{
    "id":"/axapi/v3/ddos/dst/dynamic-entry-overflow-policy/{default-address-type}/l4-type/{protocol}",
    "type":"object",
    "node-type":"list",
    "title":"l4-type",
    "partition-visibility":"shared",
    "description":"DDOS L4 type",
    "properties":{
        "protocol":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "description":"'tcp': tcp; 'udp': udp; 'icmp': icmp; 'other': other; ",
            "enum":[
                "tcp",
                "udp",
                "icmp",
                "other"
            ],
            "optional":false
        },
        "glid":{
            "type":"string",
            "format":"string-rlx",
            "minLength":1,
            "maxLength":63,
            "partition-visibility":"shared",
            "$ref":"/axapi/v3/glid",
            "description":"Global limit ID",
            "optional":true
        },
        "deny":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Blacklist and Drop all incoming packets for protocol",
            "optional":true
        },
        "max-rexmit-syn-per-flow":{
            "type":"number",
            "format":"number",
            "minimum":1,
            "maximum":6,
            "partition-visibility":"shared",
            "description":"Maximum number of re-transmit SYN per flow. Exceed action set to Drop",
            "optional":true
        },
        "syn-auth":{
            "type":"string",
            "format":"enum",
            "default":"send-rst",
            "partition-visibility":"shared",
            "description":"'send-rst': Send RST to client upon client ACK; 'force-rst-by-ack': Force client RST via the use of ACK; 'force-rst-by-synack': Force client RST via the use of bad SYN|ACK; 'disable': Disable TCP SYN Authentication; ",
            "enum":[
                "send-rst",
                "force-rst-by-ack",
                "force-rst-by-synack",
                "disable"
            ],
            "optional":true
        },
        "syn-cookie":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Enable SYN Cookie",
            "optional":true
        },
        "tcp-reset-client":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Send reset to client when rate exceeds or session ages out",
            "optional":true
        },
        "tcp-reset-server":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Send reset to server when rate exceeds or session ages out",
            "optional":true
        },
        "drop-on-no-port-match":{
            "type":"string",
            "format":"enum",
            "default":"enable",
            "partition-visibility":"shared",
            "description":"'disable': disable; 'enable': enable; ",
            "enum":[
                "disable",
                "enable"
            ],
            "optional":true
        },
        "stateful":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Enable stateful tracking of sessions (Default is stateless)",
            "optional":true
        },
        "tunnel-decap":{
            "type":"object",
            "properties":{
                "ip-decap":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Enable IP Tunnel decapsulation"
                },
                "gre-decap":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Enable GRE Tunnel decapsulation"
                },
                "key-cfg":{
                    "type":"array",
                    "minItems":1,
                    "items":{
                        "type":"object"
                    },
                    "uniqueItems":true,
                    "array":[
                        {
                            "properties":{
                                "key":{
                                    "type":"string",
                                    "format":"string",
                                    "minLength":1,
                                    "maxLength":10,
                                    "partition-visibility":"shared",
                                    "description":"Only decapsulate GRE packet with this key (Hexadecimal 0x0-0xFFFFFFFF,decimal 0-4294967295)"
                                }
                            }
                        }
                    ]
                }
            }
        },
        "tunnel-rate-limit":{
            "type":"object",
            "properties":{
                "ip-rate-limit":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Enable inner IP rate limiting on IPinIP traffic"
                },
                "gre-rate-limit":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Enable inner IP rate limiting on GRE traffic"
                }
            }
        },
        "drop-frag-pkt":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"Drop fragmented packets",
            "optional":true
        },
        "uuid":{
            "type":"string",
            "format":"string",
            "minLength":1,
            "maxLength":64,
            "partition-visibility":"shared",
            "modify-not-allowed":1,
            "description":"uuid of the object",
            "optional":true
        },
        "user-tag":{
            "type":"string",
            "format":"string-rlx",
            "minLength":1,
            "maxLength":127,
            "partition-visibility":"shared",
            "description":"Customized tag",
            "optional":true
        }
    },
    "object-keys":[
        "protocol"
    ],
    "required":[
        "protocol"
    ]
}