ddos template dns malformed-query-check¶

DNS Malform Query check options

malformed-query-check Specification¶

Parameter Value

Type Configuration Resource

Element Name malformed-query-check

Element URI /axapi/v3/ddos/template/dns/{name}/malformed-query-check

Element Attributes malformed-query-check_attributes

Partition Visibility shared

Schema malformed-query-check schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/ddos/template/dns/{name}/malformed-query-check	malformed-query-check attributes
POST /axapi/v3/ddos/template/dns/a/malformed-query-check Payload: { "malformed-query-check": { "validation-type": "basic-header-check" } }
Get Object	GET	/axapi/v3/ddos/template/dns/{name}/malformed-query-check	malformed-query-check attributes
GET /axapi/v3/ddos/template/dns/a/malformed-query-check Reponse: { "malformed-query-check": { "validation-type": "basic-header-check", "skip-multi-packet-check": 0, "uuid": "f42beb24-509e-11ee-a2fd-001fa015fd06", "a10-url": "/axapi/v3/ddos/template/dns/a/malformed-query-check" } }
Modify Object	POST	/axapi/v3/ddos/template/dns/{name}/malformed-query-check	malformed-query-check attributes
Replace Object	PUT	/axapi/v3/ddos/template/dns/{name}/malformed-query-check	malformed-query-check attributes
PUT /axapi/v3/ddos/template/dns/a/malformed-query-check Payload: { "malformed-query-check": { "validation-type": "extended-header-check" } }
Delete Object	DELETE	/axapi/v3/ddos/template/dns/{name}/malformed-query-check	malformed-query-check attributes
DELETE /axapi/v3/ddos/template/dns/a/malformed-query-check Reponse: { "response": { "http-status": 200, "status": "OK", "msg": "Success" } }

malformed-query-check attributes¶

non-query-opcode-check

Description ‘disable’: When malform check is enabled, TPS always drops DNS query with non query opcode, this option disables this opcode check;

Type: string

Supported Values: disable

skip-multi-packet-check

Description Bypass DNS fragmented and TCP segmented Queries(Default: dropped)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

validation-type

Description ‘basic-header-check’: Basic header validation for DNS TCP/UDP queries; ‘extended-header-check’: Extended header/query validation for DNS TCP/UDP queries; ‘disable’: Disable Malform query validation for DNS TCP/UDP;

Type: string

Supported Values: basic-header-check, extended-header-check, disable