slb l4¶
Configure L4
l4 Specification¶
Type Configuration Resource Element Name l4 Element URI /axapi/v3/slb/l4 Element Attributes l4_attributes Statistics Data URI /axapi/v3/slb/l4/stats Operational Data URI /axapi/v3/slb/l4/oper Schema l4 schemaOperations Allowed:
| Operation | Method | URI | Payload | |
|---|---|---|---|---|
Create Object | POST | /axapi/v3/slb/l4 | ||
Get Object | GET | /axapi/v3/slb/l4 | ||
Modify Object | POST | /axapi/v3/slb/l4 | ||
Replace Object | PUT | /axapi/v3/slb/l4 | ||
Delete Object | DELETE | /axapi/v3/slb/l4 |
l4 attributes¶
sampling-enable
Type: Listuuid
Description uuid of the object
Type: string
Maximum Length: 64 characters
Maximum Length: 1 characters
sampling-enable¶
Specification Type list Block object keys counters1
Description ‘all’: all; ‘intcp’: TCP received; ‘synreceived’: TCP SYN received; ‘tcp_fwd_last_ack’: L4 rcv fwd last ACK; ‘tcp_rev_last_ack’: L4 rcv rev last ACK; ‘tcp_rev_fin’: L4 rcv rev FIN; ‘tcp_fwd_fin’: L4 rcv fwd FIN; ‘tcp_fwd_ackfin’: L4 rcv fwd FIN|ACK; ‘inudp’: UDP received; ‘syncookiessent’: TCP SYN cookie snt; ‘syncookiessent_ts’: TCP SYN cookie snt ts; ‘syncookiessentfailed’: TCP SYN cookie snt fail; ‘outrst’: TCP out RST; ‘outrst_nosyn’: TCP out RST no SYN; ‘outrst_broker’: TCP out RST L4 proxy; ‘outrst_ack_attack’: TCP out RST ACK attack; ‘outrst_aflex’: TCP out RST aFleX; ‘outrst_stale_sess’: TCP out RST stale sess; ‘syn_stale_sess’: SYN stale sess drop; ‘outrst_tcpproxy’: TCP out RST TCP proxy; ‘svrselfail’: Server sel failure; ‘noroute’: IP out noroute; ‘snat_fail’: Source NAT failure; ‘snat_no_fwd_route’: Source NAT no fwd route; ‘snat_no_rev_route’: Source NAT no rev route; ‘snat_icmp_error_process’: Source NAT ICMP Process; ‘snat_icmp_no_match’: Source NAT ICMP No Match; ‘smart_nat_id_mismatch’: Auto NAT id mismatch; ‘syncookiescheckfailed’: TCP SYN cookie failed; ‘novport_drop’: NAT no session drops; ‘no_vport_drop’: vport not matching drops; ‘nosyn_drop’: No SYN pkt drops; ‘nosyn_drop_fin’: No SYN pkt drops - FIN; ‘nosyn_drop_rst’: No SYN pkt drops - RST; ‘nosyn_drop_ack’: No SYN pkt drops - ACK; ‘connlimit_drop’: Conn Limit drops; ‘connlimit_reset’: Conn Limit resets; ‘conn_rate_limit_drop’: Conn rate limit drops; ‘conn_rate_limit_reset’: Conn rate limit resets; ‘proxy_nosock_drop’: Proxy no sock drops; ‘drop_aflex’: aFleX drops; ‘sess_aged_out’: Session aged out; ‘tcp_sess_aged_out’: TCP Session aged out; ‘udp_sess_aged_out’: UDP Session aged out; ‘other_sess_aged_out’: Other Session aged out; ‘tcp_no_slb’: TCP no SLB; ‘udp_no_slb’: UDP no SLB; ‘throttle_syn’: SYN Throttle; ‘drop_gslb’: Drop GSLB; ‘inband_hm_retry’: Inband HM retry; ‘inband_hm_reassign’: Inband HM reassign; ‘auto_reassign’: Auto-reselect server; ‘fast_aging_set’: Fast aging set; ‘fast_aging_reset’: Fast aging reset; ‘dns_policy_drop’: DNS Policy Drop; ‘tcp_invalid_drop’: TCP invalid drop; ‘anomaly_out_seq’: Anomaly out of sequence; ‘anomaly_zero_win’: Anomaly zero window; ‘anomaly_bad_content’: Anomaly bad content; ‘anomaly_pbslb_drop’: Anomaly pbslb drop; ‘no_resourse_drop’: No resource drop; ‘reset_unknown_conn’: Reset unknown conn; ‘reset_l7_on_failover’: RST L7 on failover; ‘ignore_msl’: ignore msl; ‘l2_dsr’: L2 DSR received; ‘l3_dsr’: L3 DSR received; ‘port_preserve_attempt’: NAT Port Preserve Try; ‘port_preserve_succ’: NAT Port Preserve Succ; ‘tcpsyndata_drop’: TCP SYN With Data Drop; ‘tcpotherflags_drop’: TCP SYN Other Flags Drop; ‘bw_rate_limit_exceed’: BW-Limit Exceed drop; ‘bw_watermark_drop’: BW-Watermark drop; ‘l4_cps_exceed’: L4 CPS exceed drop; ‘nat_cps_exceed’: NAT CPS exceed drop; ‘l7_cps_exceed’: L7 CPS exceed drop; ‘ssl_cps_exceed’: SSL CPS exceed drop; ‘ssl_tpt_exceed’: SSL TPT exceed drop; ‘ssl_watermark_drop’: SSL TPT-Watermark drop; ‘concurrent_conn_exceed’: L3V Conn Limit Drop; ‘svr_syn_handshake_fail’: L4 server handshake fail; ‘stateless_conn_timeout’: L4 stateless Conn TO; ‘tcp_ax_rexmit_syn’: L4 AX re-xmit SYN; ‘tcp_syn_rcv_ack’: L4 rcv ACK on SYN; ‘tcp_syn_rcv_rst’: L4 rcv RST on SYN; ‘tcp_sess_noest_aged_out’: TCP no-Est Sess aged out; ‘tcp_sess_noest_csyn_rcv_aged_out’: no-Est CSYN rcv aged out; ‘tcp_sess_noest_ssyn_xmit_aged_out’: no-Est SSYN snt aged out; ‘tcp_rexmit_syn’: L4 rcv rexmit SYN; ‘tcp_rexmit_syn_delq’: L4 rcv rexmit SYN (delq); ‘tcp_rexmit_synack’: L4 rcv rexmit SYN|ACK; ‘tcp_rexmit_synack_delq’: L4 rcv rexmit SYN|ACK DQ; ‘tcp_fwd_fin_dup’: L4 rcv fwd FIN dup; ‘tcp_rev_fin_dup’: L4 rcv rev FIN dup; ‘tcp_rev_ackfin’: L4 rcv rev FIN|ACK; ‘tcp_fwd_rst’: L4 rcv fwd RST; ‘tcp_rev_rst’: L4 rcv rev RST; ‘udp_req_oneplus_no_resp’: L4 UDP reqs no rsp; ‘udp_req_one_oneplus_resp’: L4 UDP req rsps; ‘udp_req_resp_notmatch’: L4 UDP req/rsp not match; ‘udp_req_more_resp’: L4 UDP req greater than rsps; ‘udp_resp_more_req’: L4 UDP rsps greater than reqs; ‘udp_req_oneplus’: L4 UDP reqs; ‘udp_resp_oneplus’: L4 UDP rsps; ‘out_seq_ack_drop’: Out of sequence ACK drop; ‘tcp_est’: L4 TCP Established; ‘synattack’: L4 SYN attack; ‘syn_rate’: TCP SYN rate per sec; ‘syncookie_buff_drop’: TCP SYN cookie buff drop; ‘syncookie_buff_queue’: TCP SYN cookie buff queue; ‘skip_insert_client_ip’: Skip Insert-client-ip; ‘synreceived_hw’: TCP SYN (HW SYN cookie); ‘dns_id_switch’: DNS query id switch; ‘server_down_del’: Server Down Del switch; ‘dnssec_switch’: DNSSEC SG switch; ‘rate_drop_reset_unkn’: Rate Drop reset; ‘tcp_connections_closed’: TCP Connections Closed; ‘gtp_c_invalid_port’: Invalid Packet Received on GTP VIP; ‘gtp_c_invalid_header’: Invalid Header Received on GTP VIP; ‘gtp_c_invalid_message’: Non Create Session/PDP Context Request/Response Received on GTP VIP; ‘reselect_svrselfail’: Server reselect failure; ‘snat_port_overload_fail’: Snat port overload fail; ‘snat_force_preserve_alloc’: Snat port preserve allocated; ‘snat_force_preserve_free’: Snat port preserve freed; ‘slb_gtp_proxy_pkt_rcv_rr’: SLB GTP proxy packet received on RR; ‘slb_gtp_proxy_smp_match’: SLB GTP proxy helper session found; ‘slb_gtp_proxy_smp_no_match’: SLB GTP proxy helper session not found; ‘slb_gtp_proxy_c_process_local_rr’: SLB GTP proxy messageprocessed locally on RR; ‘slb_gtp_proxy_smp_creation_failed’: SLB GTP proxy helper session creation failed; ‘slb_gtp_proxy_smp_created’: SLB GTP proxy helper session created; ‘slb_gtp_proxy_smp_free_not_found’: SLB GTP proxy session helper not found during cleanup; ‘slb_gtp_proxy_smp_freed’: SLB GTP proxy session helper freed; ‘slb_gtp_proxy_retx_requests’: SLB GTP proxy retx requests;
Type: string
Supported Values: all, intcp, synreceived, tcp_fwd_last_ack, tcp_rev_last_ack, tcp_rev_fin, tcp_fwd_fin, tcp_fwd_ackfin, inudp, syncookiessent, syncookiessent_ts, syncookiessentfailed, outrst, outrst_nosyn, outrst_broker, outrst_ack_attack, outrst_aflex, outrst_stale_sess, syn_stale_sess, outrst_tcpproxy, svrselfail, noroute, snat_fail, snat_no_fwd_route, snat_no_rev_route, snat_icmp_error_process, snat_icmp_no_match, smart_nat_id_mismatch, syncookiescheckfailed, novport_drop, no_vport_drop, nosyn_drop, nosyn_drop_fin, nosyn_drop_rst, nosyn_drop_ack, connlimit_drop, connlimit_reset, conn_rate_limit_drop, conn_rate_limit_reset, proxy_nosock_drop, drop_aflex, sess_aged_out, tcp_sess_aged_out, udp_sess_aged_out, other_sess_aged_out, tcp_no_slb, udp_no_slb, throttle_syn, drop_gslb, inband_hm_retry, inband_hm_reassign, auto_reassign, fast_aging_set, fast_aging_reset, dns_policy_drop, tcp_invalid_drop, anomaly_out_seq, anomaly_zero_win, anomaly_bad_content, anomaly_pbslb_drop, no_resourse_drop, reset_unknown_conn, reset_l7_on_failover, ignore_msl, l2_dsr, l3_dsr, port_preserve_attempt, port_preserve_succ, tcpsyndata_drop, tcpotherflags_drop, bw_rate_limit_exceed, bw_watermark_drop, l4_cps_exceed, nat_cps_exceed, l7_cps_exceed, ssl_cps_exceed, ssl_tpt_exceed, ssl_watermark_drop, concurrent_conn_exceed, svr_syn_handshake_fail, stateless_conn_timeout, tcp_ax_rexmit_syn, tcp_syn_rcv_ack, tcp_syn_rcv_rst, tcp_sess_noest_aged_out, tcp_sess_noest_csyn_rcv_aged_out, tcp_sess_noest_ssyn_xmit_aged_out, tcp_rexmit_syn, tcp_rexmit_syn_delq, tcp_rexmit_synack, tcp_rexmit_synack_delq, tcp_fwd_fin_dup, tcp_rev_fin_dup, tcp_rev_ackfin, tcp_fwd_rst, tcp_rev_rst, udp_req_oneplus_no_resp, udp_req_one_oneplus_resp, udp_req_resp_notmatch, udp_req_more_resp, udp_resp_more_req, udp_req_oneplus, udp_resp_oneplus, out_seq_ack_drop, tcp_est, synattack, syn_rate, syncookie_buff_drop, syncookie_buff_queue, skip_insert_client_ip, synreceived_hw, dns_id_switch, server_down_del, dnssec_switch, rate_drop_reset_unkn, tcp_connections_closed, gtp_c_invalid_port, gtp_c_invalid_header, gtp_c_invalid_message, reselect_svrselfail, snat_port_overload_fail, snat_force_preserve_alloc, snat_force_preserve_free, slb_gtp_proxy_pkt_rcv_rr, slb_gtp_proxy_smp_match, slb_gtp_proxy_smp_no_match, slb_gtp_proxy_c_process_local_rr, slb_gtp_proxy_smp_creation_failed, slb_gtp_proxy_smp_created, slb_gtp_proxy_smp_free_not_found, slb_gtp_proxy_smp_freed, slb_gtp_proxy_retx_requests
stats data¶
| Counter | Size | Description | |
|---|---|---|---|
| conn_rate_limit_drop | 8 | Conn rate limit drops | |
| outrst_stale_sess | 8 | TCP out RST stale sess | |
| connlimit_reset | 8 | Conn Limit resets | |
| snat_port_overload_fail | 8 | Snat port overload fail | |
| tcp_sess_aged_out | 8 | TCP Session aged out | |
| slb_gtp_proxy_smp_created | 8 | SLB GTP proxy helper session created | |
| bw_rate_limit_exceed | 8 | BW-Limit Exceed drop | |
| no_vport_drop | 8 | vport not matching drops | |
| slb_gtp_proxy_smp_freed | 8 | SLB GTP proxy session helper freed | |
| snat_icmp_error_process | 8 | Source NAT ICMP Process | |
| port_preserve_attempt | 8 | NAT Port Preserve Try | |
| anomaly_pbslb_drop | 8 | Anomaly pbslb drop | |
| proxy_nosock_drop | 8 | Proxy no sock drops | |
| svr_syn_handshake_fail | 8 | L4 server handshake fail | |
| snat_icmp_no_match | 8 | Source NAT ICMP No Match | |
| drop_gslb | 8 | Drop GSLB | |
| outrst_aflex | 8 | TCP out RST aFleX | |
| anomaly_zero_win | 8 | Anomaly zero window | |
| concurrent_conn_exceed | 8 | L3V Conn Limit Drop | |
| slb_gtp_proxy_retx_requests | 8 | SLB GTP proxy retx requests | |
| slb_gtp_proxy_smp_free_not_found | 8 | SLB GTP proxy session helper not found during cleanup | |
| reset_l7_on_failover | 8 | RST L7 on failover | |
| nosyn_drop_rst | 8 | No SYN pkt drops - RST | |
| anomaly_bad_content | 8 | Anomaly bad content | |
| ignore_msl | 8 | ignore msl | |
| tcpsyndata_drop | 8 | TCP SYN With Data Drop | |
| nosyn_drop_fin | 8 | No SYN pkt drops - FIN | |
| anomaly_out_seq | 8 | Anomaly out of sequence | |
| tcp_rev_ackfin | 8 | L4 rcv rev FIN|ACK | |
| tcp_rev_fin | 8 | L4 rcv rev FIN | |
| conn_rate_limit_reset | 8 | Conn rate limit resets | |
| out_seq_ack_drop | 8 | Out of sequence ACK drop | |
| slb_gtp_proxy_smp_creation_failed | 8 | SLB GTP proxy helper session creation failed | |
| bw_watermark_drop | 8 | BW-Watermark drop | |
| sess_aged_out | 8 | Session aged out | |
| tcp_invalid_drop | 8 | TCP invalid drop | |
| syn_stale_sess | 8 | SYN stale sess drop | |
| slb_gtp_proxy_c_process_local_rr | 8 | SLB GTP proxy messageprocessed locally on RR | |
| syncookie_buff_drop | 8 | TCP SYN cookie buff drop | |
| inudp | 8 | UDP received | |
| tcpotherflags_drop | 8 | TCP SYN Other Flags Drop | |
| udp_sess_aged_out | 8 | UDP Session aged out | |
| auto_reassign | 8 | Auto-reselect server | |
| dns_id_switch | 8 | DNS query id switch | |
| fast_aging_set | 8 | Fast aging set | |
| outrst_ack_attack | 8 | TCP out RST ACK attack | |
| connlimit_drop | 8 | Conn Limit drops | |
| tcp_connections_closed | 8 | TCP Connections Closed | |
| udp_req_one_oneplus_resp | 8 | L4 UDP req rsps | |
| tcp_syn_rcv_rst | 8 | L4 rcv RST on SYN | |
| ssl_cps_exceed | 8 | SSL CPS exceed drop | |
| syncookiessentfailed | 8 | TCP SYN cookie snt fail | |
| ssl_tpt_exceed | 8 | SSL TPT exceed drop | |
| smart_nat_id_mismatch | 8 | Auto NAT id mismatch | |
| gtp_c_invalid_port | 8 | Invalid Packet Received on GTP VIP | |
| tcp_fwd_ackfin | 8 | L4 rcv fwd FIN|ACK | |
| ssl_watermark_drop | 8 | SSL TPT-Watermark drop | |
| tcp_rexmit_synack_delq | 8 | L4 rcv rexmit SYN|ACK DQ | |
| tcp_fwd_fin | 8 | L4 rcv fwd FIN | |
| tcp_fwd_fin_dup | 8 | L4 rcv fwd FIN dup | |
| nosyn_drop_ack | 8 | No SYN pkt drops - ACK | |
| tcp_rexmit_synack | 8 | L4 rcv rexmit SYN|ACK | |
| skip_insert_client_ip | 8 | Skip Insert-client-ip | |
| server_down_del | 8 | Server Down Del switch | |
| l3_dsr | 8 | L3 DSR received | |
| slb_gtp_proxy_smp_no_match | 8 | SLB GTP proxy helper session not found | |
| gtp_c_invalid_header | 8 | Invalid Header Received on GTP VIP | |
| snat_force_preserve_alloc | 8 | Snat port preserve allocated | |
| tcp_sess_noest_aged_out | 8 | TCP no-Est Sess aged out | |
| syn_rate | 8 | TCP SYN rate per sec | |
| l7_cps_exceed | 8 | L7 CPS exceed drop | |
| synattack | 8 | L4 SYN attack | |
| drop_aflex | 8 | aFleX drops | |
| tcp_est | 8 | L4 TCP Established | |
| slb_gtp_proxy_smp_match | 8 | SLB GTP proxy helper session found | |
| svrselfail | 8 | Server sel failure | |
| outrst_broker | 8 | TCP out RST L4 proxy | |
| tcp_sess_noest_csyn_rcv_aged_out | 8 | no-Est CSYN rcv aged out | |
| novport_drop | 8 | NAT no session drops | |
| udp_req_oneplus_no_resp | 8 | L4 UDP reqs no rsp | |
| fast_aging_reset | 8 | Fast aging reset | |
| syncookiessent | 8 | TCP SYN cookie snt | |
| tcp_rexmit_syn | 8 | L4 rcv rexmit SYN | |
| outrst | 8 | TCP out RST | |
| tcp_ax_rexmit_syn | 8 | L4 AX re-xmit SYN | |
| tcp_sess_noest_ssyn_xmit_aged_out | 8 | no-Est SSYN snt aged out | |
| syncookie_buff_queue | 8 | TCP SYN cookie buff queue | |
| dns_policy_drop | 8 | DNS Policy Drop | |
| throttle_syn | 8 | SYN Throttle | |
| nosyn_drop | 8 | No SYN pkt drops | |
| gtp_c_invalid_message | 8 | Non Create Session/PDP Context Request/Response Received on GTP VIP | |
| l4_cps_exceed | 8 | L4 CPS exceed drop | |
| tcp_syn_rcv_ack | 8 | L4 rcv ACK on SYN | |
| snat_fail | 8 | Source NAT failure | |
| no_resourse_drop | 8 | No resource drop | |
| inband_hm_retry | 8 | Inband HM retry | |
| synreceived | 8 | TCP SYN received | |
| reset_unknown_conn | 8 | Reset unknown conn | |
| l2_dsr | 8 | L2 DSR received | |
| outrst_nosyn | 8 | TCP out RST no SYN | |
| udp_req_more_resp | 8 | L4 UDP req greater than rsps | |
| rate_drop_reset_unkn | 8 | Rate Drop reset | |
| other_sess_aged_out | 8 | Other Session aged out | |
| snat_no_rev_route | 8 | Source NAT no rev route | |
| tcp_fwd_rst | 8 | L4 rcv fwd RST | |
| snat_force_preserve_free | 8 | Snat port preserve freed | |
| tcp_no_slb | 8 | TCP no SLB | |
| nat_cps_exceed | 8 | NAT CPS exceed drop | |
| udp_resp_oneplus | 8 | L4 UDP rsps | |
| outrst_tcpproxy | 8 | TCP out RST TCP proxy | |
| tcp_rev_fin_dup | 8 | L4 rcv rev FIN dup | |
| udp_req_resp_notmatch | 8 | L4 UDP req/rsp not match | |
| udp_no_slb | 8 | UDP no SLB | |
| port_preserve_succ | 8 | NAT Port Preserve Succ | |
| udp_resp_more_req | 8 | L4 UDP rsps greater than reqs | |
| intcp | 8 | TCP received | |
| tcp_fwd_last_ack | 8 | L4 rcv fwd last ACK | |
| syncookiescheckfailed | 8 | TCP SYN cookie failed | |
| tcp_rexmit_syn_delq | 8 | L4 rcv rexmit SYN (delq) | |
| reselect_svrselfail | 8 | Server reselect failure | |
| stateless_conn_timeout | 8 | L4 stateless Conn TO | |
| tcp_rev_last_ack | 8 | L4 rcv rev last ACK | |
| tcp_rev_rst | 8 | L4 rcv rev RST | |
| noroute | 8 | IP out noroute | |
| udp_req_oneplus | 8 | L4 UDP reqs | |
| dnssec_switch | 8 | DNSSEC SG switch | |
| syncookiessent_ts | 8 | TCP SYN cookie snt ts | |
| snat_no_fwd_route | 8 | Source NAT no fwd route | |
| synreceived_hw | 8 | TCP SYN (HW SYN cookie) | |
| inband_hm_reassign | 8 | Inband HM reassign |
operational data¶
| Counter | Size | Description | |
|---|---|---|---|
| l4-cpu-list | l4-cpu-list | ||
| cpu-count | number | cpu-count |