{
    "id":"/axapi/v3/ddos/zone-template/dns/{name}/malformed-query-check",
    "type":"object",
    "node-type":"scalar",
    "title":"malformed-query-check",
    "partition-visibility":"shared",
    "description":"DNS Malform Query check options",
    "properties":{
        "validation-type":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "description":"'basic-header-check': Basic header validation for DNS TCP/UDP queries; 'extended-header-check': Extended header/query validation for DNS TCP/UDP queries; 'disable': Disable Malform query validation for DNS TCP/UDP; ",
            "enum":[
                "basic-header-check",
                "extended-header-check",
                "disable"
            ],
            "optional":true
        },
        "non-query-opcode-check":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "description":"'disable': When malform check is enabled, TPS always drops DNS query with non query opcode, this option disables this opcode check; ",
            "enum":[
                "disable"
            ],
            "optional":true
        },
        "skip-multi-packet-check":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Bypass DNS fragmented and TCP segmented Queries(Default: dropped)",
            "optional":true
        },
        "dns-malformed-query-action-list-name":{
            "type":"string",
            "format":"string-rlx",
            "minLength":1,
            "maxLength":63,
            "partition-visibility":"shared",
            "$ref":"/axapi/v3/ddos/action-list",
            "not":"dns-malformed-query-action",
            "description":"Configure action-list to take",
            "optional":true
        },
        "dns-malformed-query-action":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "not":"dns-malformed-query-action-list-name",
            "description":"'drop': Drop packets (Default); 'ignore': Take no action; 'blacklist-src': Blacklist-src; 'reset': Reset client connection; ",
            "enum":[
                "drop",
                "ignore",
                "blacklist-src",
                "reset"
            ],
            "optional":true
        },
        "uuid":{
            "type":"string",
            "format":"string",
            "minLength":1,
            "maxLength":64,
            "partition-visibility":"shared",
            "modify-not-allowed":1,
            "description":"uuid of the object",
            "optional":true
        }
    }
}