slb ssl-forward-proxy¶

SSL forward proxy stats info

ssl-forward-proxy Specification¶

Parameter Value

Type Configuration Resource

Element Name ssl-forward-proxy

Element URI /axapi/v3/slb/ssl-forward-proxy

Element Attributes ssl-forward-proxy_attributes

Partition Visibility shared

Statistics Data URI /axapi/v3/slb/ssl-forward-proxy/stats

Schema ssl-forward-proxy schema

Operations Allowed:

Operation	Method	URI	Payload
Create Object	POST	/axapi/v3/slb/ssl-forward-proxy	ssl-forward-proxy attributes
POST /axapi/v3/slb/ssl-forward-proxy Payload: { "ssl-forward-proxy": { "sampling-enable": [ { "counters1": "all" } ] } }
Get Object	GET	/axapi/v3/slb/ssl-forward-proxy	ssl-forward-proxy attributes
GET /axapi/v3/slb/ssl-forward-proxy Reponse: { "ssl-forward-proxy": { "uuid": "db205362-6612-11d9-9a27-692335d4f00d", "sampling-enable": [ { "counters1": "all" } ], "a10-url": "/axapi/v3/slb/ssl-forward-proxy" } }
Modify Object	POST	/axapi/v3/slb/ssl-forward-proxy	ssl-forward-proxy attributes
Replace Object	PUT	/axapi/v3/slb/ssl-forward-proxy	ssl-forward-proxy attributes
PUT /axapi/v3/slb/ssl-forward-proxy Payload: { "ssl-forward-proxy": { "sampling-enable": [ { "counters1": "cert_create" } ] } }
Delete Object	DELETE	/axapi/v3/slb/ssl-forward-proxy	ssl-forward-proxy attributes
DELETE /axapi/v3/slb/ssl-forward-proxy Reponse: { "response": { "http-status": 200, "status": "OK", "msg": "Success" } }

ssl-forward-proxy attributes¶

sampling-enable

Type: List

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

sampling-enable¶

Specification Value

Type list

Block object keys

counters1

Description ‘all’: all; ‘cert_create’: Certificates created; ‘cert_expr’: Certificates expired; ‘cert_hit’: Certificate cache hits; ‘cert_miss’: Certificate cache miss; ‘conn_bypass’: Connections bypassed; ‘conn_inspect’: Connections inspected; ‘bypass-failsafe-ssl-sessions’: Bypass Failsafe SSL sessions; ‘bypass-sni-sessions’: Bypass SNI sessions; ‘bypass-client-auth-sessions’: Bypass Client Auth sessions; ‘failed-in-ssl-handshakes’: Failed in SSL handshakes; ‘failed-in-crypto-operations’: Failed in crypto operations; ‘failed-in-tcp’: Failed in TCP; ‘failed-in-certificate-verification’: Failed in Certificate verification; ‘failed-in-certificate-signing’: Failed in Certificate signing; ‘invalid-ocsp-stapling-response’: Invalid OCSP Stapling Response; ‘revoked-ocsp-response’: Revoked OCSP Response; ‘unsupported-ssl-version’: Unsupported SSL version; ‘certificates-in-cache’: Certificates in cache; ‘connections-failed’: Connections failed; ‘aflex-bypass’: Bypass triggered by aFleX; ‘bypass-cert-subject-sessions’: Bypass Cert Subject sessions; ‘bypass-cert-issuer-sessions’: Bypass Cert issuer sessions; ‘bypass-cert-san-sessions’: Bypass Cert SAN sessions; ‘bypass-no-sni-sessions’: Bypass NO SNI sessions; ‘reset-no-sni-sessions’: Reset No SNI sessions; ‘bypass-esni-sessions’: Bypass ESNI sessions; ‘drop-esni-sessions’: Drop ESNI sessions; ‘bypass-username-sessions’: Bypass Username sessions; ‘bypass-ad-group-sessions’: Bypass AD-group sessions; ‘tot_conn_in_buff’: Total buffered async connections; ‘curr_conn_in_buff’: Current buffered async connections; ‘async_conn_timeout’: SSLi Async connections failures due to timeout; ‘async_conn_limit_drop’: SSLi Async connections failures due to limit; ‘cert_in_cache’: Certificates in cache used by HC SSLi App; ‘bypass-client-ip-sessions’: Bypass Client IP sessions; ‘bypass-server-ip-sessions’: Bypass Server IP sessions;

Type: string

Supported Values: all, cert_create, cert_expr, cert_hit, cert_miss, conn_bypass, conn_inspect, bypass-failsafe-ssl-sessions, bypass-sni-sessions, bypass-client-auth-sessions, failed-in-ssl-handshakes, failed-in-crypto-operations, failed-in-tcp, failed-in-certificate-verification, failed-in-certificate-signing, invalid-ocsp-stapling-response, revoked-ocsp-response, unsupported-ssl-version, certificates-in-cache, connections-failed, aflex-bypass, bypass-cert-subject-sessions, bypass-cert-issuer-sessions, bypass-cert-san-sessions, bypass-no-sni-sessions, reset-no-sni-sessions, bypass-esni-sessions, drop-esni-sessions, bypass-username-sessions, bypass-ad-group-sessions, tot_conn_in_buff, curr_conn_in_buff, async_conn_timeout, async_conn_limit_drop, cert_in_cache, bypass-client-ip-sessions, bypass-server-ip-sessions