cgnv6 ddos-protection¶
Configure CGNV6 DDoS Protection
ddos-protection Specification¶
Type Configuration Resource Element Name ddos-protection Element URI /axapi/v3/cgnv6/ddos-protection Element Attributes ddos-protection_attributes Statistics Data URI /axapi/v3/cgnv6/ddos-protection/stats Schema ddos-protection schemaOperations Allowed:
| Operation | Method | URI | Payload | |
|---|---|---|---|---|
Create Object | POST | /axapi/v3/cgnv6/ddos-protection | ||
Get Object | GET | /axapi/v3/cgnv6/ddos-protection | ||
Modify Object | POST | /axapi/v3/cgnv6/ddos-protection | ||
Replace Object | PUT | /axapi/v3/cgnv6/ddos-protection | ||
Delete Object | DELETE | /axapi/v3/cgnv6/ddos-protection | ||
ddos-protection attributes¶
logging
Description: logging is a JSON Block. Please see below for logging
Type: Object
packets-per-second
Description: packets-per-second is a JSON Block. Please see below for packets-per-second
Type: Object
sampling-enable
Type: Listtoggle
Description ‘enable’: Enable CGNV6 NAT pool DDoS protection (default); ‘disable’: Disable CGNV6 NAT pool DDoS protection;
Type: string
Supported Values: enable, disable
Default: enable
uuid
Description uuid of the object
Type: string
Maximum Length: 64 characters
Maximum Length: 1 characters
packets-per-second¶
Specification Type object ip
Description Configure packets-per-second threshold per IP(default 3000000)
Type: number
Range: 0-30000000
Default: 3000
other
Description Configure packets-per-second threshold for other L4 protocols(default 10000)
Type: number
Range: 0-30000000
Default: 10000
tcp
Description Configure packets-per-second threshold per TCP port (default: 3000)
Type: number
Range: 0-30000000
Default: 3000
udp
Description Configure packets-per-second threshold per UDP port (default: 3000)
Type: number
Range: 0-30000000
Default: 3000
logging¶
Specification Type object logging-toggle
Description ‘enable’: Enable CGNV6 NAT pool DDoS protection logging (default); ‘disable’: Disable CGNV6 NAT pool DDoS protection logging;
Type: string
Supported Values: enable, disable
Default: enable
sampling-enable¶
Specification Type list Block object keys counters1
Description ‘all’: all; ‘entry_added’: Entry Added; ‘entry_deleted’: Entry Deleted; ‘entry_added_to_hw’: Entry added to HW; ‘entry_removed_from_hw’: Entry Removed From HW; ‘hw_out_of_entries’: HW out of Entries; ‘entry_match_drop’: Entry Match Drop; ‘entry_match_drop_hw’: HW Entry Match Drop; ‘entry_list_alloc’: Entry List Alloc; ‘entry_list_free’: Entry List Alloc Free; ‘entry_list_alloc_failure’: Entry List Alloc Failure; ‘ip_node_alloc’: Node Alloc; ‘ip_node_free’: Node Free; ‘ip_node_alloc_failure’: Node Alloc Failure; ‘ip_port_block_alloc’: Port Block Alloc; ‘ip_port_block_free’: Port Block Free; ‘ip_port_block_alloc_failure’: Port Block Alloc Failure; ‘ip_other_block_alloc’: Other Block Alloc; ‘ip_other_block_free’: Other Block Free; ‘ip_other_block_alloc_failure’: Other Block Alloc Failure; ‘entry_added_shadow’: Entry Added Shadow; ‘entry_invalidated’: Entry Invalidated;
Type: string
Supported Values: all, entry_added, entry_deleted, entry_added_to_hw, entry_removed_from_hw, hw_out_of_entries, entry_match_drop, entry_match_drop_hw, entry_list_alloc, entry_list_free, entry_list_alloc_failure, ip_node_alloc, ip_node_free, ip_node_alloc_failure, ip_port_block_alloc, ip_port_block_free, ip_port_block_alloc_failure, ip_other_block_alloc, ip_other_block_free, ip_other_block_alloc_failure, entry_added_shadow, entry_invalidated
stats data¶
| Counter | Size | Description | |
|---|---|---|---|
| ip_other_block_alloc | 8 | Other block alloc | |
| entry_match_drop | 8 | Entry match drop | |
| ip_port_block_free | 8 | Port block free | |
| ip_node_alloc_failure | 8 | Node alloc failures | |
| entry_list_alloc_failure | 8 | Entry list alloc failures | |
| ip_node_alloc | 8 | Node alloc | |
| entry_added_shadow | 8 | Entry added shadow | |
| ip_port_block_alloc_failure | 8 | Port block alloc failure | |
| ip_other_block_alloc_failure | 8 | Other block alloc failure | |
| entry_removed_from_hw | 8 | Entry removed from HW | |
| entry_deleted | 8 | Entry deleted | |
| entry_list_alloc | 8 | Entry list alloc | |
| entry_list_free | 8 | Entry list free | |
| entry_added_to_hw | 8 | Entry added to HW | |
| ip_node_free | 8 | Node free | |
| entry_added | 8 | Entry added | |
| ip_other_block_free | 8 | Other block free | |
| entry_invalidated | 8 | Entry invalidated | |
| ip_port_block_alloc | 8 | Port block alloc | |
| entry_match_drop_hw | 8 | HW Entry match drop | |
| hw_out_of_entries | 8 | HW out of entries |