ddos dst interface-ipv6¶

Configure protections on local interface IPs

interface-ipv6 Specification¶

Parameter Value

Type Collection

Object Key(s) addr

Collection Name interface-ipv6-list

Collection URI /axapi/v3/ddos/dst/interface-ipv6

Element Name interface-ipv6

Element URI /axapi/v3/ddos/dst/interface-ipv6/{addr}

Element Attributes interface-ipv6_attributes

Partition Visibility shared

Schema interface-ipv6 schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/ddos/dst/interface-ipv6	interface-ipv6 attributes
POST /axapi/v3/ddos/dst/interface-ipv6/ Payload: { "interface-ipv6": { "addr": "2003::1", "user-tag": "a" } }
Create List	POST	/axapi/v3/ddos/dst/interface-ipv6	interface-ipv6 attributes
Get Object	GET	/axapi/v3/ddos/dst/interface-ipv6/{addr}	interface-ipv6 attributes
GET /axapi/v3/ddos/dst/interface-ipv6/2003::1 Reponse: { "interface-ipv6": { "addr": "2003::1", "log-enable": 0, "uuid": "44d3c1e4-77de-11ee-8d95-001fa015fd06", "user-tag": "a", "a10-url": "/axapi/v3/ddos/dst/interface-ipv6/2003%3A%3A1" } }
Get List	GET	/axapi/v3/ddos/dst/interface-ipv6	interface-ipv6-list
Modify Object	POST	/axapi/v3/ddos/dst/interface-ipv6/{addr}	interface-ipv6 attributes
Replace Object	PUT	/axapi/v3/ddos/dst/interface-ipv6/{addr}	interface-ipv6 attributes
PUT /axapi/v3/ddos/dst/interface-ipv6/2003::1 Payload: { "interface-ipv6": { "addr": "2003::1", "user-tag": "abcd" } }
Replace List	PUT	/axapi/v3/ddos/dst/interface-ipv6	interface-ipv6-list
Delete Object	DELETE	/axapi/v3/ddos/dst/interface-ipv6/{addr}	interface-ipv6 attributes
DELETE /axapi/v3/ddos/dst/interface-ipv6/2003::1 Reponse: { "response": { "http-status": 200, "status": "OK", "msg": "Success" } }

interface-ipv6-list¶

interface-ipv6-list is JSON List of interface-ipv6 attributes

interface-ipv6-list : [

{ interface-ipv6 attributes },

{ interface-ipv6 attributes },

…

]

interface-ipv6 attributes¶

addr

Description IPv6 address of interface

Type: string

Format: ipv6-address

ip-proto-list

Type: List

Reference Object: /axapi/v3/ddos/dst/interface-ipv6/{addr}/ip-proto/{port-num}

l4-type-list

Type: List

Reference Object: /axapi/v3/ddos/dst/interface-ipv6/{addr}/l4-type/{protocol}

log-enable

Description Enable logging of limit exceed drops

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

port-list

Type: List

Reference Object: /axapi/v3/ddos/dst/interface-ipv6/{addr}/port/{port-num}+{protocol}

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

port-list¶

Specification Value

Type list

Block object keys

deny

Description Blacklist and Drop all incoming packets for protocol

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

glid

Description Global limit ID

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

Reference Object: /axapi/v3/glid

port-num

Description Port Number

Type: number

Range: 1-65535

protocol

Description ‘tcp’: tcp; ‘udp’: udp; ‘http-probe’: http port for interface health check;

Type: string

Supported Values: tcp, udp, http-probe

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

ip-proto-list¶

Specification Value

Type list

Block object keys

deny

Description Blacklist and Drop all incoming packets for protocol

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

glid

Description Global limit ID

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

Reference Object: /axapi/v3/glid

port-num

Description IP protocol number

Type: number

Range: 0-255

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

l4-type-list¶

Specification Value

Type list

Block object keys

deny

Description Blacklist and Drop all incoming packets for protocol

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop-frag-pkt

Description Drop fragmented packets

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

glid

Description Global limit ID

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

Reference Object: /axapi/v3/glid

protocol

Description ‘tcp’: tcp; ‘udp’: udp; ‘icmp’: icmp; ‘other’: other;

Type: string

Supported Values: tcp, udp, icmp, other

tunnel-decap

Description: tunnel-decap is a JSON Block. Please see below for l4-type-list_tunnel-decap

Type: Object

tunnel-rate-limit

Description: tunnel-rate-limit is a JSON Block. Please see below for l4-type-list_tunnel-rate-limit

Type: Object

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

l4-type-list_tunnel-decap¶

Specification Value

Type object

gre-decap

Description Enable GRE Tunnel decapsulation

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ip-decap

Description Enable IP Tunnel decapsulation

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

key-cfg

Type: List

l4-type-list_tunnel-decap_key-cfg¶

Specification Value

Type list

Block object keys

key

Description Only decapsulate GRE packet with this key (Hexadecimal 0x0-0xFFFFFFFF,decimal 0-4294967295)

Type: string

Maximum Length: 10 characters

Maximum Length: 1 characters

l4-type-list_tunnel-rate-limit¶

Specification Value

Type object

gre-rate-limit

Description Enable inner IP rate limiting on GRE traffic

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ip-rate-limit

Description Enable inner IP rate limiting on IPinIP traffic

Type: boolean

Supported Values: true, false, 1, 0

Default: 0