ddos dst entry ip-proto¶

DDOS IP protocol configuration

ip-proto Specification¶

Parameter Value

Type Collection

Object Key(s) port-num

Collection Name ip-proto-list

Collection URI /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto

Element Name ip-proto

Element URI /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}

Element Attributes ip-proto_attributes

Partition Visibility shared

Statistics Data URI /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}/stats

Operational Data URI /axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}/oper

Schema ip-proto schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto	ip-proto attributes
Create List	POST	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto	ip-proto attributes
Get Object	GET	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}	ip-proto attributes
Get List	GET	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto	ip-proto-list
Modify Object	POST	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}	ip-proto attributes
Replace Object	PUT	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}	ip-proto attributes
Replace List	PUT	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto	ip-proto-list
Delete Object	DELETE	/axapi/v3/ddos/dst/entry/{dst-entry-name}/ip-proto/{port-num}	ip-proto attributes

ip-proto-list¶

ip-proto-list is JSON List of ip-proto attributes

ip-proto-list : [

{ ip-proto attributes },

{ ip-proto attributes },

…

]

ip-proto attributes¶

deny

Description Blacklist and Drop all incoming packets for protocol

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

esp-inspect

Description: esp-inspect is a JSON Block. Please see below for esp-inspect

Type: Object

glid

Description Global limit ID

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

Reference Object: /axapi/v3/glid

glid-exceed-action

Description: glid-exceed-action is a JSON Block. Please see below for glid-exceed-action

Type: Object

port-num

Description Protocol Number

Type: number

Range: 0-255

set-counter-base-val

Description Set T2 counter value of current context to specified value

Type: number

Range: 1-4294967295

template

Description: template is a JSON Block. Please see below for template

Type: Object

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

esp-inspect¶

Specification Value

Type object

auth-algorithm

Description ‘AUTH_NULL’: No Integrity Check Value; ‘HMAC-SHA-1-96’: 96 bit Auth Algo; ‘HMAC-SHA-256-96’: 96 bit Auth Algo; ‘HMAC-SHA-256-128’: 128 bit Auth Algo; ‘HMAC-SHA-384-192’: 192 bit Auth Algo; ‘HMAC-SHA-512-256’: 256 bit Auth Algo; ‘HMAC-MD5-96’: 96 bit Auth Algo; ‘MAC-RIPEMD-160-96’: 96 bit Auth Algo;

Type: string

Supported Values: AUTH_NULL, HMAC-SHA-1-96, HMAC-SHA-256-96, HMAC-SHA-256-128, HMAC-SHA-384-192, HMAC-SHA-512-256, HMAC-MD5-96, MAC-RIPEMD-160-96

encrypt-algorithm

Description ‘NULL’: Null Encryption Algorithm;

Type: string

Supported Values: NULL

mode

Description ‘transport’: Transport mode;

Type: string

Supported Values: transport

template¶

Specification Value

Type object

other

Description DDOS other template

Type: string

Format: string-rlx

Maximum Length: 128 characters

Maximum Length: 1 characters

glid-exceed-action¶

Specification Value

Type object

stateless-encap-action-cfg

Description: stateless-encap-action-cfg is a JSON Block. Please see below for glid-exceed-action_stateless-encap-action-cfg

Type: Object

glid-exceed-action_stateless-encap-action-cfg¶

Specification Value

Type object

encap-template

Description Apply legacy encap template for encap action

Type: string

Format: string-rlx

Maximum Length: 128 characters

Maximum Length: 1 characters

Reference Object: /axapi/v3/ddos/template/encap

stateless-encap-action

Description ‘stateless-tunnel-encap’: Encapsulate all packets; ‘stateless-tunnel-encap-scrubbed’: Encapsulate all packets and allow packets to go through other DDoS checks before sent (conn-limit exceeded packet can not be scrubbed, it will default to stateless-tunnel-encap);

Type: string

Supported Values: stateless-tunnel-encap, stateless-tunnel-encap-scrubbed