{
    "id":"/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection",
    "type":"object",
    "node-type":"scalar",
    "title":"outbound-detection",
    "partition-visibility":"shared",
    "description":"DDOS Outbound Detection",
    "properties":{
        "configuration":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "description":"'configuration': configuration; ",
            "enum":[
                "configuration"
            ],
            "optional":false
        },
        "toggle":{
            "type":"string",
            "format":"enum",
            "default":"disable",
            "partition-visibility":"shared",
            "description":"'enable': Enable outbound detection; 'disable': Disable outbound detection; ",
            "enum":[
                "enable",
                "disable"
            ],
            "optional":true
        },
        "discovery-method":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "description":"'asn': Autonomous Systems number; 'country': Country; ",
            "enum":[
                "asn",
                "country"
            ],
            "optional":true
        },
        "discovery-record":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":100,
            "default":10,
            "partition-visibility":"shared",
            "description":"Maximum number of top locations",
            "optional":true
        },
        "enable-top-k":{
            "type":"array",
            "minItems":1,
            "items":{
                "type":"object"
            },
            "uniqueItems":true,
            "array":[
                {
                    "properties":{
                        "topk-type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "description":"'source-subnet': Topk source subnet; ",
                            "enum":[
                                "source-subnet"
                            ]
                        },
                        "topk-netmask":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":128,
                            "default":128,
                            "partition-visibility":"shared",
                            "description":"Subnet mask. The value should be less than or equal to the minimum zone subnet mask + 8 (IPv6 Subnet mask)"
                        },
                        "topk-num-records":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":100,
                            "default":20,
                            "partition-visibility":"shared",
                            "description":"Maximum number of records to show in topk"
                        }
                    }
                }
            ]
        },
        "uuid":{
            "type":"string",
            "format":"string",
            "minLength":1,
            "maxLength":64,
            "partition-visibility":"shared",
            "modify-not-allowed":1,
            "description":"uuid of the object",
            "optional":true
        },
        "indicator-list":{
            "type":"array",
            "minItems":1,
            "items":{
                "type":"indicator"
            },
            "uniqueItems":true,
            "$ref":"/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection/indicator/{type}",
            "array":[
                {
                    "properties":{
                        "type":{
                            "type":"string",
                            "format":"enum",
                            "partition-visibility":"shared",
                            "description":"'pkt-rate': rate of incoming packets; 'pkt-drop-rate': rate of packets got dropped; 'bit-rate': rate of incoming bits; 'pkt-drop-ratio': ratio of incoming packet rate divided by the rate of dropping packets; 'bytes-to-bytes-from-ratio': ratio of incoming packet rate divided by the rate of outgoing packets; 'syn-rate': rate on incoming SYN packets; 'fin-rate': rate on incoming FIN packets; 'rst-rate': rate of incoming RST packets; 'small-window-ack-rate': rate of small window advertisement; 'empty-ack-rate': rate of incoming packets which have no payload; 'small-payload-rate': rate of short payload packet; 'syn-fin-ratio': ratio of incoming SYN packet rate divided by the rate of incoming FIN packets; ",
                            "enum":[
                                "pkt-rate",
                                "pkt-drop-rate",
                                "bit-rate",
                                "pkt-drop-ratio",
                                "bytes-to-bytes-from-ratio",
                                "syn-rate",
                                "fin-rate",
                                "rst-rate",
                                "small-window-ack-rate",
                                "empty-ack-rate",
                                "small-payload-rate",
                                "syn-fin-ratio"
                            ],
                            "optional":false
                        },
                        "tcp-window-size":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":500,
                            "partition-visibility":"shared",
                            "description":"Expected minimal window size",
                            "optional":true
                        },
                        "data-packet-size":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":1500,
                            "partition-visibility":"shared",
                            "description":"Expected minimal data size",
                            "optional":true
                        },
                        "threshold-num":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":2147483647,
                            "partition-visibility":"shared",
                            "description":"Threshold for each geo-location",
                            "optional":true
                        },
                        "threshold-large-num":{
                            "type":"number",
                            "format":"number",
                            "minimum":1,
                            "maximum":10995116277760,
                            "partition-visibility":"shared",
                            "description":"Threshold for each geo-location",
                            "optional":true
                        },
                        "threshold-str":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":128,
                            "partition-visibility":"shared",
                            "description":"Threshold for each geo-location (Non-zero floating point)",
                            "optional":true
                        },
                        "uuid":{
                            "type":"string",
                            "format":"string",
                            "minLength":1,
                            "maxLength":64,
                            "partition-visibility":"shared",
                            "modify-not-allowed":1,
                            "description":"uuid of the object",
                            "optional":true
                        },
                        "user-tag":{
                            "type":"string",
                            "format":"string-rlx",
                            "minLength":1,
                            "maxLength":127,
                            "partition-visibility":"shared",
                            "description":"Customized tag",
                            "optional":true
                        }
                    },
                    "required":[
                        "type"
                    ]
                }
            ]
        },
        "topk-source-subnet":{
            "type":"object",
            "$ref":"/axapi/v3/ddos/dst/zone/{zone-name}/detection/outbound-detection/topk-source-subnet",
            "properties":{
                "uuid":{
                    "type":"string",
                    "format":"string",
                    "minLength":1,
                    "maxLength":64,
                    "partition-visibility":"shared",
                    "modify-not-allowed":1,
                    "description":"uuid of the object"
                }
            }
        }
    }
}