ddos dst zone detection outbound-detection¶

DDOS Outbound Detection

outbound-detection Specification¶

Parameter Value

Type Configuration Resource

Element Name outbound-detection

Element URI /axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection

Element Attributes outbound-detection_attributes

Partition Visibility shared

Operational Data URI /axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection/oper

Schema outbound-detection schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection	outbound-detection attributes
Get Object	GET	/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection	outbound-detection attributes
Modify Object	POST	/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection	outbound-detection attributes
Replace Object	PUT	/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection	outbound-detection attributes
Delete Object	DELETE	/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection	outbound-detection attributes

outbound-detection attributes¶

configuration

Description ‘configuration’: configuration;

Type: string

Supported Values: configuration

discovery-method

Description ‘asn’: Autonomous Systems number; ‘country’: Country;

Type: string

Supported Values: asn, country

discovery-record

Description Maximum number of top locations

Type: number

Range: 1-100

Default: 10

enable-top-k

Type: List

indicator-list

Type: List

Reference Object: /axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection/indicator/{type}

toggle

Description ‘enable’: Enable outbound detection; ‘disable’: Disable outbound detection;

Type: string

Supported Values: enable, disable

Default: disable

topk-source-subnet

Description: topk-source-subnet is a JSON Block. Please see below for topk-source-subnet

Type: Object

Reference Object: /axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection/topk-source-subnet

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

topk-source-subnet¶

Specification Value

Type object

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

enable-top-k¶

Specification Value

Type list

Block object keys

topk-netmask

Description Subnet mask. The value should be less than or equal to the minimum zone subnet mask + 8 (IPv6 Subnet mask)

Type: number

Range: 1-128

Default: 128

topk-num-records

Description Maximum number of records to show in topk

Type: number

Range: 1-100

Default: 20

topk-type

Description ‘source-subnet’: Topk source subnet;

Type: string

Supported Values: source-subnet

indicator-list¶

Specification Value

Type list

Block object keys

data-packet-size

Description Expected minimal data size

Type: number

Range: 1-1500

tcp-window-size

Description Expected minimal window size

Type: number

Range: 1-500

threshold-num

Description Threshold for each geo-location

Type: number

Range: 1-2147483647

threshold-str

Description Threshold for each geo-location (Non-zero floating point)

Type: string

Maximum Length: 128 characters

Maximum Length: 1 characters

type

Description ‘pkt-rate’: rate of incoming packets; ‘pkt-drop-rate’: rate of packets got dropped; ‘bit-rate’: rate of incoming bits; ‘pkt-drop-ratio’: ratio of incoming packet rate divided by the rate of dropping packets; ‘bytes-to-bytes-from-ratio’: ratio of incoming packet rate divided by the rate of outgoing packets; ‘syn-rate’: rate on incoming SYN packets; ‘fin-rate’: rate on incoming FIN packets; ‘rst-rate’: rate of incoming RST packets; ‘small-window-ack-rate’: rate of small window advertisement; ‘empty-ack-rate’: rate of incoming packets which have no payload; ‘small-payload-rate’: rate of short payload packet; ‘syn-fin-ratio’: ratio of incoming SYN packet rate divided by the rate of incoming FIN packets;

Type: string

Supported Values: pkt-rate, pkt-drop-rate, bit-rate, pkt-drop-ratio, bytes-to-bytes-from-ratio, syn-rate, fin-rate, rst-rate, small-window-ack-rate, empty-ack-rate, small-payload-rate, syn-fin-ratio

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters