ddos dst zone port zone-service virtualhosts virtualhost

Configure mitigation for virtualhost

virtualhost Specification

Parameter Value
Type Collection
Object Key(s) vhost
Collection Name virtualhost-list
Collection URI /axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost
Element Name virtualhost
Element URI /axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}
Element Attributes virtualhost_attributes
Partition Visibility shared
Statistics Data URI /axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}/stats
Operational Data URI /axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}/oper
Schema virtualhost schema

Operations Allowed:

OperationMethodURIPayload

Create Object

POST

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost

virtualhost attributes

Create List

POST

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost

virtualhost attributes

Get Object

GET

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}

virtualhost attributes

Get List

GET

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost

virtualhost-list

Modify Object

POST

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}

virtualhost attributes

Replace Object

PUT

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}

virtualhost attributes

Replace List

PUT

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost

virtualhost-list

Delete Object

DELETE

/axapi/v3/ddos/dst/zone/{zone-name}/port/zone-service/{port-num}+{protocol}/virtualhosts/virtualhost/{vhost}

virtualhost attributes

virtualhost-list

virtualhost-list is JSON List of virtualhost attributes

virtualhost-list : [

virtualhost attributes

deny

Description Blacklist and Drop all incoming packets for protocol

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

glid-cfg

Description: glid-cfg is a JSON Block. Please see below for glid-cfg

Type: Object

level-list

servername

Type: List

servername-list

Description Class List to match servername (AC type Class List Name)

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

servername-match-any

Description Match when there is no SNI or other servernames are not matched

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

servername-no-sni

Description Match when there is no SNI extension found

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

source-tracking

Description ‘follow’: enable creation of source entries when source-tracking-all is enabled (default); ‘enable’: enable creation of source entries on this virtualhost; ‘disable’: disable creation of source entries on this virtualhost;

Type: string

Supported Values: follow, enable, disable

Default: follow

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

vhost

Description name for virtualhost

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

servername

Specification Value
Type list
Block object keys  

host-match-string

Description SNI String

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

match-type

Description ‘contains’: match servername extension when contains this string; ‘ends-with’: match servername extension when ends with this string; ‘equals’: match servername extension when equals this string; ‘starts-with’: match servername extension when starts with this string;

Type: string

Supported Values: contains, ends-with, equals, starts-with

glid-cfg

Specification Value
Type object

glid

Description Global limit ID

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

Reference Object: /axapi/v3/glid

glid-action

Description ‘drop’: Drop packets for glid exceed; ‘ignore’: Do nothing for glid exceed;

Type: string

Supported Values: drop, ignore

level-list

Specification Value
Type list
Block object keys  

glid-action

Description ‘drop’: Drop packets for glid exceed (Default); ‘blacklist-src’: Blacklist-src for glid exceed; ‘ignore’: Do nothing for glid exceed;

Type: string

Supported Values: drop, blacklist-src, ignore

level-num

Description ‘0’: Default policy level;

Type: string

Supported Values: 0

src-default-glid

Description Global limit ID

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

Reference Object: /axapi/v3/glid

user-tag

Description Customized tag

Type: string

Format: string-rlx

Maximum Length: 127 characters

Maximum Length: 1 characters

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

zone-template

Description: zone-template is a JSON Block. Please see below for level-list_zone-template

Type: Object

level-list_zone-template

Specification Value
Type object

ssl-l4

Description DDOS ssl-l4 template

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters

tcp

Description DDOS tcp template

Type: string

Format: string-rlx

Maximum Length: 63 characters

Maximum Length: 1 characters