops * - - tcp_connections_closed - 8 - TCP Connections Closed * - - udp_req_one_oneplus_resp - 8 - L4 UDP req rsps * - - tcp_syn_rcv_rst - 8 - L4 rcv RST on SYN * - - ssl_cps_exceed - 8 - SSL CPS exceed drop * - - syncookiessentfailed - 8 - TCP SYN cookie snt fail * - - ssl_tpt_exceed - 8 - SSL TPT exceed drop * - - smart_nat_id_mismatch - 8 - Auto NAT id mismatch * - - gtp_c_invalid_port - 8 - Invalid Packet Received on GTP VIP * - - tcp_fwd_ackfin - 8 - L4 rcv fwd FIN|ACK * - - ssl_watermark_drop - 8 - SSL TPT-Watermark drop * - - tcp_rexmit_synack_delq - 8 - L4 rcv rexmit SYN|ACK DQ * - - tcp_fwd_fin - 8 - L4 rcv fwd FIN * - - tcp_fwd_fin_dup - 8 - L4 rcv fwd FIN dup * - - nosyn_drop_ack - 8 - No SYN pkt drops - ACK * - - tcp_rexmit_synack - 8 - L4 rcv rexmit SYN|ACK * - - skip_insert_client_ip - 8 - Skip Insert-client-ip * - - server_down_del - 8 - Server Down Del switch * - - l3_dsr - 8 - L3 DSR received * - - slb_gtp_proxy_smp_no_match - 8 - SLB GTP proxy helper session not found * - - gtp_c_invalid_header - 8 - Invalid Header Received on GTP VIP * - - snat_force_preserve_alloc - 8 - Snat port preserve allocated * - - tcp_sess_noest_aged_out - 8 - TCP no-Est Sess aged out * - - syn_rate - 8 - TCP SYN rate per sec * - - l7_cps_exceed - 8 - L7 CPS exceed drop * - - synattack - 8 - L4 SYN attack * - - drop_aflex - 8 - aFleX drops * - - tcp_est - 8 - L4 TCP Established * - - slb_gtp_proxy_smp_match - 8 - SLB GTP proxy helper session found * - - svrselfail - 8 - Server sel failure * - - outrst_broker - 8 - TCP out RST L4 proxy * - - tcp_sess_noest_csyn_rcv_aged_out - 8 - no-Est CSYN rcv aged out * - - novport_drop - 8 - NAT no session drops * - - udp_req_oneplus_no_resp - 8 - L4 UDP reqs no rsp * - - fast_aging_reset - 8 - Fast aging reset * - - syncookiessent - 8 - TCP SYN cookie snt * - - tcp_rexmit_syn - 8 - L4 rcv rexmit SYN * - - outrst - 8 - TCP out RST * - - tcp_ax_rexmit_syn - 8 - L4 AX re-xmit SYN * - - tcp_sess_noest_ssyn_xmit_aged_out - 8 - no-Est SSYN snt aged out * - - syncookie_buff_queue - 8 - TCP SYN cookie buff queue * - - dns_policy_drop - 8 - DNS Policy Drop * - - throttle_syn - 8 - SYN Throttle * - - nosyn_drop - 8 - No SYN pkt drops * - - gtp_c_invalid_message - 8 - Non Create Session/PDP Context Request/Response Received on GTP VIP * - - l4_cps_exceed - 8 - L4 CPS exceed drop * - - tcp_syn_rcv_ack - 8 - L4 rcv ACK on SYN * - - snat_fail - 8 - Source NAT failure * - - no_resourse_drop - 8 - No resource drop * - - inband_hm_retry - 8 - Inband HM retry * - - synreceived - 8 - TCP SYN received * - - reset_unknown_conn - 8 - Reset unknown conn * - - l2_dsr - 8 - L2 DSR received * - - outrst_nosyn - 8 - TCP out RST no SYN * - - udp_req_more_resp - 8 - L4 UDP req greater than rsps * - - rate_drop_reset_unkn - 8 - Rate Drop reset * - - other_sess_aged_out - 8 - Other Session aged out * - - snat_no_rev_route - 8 - Source NAT no rev route * - - tcp_fwd_rst - 8 - L4 rcv fwd RST * - - snat_force_preserve_free - 8 - Snat port preserve freed * - - tcp_no_slb - 8 - TCP no SLB * - - nat_cps_exceed - 8 - NAT CPS exceed drop * - - udp_resp_oneplus - 8 - L4 UDP rsps * - - outrst_tcpproxy - 8 - TCP out RST TCP proxy * - - tcp_rev_fin_dup - 8 - L4 rcv rev FIN dup * - - udp_req_resp_notmatch - 8 - L4 UDP req/rsp not match * - - udp_no_slb - 8 - UDP no SLB * - - port_preserve_succ - 8 - NAT Port Preserve Succ * - - udp_resp_more_req - 8 - L4 UDP rsps greater than reqs * - - intcp - 8 - TCP received * - - tcp_fwd_last_ack - 8 - L4 rcv fwd last ACK * - - syncookiescheckfailed - 8 - TCP SYN cookie failed * - - tcp_rexmit_syn_delq - 8 - L4 rcv rexmit SYN (delq) * - - reselect_svrselfail - 8 - Server reselect failure * - - stateless_conn_timeout - 8 - L4 stateless Conn TO * - - tcp_rev_last_ack - 8 - L4 rcv rev last ACK * - - tcp_rev_rst - 8 - L4 rcv rev RST * - - noroute - 8 - IP out noroute * - - udp_req_oneplus - 8 - L4 UDP reqs * - - dnssec_switch - 8 - DNSSEC SG switch * - - syncookiessent_ts - 8 - TCP SYN cookie snt ts * - - snat_no_fwd_route - 8 - Source NAT no fwd route * - - synreceived_hw - 8 - TCP SYN (HW SYN cookie) * - - inband_hm_reassign - 8 - Inband HM reassign .. _1684_oper_data: operational data ---------------- .. list-table:: :widths: 10 20 30 80 :header-rows: 2 :stub-columns: 1 * - - Counter - Size - Description * - - - - * - - l4-cpu-list - - l4-cpu-list * - - cpu-count - number - cpu-count