slb

Server Load Balancing (SLB) is a suite of resource management features that make server farms more reliable and efficient.

You can easily grow server farms in response to changing traffic flow, while protecting the servers behind a common virtual IP address. From the perspective of a client who accesses services, requests go to and arrive from a single IP address. The client is unaware that the server is in fact multiple servers managed by an ACOS device. The client simply receives faster, more reliable service.

Moreover, you do not need to wait for DNS entries to propagate for new servers. To add a new server, you simply add it to the

configuration for the virtual server, and the new real server becomes accessible immediately.

Intelligent Server Selection

The services managed by the ACOS device are controlled by service groups. A service group is a set of real servers. The ACOS device selects a real server for a client’s request based on a set of tunable criteria including server health, server response time, and server load. These criteria can be tuned for individual servers and even individual service ports.

The ACOS device provides a robust set of configurable health monitors for checking the health (availability) of servers and individual services.

slb Specification

Type Intermediate Resource
Element Name slb
Element URI /axapi/v3/slb
Element Attributes slb_attributes
Schema slb schema

Operations Allowed:

Operation Method URI Payload

Get Object

GET

/axapi/v3/slb

slb_attributes

slb Attributes

aflow

Description: aflow is a JSON Block . Please see below for aflow

Type: Object

Reference Object: /axapi/v3/slb/aflow

common

Description: common is a JSON Block . Please see below for common

Type: Object

Reference Object: /axapi/v3/slb/common

connection-reuse

Description: connection-reuse is a JSON Block . Please see below for connection-reuse

Type: Object

Reference Object: /axapi/v3/slb/connection-reuse

crl-srcip

Description: crl-srcip is a JSON Block . Please see below for crl-srcip

Type: Object

Reference Object: /axapi/v3/slb/crl-srcip

dns

Description: dns is a JSON Block . Please see below for dns

Type: Object

Reference Object: /axapi/v3/slb/dns

dns-cache

Description: dns-cache is a JSON Block . Please see below for dns-cache

Type: Object

Reference Object: /axapi/v3/slb/dns-cache

fast-http-proxy

Description: fast-http-proxy is a JSON Block . Please see below for fast-http-proxy

Type: Object

Reference Object: /axapi/v3/slb/fast-http-proxy

fix

Description: fix is a JSON Block . Please see below for fix

Type: Object

Reference Object: /axapi/v3/slb/fix

ftp-ctl

Description: ftp-ctl is a JSON Block . Please see below for ftp-ctl

Type: Object

Reference Object: /axapi/v3/slb/ftp-ctl

ftp-data

Description: ftp-data is a JSON Block . Please see below for ftp-data

Type: Object

Reference Object: /axapi/v3/slb/ftp-data

ftp-proxy

Description: ftp-proxy is a JSON Block . Please see below for ftp-proxy

Type: Object

Reference Object: /axapi/v3/slb/ftp-proxy

generic-proxy

Description: generic-proxy is a JSON Block . Please see below for generic-proxy

Type: Object

Reference Object: /axapi/v3/slb/generic-proxy

health-gateway

Description: health-gateway is a JSON Block . Please see below for health-gateway

Type: Object

Reference Object: /axapi/v3/slb/health-gateway

health-stat

Description: health-stat is a JSON Block . Please see below for health-stat

Type: Object

Reference Object: /axapi/v3/slb/health-stat

http-proxy

Description: http-proxy is a JSON Block . Please see below for http-proxy

Type: Object

Reference Object: /axapi/v3/slb/http-proxy

hw-compress

Description: hw-compress is a JSON Block . Please see below for hw-compress

Type: Object

Reference Object: /axapi/v3/slb/hw-compress

icap

Description: icap is a JSON Block . Please see below for icap

Type: Object

Reference Object: /axapi/v3/slb/icap

icap_http

Description: icap_http is a JSON Block . Please see below for icap_http

Type: Object

Reference Object: /axapi/v3/slb/icap_http

imap-proxy

Description: imap-proxy is a JSON Block . Please see below for imap-proxy

Type: Object

Reference Object: /axapi/v3/slb/imap-proxy

l4

Description: l4 is a JSON Block . Please see below for l4

Type: Object

Reference Object: /axapi/v3/slb/l4

mssql

Description: mssql is a JSON Block . Please see below for mssql

Type: Object

Reference Object: /axapi/v3/slb/mssql

mysql

Description: mysql is a JSON Block . Please see below for mysql

Type: Object

Reference Object: /axapi/v3/slb/mysql

passthrough

Description: passthrough is a JSON Block . Please see below for passthrough

Type: Object

Reference Object: /axapi/v3/slb/passthrough

perf

Description: perf is a JSON Block . Please see below for perf

Type: Object

Reference Object: /axapi/v3/slb/perf

persist

Description: persist is a JSON Block . Please see below for persist

Type: Object

Reference Object: /axapi/v3/slb/persist

pop3-proxy

Description: pop3-proxy is a JSON Block . Please see below for pop3-proxy

Type: Object

Reference Object: /axapi/v3/slb/pop3-proxy

proxy

Description: proxy is a JSON Block . Please see below for proxy

Type: Object

Reference Object: /axapi/v3/slb/proxy

rate-limit-log

Description: rate-limit-log is a JSON Block . Please see below for rate-limit-log

Type: Object

Reference Object: /axapi/v3/slb/rate-limit-log

rc-cache-global

Description: rc-cache-global is a JSON Block . Please see below for rc-cache-global

Type: Object

Reference Object: /axapi/v3/slb/rc-cache-global

resource-usage

Description: resource-usage is a JSON Block . Please see below for resource-usage

Type: Object

Reference Object: /axapi/v3/slb/resource-usage

server-list

Description: server-list is a JSON List . Please see below for server-list

Type: List

Reference Object: /axapi/v3/slb/server/{name}

service-group-list

Description: service-group-list is a JSON List . Please see below for service-group-list

Type: List

Reference Object: /axapi/v3/slb/service-group/{name}

sip

Description: sip is a JSON Block . Please see below for sip

Type: Object

Reference Object: /axapi/v3/slb/sip

smpp

Description: smpp is a JSON Block . Please see below for smpp

Type: Object

Reference Object: /axapi/v3/slb/smpp

smtp

Description: smtp is a JSON Block . Please see below for smtp

Type: Object

Reference Object: /axapi/v3/slb/smtp

spdy-proxy

Description: spdy-proxy is a JSON Block . Please see below for spdy-proxy

Type: Object

Reference Object: /axapi/v3/slb/spdy-proxy

ssl-cert-revoke

Description: ssl-cert-revoke is a JSON Block . Please see below for ssl-cert-revoke

Type: Object

Reference Object: /axapi/v3/slb/ssl-cert-revoke

ssl-expire-check

Description: ssl-expire-check is a JSON Block . Please see below for ssl-expire-check

Type: Object

Reference Object: /axapi/v3/slb/ssl-expire-check

svm-source-nat

Description: svm-source-nat is a JSON Block . Please see below for svm-source-nat

Type: Object

Reference Object: /axapi/v3/slb/svm-source-nat

switch

Description: switch is a JSON Block . Please see below for switch

Type: Object

Reference Object: /axapi/v3/slb/switch

template

Description: template is a JSON Block . Please see below for template

Type: Object

Reference Object: /axapi/v3/slb/template

transparent-acl-template

Description: transparent-acl-template is a JSON Block . Please see below for transparent-acl-template

Type: Object

Reference Object: /axapi/v3/slb/transparent-acl-template

transparent-tcp-template

Description: transparent-tcp-template is a JSON Block . Please see below for transparent-tcp-template

Type: Object

Reference Object: /axapi/v3/slb/transparent-tcp-template

virtual-server-list

Description: virtual-server-list is a JSON List . Please see below for virtual-server-list

Type: List

Reference Object: /axapi/v3/slb/virtual-server/{name}

passthrough

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

passthrough.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘curr_conn’: Current connections; ‘total_conn’: Total connections; ‘total_fwd_bytes’: Forward bytes; ‘total_fwd_packets’: Forward packets; ‘total_rev_bytes’: Reverse bytes; ‘total_rev_packets’: Reverse packets; ‘curr_pconn’: Persistent connections;

Type: string

Supported Values: all, curr_conn, total_conn, total_fwd_bytes, total_fwd_packets, total_rev_bytes, total_rev_packets, curr_pconn

smtp

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

smtp.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘curr_proxy’: Current proxy conns; ‘total_proxy’: Total proxy conns; ‘request’: SMTP requests; ‘request_success’: SMTP requests (success); ‘no_proxy’: No proxy error; ‘client_reset’: Client reset; ‘server_reset’: Server reset; ‘no_tuple’: No tuple error; ‘parse_req_fail’: Parse request failure; ‘server_select_fail’: Server selection failure; ‘forward_req_fail’: Forward request failure; ‘forward_req_data_fail’: Forward REQ data failure; ‘req_retran’: Request retransmit; ‘req_ofo’: Request pkt out-of-order; ‘server_reselect’: Server reselection; ‘server_prem_close’: Server premature close; ‘new_server_conn’: Server connection made; ‘snat_fail’: Source NAT failure; ‘tcp_out_reset’: TCP out reset; ‘recv_client_command_EHLO’: Recv client EHLO; ‘recv_client_command_HELO’: Recv client HELO; ‘recv_client_command_MAIL’: Recv client MAIL; ‘recv_client_command_RCPT’: Recv client RCPT; ‘recv_client_command_DATA’: Recv client DATA; ‘recv_client_command_RSET’: Recv client RSET; ‘recv_client_command_VRFY’: Recv client VRFY; ‘recv_client_command_EXPN’: Recv client EXPN; ‘recv_client_command_HELP’: Recv client HELP; ‘recv_client_command_NOOP’: Recv client NOOP; ‘recv_client_command_QUIT’: Recv client QUIT; ‘recv_client_command_STARTTLS’: Recv client STARTTLS; ‘recv_client_command_others’: Recv client other cmds; ‘recv_server_service_not_ready’: Recv server serv-not-rdy; ‘recv_server_unknow_reply_code’: Recv server unknown-code; ‘send_client_service_ready’: Sent client serv-rdy; ‘send_client_service_not_ready’: Sent client serv-not-rdy; ‘send_client_close_connection’: Sent client close-conn; ‘send_client_go_ahead’: Sent client go-ahead; ‘send_client_start_TLS_first’: Sent client STARTTLS-1st; ‘send_client_TLS_not_available’: Sent client TLS-not-aval; ‘send_client_no_command’: Sent client no-such-cmd; ‘send_server_cmd_reset’: Sent server RSET; ‘TLS_established’: SSL session established; ‘L4_switch’: L4 switching; ‘Aflex_switch’: aFleX switching; ‘Aflex_switch_ok’: aFleX switching (succ); ‘client_domain_switch’: Client domain switching; ‘client_domain_switch_ok’: Client domain sw (succ); ‘LB_switch’: LB switching; ‘LB_switch_ok’: LB switching (succ); ‘read_request_line_fail’: Read request line fail; ‘get_all_headers_fail’: Get all headers fail; ‘too_many_headers’: Too many headers; ‘line_too_long’: Line too long; ‘line_across_packet’: Line across packets; ‘line_extend’: Line extend; ‘line_extend_fail’: Line extend fail; ‘line_table_extend’: Table extend; ‘line_table_extend_fail’: Table extend fail; ‘parse_request_line_fail’: Parse request line fail; ‘insert_resonse_line_fail’: Ins response line fail; ‘remove_resonse_line_fail’: Del response line fail; ‘parse_resonse_line_fail’: Parse response line fail; ‘Aflex_lb_reselect’: aFleX lb reselect; ‘Aflex_lb_reselect_ok’: aFleX lb reselect (succ); ‘server_STARTTLS_init’: Init server side STARTTLS; ‘server_STARTTLS_fail’: Server side STARTTLS fail; ‘rserver_STARTTLS_disable’: real server not support STARTTLS;

Type: string

Supported Values: all, curr_proxy, total_proxy, request, request_success, no_proxy, client_reset, server_reset, no_tuple, parse_req_fail, server_select_fail, forward_req_fail, forward_req_data_fail, req_retran, req_ofo, server_reselect, server_prem_close, new_server_conn, snat_fail, tcp_out_reset, recv_client_command_EHLO, recv_client_command_HELO, recv_client_command_MAIL, recv_client_command_RCPT, recv_client_command_DATA, recv_client_command_RSET, recv_client_command_VRFY, recv_client_command_EXPN, recv_client_command_HELP, recv_client_command_NOOP, recv_client_command_QUIT, recv_client_command_STARTTLS, recv_client_command_others, recv_server_service_not_ready, recv_server_unknow_reply_code, send_client_service_ready, send_client_service_not_ready, send_client_close_connection, send_client_go_ahead, send_client_start_TLS_first, send_client_TLS_not_available, send_client_no_command, send_server_cmd_reset, TLS_established, L4_switch, Aflex_switch, Aflex_switch_ok, client_domain_switch, client_domain_switch_ok, LB_switch, LB_switch_ok, read_request_line_fail, get_all_headers_fail, too_many_headers, line_too_long, line_across_packet, line_extend, line_extend_fail, line_table_extend, line_table_extend_fail, parse_request_line_fail, insert_resonse_line_fail, remove_resonse_line_fail, parse_resonse_line_fail, Aflex_lb_reselect, Aflex_lb_reselect_ok, server_STARTTLS_init, server_STARTTLS_fail, rserver_STARTTLS_disable

rc-cache-global

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

rc-cache-global.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘hits’: Cache Hits; ‘miss’: Cache Misses; ‘bytes_served’: Bytes Served; ‘total_req’: Total Requests; ‘caching_req’: Cacheable Requests; ‘nc_req_header’: No-cache Request; ‘nc_res_header’: Not cacheable; ‘rv_success’: Revalidation Successes; ‘rv_failure’: Revalidation Failures; ‘ims_request’: IMS Requests; ‘nm_response’: Responses from cache 304 Not Modified; ‘rsp_type_CL’: Responses from server 200 OK - Cont Len; ‘rsp_type_CE’: Responses from server 200 OK - Chnk Enc; ‘rsp_type_304’: Responses from server 304 Not Modified; ‘rsp_type_other’: Responses from server 200 OK - Other; ‘rsp_no_compress’: Responses from cache 200 OK - No Comp; ‘rsp_gzip’: Responses from cache 200 OK - Gzip; ‘rsp_deflate’: Responses from cache 200 OK - Deflate; ‘rsp_other’: Responses from cache Other; ‘nocache_match’: Policy URI nocache; ‘match’: Policy URI cache; ‘invalidate_match’: Policy URI invalidate; ‘content_toobig’: Policy Content Too Big; ‘content_toosmall’: Policy Content Too Small; ‘entry_create_failures’: Entry Create failures; ‘mem_size’: Memory Used; ‘entry_num’: Entry Cached; ‘replaced_entry’: Entry Replaced; ‘aging_entry’: Entry Aged Out; ‘cleaned_entry’: Entry Cleaned;

Type: string

Supported Values: all, hits, miss, bytes_served, total_req, caching_req, nc_req_header, nc_res_header, rv_success, rv_failure, ims_request, nm_response, rsp_type_CL, rsp_type_CE, rsp_type_304, rsp_type_other, rsp_no_compress, rsp_gzip, rsp_deflate, rsp_other, nocache_match, match, invalidate_match, content_toobig, content_toosmall, entry_create_failures, mem_size, entry_num, replaced_entry, aging_entry, cleaned_entry

imap-proxy

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

imap-proxy.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘num’: Num; ‘curr’: Current proxy conns; ‘total’: Total proxy conns; ‘svrsel_fail’: Server selection failure; ‘no_route’: no route failure; ‘snat_fail’: source nat failure; ‘feat’: feat packet; ‘cc’: clear ctrl port packet; ‘data_ssl’: data ssl force; ‘line_too_long’: line too long; ‘line_mem_freed’: request line freed; ‘invalid_start_line’: invalid start line; ‘auth_tls’: auth tls cmd; ‘prot’: prot cmd; ‘pbsz’: pbsz cmd; ‘pasv’: pasv cmd; ‘port’: port cmd; ‘request_dont_care’: other cmd; ‘client_auth_tls’: client auth tls; ‘cant_find_pasv’: cant find pasv; ‘pasv_addr_ne_server’: psv addr not equal to svr; ‘smp_create_fail’: smp create fail; ‘data_server_conn_fail’: data svr conn fail; ‘data_send_fail’: data send fail; ‘epsv’: epsv command; ‘cant_find_epsv’: cant find epsv; ‘data_curr’: Current Data Proxy; ‘data_total’: Total Data Proxy; ‘auth_unsupported’: Unsupported auth; ‘adat’: adat cmd; ‘unsupported_pbsz_value’: Unsupported PBSZ; ‘unsupported_prot_value’: Unsupported PROT; ‘unsupported_command’: Unsupported cmd; ‘control_to_clear’: Control chn clear txt; ‘control_to_ssl’: Control chn ssl; ‘bad_sequence’: Bad Sequence; ‘rsv_persist_conn_fail’: Serv Sel Persist fail; ‘smp_v6_fail’: Serv Sel SMPv6 fail; ‘smp_v4_fail’: Serv Sel SMPv4 fail; ‘insert_tuple_fail’: Serv Sel insert tuple fail; ‘cl_est_err’: Client EST state erro; ‘ser_connecting_err’: Serv CTNG state error; ‘server_response_err’: Serv RESP state error; ‘cl_request_err’: Client RQ state error; ‘data_conn_start_err’: Data Start state error; ‘data_serv_connecting_err’: Data Serv CTNG error; ‘data_serv_connected_err’: Data Serv CTED error; ‘request’: Total FTP Request; ‘capability’: Capability cmd; ‘start_tls’: Total Start TLS cmd; ‘login’: Total Login cmd;

Type: string

Supported Values: all, num, curr, total, svrsel_fail, no_route, snat_fail, feat, cc, data_ssl, line_too_long, line_mem_freed, invalid_start_line, auth_tls, prot, pbsz, pasv, port, request_dont_care, client_auth_tls, cant_find_pasv, pasv_addr_ne_server, smp_create_fail, data_server_conn_fail, data_send_fail, epsv, cant_find_epsv, data_curr, data_total, auth_unsupported, adat, unsupported_pbsz_value, unsupported_prot_value, unsupported_command, control_to_clear, control_to_ssl, bad_sequence, rsv_persist_conn_fail, smp_v6_fail, smp_v4_fail, insert_tuple_fail, cl_est_err, ser_connecting_err, server_response_err, cl_request_err, data_conn_start_err, data_serv_connecting_err, data_serv_connected_err, request, capability, start_tls, login

hw-compress

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

hw-compress.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘request_count’: Total request count; ‘submit_count’: Total submit count; ‘response_count’: Total response count; ‘failure_count’: Total failure count; ‘failure_code’: Last failure code; ‘ring_full_count’: Compression queue full; ‘max_outstanding_request_count’: Max queued request count; ‘max_outstanding_submit_count’: Max queued submit count;

Type: string

Supported Values: all, request_count, submit_count, response_count, failure_count, failure_code, ring_full_count, max_outstanding_request_count, max_outstanding_submit_count

mysql

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

mysql.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘curr_proxy’: Curr Proxy Conns; ‘total_proxy’: Total Proxy Conns; ‘curr_be_enc’: Curr BE Encryption Conns; ‘total_be_enc’: Total BE Encryption Conns; ‘curr_fe_enc’: Curr FE Encryption Conns; ‘total_fe_enc’: Total FE Encryption Conns; ‘client_fin’: Client FIN; ‘server_fin’: Server FIN; ‘session_err’: Session err; ‘queries’: DB Queries; ‘commands’: DB commands reply;

Type: string

Supported Values: all, curr_proxy, total_proxy, curr_be_enc, total_be_enc, curr_fe_enc, total_fe_enc, client_fin, server_fin, session_err, queries, commands

health-stat

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

health-stat.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘num_burst’: Number of burst; ‘max_jiffie’: Maximum number of jiffies; ‘min_jiffie’: Minimum number of jiffies; ‘avg_jiffie’: Average number of jiffies; ‘open_socket’: Number of open sockets; ‘open_socket_failed’: Number of failed open sockets; ‘close_socket’: Number of closed sockets; ‘connect_failed’: Number of failed connections; ‘send_packet’: Number of packets sent; ‘send_packet_failed’: Number of packet send failures; ‘recv_packet’: Number of received packets; ‘recv_packet_failed’: Number of failed packet receives; ‘retry_times’: Retry times; ‘timeout’: Timouet value; ‘unexpected_error’: Number of unexpected errors; ‘conn_imdt_succ’: Number of connection immediete success; ‘sock_close_before_17’: Number of sockets closed before l7; ‘sock_close_without_notify’: Number of sockets closed without notify; ‘curr_health_rate’: Current health rate; ‘ext_health_rate’: External health rate; ‘ext_health_rate_val’: External health rate value; ‘total_number’: Total number; ‘status_up’: Number of status ups; ‘status_down’: Number of status downs; ‘status_unkn’: Number of status unknowns; ‘status_other’: Number of other status; ‘running_time’: Running time;

Type: string

Supported Values: all, num_burst, max_jiffie, min_jiffie, avg_jiffie, open_socket, open_socket_failed, close_socket, connect_failed, send_packet, send_packet_failed, recv_packet, recv_packet_failed, retry_times, timeout, unexpected_error, conn_imdt_succ, sock_close_before_17, sock_close_without_notify, curr_health_rate, ext_health_rate, ext_health_rate_val, total_number, status_up, status_down, status_unkn, status_other, running_time

dns-cache

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

dns-cache.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘total_q’: Total query; ‘total_r’: Total server response; ‘hit’: Total cache hit; ‘bad_q’: Query not passed; ‘encode_q’: Query encoded; ‘multiple_q’: Query with multiple questions; ‘oversize_q’: Query exceed cache size; ‘bad_r’: Response not passed; ‘oversize_r’: Response exceed cache size; ‘encode_r’: Response encoded; ‘multiple_r’: Response with multiple questions; ‘answer_r’: Response with multiple answers; ‘ttl_r’: Response with short TTL; ‘ageout’: Total aged out; ‘bad_answer’: Bad Answer; ‘ageout_weight’: Total aged for lower weight; ‘total_log’: Total stats log sent; ‘total_alloc’: Total allocated; ‘total_freed’: Total freed; ‘current_allocate’: Current allocate; ‘current_data_allocate’: Current data allocate;

Type: string

Supported Values: all, total_q, total_r, hit, bad_q, encode_q, multiple_q, oversize_q, bad_r, oversize_r, encode_r, multiple_r, answer_r, ttl_r, ageout, bad_answer, ageout_weight, total_log, total_alloc, total_freed, current_allocate, current_data_allocate

aflow

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

aflow.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘pause_conn’: Pause connection; ‘pause_conn_fail’: Pause connection fail; ‘resume_conn’: Resume connection; ‘event_resume_conn’: Resume conn by event; ‘timer_resume_conn’: Resume conn by timer; ‘try_to_resume_conn’: Resume conn by trying; ‘retry_resume_conn’: Resume conn by retry; ‘error_resume_conn’: Resume conn by error; ‘open_new_server_conn’: Open new server conn; ‘reuse_server_idle_conn’: Reuse idle server conn; ‘inc_aflow_limit’: Inc aFlow limit;

Type: string

Supported Values: all, pause_conn, pause_conn_fail, resume_conn, event_resume_conn, timer_resume_conn, try_to_resume_conn, retry_resume_conn, error_resume_conn, open_new_server_conn, reuse_server_idle_conn, inc_aflow_limit

sip

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

sip.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘msg_proxy_current’: Number of current sip proxy connections; ‘msg_proxy_total’: Total number of sip proxy connections; ‘msg_proxy_mem_allocd’: msg_proxy_mem_allocd; ‘msg_proxy_mem_cached’: msg_proxy_mem_cached; ‘msg_proxy_mem_freed’: msg_proxy_mem_freed; ‘msg_proxy_client_recv’: Number of SIP messages received from client; ‘msg_proxy_client_send_success’: Number of SIP messages received from client and forwarded to server; ‘msg_proxy_client_incomplete’: Number of packet which contains incomplete message; ‘msg_proxy_client_drop’: Number of AX drop; ‘msg_proxy_client_connection’: Connecting server; ‘msg_proxy_client_fail’: Number of SIP messages received from client but failed to forward to server; ‘msg_proxy_client_fail_parse’: msg_proxy_client_fail_parse; ‘msg_proxy_client_fail_process’: msg_proxy_client_fail_process; ‘msg_proxy_client_fail_snat’: msg_proxy_client_fail_snat; ‘msg_proxy_client_exceed_tmp_buff’: msg_proxy_client_exceed_tmp_buff; ‘msg_proxy_client_fail_send_pkt’: msg_proxy_client_fail_send_pkt; ‘msg_proxy_client_fail_start_server_Conn’: msg_proxy_client_fail_start_server_Conn; ‘msg_proxy_server_recv’: Number of SIP messages received from server; ‘msg_proxy_server_send_success’: Number of SIP messages received from server and forwarded to client; ‘msg_proxy_server_incomplete’: Number of packet which contains incomplete message; ‘msg_proxy_server_drop’: Number of AX drop; ‘msg_proxy_server_fail’: Number of SIP messages received from server but failed to forward to client; ‘msg_proxy_server_fail_parse’: msg_proxy_server_fail_parse; ‘msg_proxy_server_fail_process’: msg_proxy_server_fail_process; ‘msg_proxy_server_fail_selec_connt’: msg_proxy_server_fail_selec_connt; ‘msg_proxy_server_fail_snat’: msg_proxy_server_fail_snat; ‘msg_proxy_server_exceed_tmp_buff’: msg_proxy_server_exceed_tmp_buff; ‘msg_proxy_server_fail_send_pkt’: msg_proxy_server_fail_send_pkt; ‘msg_proxy_create_server_conn’: Number of server connection system tries to create; ‘msg_proxy_start_server_conn’: Number of server connection created successfully; ‘msg_proxy_fail_start_server_conn’: Number of server connection create failed; ‘msg_proxy_server_conn_fail_snat’: msg_proxy_server_conn_fail_snat; ‘msg_proxy_fail_construct_server_conn’: msg_proxy_fail_construct_server_conn; ‘msg_proxy_fail_reserve_pconn’: msg_proxy_fail_reserve_pconn; ‘msg_proxy_start_server_conn_failed’: msg_proxy_start_server_conn_failed; ‘msg_proxy_server_conn_already_exists’: msg_proxy_server_conn_already_exists; ‘msg_proxy_fail_insert_server_conn’: msg_proxy_fail_insert_server_conn; ‘msg_proxy_parse_msg_fail’: msg_proxy_parse_msg_fail; ‘msg_proxy_process_msg_fail’: msg_proxy_process_msg_fail; ‘msg_proxy_no_vport’: msg_proxy_no_vport; ‘msg_proxy_fail_select_server’: msg_proxy_fail_select_server; ‘msg_proxy_fail_alloc_mem’: msg_proxy_fail_alloc_mem; ‘msg_proxy_unexpected_err’: msg_proxy_unexpected_err; ‘msg_proxy_l7_cpu_failed’: msg_proxy_l7_cpu_failed; ‘msg_proxy_l4_to_l7’: msg_proxy_l4_to_l7; ‘msg_proxy_l4_from_l7’: msg_proxy_l4_from_l7; ‘msg_proxy_to_l4_send_pkt’: msg_proxy_to_l4_send_pkt; ‘msg_proxy_l4_from_l4_send’: msg_proxy_l4_from_l4_send; ‘msg_proxy_l7_to_L4’: msg_proxy_l7_to_L4; ‘msg_proxy_mag_back’: msg_proxy_mag_back; ‘msg_proxy_fail_dcmsg’: msg_proxy_fail_dcmsg; ‘msg_proxy_deprecated_conn’: msg_proxy_deprecated_conn; ‘msg_proxy_hold_msg’: msg_proxy_hold_msg; ‘msg_proxy_split_pkt’: msg_proxy_split_pkt; ‘msg_proxy_pipline_msg’: msg_proxy_pipline_msg; ‘msg_proxy_client_reset’: msg_proxy_client_reset; ‘msg_proxy_server_reset’: msg_proxy_server_reset; ‘session_created’: SIP Session created; ‘session_freed’: SIP Session freed; ‘session_in_rml’: session_in_rml; ‘session_invalid’: session_invalid; ‘conn_allocd’: conn_allocd; ‘conn_freed’: conn_freed; ‘session_callid_allocd’: session_callid_allocd; ‘session_callid_freed’: session_callid_freed; ‘line_mem_allocd’: line_mem_allocd; ‘line_mem_freed’: line_mem_freed; ‘table_mem_allocd’: table_mem_allocd; ‘table_mem_freed’: table_mem_freed; ‘cmsg_no_uri_header’: cmsg_no_uri_header; ‘cmsg_no_uri_session’: cmsg_no_uri_session; ‘sg_no_uri_header’: sg_no_uri_header; ‘smsg_no_uri_session’: smsg_no_uri_session; ‘line_too_long’: line_too_long; ‘fail_read_start_line’: fail_read_start_line; ‘fail_parse_start_line’: fail_parse_start_line; ‘invalid_start_line’: invalid_start_line; ‘request_unknow_version’: request_unknow_version; ‘response_unknow_version’: response_unknow_version; ‘request_unknow’: request_unknow; ‘fail_parse_headers’: fail_parse_headers; ‘too_many_headers’: too_many_headers; ‘invalid_header’: invalid_header; ‘header_name_too_long’: header_name_too_long; ‘body_too_big’: body_too_big; ‘fail_get_counter’: fail_get_counter; ‘msg_no_call_id’: msg_no_call_id; ‘identify_dir_failed’: identify_dir_failed; ‘no_sip_request’: no_sip_request; ‘deprecated_msg’: deprecated_msg; ‘fail_insert_callid_session’: fail_insert_callid_session; ‘fail_insert_uri_session’: fail_insert_uri_session; ‘fail_insert_header’: fail_insert_header; ‘select_server_conn’: select_server_conn; ‘select_server_conn_by_callid’: select_server_conn_by_callid; ‘select_server_conn_by_uri’: select_server_conn_by_uri; ‘select_server_conn_by_rev_tuple’: select_server_conn_by_rev_tuple; ‘select_server_conn_failed’: select_server_conn_failed; ‘select_client_conn’: select_client_conn; ‘X_forward_for_select_client’: X_forward_for_select_client; ‘call_id_select_client’: call_id_select_client; ‘uri_select_client’: uri_select_client; ‘client_select_failed’: client_select_failed; ‘acl_denied’: acl_denied; ‘assemble_frag_failed’: assemble_frag_failed; ‘wrong_ip_version’: wrong_ip_version; ‘size_too_large’: size_too_large; ‘fail_split_fragment’: fail_split_fragment; ‘client_keepalive_received’: client_keepalive_received; ‘server_keepalive_received’: server_keepalive_received; ‘client_keepalive_send’: client_keepalive_send; ‘server_keepalive_send’: server_keepalive_send; ‘ax_health_check_received’: ax_health_check_received; ‘client_request’: client_request; ‘client_request_ok’: client_request_ok; ‘concatenate_msg’: concatenate_msg; ‘save_uri’: save_uri; ‘save_uri_ok’: save_uri_ok; ‘save_call_id’: save_call_id; ‘save_call_id_ok’: save_call_id_ok; ‘msg_translation’: msg_translation; ‘msg_translation_fail’: msg_translation_fail; ‘msg_trans_start_line’: msg_trans_start_line; ‘msg_trans_start_headers’: msg_trans_start_headers; ‘msg_trans_body’: msg_trans_body; ‘request_register’: request_register; ‘request_invite’: request_invite; ‘request_ack’: request_ack; ‘request_cancel’: request_cancel; ‘request_bye’: request_bye; ‘request_options’: request_options; ‘request_prack’: request_prack; ‘request_subscribe’: request_subscribe; ‘request_notify’: request_notify; ‘request_publish’: request_publish; ‘request_info’: request_info; ‘request_refer’: request_refer; ‘request_message’: request_message; ‘request_update’: request_update; ‘response_unknow’: response_unknow; ‘response_1XX’: response_1XX; ‘response_2XX’: response_2XX; ‘response_3XX’: response_3XX; ‘response_4XX’: response_4XX; ‘response_5XX’: response_5XX; ‘response_6XX’: response_6XX; ‘ha_send_sip_session’: ha_send_sip_session; ‘ha_send_sip_session_ok’: ha_send_sip_session_ok; ‘ha_fail_get_msg_header’: ha_fail_get_msg_header; ‘ha_recv_sip_session’: ha_recv_sip_session; ‘ha_insert_sip_session_ok’: ha_insert_sip_session_ok; ‘ha_update_sip_session_ok’: ha_update_sip_session_ok; ‘ha_invalid_pkt’: ha_invalid_pkt; ‘ha_fail_alloc_sip_session’: ha_fail_alloc_sip_session; ‘ha_fail_alloc_call_id’: ha_fail_alloc_call_id; ‘ha_fail_clone_sip_session’: ha_fail_clone_sip_session; ‘save_smp_call_id_rtp’: save_smp_call_id_rtp; ‘update_smp_call_id_rtp’: update_smp_call_id_rtp; ‘smp_call_id_rtp_session_match’: smp_call_id_rtp_session_match; ‘smp_call_id_rtp_session_not_match’: smp_call_id_rtp_session_not_match; ‘process-error-when-message-switch’: process-error-when-message-switch;

Type: string

Supported Values: all, msg_proxy_current, msg_proxy_total, msg_proxy_mem_allocd, msg_proxy_mem_cached, msg_proxy_mem_freed, msg_proxy_client_recv, msg_proxy_client_send_success, msg_proxy_client_incomplete, msg_proxy_client_drop, msg_proxy_client_connection, msg_proxy_client_fail, msg_proxy_client_fail_parse, msg_proxy_client_fail_process, msg_proxy_client_fail_snat, msg_proxy_client_exceed_tmp_buff, msg_proxy_client_fail_send_pkt, msg_proxy_client_fail_start_server_Conn, msg_proxy_server_recv, msg_proxy_server_send_success, msg_proxy_server_incomplete, msg_proxy_server_drop, msg_proxy_server_fail, msg_proxy_server_fail_parse, msg_proxy_server_fail_process, msg_proxy_server_fail_selec_connt, msg_proxy_server_fail_snat, msg_proxy_server_exceed_tmp_buff, msg_proxy_server_fail_send_pkt, msg_proxy_create_server_conn, msg_proxy_start_server_conn, msg_proxy_fail_start_server_conn, msg_proxy_server_conn_fail_snat, msg_proxy_fail_construct_server_conn, msg_proxy_fail_reserve_pconn, msg_proxy_start_server_conn_failed, msg_proxy_server_conn_already_exists, msg_proxy_fail_insert_server_conn, msg_proxy_parse_msg_fail, msg_proxy_process_msg_fail, msg_proxy_no_vport, msg_proxy_fail_select_server, msg_proxy_fail_alloc_mem, msg_proxy_unexpected_err, msg_proxy_l7_cpu_failed, msg_proxy_l4_to_l7, msg_proxy_l4_from_l7, msg_proxy_to_l4_send_pkt, msg_proxy_l4_from_l4_send, msg_proxy_l7_to_L4, msg_proxy_mag_back, msg_proxy_fail_dcmsg, msg_proxy_deprecated_conn, msg_proxy_hold_msg, msg_proxy_split_pkt, msg_proxy_pipline_msg, msg_proxy_client_reset, msg_proxy_server_reset, session_created, session_freed, session_in_rml, session_invalid, conn_allocd, conn_freed, session_callid_allocd, session_callid_freed, line_mem_allocd, line_mem_freed, table_mem_allocd, table_mem_freed, cmsg_no_uri_header, cmsg_no_uri_session, sg_no_uri_header, smsg_no_uri_session, line_too_long, fail_read_start_line, fail_parse_start_line, invalid_start_line, request_unknow_version, response_unknow_version, request_unknow, fail_parse_headers, too_many_headers, invalid_header, header_name_too_long, body_too_big, fail_get_counter, msg_no_call_id, identify_dir_failed, no_sip_request, deprecated_msg, fail_insert_callid_session, fail_insert_uri_session, fail_insert_header, select_server_conn, select_server_conn_by_callid, select_server_conn_by_uri, select_server_conn_by_rev_tuple, select_server_conn_failed, select_client_conn, X_forward_for_select_client, call_id_select_client, uri_select_client, client_select_failed, acl_denied, assemble_frag_failed, wrong_ip_version, size_too_large, fail_split_fragment, client_keepalive_received, server_keepalive_received, client_keepalive_send, server_keepalive_send, ax_health_check_received, client_request, client_request_ok, concatenate_msg, save_uri, save_uri_ok, save_call_id, save_call_id_ok, msg_translation, msg_translation_fail, msg_trans_start_line, msg_trans_start_headers, msg_trans_body, request_register, request_invite, request_ack, request_cancel, request_bye, request_options, request_prack, request_subscribe, request_notify, request_publish, request_info, request_refer, request_message, request_update, response_unknow, response_1XX, response_2XX, response_3XX, response_4XX, response_5XX, response_6XX, ha_send_sip_session, ha_send_sip_session_ok, ha_fail_get_msg_header, ha_recv_sip_session, ha_insert_sip_session_ok, ha_update_sip_session_ok, ha_invalid_pkt, ha_fail_alloc_sip_session, ha_fail_alloc_call_id, ha_fail_clone_sip_session, save_smp_call_id_rtp, update_smp_call_id_rtp, smp_call_id_rtp_session_match, smp_call_id_rtp_session_not_match, process-error-when-message-switch

perf

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

perf.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘total-throughput-bits-per-sec’: Total throughput bits per sec; ‘l4-conns-per-sec’: L4 conns per sec; ‘l7-conns-per-sec’: L7 conns per sec; ‘l7-trans-per-sec’: L7 trans per sec; ‘ssl-conns-per-sec’: SSL conns per sec; ‘ip-nat-conns-per-sec’: IP NAT conns per sec; ‘total-new-conns-per-sec’: Total new conns per sec; ‘total-curr-conns’: Total curr conns; ‘l4-bandwidth’: L4 bandwidth; ‘l7-bandwidth’: L7 bandwidth;

Type: string

Supported Values: all, total-throughput-bits-per-sec, l4-conns-per-sec, l7-conns-per-sec, l7-trans-per-sec, ssl-conns-per-sec, ip-nat-conns-per-sec, total-new-conns-per-sec, total-curr-conns, l4-bandwidth, l7-bandwidth

health-gateway

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

health-gateway.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘total_sent’: Number of Total health-check sent; ‘total_retry_sent’: Number of Total health-check retry sent; ‘total_timeout’: Number of Total health-check timeout;

Type: string

Supported Values: all, total_sent, total_retry_sent, total_timeout

fix

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

fix.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘curr_proxy’: Current proxy conns; ‘total_proxy’: Total proxy conns; ‘svrsel_fail’: Server selection failure; ‘noroute’: No route failure; ‘snat_fail’: Source NAT failure; ‘client_err’: Client fail; ‘server_err’: Server fail; ‘insert_clientip’: Insert client IP; ‘default_switching’: Default switching; ‘sender_switching’: Sender ID switching; ‘target_switching’: Target ID switching;

Type: string

Supported Values: all, curr_proxy, total_proxy, svrsel_fail, noroute, snat_fail, client_err, server_err, insert_clientip, default_switching, sender_switching, target_switching

l4

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

l4.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘intcp’: TCP received; ‘synreceived’: TCP SYN received; ‘tcp_fwd_last_ack’: L4 rcv fwd last ACK; ‘tcp_rev_last_ack’: L4 rcv rev last ACK; ‘tcp_rev_fin’: L4 rcv rev FIN; ‘tcp_fwd_fin’: L4 rcv fwd FIN; ‘tcp_fwd_ackfin’: L4 rcv fwd FIN|ACK; ‘inudp’: UDP received; ‘syncookiessent’: TCP SYN cookie snt; ‘syncookiessent_ts’: TCP SYN cookie snt ts; ‘syncookiessentfailed’: TCP SYN cookie snt fail; ‘outrst’: TCP out RST; ‘outrst_nosyn’: TCP out RST no SYN; ‘outrst_broker’: TCP out RST L4 proxy; ‘outrst_ack_attack’: TCP out RST ACK attack; ‘outrst_aflex’: TCP out RST aFleX; ‘outrst_stale_sess’: TCP out RST stale sess; ‘syn_stale_sess’: SYN stale sess drop; ‘outrst_tcpproxy’: TCP out RST TCP proxy; ‘svrselfail’: Server sel failure; ‘noroute’: IP out noroute; ‘snat_fail’: Source NAT failure; ‘snat_no_fwd_route’: Source NAT no fwd route; ‘snat_no_rev_route’: Source NAT no rev route; ‘snat_icmp_error_process’: Source NAT ICMP Process; ‘snat_icmp_no_match’: Source NAT ICMP No Match; ‘smart_nat_id_mismatch’: Auto NAT id mismatch; ‘syncookiescheckfailed’: TCP SYN cookie failed; ‘novport_drop’: NAT no session drops; ‘no_vport_drop’: vport not matching drops; ‘nosyn_drop’: No SYN pkt drops; ‘nosyn_drop_fin’: No SYN pkt drops - FIN; ‘nosyn_drop_rst’: No SYN pkt drops - RST; ‘nosyn_drop_ack’: No SYN pkt drops - ACK; ‘connlimit_drop’: Conn Limit drops; ‘connlimit_reset’: Conn Limit resets; ‘conn_rate_limit_drop’: Conn rate limit drops; ‘conn_rate_limit_reset’: Conn rate limit resets; ‘proxy_nosock_drop’: Proxy no sock drops; ‘drop_aflex’: aFleX drops; ‘sess_aged_out’: Session aged out; ‘tcp_sess_aged_out’: TCP Session aged out; ‘udp_sess_aged_out’: UDP Session aged out; ‘other_sess_aged_out’: Other Session aged out; ‘tcp_no_slb’: TCP no SLB; ‘udp_no_slb’: UDP no SLB; ‘throttle_syn’: SYN Throttle; ‘drop_gslb’: Drop GSLB; ‘inband_hm_retry’: Inband HM retry; ‘inband_hm_reassign’: Inband HM reassign; ‘auto_reassign’: Auto-reselect server; ‘fast_aging_set’: Fast aging set; ‘fast_aging_reset’: Fast aging reset; ‘dns_policy_drop’: DNS Policy Drop; ‘tcp_invalid_drop’: TCP invalid drop; ‘anomaly_out_seq’: Anomaly out of sequence; ‘anomaly_zero_win’: Anomaly zero window; ‘anomaly_bad_content’: Anomaly bad content; ‘anomaly_pbslb_drop’: Anomaly pbslb drop; ‘no_resourse_drop’: No resource drop; ‘reset_unknown_conn’: Reset unknown conn; ‘reset_l7_on_failover’: RST L7 on failover; ‘ignore_msl’: ignore msl; ‘l2_dsr’: L2 DSR received; ‘l3_dsr’: L3 DSR received; ‘port_preserve_attempt’: NAT Port Preserve Try; ‘port_preserve_succ’: NAT Port Preserve Succ; ‘tcpsyndata_drop’: TCP SYN With Data Drop; ‘tcpotherflags_drop’: TCP SYN Other Flags Drop; ‘bw_rate_limit_exceed’: BW-Limit Exceed drop; ‘bw_watermark_drop’: BW-Watermark drop; ‘l4_cps_exceed’: L4 CPS exceed drop; ‘nat_cps_exceed’: NAT CPS exceed drop; ‘l7_cps_exceed’: L7 CPS exceed drop; ‘ssl_cps_exceed’: SSL CPS exceed drop; ‘ssl_tpt_exceed’: SSL TPT exceed drop; ‘ssl_watermark_drop’: SSL TPT-Watermark drop; ‘concurrent_conn_exceed’: L3V Conn Limit Drop; ‘svr_syn_handshake_fail’: L4 server handshake fail; ‘stateless_conn_timeout’: L4 stateless Conn TO; ‘tcp_ax_rexmit_syn’: L4 AX re-xmit SYN; ‘tcp_syn_rcv_ack’: L4 rcv ACK on SYN; ‘tcp_syn_rcv_rst’: L4 rcv RST on SYN; ‘tcp_sess_noest_aged_out’: TCP no-Est Sess aged out; ‘tcp_sess_noest_csyn_rcv_aged_out’: no-Est CSYN rcv aged out; ‘tcp_sess_noest_ssyn_xmit_aged_out’: no-Est SSYN snt aged out; ‘tcp_rexmit_syn’: L4 rcv rexmit SYN; ‘tcp_rexmit_syn_delq’: L4 rcv rexmit SYN (delq); ‘tcp_rexmit_synack’: L4 rcv rexmit SYN|ACK; ‘tcp_rexmit_synack_delq’: L4 rcv rexmit SYN|ACK DQ; ‘tcp_fwd_fin_dup’: L4 rcv fwd FIN dup; ‘tcp_rev_fin_dup’: L4 rcv rev FIN dup; ‘tcp_rev_ackfin’: L4 rcv rev FIN|ACK; ‘tcp_fwd_rst’: L4 rcv fwd RST; ‘tcp_rev_rst’: L4 rcv rev RST; ‘udp_req_oneplus_no_resp’: L4 UDP reqs no rsp; ‘udp_req_one_oneplus_resp’: L4 UDP req rsps; ‘udp_req_resp_notmatch’: L4 UDP req/rsp not match; ‘udp_req_more_resp’: L4 UDP req greater than rsps; ‘udp_resp_more_req’: L4 UDP rsps greater than reqs; ‘udp_req_oneplus’: L4 UDP reqs; ‘udp_resp_oneplus’: L4 UDP rsps; ‘out_seq_ack_drop’: Out of sequence ACK drop; ‘tcp_est’: L4 TCP Established; ‘synattack’: L4 SYN attack; ‘syn_rate’: TCP SYN rate per sec; ‘syncookie_buff_drop’: TCP SYN cookie buff drop; ‘syncookie_buff_queue’: TCP SYN cookie buff queue; ‘skip_insert_client_ip’: Skip Insert-client-ip; ‘synreceived_hw’: TCP SYN (HW SYN cookie); ‘dns_id_switch’: DNS query id switch; ‘server_down_del’: Server Down Del switch;

Type: string

Supported Values: all, intcp, synreceived, tcp_fwd_last_ack, tcp_rev_last_ack, tcp_rev_fin, tcp_fwd_fin, tcp_fwd_ackfin, inudp, syncookiessent, syncookiessent_ts, syncookiessentfailed, outrst, outrst_nosyn, outrst_broker, outrst_ack_attack, outrst_aflex, outrst_stale_sess, syn_stale_sess, outrst_tcpproxy, svrselfail, noroute, snat_fail, snat_no_fwd_route, snat_no_rev_route, snat_icmp_error_process, snat_icmp_no_match, smart_nat_id_mismatch, syncookiescheckfailed, novport_drop, no_vport_drop, nosyn_drop, nosyn_drop_fin, nosyn_drop_rst, nosyn_drop_ack, connlimit_drop, connlimit_reset, conn_rate_limit_drop, conn_rate_limit_reset, proxy_nosock_drop, drop_aflex, sess_aged_out, tcp_sess_aged_out, udp_sess_aged_out, other_sess_aged_out, tcp_no_slb, udp_no_slb, throttle_syn, drop_gslb, inband_hm_retry, inband_hm_reassign, auto_reassign, fast_aging_set, fast_aging_reset, dns_policy_drop, tcp_invalid_drop, anomaly_out_seq, anomaly_zero_win, anomaly_bad_content, anomaly_pbslb_drop, no_resourse_drop, reset_unknown_conn, reset_l7_on_failover, ignore_msl, l2_dsr, l3_dsr, port_preserve_attempt, port_preserve_succ, tcpsyndata_drop, tcpotherflags_drop, bw_rate_limit_exceed, bw_watermark_drop, l4_cps_exceed, nat_cps_exceed, l7_cps_exceed, ssl_cps_exceed, ssl_tpt_exceed, ssl_watermark_drop, concurrent_conn_exceed, svr_syn_handshake_fail, stateless_conn_timeout, tcp_ax_rexmit_syn, tcp_syn_rcv_ack, tcp_syn_rcv_rst, tcp_sess_noest_aged_out, tcp_sess_noest_csyn_rcv_aged_out, tcp_sess_noest_ssyn_xmit_aged_out, tcp_rexmit_syn, tcp_rexmit_syn_delq, tcp_rexmit_synack, tcp_rexmit_synack_delq, tcp_fwd_fin_dup, tcp_rev_fin_dup, tcp_rev_ackfin, tcp_fwd_rst, tcp_rev_rst, udp_req_oneplus_no_resp, udp_req_one_oneplus_resp, udp_req_resp_notmatch, udp_req_more_resp, udp_resp_more_req, udp_req_oneplus, udp_resp_oneplus, out_seq_ack_drop, tcp_est, synattack, syn_rate, syncookie_buff_drop, syncookie_buff_queue, skip_insert_client_ip, synreceived_hw, dns_id_switch, server_down_del

switch

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

switch.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘fwlb’: FWLB; ‘licexpire_drop’: License Expire Drop; ‘bwl_drop’: BW Limit Drop; ‘rx_kernel’: Received kernel; ‘rx_arp_req’: ARP REQ Rcvd; ‘rx_arp_resp’: ARP RESP Rcvd; ‘vlan_flood’: VLAN Flood; ‘l2_def_vlan_drop’: L2 Default Vlan FWD Drop; ‘ipv4_noroute_drop’: IPv4 No Route Drop; ‘ipv6_noroute_drop’: IPv6 No Route Drop; ‘prot_down_drop’: Prot Down Drop; ‘l2_forward’: L2 Forward; ‘l3_forward_ip’: L3 IP Forward; ‘l3_forward_ipv6’: L3 IPv6 Forward; ‘l4_process’: L4 Process; ‘unknown_prot_drop’: Unknown Prot Drop; ‘ttl_exceeded_drop’: TTL Exceeded Drop; ‘linkdown_drop’: Link Down Drop; ‘sport_drop’: SPORT Drop; ‘incorrect_len_drop’: Incorrect Length Drop; ‘ip_defrag’: IP Defrag; ‘acl_deny’: ACL Denys; ‘ipfrag_tcp’: IP(TCP) Fragment Rcvd; ‘ipfrag_overlap’: IP Fragment Overlap; ‘ipfrag_timeout’: IP Fragment Timeout; ‘ipfrag_overload’: IP Frag Overload Drops; ‘ipfrag_reasmoks’: IP Fragment Reasm OKs; ‘ipfrag_reasmfails’: IP Fragment Reasm Fails; ‘land_drop’: Anomaly Land Attack Drop; ‘ipoptions_drop’: Anomaly IP OPT Drops; ‘badpkt_drop’: Bad Pkt Drop; ‘pingofdeath_drop’: Anomaly PingDeath Drop; ‘allfrag_drop’: Anomaly All Frag Drop; ‘tcpnoflag_drop’: Anomaly TCP noFlag Drop; ‘tcpsynfrag_drop’: Anomaly SYN Frag Drop; ‘tcpsynfin_drop’: Anomaly TCP SYNFIN Drop; ‘ipsec_drop’: IPSec Drop; ‘bpdu_rcvd’: BPDUs Received; ‘bpdu_sent’: BPDUs Sent; ‘ctrl_syn_rate_drop’: SYN rate exceeded Drop; ‘ip_defrag_invalid_len’: IP Invalid Length Frag; ‘ipv4_frag_6rd_ok’: IPv4 Frag 6RD OK; ‘ipv4_frag_6rd_drop’: IPv4 Frag 6RD Dropped; ‘no_ip_drop’: No IP Drop; ‘ipv6frag_udp’: IPv6 Frag UDP; ‘ipv6frag_udp_dropped’: IPv6 Frag UDP Dropped; ‘ipv6frag_tcp_dropped’: IPv6 Frag TCP Dropped; ‘ipv6frag_ipip_ok’: IPv6 Frag IPIP OKs; ‘ipv6frag_ipip_dropped’: IPv6 Frag IPIP Drop; ‘ip_frag_oversize’: IP Fragment oversize; ‘ip_frag_too_many’: IP Fragment too many; ‘ipv4_novlanfwd_drop’: IPv4 No L3 VLAN FWD Drop; ‘ipv6_novlanfwd_drop’: IPv6 No L3 VLAN FWD Drop; ‘fpga_error_pkt1’: FPGA Error PKT1; ‘fpga_error_pkt2’: FPGA Error PKT2; ‘max_arp_drop’: Max ARP Drop; ‘ipv6frag_tcp’: IPv6 Frag TCP; ‘ipv6frag_icmp’: IPv6 Frag ICMP; ‘ipv6frag_ospf’: IPv6 Frag OSPF; ‘ipv6frag_esp’: IPv6 Frag ESP; ‘l4_in_ctrl_cpu’: L4 In Ctrl CPU; ‘mgmt_svc_drop’: Management Service Drop; ‘jumbo_frag_drop’: Jumbo Frag Drop; ‘ipv6_jumbo_frag_drop’: IPv6 Jumbo Frag Drop; ‘ipipv6_jumbo_frag_drop’: IPIPv6 Jumbo Frag Drop; ‘ipv6_ndisc_dad_solicits’: IPv6 DAD on Solicits; ‘ipv6_ndisc_dad_adverts’: IPv6 DAD on Adverts; ‘ipv6_ndisc_mac_changes’: IPv6 DAD MAC Changed; ‘ipv6_ndisc_out_of_memory’: IPv6 DAD Out-of-memory; ‘sp_non_ctrl_pkt_drop’: Shared IP mode non ctrl packet to linux drop;

Type: string

Supported Values: all, fwlb, licexpire_drop, bwl_drop, rx_kernel, rx_arp_req, rx_arp_resp, vlan_flood, l2_def_vlan_drop, ipv4_noroute_drop, ipv6_noroute_drop, prot_down_drop, l2_forward, l3_forward_ip, l3_forward_ipv6, l4_process, unknown_prot_drop, ttl_exceeded_drop, linkdown_drop, sport_drop, incorrect_len_drop, ip_defrag, acl_deny, ipfrag_tcp, ipfrag_overlap, ipfrag_timeout, ipfrag_overload, ipfrag_reasmoks, ipfrag_reasmfails, land_drop, ipoptions_drop, badpkt_drop, pingofdeath_drop, allfrag_drop, tcpnoflag_drop, tcpsynfrag_drop, tcpsynfin_drop, ipsec_drop, bpdu_rcvd, bpdu_sent, ctrl_syn_rate_drop, ip_defrag_invalid_len, ipv4_frag_6rd_ok, ipv4_frag_6rd_drop, no_ip_drop, ipv6frag_udp, ipv6frag_udp_dropped, ipv6frag_tcp_dropped, ipv6frag_ipip_ok, ipv6frag_ipip_dropped, ip_frag_oversize, ip_frag_too_many, ipv4_novlanfwd_drop, ipv6_novlanfwd_drop, fpga_error_pkt1, fpga_error_pkt2, max_arp_drop, ipv6frag_tcp, ipv6frag_icmp, ipv6frag_ospf, ipv6frag_esp, l4_in_ctrl_cpu, mgmt_svc_drop, jumbo_frag_drop, ipv6_jumbo_frag_drop, ipipv6_jumbo_frag_drop, ipv6_ndisc_dad_solicits, ipv6_ndisc_dad_adverts, ipv6_ndisc_mac_changes, ipv6_ndisc_out_of_memory, sp_non_ctrl_pkt_drop

rate-limit-log

Specification
Type object

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

rate-limit-log.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘total_log_times’: Total log times; ‘total_log_msg’: Total log messages; ‘local_log_msg’: Local log messages; ‘remote_log_msg’: Remote log messages; ‘local_log_rate’: Local rate (per sec); ‘remote_log_rate’: Remote rate (per sec); ‘msg_too_big’: Log message too big; ‘buff_alloc_fail’: Buffer alloc fail; ‘no_route’: No route; ‘buff_send_fail’: Buffer send fail; ‘alloc_conn’: Log-session alloc; ‘free_conn’: Log-session free; ‘conn_alloc_fail’: Log-session alloc fail; ‘no_repeat_msg’: No repeat message;

Type: string

Supported Values: all, total_log_times, total_log_msg, local_log_msg, remote_log_msg, local_log_rate, remote_log_rate, msg_too_big, buff_alloc_fail, no_route, buff_send_fail, alloc_conn, free_conn, conn_alloc_fail, no_repeat_msg

template

Specification
Type object

cache-list

Description: cache-list is a JSON List . Please see below for l216_cache-list

Type: List

Reference Object: /axapi/v3/slb/template/cache/{name}

cipher-list

Description: cipher-list is a JSON List . Please see below for l216_cipher-list

Type: List

Reference Object: /axapi/v3/slb/template/cipher/{name}

client-ssl-list

Description: client-ssl-list is a JSON List . Please see below for l216_client-ssl-list

Type: List

Reference Object: /axapi/v3/slb/template/client-ssl/{name}

connection-reuse-list

Description: connection-reuse-list is a JSON List . Please see below for l216_connection-reuse-list

Type: List

Reference Object: /axapi/v3/slb/template/connection-reuse/{name}

dblb-list

Description: dblb-list is a JSON List . Please see below for l216_dblb-list

Type: List

Reference Object: /axapi/v3/slb/template/dblb/{name}

diameter-list

Description: diameter-list is a JSON List . Please see below for l216_diameter-list

Type: List

Reference Object: /axapi/v3/slb/template/diameter/{name}

dns-list

Description: dns-list is a JSON List . Please see below for l216_dns-list

Type: List

Reference Object: /axapi/v3/slb/template/dns/{name}

dynamic-service-list

Description: dynamic-service-list is a JSON List . Please see below for l216_dynamic-service-list

Type: List

Reference Object: /axapi/v3/slb/template/dynamic-service/{name}

external-service-list

Description: external-service-list is a JSON List . Please see below for l216_external-service-list

Type: List

Reference Object: /axapi/v3/slb/template/external-service/{name}

fix-list

Description: fix-list is a JSON List . Please see below for l216_fix-list

Type: List

Reference Object: /axapi/v3/slb/template/fix/{name}

ftp-list

Description: ftp-list is a JSON List . Please see below for l216_ftp-list

Type: List

Reference Object: /axapi/v3/slb/template/ftp/{name}

http-list

Description: http-list is a JSON List . Please see below for l216_http-list

Type: List

Reference Object: /axapi/v3/slb/template/http/{name}

http-policy-list

Description: http-policy-list is a JSON List . Please see below for l216_http-policy-list

Type: List

Reference Object: /axapi/v3/slb/template/http-policy/{name}

imap-pop3-list

Description: imap-pop3-list is a JSON List . Please see below for l216_imap-pop3-list

Type: List

Reference Object: /axapi/v3/slb/template/imap-pop3/{name}

logging-list

Description: logging-list is a JSON List . Please see below for l216_logging-list

Type: List

Reference Object: /axapi/v3/slb/template/logging/{name}

monitor-list

Description: monitor-list is a JSON List . Please see below for l216_monitor-list

Type: List

Reference Object: /axapi/v3/slb/template/monitor/{id}

persist

Description: persist is a JSON Block . Please see below for persist

Type: Object

Reference Object: /axapi/v3/slb/template/persist

policy-list

Description: policy-list is a JSON List . Please see below for l216_policy-list

Type: List

Reference Object: /axapi/v3/slb/template/policy/{name}

port-list

Description: port-list is a JSON List . Please see below for l216_port-list

Type: List

Reference Object: /axapi/v3/slb/template/port/{name}

reqmod-icap-list

Description: reqmod-icap-list is a JSON List . Please see below for l216_reqmod-icap-list

Type: List

Reference Object: /axapi/v3/slb/template/reqmod-icap/{name}

respmod-icap-list

Description: respmod-icap-list is a JSON List . Please see below for l216_respmod-icap-list

Type: List

Reference Object: /axapi/v3/slb/template/respmod-icap/{name}

server-list

Description: server-list is a JSON List . Please see below for server-list

Type: List

Reference Object: /axapi/v3/slb/template/server/{name}

server-ssl-list

Description: server-ssl-list is a JSON List . Please see below for l216_server-ssl-list

Type: List

Reference Object: /axapi/v3/slb/template/server-ssl/{name}

sip-list

Description: sip-list is a JSON List . Please see below for l216_sip-list

Type: List

Reference Object: /axapi/v3/slb/template/sip/{name}

smpp-list

Description: smpp-list is a JSON List . Please see below for l216_smpp-list

Type: List

Reference Object: /axapi/v3/slb/template/smpp/{name}

smtp-list

Description: smtp-list is a JSON List . Please see below for l216_smtp-list

Type: List

Reference Object: /axapi/v3/slb/template/smtp/{name}

ssli-list

Description: ssli-list is a JSON List . Please see below for l216_ssli-list

Type: List

Reference Object: /axapi/v3/slb/template/ssli/{name}

tcp-list

Description: tcp-list is a JSON List . Please see below for l216_tcp-list

Type: List

Reference Object: /axapi/v3/slb/template/tcp/{name}

tcp-proxy-list

Description: tcp-proxy-list is a JSON List . Please see below for l216_tcp-proxy-list

Type: List

Reference Object: /axapi/v3/slb/template/tcp-proxy/{name}

udp-list

Description: udp-list is a JSON List . Please see below for l216_udp-list

Type: List

Reference Object: /axapi/v3/slb/template/udp/{name}

virtual-port-list

Description: virtual-port-list is a JSON List . Please see below for l216_virtual-port-list

Type: List

Reference Object: /axapi/v3/slb/template/virtual-port/{name}

virtual-server-list

Description: virtual-server-list is a JSON List . Please see below for virtual-server-list

Type: List

Reference Object: /axapi/v3/slb/template/virtual-server/{name}

template.logging-list

Specification
Type list
Block object keys

auto

Description: ‘auto’: Configure auto NAT for logging, default is auto enabled;

Type: string

Supported Values: auto

Default: auto

Mutual Exclusion: auto and pool are mutually exclusive

format

Description: Specfiy a format string for web logging (format string(less than 250 characters) for web logging)

Type: string

Format: string-rlx

keep-end

Description: Number of unmasked characters at the end (default: 0)

Type: number

Range: 0-65535

Default: 0

keep-start

Description: Number of unmasked characters at the beginning (default: 0)

Type: number

Range: 0-65535

Default: 0

local-logging

Description: 1 to enable local logging (1 to enable local logging, default 0)

Type: number

Range: 0-1

Default: 0

mask

Description: Character to mask the matched pattern (default: X)

Type: string

Default: X

name

Description: Logging Template Name

Type: string

Format: string-rlx

pcre-mask

Description: Mask matched PCRE pattern in the log

Type: string

Format: string-rlx

pool

Description: Specify NAT pool or pool group

Type: string

Mutual Exclusion: pool and auto are mutually exclusive

service-group

Description: Bind a Service Group to the logging template (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

tcp-proxy

Description: TCP proxy template (TCP Proxy Config name)

Type: string

Default: default

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.cache-list

Specification
Type list
Block object keys

accept-reload-req

Description: Accept reload requests via cache-control directives in HTTP headers

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

age

Description: Specify duration in seconds cached content valid, default is 3600 seconds (seconds that the cached content is valid (default 3600 seconds))

Type: number

Range: 1-999999

Default: 3600

default-policy-nocache

Description: Specify default policy to be to not cache

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

disable-insert-age

Description: Disable insertion of age header in response served from RAM cache

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

disable-insert-via

Description: Disable insertion of via header in response served from RAM cache

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

local-uri-policy

Description: local-uri-policy is a JSON List . Please see below for l216_local-uri-policy

Type: List

logging

Description: Specify logging template (Logging Config name)

Type: string

Reference Object: /axapi/v3/slb/template/logging

max-cache-size

Description: Specify maximum cache size in megabytes, default is 80MB (RAM cache size in megabytes (default 80MB))

Type: number

Range: 1-4096

Default: 80

max-content-size

Description: Maximum size (bytes) of response that can be cached - default 81920 (80KB)

Type: number

Range: 0-268435455

Default: 81920

min-content-size

Description: Minimum size (bytes) of response that can be cached - default 512

Type: number

Range: 0-268435455

Default: 512

name

Description: Specify cache template name

Type: string

Format: string-rlx

remove-cookies

Description: Remove cookies in response and cache

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

replacement-policy

Description: ‘LFU’: LFU;

Type: string

Supported Values: LFU

Default: LFU

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uri-policy

Description: uri-policy is a JSON List . Please see below for l216_uri-policy

Type: List

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

verify-host

Description: Verify request using host before sending response from RAM cache

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template.cache-list.local-uri-policy

Specification
Type list
Block object keys

local-uri

Description: Specify Local URI for caching (Specify URI pattern that the policy should be applied to, maximum 63 charaters)

Type: string

Format: string-rlx

template.cache-list.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘hits’: hits; ‘miss’: miss; ‘bytes_served’: bytes_served; ‘total_req’: total_req; ‘caching_req’: caching_req; ‘nc_req_header’: nc_req_header; ‘nc_res_header’: nc_res_header; ‘rv_success’: rv_success; ‘rv_failure’: rv_failure; ‘ims_request’: ims_request; ‘nm_response’: nm_response; ‘rsp_type_CL’: rsp_type_CL; ‘rsp_type_CE’: rsp_type_CE; ‘rsp_type_304’: rsp_type_304; ‘rsp_type_other’: rsp_type_other; ‘rsp_no_compress’: rsp_no_compress; ‘rsp_gzip’: rsp_gzip; ‘rsp_deflate’: rsp_deflate; ‘rsp_other’: rsp_other; ‘nocache_match’: nocache_match; ‘match’: match; ‘invalidate_match’: invalidate_match; ‘content_toobig’: content_toobig; ‘content_toosmall’: content_toosmall; ‘entry_create_failures’: entry_create_failures; ‘mem_size’: mem_size; ‘entry_num’: entry_num; ‘replaced_entry’: replaced_entry; ‘aging_entry’: aging_entry; ‘cleaned_entry’: cleaned_entry;

Type: string

Supported Values: all, hits, miss, bytes_served, total_req, caching_req, nc_req_header, nc_res_header, rv_success, rv_failure, ims_request, nm_response, rsp_type_CL, rsp_type_CE, rsp_type_304, rsp_type_other, rsp_no_compress, rsp_gzip, rsp_deflate, rsp_other, nocache_match, match, invalidate_match, content_toobig, content_toosmall, entry_create_failures, mem_size, entry_num, replaced_entry, aging_entry, cleaned_entry

template.cache-list.uri-policy

Specification
Type list
Block object keys

cache-action

Description: ‘cache’: Specify if certain URIs should be cached; ‘nocache’: Specify if certain URIs should not be cached;

Type: string

Supported Values: cache, nocache

cache-value

Description: Specify seconds that content should be cached, default is age specified in cache template

Type: number

Range: 1-999999

invalidate

Description: Specify if URI should invalidate chache entries matching pattern (pattern that would match entries to be invalidated (64 chars max))

Type: string

uri

Description: Specify URI for cache policy (Specify URI pattern that the policy should be applied to, maximum 63 charaters)

Type: string

Format: string-rlx

template.port-list

Specification
Type list
Block object keys

add

Description: Slow start connection limit add by a number every interval (Add by this number every interval)

Type: number

Range: 1-4095

Mutual Exclusion: add and times are mutually exclusive

conn-limit

Description: Connection limit

Type: number

Range: 1-8000000

Default: 8000000

conn-limit-no-logging

Description: Do not log connection over limit event

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-rate-limit

Description: Connection rate limit

Type: number

Range: 1-1048575

conn-rate-limit-no-logging

Description: Do not log connection over limit event

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

decrement

Description: Decrease after every round of DNS query (default is 0)

Type: number

Range: 0-7

Default: 0

dest-nat

Description: Destination NAT

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

down-grace-period

Description: Port down grace period

Type: number

Range: 1-86400

down-timer

Description: The timer to bring the marked down server/port to up (default is 0, never bring up) (The timer to bring up server (in second, default is 0))

Type: number

Range: 0-255

Default: 0

dscp

Description: Differentiated Services Code Point (DSCP to Real Server IP Mapping Value)

Type: number

Range: 1-63

dynamic-member-priority

Description: Set dynamic member’s priority (Initial priority (default is 16))

Type: number

Range: 1-16

Default: 16

every

Description: Slow start connection limit increment interval (default 10)

Type: number

Range: 1-60

Default: 10

extended-stats

Description: Enable extended statistics on real server port

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

health-check

Description: Health Check Monitor (Health monitor name)

Type: string

Mutual Exclusion: health-check and health-check-disable are mutually exclusive

Reference Object: /axapi/v3/health/monitor

health-check-disable

Description: Disable configured health check configuration

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: health-check-disable and health-check are mutually exclusive

inband-health-check

Description: Use inband traffic to detect port’s health status

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

initial-slow-start

Description: Initial slow start connection limit (default 128)

Type: number

Range: 1-4095

Default: 128

name

Description: Port template name

Type: string

Format: string-rlx

Default: default

no-ssl

Description: No SSL

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

rate-interval

Description: ‘100ms’: Use 100 ms as sampling interval; ‘second’: Use 1 second as sampling interval;

Type: string

Supported Values: 100ms, second

Default: second

reassign

Description: Maximum reassign times before declear the server/port down (default is 25) (The maximum reassign number)

Type: number

Range: 0-255

Default: 25

request-rate-interval

Description: ‘100ms’: Use 100 ms as sampling interval; ‘second’: Use 1 second as sampling interval;

Type: string

Supported Values: 100ms, second

Default: second

request-rate-limit

Description: Request rate limit

Type: number

Range: 1-1048575

request-rate-no-logging

Description: Do not log connection over limit event

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

resel-on-reset

Description: When receiving reset from server, do the server/port reselection (default is 0, don’t do reselection)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

reset

Description: Send client reset when connection rate over limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

resume

Description: Resume accepting new connection after connection number drops below threshold (Connection resume threshold)

Type: number

Range: 1-1048575

retry

Description: Maximum retry times before reassign this connection to another server/port (default is 2) (The maximum retry number)

Type: number

Range: 0-7

Default: 2

slow-start

Description: Slowly ramp up the connection number after port is up

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

source-nat

Description: Source NAT (IP NAT Pool or pool group name)

Type: string

stats-data-action

Description: ‘stats-data-enable’: Enable statistical data collection for real server port; ‘stats-data-disable’: Disable statistical data collection for real server port;

Type: string

Supported Values: stats-data-enable, stats-data-disable

Default: stats-data-enable

till

Description: Slow start ends when slow start connection limit reaches a number (default 4096) (Slow start ends when connection limit reaches this number)

Type: number

Range: 1-65535

Default: 4096

times

Description: Slow start connection limit multiply by a number every interval (default 2) (Multiply by this number every interval)

Type: number

Range: 2-10

Default: 2

Mutual Exclusion: times and add are mutually exclusive

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

weight

Description: Weight (port weight)

Type: number

Range: 1-100

Default: 1

template.connection-reuse-list

Specification
Type list
Block object keys

keep-alive-conn

Description: Keep a number of server connections open

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

limit-per-server

Description: Max Server Connections allowed (Connections per Server Port (default 1000))

Type: number

Range: 0-65535

Default: 1000

name

Description: Connection Reuse Template Name

Type: string

Format: string-rlx

num-conn-per-port

Description: Connections per Server Port (default 100)

Type: number

Range: 1-1024

Default: 100

preopen

Description: Preopen server connection

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

timeout

Description: Timeout in seconds. Multiple of 60 (def 2400)

Type: number

Range: 60-3600

Default: 2400

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.reqmod-icap-list

Specification
Type list
Block object keys

action

Description: ‘continue’: Continue; ‘drop’: Drop; ‘reset’: Reset;

Type: string

Supported Values: continue, drop, reset

Default: continue

allowed-http-methods

Description: List of allowed HTTP methods. Default is “Allow All”. (List of HTTP methods allowed (default “Allow All”))

Type: string

Format: string-rlx

bypass-ip-cfg

Description: bypass-ip-cfg is a JSON List . Please see below for l216_bypass-ip-cfg

Type: List

fail-close

Description: When template sg is down mark vport down

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

include-protocol-in-uri

Description: Include protocol and port in HTTP URI

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

logging

Description: logging template (Logging template name)

Type: string

Reference Object: /axapi/v3/slb/template/logging

min-payload-size

Description: min-payload-size value 1 - 65536, default is 4096

Type: number

Range: 1-65536

Default: 4096

name

Description: Reqmod ICAP Template Name

Type: string

Format: string-rlx

preview

Description: Preview value 1 - 32768, default is 32768

Type: number

Range: 1-32768

Default: 32768

server-ssl

Description: Server SSL template (Server SSL template name)

Type: string

Reference Object: /axapi/v3/slb/template/server-ssl

service-group

Description: Bind a Service Group to the template (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

service-url

Description: URL to send to ICAP server (Service URL Name)

Type: string

Format: string-rlx

source-ip

Description: Source IP persistence template (Source IP persistence template name)

Type: string

Reference Object: /axapi/v3/slb/template/persist/source-ip

tcp-proxy

Description: TCP proxy template (TCP proxy template name)

Type: string

Reference Object: /axapi/v3/slb/template/tcp-proxy

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.reqmod-icap-list.bypass-ip-cfg

Specification
Type list
Block object keys

bypass-ip

Description: ip address to bypass reqmod-icap service

Type: string

Format: ipv4-address

mask

Description: IP prefix mask

Type: string

Format: ipv4-netmask

template.smpp-list

Specification
Type list
Block object keys

client-enquire-link

Description: Respond client ENQUIRE_LINK packet directly instead of forwarding to server

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: SMPP Template Name

Type: string

Format: string-rlx

password

Description: Configure the password used to bind

Type: string

Format: string-rlx

server-enquire-link

Description: Send server ENQUIRE_LINK packet for every persist connection when enable conn-reuse

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

server-enquire-link-val

Description: Set interval of keep-alive packet for each persistent connection (second, default is 30)

Type: number

Range: 5-300

Default: 30

server-selection-per-request

Description: Force server selection on every SMPP request when enable conn-reuse

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user

Description: Configure the user to bind (The name used to bind)

Type: string

Format: string-rlx

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.smtp-list

Specification
Type list
Block object keys

client-domain-switching

Description: client-domain-switching is a JSON List . Please see below for l216_client-domain-switching

Type: List

client-starttls-type

Description: ‘optional’: STARTTLS is optional requirement; ‘enforced’: Must issue STARTTLS command before mail transaction;

Type: string

Supported Values: optional, enforced

command-disable

Description: command-disable is a JSON List . Please see below for l216_command-disable

Type: List

name

Description: SMTP Template Name

Type: string

Format: string-rlx

server-domain

Description: Config the domain of the email servers (Server’s domain, default is “mail-server-domain”)

Type: string

Format: string-rlx

Default: mail-server-domain

server-starttls-type

Description: ‘optional’: STARTTLS is optional requirement; ‘enforced’: Must issue STARTTLS command before mail transaction;

Type: string

Supported Values: optional, enforced

service-ready-msg

Description: Set SMTP service ready message (SMTP service ready message, default is “ESMTP mail service ready”)

Type: string

Format: string-rlx

Default: ESMTP mail service ready

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.smtp-list.client-domain-switching

Specification
Type list
Block object keys

match-string

Description: Domain name string

Type: string

Format: string-rlx

service-group

Description: Select service group (Service group name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

switching-type

Description: ‘contains’: Specify domain name string if domain contains another string; ‘ends-with’: Specify domain name string if domain ends with another string; ‘starts-with’: Specify domain string if domain starts with another string;

Type: string

Supported Values: contains, ends-with, starts-with

template.smtp-list.command-disable

Specification
Type list
Block object keys

disable-type

Description: ‘expn’: Disable SMTP EXPN commands; ‘turn’: Disable SMTP TURN commands; ‘vrfy’: Disable SMTP VRFY commands;

Type: string

Supported Values: expn, turn, vrfy

template.external-service-list

Specification
Type list
Block object keys

action

Description: ‘continue’: Continue; ‘drop’: Drop; ‘reset’: Reset;

Type: string

Supported Values: continue, drop, reset

Default: continue

bypass-ip-cfg

Description: bypass-ip-cfg is a JSON List . Please see below for l216_bypass-ip-cfg

Type: List

failure-action

Description: ‘continue’: Continue; ‘drop’: Drop; ‘reset’: Reset;

Type: string

Supported Values: continue, drop, reset

Default: continue

name

Description: External Service Template Name

Type: string

Format: string-rlx

service-group

Description: Bind a Service Group to the template (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

source-ip

Description: Source IP persistence template (Source IP persistence template name)

Type: string

Reference Object: /axapi/v3/slb/template/persist/source-ip

tcp-proxy

Description: TCP proxy template (TCP proxy template name)

Type: string

Reference Object: /axapi/v3/slb/template/tcp-proxy

timeout

Description: Timeout value 1 - 200 in units of 200ms, default is 5 (default is 1000ms) (1 - 200 in units of 200ms, default is 5 (1000ms))

Type: number

Range: 1-200

Default: 5

type

Description: ‘skyfire-icap’: Skyfire ICAP service; ‘url-filter’: URL filtering service;

Type: string

Supported Values: skyfire-icap, url-filter

Default: url-filter

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.external-service-list.bypass-ip-cfg

Specification
Type list
Block object keys

bypass-ip

Description: ip address to bypass external service

Type: string

Format: ipv4-address

mask

Description: IP prefix mask

Type: string

Format: ipv4-netmask

template.tcp-list

Specification
Type list
Block object keys

alive-if-active

Description: keep connection alive if active traffic

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

force-delete-timeout

Description: The maximum time that a session can stay in the system before being delete (number (second))

Type: number

Range: 1-31

Mutual Exclusion: force-delete-timeout and force-delete-timeout-100ms are mutually exclusive

force-delete-timeout-100ms

Description: The maximum time that a session can stay in the system before being delete (number in 100ms)

Type: number

Range: 1-31

Mutual Exclusion: force-delete-timeout-100ms and force-delete-timeout are mutually exclusive

half-close-idle-timeout

Description: TCP Half Close Idle Timeout (sec), default off (half close idle timeout in second, default off)

Type: number

Range: 60-120

half-open-idle-timeout

Description: TCP Half Open Idle Timeout (sec), default off (half open idle timeout in second, default off)

Type: number

Range: 1-60

idle-timeout

Description: Idle Timeout value (default 120 seconds) (idle timeout in second, default 120)

Type: number

Range: 1-2097151

Default: 120

initial-window-size

Description: Set the initial window size (number)

Type: number

Range: 1-65535

insert-client-ip

Description: Insert client ip into TCP option

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

lan-fast-ack

Description: Enable fast TCP ack on LAN

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: Fast TCP Template Name

Type: string

Format: string-rlx

Default: default

qos

Description: QOS level (number)

Type: number

Range: 1-63

reset-fwd

Description: send reset to server if error happens

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

reset-rev

Description: send reset to client if error happens

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.diameter-list

Specification
Type list
Block object keys

avp-code

Description: avp code

Type: number

Range: 1-2147483647

avp-list

Description: avp-list is a JSON List . Please see below for l216_avp-list

Type: List

avp-string

Description: pattern to be matched in the avp string name, max length 127 bytes

Type: string

customize-cea

Description: customizing cea response

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

dwr-time

Description: dwr health-check timer interval (in 100 milli second unit, default is 100, 0 means unset this option)

Type: number

Range: 0-2147483647

Default: 100

idle-timeout

Description: user sesison idle timeout (in minutes, default is 5)

Type: number

Range: 1-65535

Default: 5

message-code-list

Description: message-code-list is a JSON List . Please see below for l216_message-code-list

Type: List

multiple-origin-host

Description: allowing multiple origin-host to a single server

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: diameter template Name

Type: string

Format: string-rlx

origin-host

Description: origin-host name avp

Type: string

origin-realm

Description: origin-realm name avp

Type: string

product-name

Description: product name avp

Type: string

service-group-name

Description: service group name, this is the service group that the message needs to be copied to

Type: string

Reference Object: /axapi/v3/slb/service-group

session-age

Description: user session age allowed (default 10), this is not idle-time (in minutes)

Type: number

Range: 1-65535

Default: 10

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

vendor-id

Description: vendor-id avp (Vendon Id)

Type: number

Range: 0-2147483647

Default: 0

template.diameter-list.avp-list

Specification
Type list
Block object keys

avp

Description: customize avps for cer to the server (avp number)

Type: number

Range: 0-2147483647

int32

Description: 32 bits integer

Type: number

Range: 0-2147483647

Mutual Exclusion: int32 int64 and string are mutually exclusive

int64

Description: 64 bits integer

Type: number

Range: 0-2147483647

Mutual Exclusion: int64 int32 and string are mutually exclusive

mandatory

Description: mandatory avp

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

string

Description: String (string name, max length 127 bytes)

Type: string

Mutual Exclusion: string int32 and int64 are mutually exclusive

template.diameter-list.message-code-list

Specification
Type list
Block object keys

message-code

Description:

Type: number

Range: 1-2147483647

template.udp-list

Specification
Type list
Block object keys

age

Description:

Type: number

Range: 1-31

idle-timeout

Description: Idle Timeout value (default 120 seconds) (idle timeout in second, default 120)

Type: number

Range: 1-2097151

Default: 120

immediate

Description: Immediate Removal after Transaction

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: immediate and short are mutually exclusive

name

Description: Fast UDP Template Name

Type: string

Format: string-rlx

Default: default

qos

Description: QOS level (number)

Type: number

Range: 1-63

re-select-if-server-down

Description: re-select another server if service port is down

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

short

Description: Short lived session

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: short and immediate are mutually exclusive

stateless-conn-timeout

Description: Stateless Current Connection Timeout value (5 - 120 seconds) (idle timeout in second, default 120)

Type: number

Range: 5-120

Default: 120

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.http-policy-list

Specification
Type list
Block object keys

cookie-name

Description: name of cookie to match (Cookie Name)

Type: string

Format: string-rlx

geo-location-match

Description: geo-location-match is a JSON List . Please see below for l216_geo-location-match

Type: List

http-policy-match

Description: http-policy-match is a JSON List . Please see below for l216_http-policy-match

Type: List

name

Description: http-policy template name

Type: string

Format: string-rlx

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.http-policy-list.http-policy-match

Specification
Type list
Block object keys

match-string

Description: URL String

Type: string

Format: string-rlx

match-type

Description: ‘contains’: Select service group if URL string contains another string; ‘ends-with’: Select service group if URL string ends with another string; ‘equals’: Select service group if URL string equals another string; ‘starts-with’: Select service group if URL string starts with another string;

Type: string

Supported Values: contains, ends-with, equals, starts-with

service-group

Description: Service Group to be used (Service Group Name)

Type: string

Reference Object: /axapi/v3/slb/service-group

template

Description: ‘waf’: waf; (WAF template to be used)

Type: string

Supported Values: waf

template-name

Description: WAF template to be used (Template Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/waf/template

type

Description: ‘cookie’: cookie value match; ‘host’: hostname match; ‘url’: URL match;

Type: string

Supported Values: cookie, host, url

template.http-policy-list.geo-location-match

Specification
Type list
Block object keys

geo-location

Description: Geolocation name

Type: string

geo-location-service-group

Description: Service Group to be used (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

geo-location-template

Description: ‘waf’: waf; (WAF template to be used)

Type: string

Supported Values: waf

geo-location-template-name

Description: WAF template to be used (Template Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/waf/template

template.client-ssl-list

Specification
Type list
Block object keys

alert-type

Description: ‘fatal’: Log fatal alerts;

Type: string

Supported Values: fatal

auth-sg

Description: Specify authorization LDAP service group

Type: string

Format: string-rlx

Mutual Exclusion: auth-sg and authen-name are mutually exclusive

Reference Object: /axapi/v3/aam/authentication/service-group

auth-sg-dn

Description: Use Subject DN as LDAP search base DN

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

auth-sg-filter

Description: Specify LDAP search filter

Type: string

Format: string-rlx

auth-username

Description: Specify the Username Field in the Client Certificate(If multi-fields are specificed, prior one has higher priority)

Type: string

Format: string-rlx

auth-username-attribute

Description: Specify attribute name of username for client SSL authorization

Type: string

Format: string-rlx

authen-name

Description: Specify authorization LDAP server name

Type: string

Format: string-rlx

Mutual Exclusion: authen-name and auth-sg are mutually exclusive

Reference Object: /axapi/v3/aam/authentication/server/ldap

authorization

Description: Specify LDAP server for client SSL authorizaiton

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ca-certs

Description: ca-certs is a JSON List . Please see below for l216_ca-certs

Type: List

cache-persistence-list-name

Description: Class List Name

Type: string

case-insensitive

Description: Case insensitive forward proxy bypass

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

cert

Description: Server Certificate (Certificate Name)

Type: string

cert-revoke-action

Description: ‘bypass’: bypass SSLi processing; ‘continue’: continue the connection; ‘drop’: close the connection;

Type: string

Supported Values: bypass, continue, drop

Default: bypass

cert-unknown-action

Description: ‘bypass’: bypass SSLi processing; ‘continue’: continue the connection; ‘drop’: close the connection;

Type: string

Supported Values: bypass, continue, drop

Default: bypass

chain-cert

Description: Chain Certificate (Chain Certificate Name)

Type: string

cipher-without-prio-list

Description: cipher-without-prio-list is a JSON List . Please see below for l216_cipher-without-prio-list

Type: List

class-list-name

Description: Class List Name

Type: string

Mutual Exclusion: class-list-name and multi-clist-name are mutually exclusive

client-auth-case-insensitive

Description: Case insensitive forward proxy client auth bypass

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

client-auth-class-list

Description: Forward proxy client auth bypass if SNI string matches class-list (Class List Name)

Type: string

client-auth-contains-list

Description: client-auth-contains-list is a JSON List . Please see below for l216_client-auth-contains-list

Type: List

client-auth-ends-with-list

Description: client-auth-ends-with-list is a JSON List . Please see below for l216_client-auth-ends-with-list

Type: List

client-auth-equals-list

Description: client-auth-equals-list is a JSON List . Please see below for l216_client-auth-equals-list

Type: List

client-auth-starts-with-list

Description: client-auth-starts-with-list is a JSON List . Please see below for l216_client-auth-starts-with-list

Type: List

client-certificate

Description: ‘Ignore’: Don’t request client certificate; ‘Require’: Require client certificate; ‘Request’: Request client certificate;

Type: string

Supported Values: Ignore, Require, Request

Default: Ignore

close-notify

Description: Send close notification when terminate connection

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

contains-list

Description: contains-list is a JSON List . Please see below for l216_contains-list

Type: List

crl-certs

Description: crl-certs is a JSON List . Please see below for l216_crl-certs

Type: List

dh-type

Description: ‘1024’: 1024; ‘1024-dsa’: 1024-dsa; ‘2048’: 2048; ‘512’: 512;

Type: string

Supported Values: 1024, 1024-dsa, 2048, 512

disable-sslv3

Description: Reject Client requests for SSL version 3

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ec-list

Description: ec-list is a JSON List . Please see below for l216_ec-list

Type: List

enable-tls-alert-logging

Description: Enable TLS alert logging

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ends-with-list

Description: ends-with-list is a JSON List . Please see below for l216_ends-with-list

Type: List

equals-list

Description: equals-list is a JSON List . Please see below for l216_equals-list

Type: List

expire-hours

Description: Certificate lifetime in hours

Type: number

Range: 1-168

forward-encrypted

Description: Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED password string)

forward-passphrase

Description: Password Phrase

Type: string

Format: password

forward-proxy-alt-sign

Description: Forward proxy alternate signing cert and key

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-ca-cert

Description: CA Certificate for forward proxy (SSL forward proxy CA Certificate Name)

Type: string

forward-proxy-ca-key

Description: CA Private Key for forward proxy (SSL forward proxy CA Key Name)

Type: string

forward-proxy-cert-cache-limit

Description: Certificate cache size limit, default is 524288 (set to 0 for unlimited size)

Type: number

Range: 0-2147483647

Default: 524288

forward-proxy-cert-cache-timeout

Description: Certificate cache timeout, default is 1 hour (seconds, set to 0 for never timeout)

Type: number

Range: 0-2147483647

Default: 3600

forward-proxy-cert-expiry

Description: Adjust certificate expiry relative to the time when it is created on the device

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-cert-revoke-action

Description: Action taken if a certificate is irreversibly revoked, bypass SSLi processing by default

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-cert-unknown-action

Description: Action taken if a certificate revocation status is unknown, bypass SSLi processing by default

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-crl-disable

Description: Disable Certificate Revocation List checking for forward proxy

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-enable

Description: Enable SSL forward proxy

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-failsafe-disable

Description: Disable Failsafe for SSL forward proxy

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-log-disable

Description: Disable SSL forward proxy logging

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-ocsp-disable

Description: Disable ocsp-stapling for forward proxy

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-selfsign-redir

Description: Redirect connections to pages with self signed certs to a warning page

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward-proxy-ssl-version

Description: TLS/SSL version, default is TLS1.2 (TLS/SSL version: 31-TLSv1.0, 32-TLSv1.1 and 33-TLSv1.2)

Type: number

Range: 31-33

Default: 33

forward-proxy-trusted-ca-lists

Description: forward-proxy-trusted-ca-lists is a JSON List . Please see below for l216_forward-proxy-trusted-ca-lists

Type: List

forward-proxy-verify-cert-fail-action

Description: Action taken if certificate verification fails, close the connection by default

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

fp-alt-cert

Description: CA Certificate for forward proxy alternate signing (Certificate name)

Type: string

fp-alt-encrypted

Description: Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED password string)

fp-alt-key

Description: CA Private Key for forward proxy alternate signing (Key name)

Type: string

fp-alt-passphrase

Description: Password Phrase

Type: string

Format: password

hsm-type

Description: ‘thales-embed’: Thales embed key; ‘thales-hwcrhk’: Thales hwcrhk Key;

Type: string

Supported Values: thales-embed, thales-hwcrhk

inspect-list-name

Description: Class List Name

Type: string

key

Description: Server Private Key (Key Name)

Type: string

key-encrypted

Description: Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED password string)

key-passphrase

Description: Password Phrase

Type: string

Format: password

ldap-base-dn-from-cert

Description: Use Subject DN as LDAP search base DN

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ldap-search-filter

Description: Specify LDAP search filter

Type: string

Format: string-rlx

multi-class-list

Description: multi-class-list is a JSON List . Please see below for l216_multi-class-list

Type: List

name

Description: Client SSL Template Name

Type: string

Format: string-rlx

non-ssl-bypass-service-group

Description: Service Group for Bypass non-ssl traffic (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

ocsp-stapling

Description: Config OCSP stapling support

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ocspst-ca-cert

Description: CA certificate

Type: string

ocspst-ocsp

Description: Specify OCSP Authentication

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

ocspst-sg

Description: Specify authentication service group

Type: string

Format: string-rlx

Mutual Exclusion: ocspst-sg and ocspst-srvr are mutually exclusive

Reference Object: /axapi/v3/aam/authentication/service-group

ocspst-sg-days

Description: Specify update period, in days

Type: number

Range: 1-31

Mutual Exclusion: ocspst-sg-days ocspst-sg-hours and ocspst-sg-minutes are mutually exclusive

ocspst-sg-hours

Description: Specify update period, in hours

Type: number

Range: 1-23

Default: 1

Mutual Exclusion: ocspst-sg-hours ocspst-sg-days and ocspst-sg-minutes are mutually exclusive

ocspst-sg-minutes

Description: Specify update period, in minutes

Type: number

Range: 1-59

Mutual Exclusion: ocspst-sg-minutes ocspst-sg-days and ocspst-sg-hours are mutually exclusive

ocspst-sg-timeout

Description: Specify retry timeout (Default is 30 mins)

Type: number

Range: 1-44640

Default: 30

ocspst-srvr

Description: Specify OCSP authentication server

Type: string

Format: string-rlx

Mutual Exclusion: ocspst-srvr and ocspst-sg are mutually exclusive

Reference Object: /axapi/v3/aam/authentication/server/ocsp

ocspst-srvr-days

Description: Specify update period, in days

Type: number

Range: 1-31

Mutual Exclusion: ocspst-srvr-days ocspst-srvr-hours and ocspst-srvr-minutes are mutually exclusive

ocspst-srvr-hours

Description: Specify update period, in hours

Type: number

Range: 1-23

Default: 1

Mutual Exclusion: ocspst-srvr-hours ocspst-srvr-days and ocspst-srvr-minutes are mutually exclusive

ocspst-srvr-minutes

Description: Specify update period, in minutes

Type: number

Range: 1-59

Mutual Exclusion: ocspst-srvr-minutes ocspst-srvr-days and ocspst-srvr-hours are mutually exclusive

ocspst-srvr-timeout

Description: Specify retry timeout (Default is 30 mins)

Type: number

Range: 1-44640

Default: 30

server-name-list

Description: server-name-list is a JSON List . Please see below for l216_server-name-list

Type: List

session-cache-size

Description: Session Cache Size (Specify 0 to disable Session ID reuse.)

Type: number

session-cache-timeout

Description: Session Cache Timeout (Timeout value, in seconds)

Type: number

Range: 0-604800

session-ticket-lifetime

Description: Session ticket lieftime in seconds from stateless session resumption (Lifetime value in seconds)

Type: number

Range: 0-2147483647

ssl-false-start-disable

Description: disable SSL False Start

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

sslv2-bypass-service-group

Description: Service Group for Bypass SSLV2 (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

starts-with-list

Description: starts-with-list is a JSON List . Please see below for l216_starts-with-list

Type: List

template-cipher

Description: Cipher Template (Cipher Config Name)

Type: string

Mutual Exclusion: template-cipher and cipher-wo-prio are mutually exclusive

Reference Object: /axapi/v3/slb/template/cipher

template-hsm

Description: HSM Template (HSM Template Name)

Type: string

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

verify-cert-fail-action

Description: ‘bypass’: bypass SSLi processing; ‘continue’: continue the connection; ‘drop’: close the connection;

Type: string

Supported Values: bypass, continue, drop

Default: drop

web-category

Description: web-category is a JSON Block . Please see below for l216_web-category

Type: Object

template.client-ssl-list.equals-list

Specification
Type list
Block object keys

equals

Description: Forward proxy bypass if SNI string equals another string

Type: string

Format: string-rlx

template.client-ssl-list.forward-proxy-trusted-ca-lists

Specification
Type list
Block object keys

forward-proxy-trusted-ca

Description: Forward proxy trusted CA file (CA file name)

Type: string

template.client-ssl-list.ec-list

Specification
Type list
Block object keys

ec

Description: ‘secp256r1’: X9_62_prime256v1; ‘secp384r1’: secp384r1;

Type: string

Supported Values: secp256r1, secp384r1

template.client-ssl-list.contains-list

Specification
Type list
Block object keys

contains

Description: Forward proxy bypass if SNI string contains another string

Type: string

Format: string-rlx

template.client-ssl-list.ends-with-list

Specification
Type list
Block object keys

ends-with

Description: Forward proxy bypass if SNI string ends with another string

Type: string

Format: string-rlx

template.client-ssl-list.ca-certs

Specification
Type list
Block object keys

ca-cert

Description: CA Certificate (CA Certificate Name)

Type: string

client-ocsp

Description: Specify ocsp authentication server(s) for client certificate verification

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

client-ocsp-sg

Description: Specify service-group (Service group name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/aam/authentication/service-group

client-ocsp-srvr

Description: Specify authentication server

Type: string

Format: string-rlx

Reference Object: /axapi/v3/aam/authentication/server/ocsp

template.client-ssl-list.client-auth-contains-list

Specification
Type list
Block object keys

client-auth-contains

Description: Forward proxy bypass if SNI string contains another string

Type: string

Format: string-rlx

template.client-ssl-list.client-auth-equals-list

Specification
Type list
Block object keys

client-auth-equals

Description: Forward proxy bypass if SNI string equals another string

Type: string

Format: string-rlx

template.client-ssl-list.crl-certs

Specification
Type list
Block object keys

crl

Description: Certificate Revocation Lists (Certificate Revocation Lists file name)

Type: string

template.client-ssl-list.multi-class-list

Specification
Type list
Block object keys

multi-clist-name

Description: Class List Name

Type: string

Mutual Exclusion: multi-clist-name and class-list-name are mutually exclusive

template.client-ssl-list.web-category

Specification
Type object

abortion

Description: Category Abortion

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

adult-and-pornography

Description: Category Adult and Pornography

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

alochol-and-tobacco

Description: Category Alcohol and Tobacco

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

auctions

Description: Category Auctions

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

bot-nets

Description: Category Bot Nets

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

business-and-economy

Description: Category Business and Economy

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

cdns

Description: Category CDNs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

cheating

Description: Category Cheating

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

computer-and-internet-info

Description: Category Computer and Internet Info

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

computer-and-internet-security

Description: Category Computer and Internet Security

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

confirmed-spam-sources

Description: Category Confirmed SPAM Sources

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

cult-and-occult

Description: Category Cult and Occult

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

dating

Description: Category Dating

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

dead-sites

Description: Category Dead Sites (db Ops only)

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drugs

Description: Category Abused Drugs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

dynamic-comment

Description: Category Dynamic Comment

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

educational-institutions

Description: Category Educational Institutions

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

entertainment-and-arts

Description: Category Entertainment and Arts

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

fashion-and-beauty

Description: Category Fashion and Beauty

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

financial-services

Description: Category Financial Services

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

food-and-dining

Description: Category Food and Dining

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

gambling

Description: Category Gambling

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

games

Description: Category Games

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

government

Description: Category Government

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

gross

Description: Category Gross

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

hacking

Description: Category Hacking

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

hate-and-racism

Description: Category Hate and Racism

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

health-and-medicine

Description: Category Health and Medicine

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

home-and-garden

Description: Category Home and Garden

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

hunting-and-fishing

Description: Category Hunting and Fishing

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

illegal

Description: Category Illegal

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

image-and-video-search

Description: Category Image and Video Search

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

internet-communications

Description: Category Internet Communications

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

internet-portals

Description: Category Internet Portals

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

job-search

Description: Category Job Search

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

keyloggers-and-monitoring

Description: Category Keyloggers and Monitoring

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

kids

Description: Category Kids

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

legal

Description: Category Legal

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

local-information

Description: Category Local Information

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

malware-sites

Description: Category Malware Sites

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

marijuana

Description: Category Marijuana

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

military

Description: Category Military

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

motor-vehicles

Description: Category Motor Vehicles

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

music

Description: Category Music

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

news-and-media

Description: Category News and Media

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

nudity

Description: Category Nudity

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

online-greeting-cards

Description: Category Online Greeting cards

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

open-http-proxies

Description: Category Open HTTP Proxies

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

parked-domains

Description: Category Parked Domains

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

pay-to-surf

Description: Category Pay to Surf

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

peer-to-peer

Description: Category Peer to Peer

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

personal-sites-and-blogs

Description: Category Personal sites and Blogs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

personal-storage

Description: Category Personal Storage

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

philosophy-and-politics

Description: Category Philosophy and Political Advocacy

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

phishing-and-other-fraud

Description: Category Phishing and Other Frauds

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

private-ip-addresses

Description: Category Private IP Addresses

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

proxy-avoid-and-anonymizers

Description: Category Proxy Avoid and Anonymizers

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

questionable

Description: Category Questionable

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

real-estate

Description: Category Real Estate

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

recreation-and-hobbies

Description: Category Recreation and Hobbies

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

reference-and-research

Description: Category Reference and Research

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

religion

Description: Category Religion

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

search-engines

Description: Category Search Engines

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

sex-education

Description: Category Sex Education

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

shareware-and-freeware

Description: Category Shareware and Freeware

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

shopping

Description: Category Shopping

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

social-network

Description: Category Social Network

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

society

Description: Category Society

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

spam-urls

Description: Category SPAM URLs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

sports

Description: Category Sports

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

spyware-and-adware

Description: Category Spyware and Adware

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

stock-advice-and-tools

Description: Category Stock Advice and Tools

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

streaming-media

Description: Category Streaming Media

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

swimsuits-and-intimate-apparel

Description: Category Swimsuits and Intimate Apparel

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

training-and-tools

Description: Category Training and Tools

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

translation

Description: Category Translation

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

travel

Description: Category Travel

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

uncategorized

Description: Uncategorized URLs

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

unconfirmed-spam-sources

Description: Category Unconfirmed SPAM Sources

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

violence

Description: Category Violence

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

weapons

Description: Category Weapons

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

web-adertisements

Description: Category Web Advertisements

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

web-based-email

Description: Category Web based email

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

web-hosting-sites

Description: Category Web Hosting Sites

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template.client-ssl-list.client-auth-starts-with-list

Specification
Type list
Block object keys

client-auth-starts-with

Description: Forward proxy bypass if SNI string starts with another string

Type: string

Format: string-rlx

template.client-ssl-list.server-name-list

Specification
Type list
Block object keys

server-cert

Description: Server Certificate associated to SNI (Server Certificate Name)

Type: string

server-encrypted

Description: Do NOT use this option manually. (This is an A10 reserved keyword.) (The ENCRYPTED password string)

server-key

Description: Server Private Key associated to SNI (Server Private Key Name)

Type: string

server-name

Description: Server name indication in Client hello extension (Server name String)

Type: string

server-passphrase

Description: help Password Phrase

Type: string

Format: password

template.client-ssl-list.client-auth-ends-with-list

Specification
Type list
Block object keys

client-auth-ends-with

Description: Forward proxy bypass if SNI string ends with another string

Type: string

Format: string-rlx

template.client-ssl-list.cipher-without-prio-list

Specification
Type list
Block object keys

cipher-wo-prio

Description: ‘SSL3_RSA_DES_192_CBC3_SHA’: SSL3_RSA_DES_192_CBC3_SHA; ‘SSL3_RSA_DES_40_CBC_SHA’: SSL3_RSA_DES_40_CBC_SHA; ‘SSL3_RSA_DES_64_CBC_SHA’: SSL3_RSA_DES_64_CBC_SHA; ‘SSL3_RSA_RC4_128_MD5’: SSL3_RSA_RC4_128_MD5; ‘SSL3_RSA_RC4_128_SHA’: SSL3_RSA_RC4_128_SHA; ‘SSL3_RSA_RC4_40_MD5’: SSL3_RSA_RC4_40_MD5; ‘TLS1_RSA_AES_128_SHA’: TLS1_RSA_AES_128_SHA; ‘TLS1_RSA_AES_256_SHA’: TLS1_RSA_AES_256_SHA; ‘TLS1_RSA_EXPORT1024_RC4_56_MD5’: TLS1_RSA_EXPORT1024_RC4_56_MD5; ‘TLS1_RSA_EXPORT1024_RC4_56_SHA’: TLS1_RSA_EXPORT1024_RC4_56_SHA; ‘TLS1_RSA_AES_128_SHA256’: TLS1_RSA_AES_128_SHA256; ‘TLS1_RSA_AES_256_SHA256’: TLS1_RSA_AES_256_SHA256; ‘TLS1_DHE_RSA_AES_128_GCM_SHA256’: TLS1_DHE_RSA_AES_128_GCM_SHA256; ‘TLS1_DHE_RSA_AES_128_SHA’: TLS1_DHE_RSA_AES_128_SHA; ‘TLS1_DHE_RSA_AES_128_SHA256’: TLS1_DHE_RSA_AES_128_SHA256; ‘TLS1_DHE_RSA_AES_256_GCM_SHA384’: TLS1_DHE_RSA_AES_256_GCM_SHA384; ‘TLS1_DHE_RSA_AES_256_SHA’: TLS1_DHE_RSA_AES_256_SHA; ‘TLS1_DHE_RSA_AES_256_SHA256’: TLS1_DHE_RSA_AES_256_SHA256; ‘TLS1_ECDHE_ECDSA_AES_128_GCM_SHA256’: TLS1_ECDHE_ECDSA_AES_128_GCM_SHA256; ‘TLS1_ECDHE_ECDSA_AES_128_SHA’: TLS1_ECDHE_ECDSA_AES_128_SHA; ‘TLS1_ECDHE_ECDSA_AES_128_SHA256’: TLS1_ECDHE_ECDSA_AES_128_SHA256; ‘TLS1_ECDHE_ECDSA_AES_256_GCM_SHA384’: TLS1_ECDHE_ECDSA_AES_256_GCM_SHA384; ‘TLS1_ECDHE_ECDSA_AES_256_SHA’: TLS1_ECDHE_ECDSA_AES_256_SHA; ‘TLS1_ECDHE_RSA_AES_128_GCM_SHA256’: TLS1_ECDHE_RSA_AES_128_GCM_SHA256; ‘TLS1_ECDHE_RSA_AES_128_SHA’: TLS1_ECDHE_RSA_AES_128_SHA; ‘TLS1_ECDHE_RSA_AES_128_SHA256’: TLS1_ECDHE_RSA_AES_128_SHA256; ‘TLS1_ECDHE_RSA_AES_256_GCM_SHA384’: TLS1_ECDHE_RSA_AES_256_GCM_SHA384; ‘TLS1_ECDHE_RSA_AES_256_SHA’: TLS1_ECDHE_RSA_AES_256_SHA; ‘TLS1_RSA_AES_128_GCM_SHA256’: TLS1_RSA_AES_128_GCM_SHA256; ‘TLS1_RSA_AES_256_GCM_SHA384’: TLS1_RSA_AES_256_GCM_SHA384;

Type: string

Supported Values: SSL3_RSA_DES_192_CBC3_SHA, SSL3_RSA_DES_40_CBC_SHA, SSL3_RSA_DES_64_CBC_SHA, SSL3_RSA_RC4_128_MD5, SSL3_RSA_RC4_128_SHA, SSL3_RSA_RC4_40_MD5, TLS1_RSA_AES_128_SHA, TLS1_RSA_AES_256_SHA, TLS1_RSA_EXPORT1024_RC4_56_MD5, TLS1_RSA_EXPORT1024_RC4_56_SHA, TLS1_RSA_AES_128_SHA256, TLS1_RSA_AES_256_SHA256, TLS1_DHE_RSA_AES_128_GCM_SHA256, TLS1_DHE_RSA_AES_128_SHA, TLS1_DHE_RSA_AES_128_SHA256, TLS1_DHE_RSA_AES_256_GCM_SHA384, TLS1_DHE_RSA_AES_256_SHA, TLS1_DHE_RSA_AES_256_SHA256, TLS1_ECDHE_ECDSA_AES_128_GCM_SHA256, TLS1_ECDHE_ECDSA_AES_128_SHA, TLS1_ECDHE_ECDSA_AES_128_SHA256, TLS1_ECDHE_ECDSA_AES_256_GCM_SHA384, TLS1_ECDHE_ECDSA_AES_256_SHA, TLS1_ECDHE_RSA_AES_128_GCM_SHA256, TLS1_ECDHE_RSA_AES_128_SHA, TLS1_ECDHE_RSA_AES_128_SHA256, TLS1_ECDHE_RSA_AES_256_GCM_SHA384, TLS1_ECDHE_RSA_AES_256_SHA, TLS1_RSA_AES_128_GCM_SHA256, TLS1_RSA_AES_256_GCM_SHA384

Mutual Exclusion: cipher-wo-prio and template-cipher are mutually exclusive

template.client-ssl-list.starts-with-list

Specification
Type list
Block object keys

starts-with

Description: Forward proxy bypass if SNI string starts with another string

Type: string

Format: string-rlx

template.respmod-icap-list

Specification
Type list
Block object keys

action

Description: ‘continue’: Continue; ‘drop’: Drop; ‘reset’: Reset;

Type: string

Supported Values: continue, drop, reset

Default: continue

bypass-ip-cfg

Description: bypass-ip-cfg is a JSON List . Please see below for l216_bypass-ip-cfg

Type: List

fail-close

Description: When template sg is down mark vport down

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

include-protocol-in-uri

Description: Include protocol and port in HTTP URI

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

logging

Description: logging template (Logging template name)

Type: string

Reference Object: /axapi/v3/slb/template/logging

min-payload-size

Description: min-payload-size value 1 - 65536, default is 4096

Type: number

Range: 1-65536

Default: 4096

name

Description: Reqmod ICAP Template Name

Type: string

Format: string-rlx

preview

Description: Preview value 1 - 32768, default is 32768

Type: number

Range: 1-32768

Default: 32768

server-ssl

Description: Server SSL template (Server SSL template name)

Type: string

Reference Object: /axapi/v3/slb/template/server-ssl

service-group

Description: Bind a Service Group to the template (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

service-url

Description: URL to send to ICAP server (Service URL Name)

Type: string

Format: string-rlx

source-ip

Description: Source IP persistence template (Source IP persistence template name)

Type: string

Reference Object: /axapi/v3/slb/template/persist/source-ip

tcp-proxy

Description: TCP proxy template (TCP proxy template name)

Type: string

Reference Object: /axapi/v3/slb/template/tcp-proxy

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.respmod-icap-list.bypass-ip-cfg

Specification
Type list
Block object keys

bypass-ip

Description: ip address to bypass respmod-icap service

Type: string

Format: ipv4-address

mask

Description: IP prefix mask

Type: string

Format: ipv4-netmask

template.dynamic-service-list

Specification
Type list
Block object keys

dns-server

Description: dns-server is a JSON List . Please see below for l216_dns-server

Type: List

name

Description: Dynamic Service Template Name

Type: string

Format: string-rlx

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dynamic-service-list.dns-server

Specification
Type list
Block object keys

ipv4-dns-server

Description: DNS Server IPv4 Address

Type: string

Format: ipv4-address

ipv6-dns-server

Description: DNS Server IPv6 Address

Type: string

Format: ipv6-address

template.dblb-list

Specification
Type list
Block object keys

calc-sha1

Description: calc-sha1 is a JSON Block . Please see below for l216_calc-sha1

Type: Object

Reference Object: /axapi/v3/slb/template/dblb/{name}/calc-sha1

class-list

Description: Specify user/password string class list (Class list name)

Type: string

Reference Object: /axapi/v3/class-list

name

Description: DBLB template name

Type: string

Format: string-rlx

server-version

Description: ‘MSSQL2008’: MSSQL server 2008 or 2008 R2; ‘MSSQL2012’: MSSQL server 2012; ‘MySQL’: MySQL server (any version);

Type: string

Supported Values: MSSQL2008, MSSQL2012, MySQL

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dblb-list.calc-sha1

Specification
Type object

sha1-value

Description: Cleartext password

Type: string

template.fix-list

Specification
Type list
Block object keys

insert-client-ip

Description: Insert client ip to tag 11447

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: FIX Template Name

Type: string

Format: string-rlx

tag-switching

Description: tag-switching is a JSON List . Please see below for l216_tag-switching

Type: List

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.fix-list.tag-switching

Specification
Type list
Block object keys

equals

Description: Equals (Tag String)

Type: string

service-group

Description: Create a Service Group comprising Servers (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

switching-type

Description: ‘sender-comp-id’: Select service group based on SenderCompID; ‘target-comp-id’: Select service group based on TargetCompID;

Type: string

Supported Values: sender-comp-id, target-comp-id

template.persist

Specification
Type object

cookie-list

Description: cookie-list is a JSON List . Please see below for l216_cookie-list

Type: List

Reference Object: /axapi/v3/slb/template/persist/cookie/{name}

destination-ip-list

Description: destination-ip-list is a JSON List . Please see below for l216_destination-ip-list

Type: List

Reference Object: /axapi/v3/slb/template/persist/destination-ip/{name}

source-ip-list

Description: source-ip-list is a JSON List . Please see below for l216_source-ip-list

Type: List

Reference Object: /axapi/v3/slb/template/persist/source-ip/{name}

ssl-sid-list

Description: ssl-sid-list is a JSON List . Please see below for l216_ssl-sid-list

Type: List

Reference Object: /axapi/v3/slb/template/persist/ssl-sid/{name}

template.persist.destination-ip-list

Specification
Type list
Block object keys

dont-honor-conn-rules

Description: Do not observe connection rate rules

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

hash-persist

Description: Use hash value of destination IP address

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

match-type

Description: Persistence type

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: Destination IP persistence template name

Type: string

netmask

Description: IP subnet mask

Type: string

Format: ipv4-netmask

Default: 255.255.255.255

netmask6

Description: IPV6 subnet mask

Type: number

Range: 1-128

Default: 128

scan-all-members

Description: Persist with SCAN of all members

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

server

Description: Persist to the same server, default is port

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: server and service-group are mutually exclusive

service-group

Description: Persist within the same service group

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: service-group and server are mutually exclusive

timeout

Description: Persistence timeout (in minutes)

Type: number

Range: 1-2000

Default: 5

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.persist.source-ip-list

Specification
Type list
Block object keys

dont-honor-conn-rules

Description: Do not observe connection rate rules

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

enforce-higher-priority

Description: Enforce to use high priority node if available

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

hash-persist

Description: Use hash value of source IP address

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

incl-dst-ip

Description: Include destination IP on the persist

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

incl-sport

Description: Include source port on the persist

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

match-type

Description: Persistence type

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: Source IP persistence template name

Type: string

Format: string-rlx

netmask

Description: IP subnet mask

Type: string

Format: ipv4-netmask

Default: 255.255.255.255

netmask6

Description: IPV6 subnet mask

Type: number

Range: 1-128

Default: 128

scan-all-members

Description: Persist with SCAN of all members

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

server

Description: Persist to the same server, default is port

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: server and service-group are mutually exclusive

service-group

Description: Persist within the same service group

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: service-group and server are mutually exclusive

timeout

Description: Persistence timeout (in minutes)

Type: number

Range: 1-2000

Default: 5

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.persist.ssl-sid-list

Specification
Type list
Block object keys

dont-honor-conn-rules

Description: Do not observe connection rate rules

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: SSL session ID persistence template name

Type: string

Format: string-rlx

timeout

Description: Persistence timeout (in minutes)

Type: number

Range: 1-2000

Default: 5

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.sip-list

Specification
Type list
Block object keys

acl-id

Description: ACL id

Type: number

Range: 100-199

Mutual Exclusion: acl-id and acl-name-value are mutually exclusive

acl-name-value

Description: IPv4 Access List Name

Type: string

Mutual Exclusion: acl-name-value and acl-id are mutually exclusive

Reference Object: /axapi/v3/ip/access-list

alg-dest-nat

Description: Translate VIP to real server IP in SIP message when destination NAT is used

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

alg-source-nat

Description: Translate source IP to NAT IP in SIP message when source NAT is used

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

call-id-persist-disable

Description: Disable call-ID persistence

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

client-keep-alive

Description: Respond client keep-alive packet directly instead of forwarding to server

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

client-request-header

Description: client-request-header is a JSON List . Please see below for l216_client-request-header

Type: List

client-response-header

Description: client-response-header is a JSON List . Please see below for l216_client-response-header

Type: List

dialog-aware

Description: Permit system processes dialog session

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop-when-client-fail

Description: Drop current SIP message when select client fail

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: drop-when-client-fail and failed-client-selection-message are mutually exclusive

drop-when-server-fail

Description: Drop current SIP message when select server fail

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: drop-when-server-fail and failed-server-selection-message are mutually exclusive

exclude-translation

Description: exclude-translation is a JSON List . Please see below for l216_exclude-translation

Type: List

failed-client-selection

Description: Define action when select client fail

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

failed-client-selection-message

Description: Send SIP message (includs status code) to server when select client fail(Format: 3 digits(1XX~6XX) space reason)

Type: string

Format: string-rlx

Mutual Exclusion: failed-client-selection-message and drop-when-client-fail are mutually exclusive

failed-server-selection

Description: Define action when select server fail

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

failed-server-selection-message

Description: Send SIP message (includs status code) to client when select server fail(Format: 3 digits(1XX~6XX) space reason)

Type: string

Format: string-rlx

Mutual Exclusion: failed-server-selection-message and drop-when-server-fail are mutually exclusive

insert-client-ip

Description: Insert Client IP address into SIP header

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

interval

Description: The interval of keep-alive packet for each persist connection (second)

Type: number

Range: 5-300

Default: 30

keep-server-ip-if-match-acl

Description: Use Real Server IP for addresses matching the ACL for a Call-Id

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: SIP Template Name

Type: string

Format: string-rlx

server-keep-alive

Description: Send server keep-alive packet for every persist connection when enable conn-reuse

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

server-request-header

Description: server-request-header is a JSON List . Please see below for l216_server-request-header

Type: List

server-response-header

Description: server-response-header is a JSON List . Please see below for l216_server-response-header

Type: List

server-selection-per-request

Description: Force server selection on every SIP request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

service-group

Description: service group name

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

smp-call-id-rtp-session

Description: Create the across cpu call-id rtp session

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

timeout

Description: Time in minutes

Type: number

Range: 1-250

Default: 30

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.sip-list.server-request-header

Specification
Type list
Block object keys

insert-condition-server-request

Description: ‘insert-if-not-exist’: Only insert the header when it does not exist; ‘insert-always’: Always insert the header even when there is a header with the same name;

Type: string

Supported Values: insert-if-not-exist, insert-always

server-request-erase-all

Description: Erase all headers

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

server-request-header-erase

Description: Erase a SIP header (Header Name)

Type: string

Format: string-rlx

server-request-header-insert

Description: Insert a SIP header (Header Content (Format: “name: value”))

Type: string

Format: string-rlx

template.sip-list.server-response-header

Specification
Type list
Block object keys

insert-condition-server-response

Description: ‘insert-if-not-exist’: Only insert the header when it does not exist; ‘insert-always’: Always insert the header even when there is a header with the same name;

Type: string

Supported Values: insert-if-not-exist, insert-always

server-response-erase-all

Description: Erase all headers

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

server-response-header-erase

Description: Erase a SIP header (Header Name)

Type: string

Format: string-rlx

server-response-header-insert

Description: Insert a SIP header (Header Content (Format: “name: value”))

Type: string

Format: string-rlx

template.sip-list.client-request-header

Specification
Type list
Block object keys

client-request-erase-all

Description: Erase all headers

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

client-request-header-erase

Description: Erase a SIP header (Header Name)

Type: string

Format: string-rlx

client-request-header-insert

Description: Insert a SIP header (Header Content (Format: “name: value”))

Type: string

Format: string-rlx

insert-condition-client-request

Description: ‘insert-if-not-exist’: Only insert the header when it does not exist; ‘insert-always’: Always insert the header even when there is a header with the same name;

Type: string

Supported Values: insert-if-not-exist, insert-always

template.sip-list.client-response-header

Specification
Type list
Block object keys

client-response-erase-all

Description: Erase all headers

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

client-response-header-erase

Description: Erase a SIP header (Header Name)

Type: string

Format: string-rlx

client-response-header-insert

Description: Insert a SIP header (Header Content (Format: “name: value”))

Type: string

Format: string-rlx

insert-condition-client-response

Description: ‘insert-if-not-exist’: Only insert the header when it does not exist; ‘insert-always’: Always insert the header even when there is a header with the same name;

Type: string

Supported Values: insert-if-not-exist, insert-always

template.sip-list.exclude-translation

Specification
Type list
Block object keys

header-string

Description: SIP header name

Type: string

Format: string-rlx

translation-value

Description: ‘start-line’: SIP request line or status line; ‘header’: SIP message headers; ‘body’: SIP message body;

Type: string

Supported Values: start-line, header, body

template.virtual-server-list

Specification
Type list
Block object keys

conn-limit

Description: Connection limit

Type: number

Range: 1-8000000

Default: 8000000

conn-limit-no-logging

Description: Do not log connection over limit event

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-limit-reset

Description: Send client reset when connection over limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-rate-limit

Description: Connection rate limit

Type: number

Range: 1-1048575

conn-rate-limit-no-logging

Description: Do not log connection over limit event

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-rate-limit-reset

Description: Send client reset when connection rate over limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

icmp-lockup

Description: Enter lockup state when ICMP rate exceeds lockup rate limit (Maximum rate limit. If exceeds this limit, drop all ICMP packet for a time period)

Type: number

Range: 1-65535

icmp-lockup-period

Description: Lockup period (second)

Type: number

Range: 1-16383

icmp-rate-limit

Description: ICMP rate limit (Normal rate limit. If exceeds this limit, drop the ICMP packet that goes over the limit)

Type: number

Range: 1-65535

icmpv6-lockup

Description: Enter lockup state when ICMP rate exceeds lockup rate limit (Maximum rate limit. If exceeds this limit, drop all ICMP packet for a time period)

Type: number

Range: 1-65535

icmpv6-lockup-period

Description: Lockup period (second)

Type: number

Range: 1-16383

icmpv6-rate-limit

Description: ICMPv6 rate limit (Normal rate limit. If exceeds this limit, drop the ICMP packet that goes over the limit)

Type: number

Range: 1-65535

name

Description: Virtual server template name

Type: string

Format: string-rlx

Default: default

rate-interval

Description: ‘100ms’: Use 100 ms as sampling interval; ‘second’: Use 1 second as sampling interval;

Type: string

Supported Values: 100ms, second

Default: second

subnet-gratuitous-arp

Description: Send gratuitous ARP for every IP in the subnet virtual server

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dns-list

Specification
Type list
Block object keys

class-list

Description: class-list is a JSON Block . Please see below for l216_class-list

Type: Object

Reference Object: /axapi/v3/slb/template/dns/{name}/class-list

default-policy

Description: ‘nocache’: Cache disable; ‘cache’: Cache enable;

Type: string

Supported Values: nocache, cache

Default: nocache

disable-dns-template

Description: Disable DNS template

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop

Description: Drop the malformed query

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: drop and forward are mutually exclusive

enable-cache-sharing

Description: Enable DNS cache sharing

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

forward

Description: Forward to service group (Service group name)

Type: string

Format: string-rlx

Mutual Exclusion: forward and drop are mutually exclusive

Reference Object: /axapi/v3/slb/service-group

max-cache-entry-size

Description: Define maximum cache entry size (Maximum cache entry size per VIP)

Type: number

Range: 1-4096

max-cache-size

Description: Define maximum cache size (Maximum cache entry per VIP)

Type: number

max-query-length

Description: Define Maximum DNS Query Length, default is unlimited (Specify Maximum Length)

Type: number

Range: 1-4095

name

Description: DNS Template Name

Type: string

Format: string-rlx

period

Description: Period in minutes

Type: number

Range: 1-10000

query-id-switch

Description: Use DNS query ID to create sesion

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

redirect-to-tcp-port

Description: Direct the client to retry with TCP for DNS UDP request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dns-list.class-list

Specification
Type object

lid-list

Description: lid-list is a JSON List . Please see below for l216_lid-list

Type: List

Reference Object: /axapi/v3/slb/template/dns/{name}/class-list/lid/{lidnum}

name

Description: Specify a class list name

Type: string

uuid

Description: uuid of the object

Type: string

template.dns-list.class-list.lid-list

Specification
Type list
Block object keys

action-value

Description: ‘dns-cache-disable’: Disable DNS cache when it exceeds limit; ‘dns-cache-enable’: Enable DNS cache when it exceeds limit; ‘forward’: Forward the traffic even it exceeds limit;

Type: string

Supported Values: dns-cache-disable, dns-cache-enable, forward

conn-rate-limit

Description: Connection rate limit

Type: number

Range: 1-2147483647

dns

Description: dns is a JSON Block . Please see below for dns

Type: Object

lidnum

Description: Specify a limit ID

Type: number

Range: 1-31

lockout

Description: Don’t accept any new connection for certain time (Lockout duration in minutes)

Type: number

Range: 1-1023

log

Description: Log a message

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

log-interval

Description: Log interval (minute, by default system will log every over limit instance)

Type: number

Range: 1-255

over-limit-action

Description: Action when exceeds limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

per

Description: Per (Number of 100ms)

Type: number

Range: 1-65535

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.dns-list.class-list.lid-list.dns

Specification
Type object

cache-action

Description: ‘cache-disable’: Disable dns cache; ‘cache-enable’: Enable dns cache;

Type: string

Supported Values: cache-disable, cache-enable

Default: cache-disable

ttl

Description: TTL for cache entry (TTL in seconds)

Type: number

Range: 1-65535

weight

Description: Weight for cache entry

Type: number

Range: 1-7

template.ssli-list

Specification
Type list
Block object keys

name

Description: SSLi Template Name

Type: string

Format: string-rlx

type

Description: ‘http’: HTTP service; ‘xmpp’: XMPP service; ‘smtp’: SMTP service; ‘pop’: POP service;

Type: string

Supported Values: http, xmpp, smtp, pop

Default: http

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.http-list

Specification
Type list
Block object keys

bypass-sg

Description: Select service group for non-http traffic (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

client-ip-hdr-replace

Description: Replace the existing header

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

client-port-hdr-replace

Description: Replace the existing header

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

compression-auto-disable-on-high-cpu

Description: Auto-disable software compression on high cpu usage (Disable compression if cpu usage is above threshold. Default is off.)

Type: number

Range: 1-100

compression-content-type

Description: compression-content-type is a JSON List . Please see below for l216_compression-content-type

Type: List

compression-enable

Description: Enable Compression

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

compression-exclude-content-type

Description: compression-exclude-content-type is a JSON List . Please see below for l216_compression-exclude-content-type

Type: List

compression-exclude-uri

Description: compression-exclude-uri is a JSON List . Please see below for l216_compression-exclude-uri

Type: List

compression-keep-accept-encoding

Description: Keep accept encoding

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

compression-keep-accept-encoding-enable

Description: Enable Server Accept Encoding

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

compression-level

Description: compression level, default 1 (compression level value, default is 1)

Type: number

Range: 1-9

Default: 1

compression-minimum-content-length

Description: Minimum Content Length (Minimum content length for compression in bytes. Default is 120.)

Type: number

Range: 1-2147483647

Default: 120

failover-url

Description: Failover to this URL (Failover URL Name)

Type: string

Format: string-rlx

host-switching

Description: host-switching is a JSON List . Please see below for l216_host-switching

Type: List

insert-client-ip

Description: Insert Client IP address into HTTP header

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

insert-client-ip-header-name

Description: HTTP Header Name for inserting Client IP

Type: string

insert-client-port

Description: Insert Client Port address into HTTP header

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

insert-client-port-header-name

Description: HTTP Header Name for inserting Client Port

Type: string

keep-client-alive

Description: Keep client alive

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

log-retry

Description: log when HTTP request retry

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: HTTP Template Name

Type: string

Format: string-rlx

non-http-bypass

Description: Bypass non-http traffic instead of dropping

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

rd-port

Description: Port (Port Number)

Type: number

Range: 1-65535

Mutual Exclusion: rd-port and rd-simple-loc are mutually exclusive

rd-resp-code

Description: ‘301’: Moved Permanently; ‘302’: Found; ‘303’: See Other; ‘307’: Temporary Redirect;

Type: string

Supported Values: 301, 302, 303, 307

rd-secure

Description: Use HTTPS

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: rd-secure and rd-simple-loc are mutually exclusive

rd-simple-loc

Description: Redirect location tag absolute URI string

Type: string

Format: string-rlx

Mutual Exclusion: rd-simple-loc rd-secure and rd-port are mutually exclusive

redirect

Description: Automatically send a redirect response

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

redirect-rewrite

Description: redirect-rewrite is a JSON Block . Please see below for l216_redirect-rewrite

Type: Object

req-hdr-wait-time

Description: HTTP request header wait time before abort connection

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

req-hdr-wait-time-val

Description: Number of seconds wait for client request header (default is 7)

Type: number

Range: 1-31

Default: 7

request-header-erase-list

Description: request-header-erase-list is a JSON List . Please see below for l216_request-header-erase-list

Type: List

request-header-insert-list

Description: request-header-insert-list is a JSON List . Please see below for l216_request-header-insert-list

Type: List

request-line-case-insensitive

Description: Parse http request line as case insensitive

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

response-content-replace-list

Description: response-content-replace-list is a JSON List . Please see below for l216_response-content-replace-list

Type: List

response-header-erase-list

Description: response-header-erase-list is a JSON List . Please see below for l216_response-header-erase-list

Type: List

response-header-insert-list

Description: response-header-insert-list is a JSON List . Please see below for l216_response-header-insert-list

Type: List

retry-on-5xx

Description: Retry http request on HTTP 5xx code

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: retry-on-5xx and retry-on-5xx-per-req are mutually exclusive

retry-on-5xx-per-req

Description: Retry http request on HTTP 5xx code for each request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: retry-on-5xx-per-req and retry-on-5xx are mutually exclusive

retry-on-5xx-per-req-val

Description: Number of times to retry (default is 3)

Type: number

Range: 1-3

Default: 3

retry-on-5xx-val

Description: Number of times to retry (default is 3)

Type: number

Range: 1-3

Default: 3

strict-transaction-switch

Description: Force server selection on every HTTP request

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

template

Description: template is a JSON Block . Please see below for template

Type: Object

term-11client-hdr-conn-close

Description: Terminate HTTP 1.1 client when req has Connection: close

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

url-hash-first

Description: Use the begining part of URL to calculate hash value (URL string length to calculate hash value)

Type: number

Range: 4-128

Mutual Exclusion: url-hash-first and url-hash-last are mutually exclusive

url-hash-last

Description: Use the end part of URL to calculate hash value (URL string length to calculate hash value)

Type: number

Range: 4-128

Mutual Exclusion: url-hash-last and url-hash-first are mutually exclusive

url-hash-offset

Description: Skip part of URL to calculate hash value (Offset of the URL string)

Type: number

Range: 0-255

url-hash-persist

Description: Use URL’s hash value to select server

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

url-switching

Description: url-switching is a JSON List . Please see below for l216_url-switching

Type: List

use-server-status

Description: Use Server-Status header to do URL hashing

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.http-list.request-header-erase-list

Specification
Type list
Block object keys

request-header-erase

Description: Erase a header from HTTP request (Header Name)

Type: string

Format: string-rlx

template.http-list.redirect-rewrite

Specification
Type object

match-list

Description: match-list is a JSON List . Please see below for l216_match-list

Type: List

redirect-secure

Description: Use HTTPS

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

redirect-secure-port

Description: Port (Port Number)

Type: number

Range: 1-65535

Default: 443

template.http-list.redirect-rewrite.match-list

Specification
Type list
Block object keys

redirect-match

Description: URL Matching (Pattern URL String)

Type: string

Format: string-rlx

rewrite-to

Description: Rewrite to Destination URL String

Type: string

Format: string-rlx

template.http-list.response-header-insert-list

Specification
Type list
Block object keys

response-header-insert

Description: Insert a header into HTTP response (Header Content (Format: “[name]: [value]”))

Type: string

Format: string-rlx

response-header-insert-type

Description: ‘insert-if-not-exist’: Only insert the header when it does not exist; ‘insert-always’: Always insert the header even when there is a header with the same name;

Type: string

Supported Values: insert-if-not-exist, insert-always

template.http-list.response-header-erase-list

Specification
Type list
Block object keys

response-header-erase

Description: Erase a header from HTTP response (Header Name)

Type: string

Format: string-rlx

template.http-list.template

Specification
Type object

logging

Description: Logging template (Logging Config name)

Type: string

Reference Object: /axapi/v3/slb/template/logging

template.http-list.url-switching

Specification
Type list
Block object keys

url-match-string

Description: URL String

Type: string

Format: string-rlx

url-service-group

Description: Create a Service Group comprising Servers (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

url-switching-type

Description: ‘contains’: Select service group if URL string contains another string; ‘ends-with’: Select service group if URL string ends with another string; ‘equals’: Select service group if URL string equals another string; ‘starts-with’: Select service group if URL string starts with another string; ‘url-case-insensitive’: Case insensitive URL switching; ‘url-hits-enable’: Enables URL Hits;

Type: string

Supported Values: contains, ends-with, equals, starts-with, url-case-insensitive, url-hits-enable

template.http-list.host-switching

Specification
Type list
Block object keys

host-match-string

Description: Hostname String

Type: string

Format: string-rlx

host-service-group

Description: Create a Service Group comprising Servers (Service Group Name)

Type: string

Format: string-rlx

Reference Object: /axapi/v3/slb/service-group

host-switching-type

Description: ‘contains’: Select service group if hostname contains another string; ‘ends-with’: Select service group if hostname ends with another string; ‘equals’: Select service group if hostname equals another string; ‘starts-with’: Select service group if hostname starts with another string; ‘host-hits-enable’: Enables Host Hits counters;

Type: string

Supported Values: contains, ends-with, equals, starts-with, host-hits-enable

template.http-list.response-content-replace-list

Specification
Type list
Block object keys

response-content-replace

Description: replace the data from HTTP response content (String in the http content need to be replaced)

Type: string

Format: string-rlx

response-new-string

Description: String will be in the http content

Type: string

Format: string-rlx

template.http-list.request-header-insert-list

Specification
Type list
Block object keys

request-header-insert

Description: Insert a header into HTTP request (Header Content (Format: “[name]: [value]”))

Type: string

Format: string-rlx

request-header-insert-type

Description: ‘insert-if-not-exist’: Only insert the header when it does not exist; ‘insert-always’: Always insert the header even when there is a header with the same name;

Type: string

Supported Values: insert-if-not-exist, insert-always

template.http-list.compression-content-type

Specification
Type list
Block object keys

content-type

Description: Compression content-type

Type: string

Format: string-rlx

template.http-list.compression-exclude-uri

Specification
Type list
Block object keys

exclude-uri

Description: Compression exclude uri

Type: string

Format: string-rlx

template.http-list.compression-exclude-content-type

Specification
Type list
Block object keys

exclude-content-type

Description: Compression exclude content-type (Compression exclude content type)

Type: string

Format: string-rlx

template.virtual-port-list

Specification
Type list
Block object keys

aflow

Description: Use aFlow to eliminate the traffic surge

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

allow-syn-otherflags

Description: Allow initial SYN packet with other flags

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

allow-vip-to-rport-mapping

Description: Allow mapping of VIP to real port

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-limit

Description: Connection limit

Type: number

Range: 1-8000000

Default: 8000000

conn-limit-no-logging

Description: Do not log connection over limit event

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-limit-reset

Description: Send client reset when connection over limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-rate-limit

Description: Connection rate limit

Type: number

Range: 1-1048575

conn-rate-limit-no-logging

Description: Do not log connection over limit event

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

conn-rate-limit-reset

Description: Send client reset when connection rate over limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

drop-unknown-conn

Description: Drop conection if receives TCP packet without SYN or RST flag and it does not belong to any existing connections

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

dscp

Description: Differentiated Services Code Point (DSCP to Real Server IP Mapping Value)

Type: number

Range: 1-63

ignore-tcp-msl

Description: reclaim TCP resource immediately without MSL

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: Virtual port template name

Type: string

Format: string-rlx

Default: default

rate-interval

Description: ‘100ms’: Use 100 ms as sampling interval; ‘second’: Use 1 second as sampling interval;

Type: string

Supported Values: 100ms, second

Default: second

reset-l7-on-failover

Description: Send reset to L7 client and server connection upon a failover

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

reset-unknown-conn

Description: Send reset back if receives TCP packet without SYN or RST flag and it does not belong to any existing connections

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

snat-msl

Description: Source NAT MSL (Source NAT MSL value)

Type: number

Range: 1-1800

snat-port-preserve

Description: Source NAT Port Preservation

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.cipher-list

Specification
Type list
Block object keys

cipher-cfg

Description: cipher-cfg is a JSON List . Please see below for l216_cipher-cfg

Type: List

name

Description: Cipher Template Name

Type: string

Format: string-rlx

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.cipher-list.cipher-cfg

Specification
Type list
Block object keys

cipher-suite

Description: ‘SSL3_RSA_DES_192_CBC3_SHA’: SSL3_RSA_DES_192_CBC3_SHA; ‘SSL3_RSA_DES_40_CBC_SHA’: SSL3_RSA_DES_40_CBC_SHA; ‘SSL3_RSA_DES_64_CBC_SHA’: SSL3_RSA_DES_64_CBC_SHA; ‘SSL3_RSA_RC4_128_MD5’: SSL3_RSA_RC4_128_MD5; ‘SSL3_RSA_RC4_128_SHA’: SSL3_RSA_RC4_128_SHA; ‘SSL3_RSA_RC4_40_MD5’: SSL3_RSA_RC4_40_MD5; ‘TLS1_RSA_AES_128_SHA’: TLS1_RSA_AES_128_SHA; ‘TLS1_RSA_AES_256_SHA’: TLS1_RSA_AES_256_SHA; ‘TLS1_RSA_EXPORT1024_RC4_56_MD5’: TLS1_RSA_EXPORT1024_RC4_56_MD5; ‘TLS1_RSA_EXPORT1024_RC4_56_SHA’: TLS1_RSA_EXPORT1024_RC4_56_SHA; ‘TLS1_RSA_AES_128_SHA256’: TLS1_RSA_AES_128_SHA256; ‘TLS1_RSA_AES_256_SHA256’: TLS1_RSA_AES_256_SHA256; ‘TLS1_DHE_RSA_AES_128_GCM_SHA256’: TLS1_DHE_RSA_AES_128_GCM_SHA256; ‘TLS1_DHE_RSA_AES_128_SHA’: TLS1_DHE_RSA_AES_128_SHA; ‘TLS1_DHE_RSA_AES_128_SHA256’: TLS1_DHE_RSA_AES_128_SHA256; ‘TLS1_DHE_RSA_AES_256_GCM_SHA384’: TLS1_DHE_RSA_AES_256_GCM_SHA384; ‘TLS1_DHE_RSA_AES_256_SHA’: TLS1_DHE_RSA_AES_256_SHA; ‘TLS1_DHE_RSA_AES_256_SHA256’: TLS1_DHE_RSA_AES_256_SHA256; ‘TLS1_ECDHE_ECDSA_AES_128_GCM_SHA256’: TLS1_ECDHE_ECDSA_AES_128_GCM_SHA256; ‘TLS1_ECDHE_ECDSA_AES_128_SHA’: TLS1_ECDHE_ECDSA_AES_128_SHA; ‘TLS1_ECDHE_ECDSA_AES_128_SHA256’: TLS1_ECDHE_ECDSA_AES_128_SHA256; ‘TLS1_ECDHE_ECDSA_AES_256_GCM_SHA384’: TLS1_ECDHE_ECDSA_AES_256_GCM_SHA384; ‘TLS1_ECDHE_ECDSA_AES_256_SHA’: TLS1_ECDHE_ECDSA_AES_256_SHA; ‘TLS1_ECDHE_RSA_AES_128_GCM_SHA256’: TLS1_ECDHE_RSA_AES_128_GCM_SHA256; ‘TLS1_ECDHE_RSA_AES_128_SHA’: TLS1_ECDHE_RSA_AES_128_SHA; ‘TLS1_ECDHE_RSA_AES_128_SHA256’: TLS1_ECDHE_RSA_AES_128_SHA256; ‘TLS1_ECDHE_RSA_AES_256_GCM_SHA384’: TLS1_ECDHE_RSA_AES_256_GCM_SHA384; ‘TLS1_ECDHE_RSA_AES_256_SHA’: TLS1_ECDHE_RSA_AES_256_SHA;

Type: string

Supported Values: SSL3_RSA_DES_192_CBC3_SHA, SSL3_RSA_DES_40_CBC_SHA, SSL3_RSA_DES_64_CBC_SHA, SSL3_RSA_RC4_128_MD5, SSL3_RSA_RC4_128_SHA, SSL3_RSA_RC4_40_MD5, TLS1_RSA_AES_128_SHA, TLS1_RSA_AES_256_SHA, TLS1_RSA_EXPORT1024_RC4_56_MD5, TLS1_RSA_EXPORT1024_RC4_56_SHA, TLS1_RSA_AES_128_SHA256, TLS1_RSA_AES_256_SHA256, TLS1_DHE_RSA_AES_128_GCM_SHA256, TLS1_DHE_RSA_AES_128_SHA, TLS1_DHE_RSA_AES_128_SHA256, TLS1_DHE_RSA_AES_256_GCM_SHA384, TLS1_DHE_RSA_AES_256_SHA, TLS1_DHE_RSA_AES_256_SHA256, TLS1_ECDHE_ECDSA_AES_128_GCM_SHA256, TLS1_ECDHE_ECDSA_AES_128_SHA, TLS1_ECDHE_ECDSA_AES_128_SHA256, TLS1_ECDHE_ECDSA_AES_256_GCM_SHA384, TLS1_ECDHE_ECDSA_AES_256_SHA, TLS1_ECDHE_RSA_AES_128_GCM_SHA256, TLS1_ECDHE_RSA_AES_128_SHA, TLS1_ECDHE_RSA_AES_128_SHA256, TLS1_ECDHE_RSA_AES_256_GCM_SHA384, TLS1_ECDHE_RSA_AES_256_SHA

priority

Description: Cipher priority (Cipher priority (default 1))

Type: number

Range: 1-100

Default: 1

template.policy-list

Specification
Type list
Block object keys

bw-list-id

Description: bw-list-id is a JSON List . Please see below for l216_bw-list-id

Type: List

bw-list-name

Description: Specify a blacklist/whitelist name

Type: string

Format: string-rlx

class-list

Description: class-list is a JSON Block . Please see below for l216_class-list

Type: Object

Reference Object: /axapi/v3/slb/template/policy/{name}/class-list

forward-policy

Description: forward-policy is a JSON Block . Please see below for l216_forward-policy

Type: Object

Reference Object: /axapi/v3/slb/template/policy/{name}/forward-policy

full-domain-tree

Description: Share counters between geo-location and sub regions

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

interval

Description: Log interval (minute)

Type: number

Range: 1-255

name

Description: Policy template name

Type: string

Format: string-rlx

over-limit

Description: Specify operation in case over limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

over-limit-lockup

Description: Don’t accept any new connection for certain time (Lockup duration (minute))

Type: number

Range: 1-127

over-limit-logging

Description: Log a message

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

over-limit-reset

Description: Reset the connection when it exceeds limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

overlap

Description: Use overlap mode for geo-location to do longest match

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

share

Description: Share counters between virtual ports and virtual servers

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

timeout

Description: Define timeout value of PBSLB dynamic entry (Timeout value (minute, default is 5))

Type: number

Range: 1-127

Default: 5

use-destination-ip

Description: Use destination IP to match the policy

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.forward-policy

Specification
Type object

action-list

Description: action-list is a JSON List . Please see below for l216_action-list

Type: List

Reference Object: /axapi/v3/slb/template/policy/{name}/forward-policy/action/{name}

filtering

Description: filtering is a JSON List . Please see below for l216_filtering

Type: List

no-client-conn-reuse

Description: Inspects only first request of a connection

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

source-list

Description: source-list is a JSON List . Please see below for l216_source-list

Type: List

Reference Object: /axapi/v3/slb/template/policy/{name}/forward-policy/source/{name}

uuid

Description: uuid of the object

Type: string

template.policy-list.forward-policy.action-list

Specification
Type list
Block object keys

action1

Description: ‘forward-to-internet’: Forward request to Internet; ‘forward-to-service-group’: Forward request to service group; ‘drop’: Drop request;

Type: string

Supported Values: forward-to-internet, forward-to-service-group, drop

drop-message

Description: drop-message sent to the client as webpage(html tags are included and quotation marks are required for white spaces)

Type: string

Format: string-rlx

Mutual Exclusion: drop-message and drop-redirect-url are mutually exclusive

drop-redirect-url

Description: Specify URL to which client request is redirected upon being dropped

Type: string

Format: string-rlx

Mutual Exclusion: drop-redirect-url and drop-message are mutually exclusive

fake-sg

Description: service group to forward the packets to Internet

Type: string

fall-back

Description: Fallback service group for Internet

Type: string

fall-back-snat

Description: Source NAT pool or pool group for fallback server

Type: string

forward-snat

Description: Source NAT pool or pool group

Type: string

http-status-code

Description: ‘301’: Moved permanently; ‘302’: Found;

Type: string

Supported Values: 301, 302

Default: 302

log

Description: enable logging

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

name

Description: Action policy name

Type: string

proxy-chaining

Description: Enable proxy chaining feature

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

real-sg

Description: service group to forward the packets

Type: string

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.forward-policy.action-list.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘hits’: Number of requests matching this destination rule;

Type: string

Supported Values: all, hits

template.policy-list.forward-policy.filtering

Specification
Type list
Block object keys

ssli-url-filtering

Description: ‘bypassed-sni-disable’: Disable SNI filtering for bypassed URL’s(enabled by default); ‘intercepted-sni-enable’: Enable SNI filtering for intercepted URL’s(disabled by default); ‘intercepted-http-disable’: Disable HTTP(host/URL) filtering for intercepted URL’s(enabled by default); ‘no-sni-allow’: Allow connection if SNI filtering is enabled and SNI header is not present(Drop by default);

Type: string

Supported Values: bypassed-sni-disable, intercepted-sni-enable, intercepted-http-disable, no-sni-allow

template.policy-list.forward-policy.source-list

Specification
Type list
Block object keys

class-list-next

Description: Class List Name

Type: string

Reference Object: /axapi/v3/class-list

destination

Description: destination is a JSON Block . Please see below for l216_destination

Type: Object

Reference Object: /axapi/v3/slb/template/policy/{name}/forward-policy/source/{name}/destination

match-any

Description: Match any source

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: match-any and match-class-list are mutually exclusive

match-class-list

Description: Class List Name

Type: string

Mutual Exclusion: match-class-list and match-any are mutually exclusive

Reference Object: /axapi/v3/class-list

name

Description: source destination match rule name

Type: string

operation

Description: ‘or’: Logical OR on source class list;

Type: string

Supported Values: or

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.forward-policy.source-list.destination

Specification
Type object

any

Description: any is a JSON Block . Please see below for l216_any

Type: Object

Reference Object: /axapi/v3/slb/template/policy/{name}/forward-policy/source/{name}/destination/any

class-list-list

Description: class-list-list is a JSON List . Please see below for l216_class-list-list

Type: List

Reference Object: /axapi/v3/slb/template/policy/{name}/forward-policy/source/{name}/destination/class-list/{dest-class-list}

web-category-list-list

Description: web-category-list-list is a JSON List . Please see below for l216_web-category-list-list

Type: List

Reference Object: /axapi/v3/slb/template/policy/{name}/forward-policy/source/{name}/destination/web-category-list/{web-category-list}

template.policy-list.forward-policy.source-list.destination.class-list-list

Specification
Type list
Block object keys

action

Description: Action to be performed

Type: string

dest-class-list

Description: Destination Class List Name

Type: string

Reference Object: /axapi/v3/class-list

priority

Description: Priority value of the action(higher the number higher the priority)

Type: number

Range: 1-1024

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

type

Description: ‘host’: Match hostname; ‘url’: match URL;

Type: string

Supported Values: host, url

uuid

Description: uuid of the object

Type: string

template.policy-list.forward-policy.source-list.destination.class-list-list.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘hits’: Number of requests matching this destination rule;

Type: string

Supported Values: all, hits

template.policy-list.forward-policy.source-list.destination.web-category-list-list

Specification
Type list
Block object keys

action

Description: Action to be performed

Type: string

priority

Description: Priority value of the action(higher the number higher the priority)

Type: number

Range: 1-1024

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

type

Description: ‘host’: Match hostname; ‘url’: match URL;

Type: string

Supported Values: host, url

uuid

Description: uuid of the object

Type: string

web-category-list

Description: Destination Class List Name

Type: string

Format: string-rlx

Reference Object: /axapi/v3/web-category/category-list

template.policy-list.forward-policy.source-list.destination.web-category-list-list.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘hits’: Number of requests matching this destination rule;

Type: string

Supported Values: all, hits

template.policy-list.forward-policy.source-list.destination.any

Specification
Type object

action

Description: Action to be performed

Type: string

sampling-enable

Description: sampling-enable is a JSON List . Please see below for l216_sampling-enable

Type: List

uuid

Description: uuid of the object

Type: string

template.policy-list.forward-policy.source-list.destination.any.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘hits’: Number of requests matching this destination rule;

Type: string

Supported Values: all, hits

template.policy-list.forward-policy.source-list.sampling-enable

Specification
Type list
Block object keys

counters1

Description: ‘all’: all; ‘hits’: Number of requests matching this source rule; ‘destination-match-not-found’: Number of requests without matching destination rule; ‘no-host-info’: Failed to parse ip or host information from request;

Type: string

Supported Values: all, hits, destination-match-not-found, no-host-info

template.policy-list.class-list

Specification
Type object

client-ip-l3-dest

Description: Use destination IP as client IP address

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: client-ip-l3-dest and client-ip-l7-header are mutually exclusive

client-ip-l7-header

Description: Use extract client IP address from L7 header

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

Mutual Exclusion: client-ip-l7-header and client-ip-l3-dest are mutually exclusive

header-name

Description: Specify L7 header name

Type: string

lid-list

Description: lid-list is a JSON List . Please see below for l216_lid-list

Type: List

Reference Object: /axapi/v3/slb/template/policy/{name}/class-list/lid/{lidnum}

name

Description: Class list name or geo-location-class-list name

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.class-list.lid-list

Specification
Type list
Block object keys

action-value

Description: ‘forward’: Forward the traffic even it exceeds limit; ‘reset’: Reset the connection when it exceeds limit;

Type: string

Supported Values: forward, reset

bw-per

Description: Per (Specify interval in number of 100ms)

Type: number

Range: 1-65535

bw-rate-limit

Description: Specify bandwidth rate limit (Bandwidth rate limit in bytes)

Type: number

Range: 1-2147483647

conn-limit

Description: Connection limit

Type: number

Range: 0-1048575

conn-per

Description: Per (Specify interval in number of 100ms)

Type: number

Range: 1-65535

conn-rate-limit

Description: Specify connection rate limit

Type: number

Range: 1-2147483647

dns64

Description: dns64 is a JSON Block . Please see below for l216_dns64

Type: Object

interval

Description: Specify log interval in minutes, by default system will log every over limit instance

Type: number

Range: 1-255

lidnum

Description: Specify a limit ID

Type: number

Range: 1-31

lockout

Description: Don’t accept any new connection for certain time (Lockout duration in minutes)

Type: number

Range: 1-1023

log

Description: Log a message

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

over-limit-action

Description: Set action when exceeds limit

Type: boolean

Supported Values: true, false, 1, 0

Default: 0

request-limit

Description: Request limit (Specify request limit)

Type: number

Range: 1-1048575

request-per

Description: Per (Specify interval in number of 100ms)

Type: number

Range: 1-65535

request-rate-limit

Description: Request rate limit (Specify request rate limit)

Type: number

Range: 1-4294967295

response-code-rate-limit

Description: response-code-rate-limit is a JSON List . Please see below for l216_response-code-rate-limit

Type: List

user-tag

Description: Customized tag

Type: string

Format: string-rlx

uuid

Description: uuid of the object

Type: string

template.policy-list.class-list.lid-list.dns64

Specification
Type object

disable

Description: <