cgnv6 ddos-protection

Configure CGNV6 DDoS Protection

ddos-protection Specification

   
Type Configuration Resource
Element Name ddos-protection
Element URI /axapi/v3/cgnv6/ddos-protection
Element Attributes ddos-protection_attributes
Statistics Data URI /axapi/v3/cgnv6/ddos-protection/stats
Schema ddos-protection schema

Operations Allowed:

OperationMethodURIPayload

Create Object

POST

/axapi/v3/cgnv6/ddos-protection

ddos-protection attributes

Get Object

GET

/axapi/v3/cgnv6/ddos-protection

ddos-protection attributes

Modify Object

POST

/axapi/v3/cgnv6/ddos-protection

ddos-protection attributes

Replace Object

PUT

/axapi/v3/cgnv6/ddos-protection

ddos-protection attributes

Delete Object

DELETE

/axapi/v3/cgnv6/ddos-protection

ddos-protection attributes

ddos-protection attributes

logging

Description: logging is a JSON Block. Please see below for logging

Type: Object

packets-per-second

Description: packets-per-second is a JSON Block. Please see below for packets-per-second

Type: Object

sampling-enable

Type: List

toggle

Description ‘enable’: Enable CGNV6 NAT pool DDoS protection (default); ‘disable’: Disable CGNV6 NAT pool DDoS protection;

Type: string

Supported Values: enable, disable

Default: enable

uuid

Description uuid of the object

Type: string

Maximum Length: 64 characters

Maximum Length: 1 characters

packets-per-second

Specification  
Type object

ip

Description Configure packets-per-second threshold per IP(default 3000000)

Type: number

Range: 0-30000000

Default: 3000

other

Description Configure packets-per-second threshold for other L4 protocols(default 10000)

Type: number

Range: 0-30000000

Default: 10000

tcp

Description Configure packets-per-second threshold per TCP port (default: 3000)

Type: number

Range: 0-30000000

Default: 3000

udp

Description Configure packets-per-second threshold per UDP port (default: 3000)

Type: number

Range: 0-30000000

Default: 3000

logging

Specification  
Type object

logging-toggle

Description ‘enable’: Enable CGNV6 NAT pool DDoS protection logging (default); ‘disable’: Disable CGNV6 NAT pool DDoS protection logging;

Type: string

Supported Values: enable, disable

Default: enable

sampling-enable

Specification  
Type list
Block object keys  

counters1

Description ‘all’: all; ‘entry_added’: Entry Added; ‘entry_deleted’: Entry Deleted; ‘entry_added_to_hw’: Entry added to HW; ‘entry_removed_from_hw’: Entry Removed From HW; ‘hw_out_of_entries’: HW out of Entries; ‘entry_match_drop’: Entry Match Drop; ‘entry_match_drop_hw’: HW Entry Match Drop; ‘entry_list_alloc’: Entry List Alloc; ‘entry_list_free’: Entry List Alloc Free; ‘entry_list_alloc_failure’: Entry List Alloc Failure; ‘ip_node_alloc’: Node Alloc; ‘ip_node_free’: Node Free; ‘ip_node_alloc_failure’: Node Alloc Failure; ‘ip_port_block_alloc’: Port Block Alloc; ‘ip_port_block_free’: Port Block Free; ‘ip_port_block_alloc_failure’: Port Block Alloc Failure; ‘ip_other_block_alloc’: Other Block Alloc; ‘ip_other_block_free’: Other Block Free; ‘ip_other_block_alloc_failure’: Other Block Alloc Failure; ‘entry_added_shadow’: Entry Added Shadow; ‘entry_invalidated’: Entry Invalidated;

Type: string

Supported Values: all, entry_added, entry_deleted, entry_added_to_hw, entry_removed_from_hw, hw_out_of_entries, entry_match_drop, entry_match_drop_hw, entry_list_alloc, entry_list_free, entry_list_alloc_failure, ip_node_alloc, ip_node_free, ip_node_alloc_failure, ip_port_block_alloc, ip_port_block_free, ip_port_block_alloc_failure, ip_other_block_alloc, ip_other_block_free, ip_other_block_alloc_failure, entry_added_shadow, entry_invalidated

stats data

  Counter Size Description
       
  ip_other_block_alloc 8 Other block alloc
  entry_match_drop 8 Entry match drop
  ip_port_block_free 8 Port block free
  ip_node_alloc_failure 8 Node alloc failures
  entry_list_alloc_failure 8 Entry list alloc failures
  ip_node_alloc 8 Node alloc
  entry_added_shadow 8 Entry added shadow
  ip_port_block_alloc_failure 8 Port block alloc failure
  ip_other_block_alloc_failure 8 Other block alloc failure
  entry_removed_from_hw 8 Entry removed from HW
  entry_deleted 8 Entry deleted
  entry_list_alloc 8 Entry list alloc
  entry_list_free 8 Entry list free
  entry_added_to_hw 8 Entry added to HW
  ip_node_free 8 Node free
  entry_added 8 Entry added
  ip_other_block_free 8 Other block free
  entry_invalidated 8 Entry invalidated
  ip_port_block_alloc 8 Port block alloc
  entry_match_drop_hw 8 HW Entry match drop
  hw_out_of_entries 8 HW out of entries