ddos event-filter¶

Configure DDOS debug event filter

event-filter Specification¶

Parameter Value

Type Collection

Object Key(s) filter-name

Collection Name event-filter-list

Collection URI /axapi/v3/ddos/event-filter

Element Name event-filter

Element URI /axapi/v3/ddos/event-filter/{filter-name}

Element Attributes event-filter_attributes

Partition Visibility shared

Schema event-filter schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/ddos/event-filter	event-filter attributes
Create List	POST	/axapi/v3/ddos/event-filter	event-filter attributes
Get Object	GET	/axapi/v3/ddos/event-filter/{filter-name}	event-filter attributes
Get List	GET	/axapi/v3/ddos/event-filter	event-filter-list
Modify Object	POST	/axapi/v3/ddos/event-filter/{filter-name}	event-filter attributes
Replace Object	PUT	/axapi/v3/ddos/event-filter/{filter-name}	event-filter attributes
Replace List	PUT	/axapi/v3/ddos/event-filter	event-filter-list
Delete Object	DELETE	/axapi/v3/ddos/event-filter/{filter-name}	event-filter attributes

event-filter attributes¶

black-list

Description: black-list is a JSON Block. Please see below for black-list

Type: Object

drop

Description: drop is a JSON Block. Please see below for drop

Type: Object

filter-name

Description

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

l4-type-list

Type: List

Reference Object: /axapi/v3/ddos/event-filter/{filter-name}/l4-type/{protocol}

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

white-list

Description: white-list is a JSON Block. Please see below for white-list

Type: Object

black-list¶

Specification Value

Type object

black-list-dst

Description Dst entry/port is black-listed

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

black-list-src

Description Src entry/port is black-listed

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop¶

Specification Value

Type object

drop-black-list

Description Packet is dropped because of black-list

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop-dst

Description Packet is dropped because of dst

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop-src

Description Packet is dropped because of src

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

white-list¶

Specification Value

Type object

white-list-dst

Description Dst entry/port is white-listed

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

white-list-src

Description Src entry/port is white-listed

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

l4-type-list¶

Specification Value

Type list

Block object keys

out-of-seq

Description TCP out-of-seq pkts

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

protocol

Description ‘tcp’: tcp; ‘udp’: udp;

Type: string

Supported Values: tcp, udp

retrans-syn-cfg

Description: retrans-syn-cfg is a JSON Block. Please see below for l4-type-list_retrans-syn-cfg

Type: Object

tcp-auth

Description: tcp-auth is a JSON Block. Please see below for l4-type-list_tcp-auth

Type: Object

udp-auth

Description: udp-auth is a JSON Block. Please see below for l4-type-list_udp-auth

Type: Object

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

zero-window

Description TCP zero window pkts

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

l4-type-list_tcp-auth¶

Specification Value

Type object

tcp-auth-fail

Description Packet that fails syn-auth/action-on-ack

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

tcp-auth-init

Description Packet that inits syn-auth/action-on-ack

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

tcp-auth-pass

Description Packet that passes syn-auth/action-on-ack

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

l4-type-list_udp-auth¶

Specification Value

Type object

udp-auth-init

Description Packet that inits spoof-detect

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

udp-auth-pass

Description Packet that passes spoof-detect

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

l4-type-list_retrans-syn-cfg¶

Specification Value

Type object

retrans-syn

Description TCP SYN retransmission

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

retrans-syn-exceed

Description TCP SYN retransmission exceed

Type: boolean

Supported Values: true, false, 1, 0

Default: 0