Viewing docs for bytepluscc v0.0.21
published on Thursday, Apr 2, 2026 by Byteplus
published on Thursday, Apr 2, 2026 by Byteplus
Viewing docs for bytepluscc v0.0.21
published on Thursday, Apr 2, 2026 by Byteplus
published on Thursday, Apr 2, 2026 by Byteplus
Data Source schema for Byteplus::WAF::Domain
Using getDomain
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getDomain(args: GetDomainArgs, opts?: InvokeOptions): Promise<GetDomainResult>
function getDomainOutput(args: GetDomainOutputArgs, opts?: InvokeOptions): Output<GetDomainResult>def get_domain(id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetDomainResult
def get_domain_output(id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetDomainResult]func LookupDomain(ctx *Context, args *LookupDomainArgs, opts ...InvokeOption) (*LookupDomainResult, error)
func LookupDomainOutput(ctx *Context, args *LookupDomainOutputArgs, opts ...InvokeOption) LookupDomainResultOutput> Note: This function is named LookupDomain in the Go SDK.
public static class GetDomain
{
public static Task<GetDomainResult> InvokeAsync(GetDomainArgs args, InvokeOptions? opts = null)
public static Output<GetDomainResult> Invoke(GetDomainInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetDomainResult> getDomain(GetDomainArgs args, InvokeOptions options)
public static Output<GetDomainResult> getDomain(GetDomainArgs args, InvokeOptions options)
fn::invoke:
function: bytepluscc:waf/getDomain:getDomain
arguments:
# arguments dictionaryThe following arguments are supported:
- Id string
- Uniquely identifies the resource.
- Id string
- Uniquely identifies the resource.
- id String
- Uniquely identifies the resource.
- id string
- Uniquely identifies the resource.
- id str
- Uniquely identifies the resource.
- id String
- Uniquely identifies the resource.
getDomain Result
The following output properties are available:
- Access
Mode int - Access mode. 10: CNAME access, 11: Layer 7 load balancing (CLB) access.
- Advanced
Defense stringIp - High defense instance IP. Displayed for high-defense WAF access; otherwise blank.
- Advanced
Defense stringIpv6 - High defense instance IPv6. Displayed for high-defense WAF access; otherwise blank.
- Api
Enable int - API protection policy enabled. 0: Off, 1: On
- Attack
Status int - Attack status. 0: No attack detected, 1: Attack detected.
- Auto
Cc intEnable - Whether to enable intelligent CC protection policy. 0: Disabled, 1: Enabled.
- Automatic
Black intEnable - Whether to enable automatic blocking. 0: Disabled, 1: Enabled.
- Backend
Groups List<Byteplus.Get Domain Backend Group> - Origin configuration.
- Black
Ip intEnable - Denylist policy enabled. 0: Off, 1: On
- Black
Lct intEnable - Whether to enable regional blocking policy. 0: Disabled; 1: Enabled.
- Bot
Dytoken intEnable - Dynamic token protection enabled
- Bot
Frequency intEnable - Bot rate limit policy enabled. 0: Off 1: On
- Bot
Repeat intEnable - Bot statistics protection policy enabled. 0: Off 1: On
- Bot
Sequence intDefault Action - Set the default action for the bot behavior map policy. Effective when BotSequenceEnable = 1 is enabled. Default is 0 (Observe). 0: Observe 2: Intercept 6: JS Challenge 7: CAPTCHA.
- Bot
Sequence intEnable - Whether to enable bot behavior map. 0: Off 1: On.
- Cc
Enable int - Whether to enable CC protection policy. 0: Disabled 1: Enabled.
- Certificate
Id string - Certificate ID managed in Certificate Center
- Certificate
Name string - Certificate name. Displayed when protocol type includes HTTPS.
- Certificate
Platform string - Certificate hosting platform: waf/certificate_service.
- Clb
Instance stringIds - CLB instance ID.
- Clb
Listener stringId - CLB listener ID.
- Clb
Pool stringId - CLB backend server group ID.
- Clb
Server stringId - CLB backend server ID
- Client
Ip intLocation - Client IP acquisition method. 0: Custom header field, 1: Use the first public IP address in the X-Forwarded-For (XFF) field as the real client IP address.
- Client
Max intBody Size - Maximum client request body size (MB).
- Cloud
Access List<Byteplus.Configs Get Domain Cloud Access Config> - LB access parameters.
- Cname string
- CNAME record.
- Custom
Bot intEnable - Whether to enable custom bot protection.
- Custom
Headers List<string> - Custom header.
- Custom
Rsp intEnable - Whether to enable custom response.
- Custom
Sni string - Custom SNI.
- Defence
Mode int - Set protection mode for exception ALB instances. 1: Enable protection. The configured protection policies take effect. 2: Pause protection. Only forwarding is performed without inspection; the configured protection policies do not take effect. 3: Origin mode. Requests are sent directly to the origin server and are no longer forwarded to the WAF instance. After configuring exception protection instances, the domain may also have the following protection statuses: 5: Partially enabled. The default protection mode is enabled, but some exception instances are in paused protection or origin mode. 6: Partially paused. The default protection mode is paused, but some exception instances are in enabled protection or origin mode. 7: Partially origin. The default protection mode is origin mode, but some exception instances are in enabled protection or paused protection.
- Dlp
Enable int - Data leakage protection enabled
- Domain string
- Protected domain information. Supports wildcard and exact domains
- Enable
Custom intRedirect - User-defined redirection enabled. 0: Off, 1: On
- Enable
Http2 int - Whether to enable HTTP/2.0. 0: Disabled, 1: Enabled.
- Enable
Ipv6 int - IPv6 request protection supported. 0: Off, 1: On
- Enable
Sni int - Whether to enable SNI configuration. 0: Off, 1: On.
- Id string
- Uniquely identifies the resource.
- Keep
Alive intRequest - Persistent connection reuse count
- Keep
Alive intTimeout - Persistent connection keep-alive time (seconds)
- Lb
Algorithm string - Load balancing algorithm type. wrr: Weighted round robin, wlc: Weighted least connections, sh: Source address hash.
- Port int
- Port number
- Project
Name string - Project name.
- Protocol
Follow int - Protocol following enabled. 0: Off, 1: On
- Protocol
Ports Byteplus.Get Domain Protocol Ports - Access port information
- Protocols List<string>
- Access protocol type: supports HTTP/HTTPS
- Proxy
Config int - Proxy configuration enabled. 0: Off, 1: On
- Proxy
Connect intTimeout - Connection timeout between WAF and backend server (seconds).
- Proxy
Keep intAlive - Number of reusable WAF origin persistent connections.
- Proxy
Keep intAlive Timeout - Idle persistent connection timeout (seconds)
- Proxy
Read intTimeout - Timeout for WAF to read response from backend server (seconds).
- Proxy
Retry int - WAF origin retry count.
- Proxy
Write intTimeout - Timeout for WAF to transmit request to backend server (seconds).
- Public
Real intServer - CNAME access origin method. 0: Private network origin, 1: Public network origin.
- Rsp
Abnormal intEnable - Whether to enable abnormal response protection.
- Server
Ips string - Service IP
- Src
Ips string - WAF origin IP.
- Src
Protocol string - Origin protocol.
- Ssl
Ciphers List<string> - Cipher suite
- Ssl
Protocols List<string> - TLS protocol version. For example: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3
- Status int
- Access status. 0: Normal, 1: DNS not resolved, 2: Configuring, 3: Configuration failed, 4: Configuration not effective, 5: Updating, 6: Instance deleted.
- System
Bot intEnable - Whether to enable managed bot protection.
- Tamper
Proof intEnable - Whether to enable anti-tampering.
- Tcp
Listener List<Byteplus.Configs Get Domain Tcp Listener Config> - TCP listener configuration.
- Tls
Enable int - Log service enabled. 0: Off, 1: On
- Tls
Fields Byteplus.Config Get Domain Tls Fields Config - Log field configuration details
- Update
Time string - Update time
- Vpc
Id string - VPC ID。
- Waf
Enable int - WAF protection enabled
- Waf
White intReq Enable - Allowlist request protection enabled
- White
Enable int - Whether to enable allowlist protection.
- White
Field intEnable - Field allowlist protection enabled
- Access
Mode int - Access mode. 10: CNAME access, 11: Layer 7 load balancing (CLB) access.
- Advanced
Defense stringIp - High defense instance IP. Displayed for high-defense WAF access; otherwise blank.
- Advanced
Defense stringIpv6 - High defense instance IPv6. Displayed for high-defense WAF access; otherwise blank.
- Api
Enable int - API protection policy enabled. 0: Off, 1: On
- Attack
Status int - Attack status. 0: No attack detected, 1: Attack detected.
- Auto
Cc intEnable - Whether to enable intelligent CC protection policy. 0: Disabled, 1: Enabled.
- Automatic
Black intEnable - Whether to enable automatic blocking. 0: Disabled, 1: Enabled.
- Backend
Groups []GetDomain Backend Group - Origin configuration.
- Black
Ip intEnable - Denylist policy enabled. 0: Off, 1: On
- Black
Lct intEnable - Whether to enable regional blocking policy. 0: Disabled; 1: Enabled.
- Bot
Dytoken intEnable - Dynamic token protection enabled
- Bot
Frequency intEnable - Bot rate limit policy enabled. 0: Off 1: On
- Bot
Repeat intEnable - Bot statistics protection policy enabled. 0: Off 1: On
- Bot
Sequence intDefault Action - Set the default action for the bot behavior map policy. Effective when BotSequenceEnable = 1 is enabled. Default is 0 (Observe). 0: Observe 2: Intercept 6: JS Challenge 7: CAPTCHA.
- Bot
Sequence intEnable - Whether to enable bot behavior map. 0: Off 1: On.
- Cc
Enable int - Whether to enable CC protection policy. 0: Disabled 1: Enabled.
- Certificate
Id string - Certificate ID managed in Certificate Center
- Certificate
Name string - Certificate name. Displayed when protocol type includes HTTPS.
- Certificate
Platform string - Certificate hosting platform: waf/certificate_service.
- Clb
Instance stringIds - CLB instance ID.
- Clb
Listener stringId - CLB listener ID.
- Clb
Pool stringId - CLB backend server group ID.
- Clb
Server stringId - CLB backend server ID
- Client
Ip intLocation - Client IP acquisition method. 0: Custom header field, 1: Use the first public IP address in the X-Forwarded-For (XFF) field as the real client IP address.
- Client
Max intBody Size - Maximum client request body size (MB).
- Cloud
Access []GetConfigs Domain Cloud Access Config - LB access parameters.
- Cname string
- CNAME record.
- Custom
Bot intEnable - Whether to enable custom bot protection.
- Custom
Headers []string - Custom header.
- Custom
Rsp intEnable - Whether to enable custom response.
- Custom
Sni string - Custom SNI.
- Defence
Mode int - Set protection mode for exception ALB instances. 1: Enable protection. The configured protection policies take effect. 2: Pause protection. Only forwarding is performed without inspection; the configured protection policies do not take effect. 3: Origin mode. Requests are sent directly to the origin server and are no longer forwarded to the WAF instance. After configuring exception protection instances, the domain may also have the following protection statuses: 5: Partially enabled. The default protection mode is enabled, but some exception instances are in paused protection or origin mode. 6: Partially paused. The default protection mode is paused, but some exception instances are in enabled protection or origin mode. 7: Partially origin. The default protection mode is origin mode, but some exception instances are in enabled protection or paused protection.
- Dlp
Enable int - Data leakage protection enabled
- Domain string
- Protected domain information. Supports wildcard and exact domains
- Enable
Custom intRedirect - User-defined redirection enabled. 0: Off, 1: On
- Enable
Http2 int - Whether to enable HTTP/2.0. 0: Disabled, 1: Enabled.
- Enable
Ipv6 int - IPv6 request protection supported. 0: Off, 1: On
- Enable
Sni int - Whether to enable SNI configuration. 0: Off, 1: On.
- Id string
- Uniquely identifies the resource.
- Keep
Alive intRequest - Persistent connection reuse count
- Keep
Alive intTimeout - Persistent connection keep-alive time (seconds)
- Lb
Algorithm string - Load balancing algorithm type. wrr: Weighted round robin, wlc: Weighted least connections, sh: Source address hash.
- Port int
- Port number
- Project
Name string - Project name.
- Protocol
Follow int - Protocol following enabled. 0: Off, 1: On
- Protocol
Ports GetDomain Protocol Ports - Access port information
- Protocols []string
- Access protocol type: supports HTTP/HTTPS
- Proxy
Config int - Proxy configuration enabled. 0: Off, 1: On
- Proxy
Connect intTimeout - Connection timeout between WAF and backend server (seconds).
- Proxy
Keep intAlive - Number of reusable WAF origin persistent connections.
- Proxy
Keep intAlive Timeout - Idle persistent connection timeout (seconds)
- Proxy
Read intTimeout - Timeout for WAF to read response from backend server (seconds).
- Proxy
Retry int - WAF origin retry count.
- Proxy
Write intTimeout - Timeout for WAF to transmit request to backend server (seconds).
- Public
Real intServer - CNAME access origin method. 0: Private network origin, 1: Public network origin.
- Rsp
Abnormal intEnable - Whether to enable abnormal response protection.
- Server
Ips string - Service IP
- Src
Ips string - WAF origin IP.
- Src
Protocol string - Origin protocol.
- Ssl
Ciphers []string - Cipher suite
- Ssl
Protocols []string - TLS protocol version. For example: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3
- Status int
- Access status. 0: Normal, 1: DNS not resolved, 2: Configuring, 3: Configuration failed, 4: Configuration not effective, 5: Updating, 6: Instance deleted.
- System
Bot intEnable - Whether to enable managed bot protection.
- Tamper
Proof intEnable - Whether to enable anti-tampering.
- Tcp
Listener []GetConfigs Domain Tcp Listener Config - TCP listener configuration.
- Tls
Enable int - Log service enabled. 0: Off, 1: On
- Tls
Fields GetConfig Domain Tls Fields Config - Log field configuration details
- Update
Time string - Update time
- Vpc
Id string - VPC ID。
- Waf
Enable int - WAF protection enabled
- Waf
White intReq Enable - Allowlist request protection enabled
- White
Enable int - Whether to enable allowlist protection.
- White
Field intEnable - Field allowlist protection enabled
- access
Mode Integer - Access mode. 10: CNAME access, 11: Layer 7 load balancing (CLB) access.
- advanced
Defense StringIp - High defense instance IP. Displayed for high-defense WAF access; otherwise blank.
- advanced
Defense StringIpv6 - High defense instance IPv6. Displayed for high-defense WAF access; otherwise blank.
- api
Enable Integer - API protection policy enabled. 0: Off, 1: On
- attack
Status Integer - Attack status. 0: No attack detected, 1: Attack detected.
- auto
Cc IntegerEnable - Whether to enable intelligent CC protection policy. 0: Disabled, 1: Enabled.
- automatic
Black IntegerEnable - Whether to enable automatic blocking. 0: Disabled, 1: Enabled.
- backend
Groups List<GetDomain Backend Group> - Origin configuration.
- black
Ip IntegerEnable - Denylist policy enabled. 0: Off, 1: On
- black
Lct IntegerEnable - Whether to enable regional blocking policy. 0: Disabled; 1: Enabled.
- bot
Dytoken IntegerEnable - Dynamic token protection enabled
- bot
Frequency IntegerEnable - Bot rate limit policy enabled. 0: Off 1: On
- bot
Repeat IntegerEnable - Bot statistics protection policy enabled. 0: Off 1: On
- bot
Sequence IntegerDefault Action - Set the default action for the bot behavior map policy. Effective when BotSequenceEnable = 1 is enabled. Default is 0 (Observe). 0: Observe 2: Intercept 6: JS Challenge 7: CAPTCHA.
- bot
Sequence IntegerEnable - Whether to enable bot behavior map. 0: Off 1: On.
- cc
Enable Integer - Whether to enable CC protection policy. 0: Disabled 1: Enabled.
- certificate
Id String - Certificate ID managed in Certificate Center
- certificate
Name String - Certificate name. Displayed when protocol type includes HTTPS.
- certificate
Platform String - Certificate hosting platform: waf/certificate_service.
- clb
Instance StringIds - CLB instance ID.
- clb
Listener StringId - CLB listener ID.
- clb
Pool StringId - CLB backend server group ID.
- clb
Server StringId - CLB backend server ID
- client
Ip IntegerLocation - Client IP acquisition method. 0: Custom header field, 1: Use the first public IP address in the X-Forwarded-For (XFF) field as the real client IP address.
- client
Max IntegerBody Size - Maximum client request body size (MB).
- cloud
Access List<GetConfigs Domain Cloud Access Config> - LB access parameters.
- cname String
- CNAME record.
- custom
Bot IntegerEnable - Whether to enable custom bot protection.
- custom
Headers List<String> - Custom header.
- custom
Rsp IntegerEnable - Whether to enable custom response.
- custom
Sni String - Custom SNI.
- defence
Mode Integer - Set protection mode for exception ALB instances. 1: Enable protection. The configured protection policies take effect. 2: Pause protection. Only forwarding is performed without inspection; the configured protection policies do not take effect. 3: Origin mode. Requests are sent directly to the origin server and are no longer forwarded to the WAF instance. After configuring exception protection instances, the domain may also have the following protection statuses: 5: Partially enabled. The default protection mode is enabled, but some exception instances are in paused protection or origin mode. 6: Partially paused. The default protection mode is paused, but some exception instances are in enabled protection or origin mode. 7: Partially origin. The default protection mode is origin mode, but some exception instances are in enabled protection or paused protection.
- dlp
Enable Integer - Data leakage protection enabled
- domain String
- Protected domain information. Supports wildcard and exact domains
- enable
Custom IntegerRedirect - User-defined redirection enabled. 0: Off, 1: On
- enable
Http2 Integer - Whether to enable HTTP/2.0. 0: Disabled, 1: Enabled.
- enable
Ipv6 Integer - IPv6 request protection supported. 0: Off, 1: On
- enable
Sni Integer - Whether to enable SNI configuration. 0: Off, 1: On.
- id String
- Uniquely identifies the resource.
- keep
Alive IntegerRequest - Persistent connection reuse count
- keep
Alive IntegerTimeout - Persistent connection keep-alive time (seconds)
- lb
Algorithm String - Load balancing algorithm type. wrr: Weighted round robin, wlc: Weighted least connections, sh: Source address hash.
- port Integer
- Port number
- project
Name String - Project name.
- protocol
Follow Integer - Protocol following enabled. 0: Off, 1: On
- protocol
Ports GetDomain Protocol Ports - Access port information
- protocols List<String>
- Access protocol type: supports HTTP/HTTPS
- proxy
Config Integer - Proxy configuration enabled. 0: Off, 1: On
- proxy
Connect IntegerTimeout - Connection timeout between WAF and backend server (seconds).
- proxy
Keep IntegerAlive - Number of reusable WAF origin persistent connections.
- proxy
Keep IntegerAlive Timeout - Idle persistent connection timeout (seconds)
- proxy
Read IntegerTimeout - Timeout for WAF to read response from backend server (seconds).
- proxy
Retry Integer - WAF origin retry count.
- proxy
Write IntegerTimeout - Timeout for WAF to transmit request to backend server (seconds).
- public
Real IntegerServer - CNAME access origin method. 0: Private network origin, 1: Public network origin.
- rsp
Abnormal IntegerEnable - Whether to enable abnormal response protection.
- server
Ips String - Service IP
- src
Ips String - WAF origin IP.
- src
Protocol String - Origin protocol.
- ssl
Ciphers List<String> - Cipher suite
- ssl
Protocols List<String> - TLS protocol version. For example: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3
- status Integer
- Access status. 0: Normal, 1: DNS not resolved, 2: Configuring, 3: Configuration failed, 4: Configuration not effective, 5: Updating, 6: Instance deleted.
- system
Bot IntegerEnable - Whether to enable managed bot protection.
- tamper
Proof IntegerEnable - Whether to enable anti-tampering.
- tcp
Listener List<GetConfigs Domain Tcp Listener Config> - TCP listener configuration.
- tls
Enable Integer - Log service enabled. 0: Off, 1: On
- tls
Fields GetConfig Domain Tls Fields Config - Log field configuration details
- update
Time String - Update time
- vpc
Id String - VPC ID。
- waf
Enable Integer - WAF protection enabled
- waf
White IntegerReq Enable - Allowlist request protection enabled
- white
Enable Integer - Whether to enable allowlist protection.
- white
Field IntegerEnable - Field allowlist protection enabled
- access
Mode number - Access mode. 10: CNAME access, 11: Layer 7 load balancing (CLB) access.
- advanced
Defense stringIp - High defense instance IP. Displayed for high-defense WAF access; otherwise blank.
- advanced
Defense stringIpv6 - High defense instance IPv6. Displayed for high-defense WAF access; otherwise blank.
- api
Enable number - API protection policy enabled. 0: Off, 1: On
- attack
Status number - Attack status. 0: No attack detected, 1: Attack detected.
- auto
Cc numberEnable - Whether to enable intelligent CC protection policy. 0: Disabled, 1: Enabled.
- automatic
Black numberEnable - Whether to enable automatic blocking. 0: Disabled, 1: Enabled.
- backend
Groups GetDomain Backend Group[] - Origin configuration.
- black
Ip numberEnable - Denylist policy enabled. 0: Off, 1: On
- black
Lct numberEnable - Whether to enable regional blocking policy. 0: Disabled; 1: Enabled.
- bot
Dytoken numberEnable - Dynamic token protection enabled
- bot
Frequency numberEnable - Bot rate limit policy enabled. 0: Off 1: On
- bot
Repeat numberEnable - Bot statistics protection policy enabled. 0: Off 1: On
- bot
Sequence numberDefault Action - Set the default action for the bot behavior map policy. Effective when BotSequenceEnable = 1 is enabled. Default is 0 (Observe). 0: Observe 2: Intercept 6: JS Challenge 7: CAPTCHA.
- bot
Sequence numberEnable - Whether to enable bot behavior map. 0: Off 1: On.
- cc
Enable number - Whether to enable CC protection policy. 0: Disabled 1: Enabled.
- certificate
Id string - Certificate ID managed in Certificate Center
- certificate
Name string - Certificate name. Displayed when protocol type includes HTTPS.
- certificate
Platform string - Certificate hosting platform: waf/certificate_service.
- clb
Instance stringIds - CLB instance ID.
- clb
Listener stringId - CLB listener ID.
- clb
Pool stringId - CLB backend server group ID.
- clb
Server stringId - CLB backend server ID
- client
Ip numberLocation - Client IP acquisition method. 0: Custom header field, 1: Use the first public IP address in the X-Forwarded-For (XFF) field as the real client IP address.
- client
Max numberBody Size - Maximum client request body size (MB).
- cloud
Access GetConfigs Domain Cloud Access Config[] - LB access parameters.
- cname string
- CNAME record.
- custom
Bot numberEnable - Whether to enable custom bot protection.
- custom
Headers string[] - Custom header.
- custom
Rsp numberEnable - Whether to enable custom response.
- custom
Sni string - Custom SNI.
- defence
Mode number - Set protection mode for exception ALB instances. 1: Enable protection. The configured protection policies take effect. 2: Pause protection. Only forwarding is performed without inspection; the configured protection policies do not take effect. 3: Origin mode. Requests are sent directly to the origin server and are no longer forwarded to the WAF instance. After configuring exception protection instances, the domain may also have the following protection statuses: 5: Partially enabled. The default protection mode is enabled, but some exception instances are in paused protection or origin mode. 6: Partially paused. The default protection mode is paused, but some exception instances are in enabled protection or origin mode. 7: Partially origin. The default protection mode is origin mode, but some exception instances are in enabled protection or paused protection.
- dlp
Enable number - Data leakage protection enabled
- domain string
- Protected domain information. Supports wildcard and exact domains
- enable
Custom numberRedirect - User-defined redirection enabled. 0: Off, 1: On
- enable
Http2 number - Whether to enable HTTP/2.0. 0: Disabled, 1: Enabled.
- enable
Ipv6 number - IPv6 request protection supported. 0: Off, 1: On
- enable
Sni number - Whether to enable SNI configuration. 0: Off, 1: On.
- id string
- Uniquely identifies the resource.
- keep
Alive numberRequest - Persistent connection reuse count
- keep
Alive numberTimeout - Persistent connection keep-alive time (seconds)
- lb
Algorithm string - Load balancing algorithm type. wrr: Weighted round robin, wlc: Weighted least connections, sh: Source address hash.
- port number
- Port number
- project
Name string - Project name.
- protocol
Follow number - Protocol following enabled. 0: Off, 1: On
- protocol
Ports GetDomain Protocol Ports - Access port information
- protocols string[]
- Access protocol type: supports HTTP/HTTPS
- proxy
Config number - Proxy configuration enabled. 0: Off, 1: On
- proxy
Connect numberTimeout - Connection timeout between WAF and backend server (seconds).
- proxy
Keep numberAlive - Number of reusable WAF origin persistent connections.
- proxy
Keep numberAlive Timeout - Idle persistent connection timeout (seconds)
- proxy
Read numberTimeout - Timeout for WAF to read response from backend server (seconds).
- proxy
Retry number - WAF origin retry count.
- proxy
Write numberTimeout - Timeout for WAF to transmit request to backend server (seconds).
- public
Real numberServer - CNAME access origin method. 0: Private network origin, 1: Public network origin.
- rsp
Abnormal numberEnable - Whether to enable abnormal response protection.
- server
Ips string - Service IP
- src
Ips string - WAF origin IP.
- src
Protocol string - Origin protocol.
- ssl
Ciphers string[] - Cipher suite
- ssl
Protocols string[] - TLS protocol version. For example: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3
- status number
- Access status. 0: Normal, 1: DNS not resolved, 2: Configuring, 3: Configuration failed, 4: Configuration not effective, 5: Updating, 6: Instance deleted.
- system
Bot numberEnable - Whether to enable managed bot protection.
- tamper
Proof numberEnable - Whether to enable anti-tampering.
- tcp
Listener GetConfigs Domain Tcp Listener Config[] - TCP listener configuration.
- tls
Enable number - Log service enabled. 0: Off, 1: On
- tls
Fields GetConfig Domain Tls Fields Config - Log field configuration details
- update
Time string - Update time
- vpc
Id string - VPC ID。
- waf
Enable number - WAF protection enabled
- waf
White numberReq Enable - Allowlist request protection enabled
- white
Enable number - Whether to enable allowlist protection.
- white
Field numberEnable - Field allowlist protection enabled
- access_
mode int - Access mode. 10: CNAME access, 11: Layer 7 load balancing (CLB) access.
- advanced_
defense_ strip - High defense instance IP. Displayed for high-defense WAF access; otherwise blank.
- advanced_
defense_ stripv6 - High defense instance IPv6. Displayed for high-defense WAF access; otherwise blank.
- api_
enable int - API protection policy enabled. 0: Off, 1: On
- attack_
status int - Attack status. 0: No attack detected, 1: Attack detected.
- auto_
cc_ intenable - Whether to enable intelligent CC protection policy. 0: Disabled, 1: Enabled.
- automatic_
black_ intenable - Whether to enable automatic blocking. 0: Disabled, 1: Enabled.
- backend_
groups Sequence[GetDomain Backend Group] - Origin configuration.
- black_
ip_ intenable - Denylist policy enabled. 0: Off, 1: On
- black_
lct_ intenable - Whether to enable regional blocking policy. 0: Disabled; 1: Enabled.
- bot_
dytoken_ intenable - Dynamic token protection enabled
- bot_
frequency_ intenable - Bot rate limit policy enabled. 0: Off 1: On
- bot_
repeat_ intenable - Bot statistics protection policy enabled. 0: Off 1: On
- bot_
sequence_ intdefault_ action - Set the default action for the bot behavior map policy. Effective when BotSequenceEnable = 1 is enabled. Default is 0 (Observe). 0: Observe 2: Intercept 6: JS Challenge 7: CAPTCHA.
- bot_
sequence_ intenable - Whether to enable bot behavior map. 0: Off 1: On.
- cc_
enable int - Whether to enable CC protection policy. 0: Disabled 1: Enabled.
- certificate_
id str - Certificate ID managed in Certificate Center
- certificate_
name str - Certificate name. Displayed when protocol type includes HTTPS.
- certificate_
platform str - Certificate hosting platform: waf/certificate_service.
- clb_
instance_ strids - CLB instance ID.
- clb_
listener_ strid - CLB listener ID.
- clb_
pool_ strid - CLB backend server group ID.
- clb_
server_ strid - CLB backend server ID
- client_
ip_ intlocation - Client IP acquisition method. 0: Custom header field, 1: Use the first public IP address in the X-Forwarded-For (XFF) field as the real client IP address.
- client_
max_ intbody_ size - Maximum client request body size (MB).
- cloud_
access_ Sequence[Getconfigs Domain Cloud Access Config] - LB access parameters.
- cname str
- CNAME record.
- custom_
bot_ intenable - Whether to enable custom bot protection.
- custom_
headers Sequence[str] - Custom header.
- custom_
rsp_ intenable - Whether to enable custom response.
- custom_
sni str - Custom SNI.
- defence_
mode int - Set protection mode for exception ALB instances. 1: Enable protection. The configured protection policies take effect. 2: Pause protection. Only forwarding is performed without inspection; the configured protection policies do not take effect. 3: Origin mode. Requests are sent directly to the origin server and are no longer forwarded to the WAF instance. After configuring exception protection instances, the domain may also have the following protection statuses: 5: Partially enabled. The default protection mode is enabled, but some exception instances are in paused protection or origin mode. 6: Partially paused. The default protection mode is paused, but some exception instances are in enabled protection or origin mode. 7: Partially origin. The default protection mode is origin mode, but some exception instances are in enabled protection or paused protection.
- dlp_
enable int - Data leakage protection enabled
- domain str
- Protected domain information. Supports wildcard and exact domains
- enable_
custom_ intredirect - User-defined redirection enabled. 0: Off, 1: On
- enable_
http2 int - Whether to enable HTTP/2.0. 0: Disabled, 1: Enabled.
- enable_
ipv6 int - IPv6 request protection supported. 0: Off, 1: On
- enable_
sni int - Whether to enable SNI configuration. 0: Off, 1: On.
- id str
- Uniquely identifies the resource.
- keep_
alive_ intrequest - Persistent connection reuse count
- keep_
alive_ inttimeout - Persistent connection keep-alive time (seconds)
- lb_
algorithm str - Load balancing algorithm type. wrr: Weighted round robin, wlc: Weighted least connections, sh: Source address hash.
- port int
- Port number
- project_
name str - Project name.
- protocol_
follow int - Protocol following enabled. 0: Off, 1: On
- protocol_
ports GetDomain Protocol Ports - Access port information
- protocols Sequence[str]
- Access protocol type: supports HTTP/HTTPS
- proxy_
config int - Proxy configuration enabled. 0: Off, 1: On
- proxy_
connect_ inttimeout - Connection timeout between WAF and backend server (seconds).
- proxy_
keep_ intalive - Number of reusable WAF origin persistent connections.
- proxy_
keep_ intalive_ timeout - Idle persistent connection timeout (seconds)
- proxy_
read_ inttimeout - Timeout for WAF to read response from backend server (seconds).
- proxy_
retry int - WAF origin retry count.
- proxy_
write_ inttimeout - Timeout for WAF to transmit request to backend server (seconds).
- public_
real_ intserver - CNAME access origin method. 0: Private network origin, 1: Public network origin.
- rsp_
abnormal_ intenable - Whether to enable abnormal response protection.
- server_
ips str - Service IP
- src_
ips str - WAF origin IP.
- src_
protocol str - Origin protocol.
- ssl_
ciphers Sequence[str] - Cipher suite
- ssl_
protocols Sequence[str] - TLS protocol version. For example: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3
- status int
- Access status. 0: Normal, 1: DNS not resolved, 2: Configuring, 3: Configuration failed, 4: Configuration not effective, 5: Updating, 6: Instance deleted.
- system_
bot_ intenable - Whether to enable managed bot protection.
- tamper_
proof_ intenable - Whether to enable anti-tampering.
- tcp_
listener_ Sequence[Getconfigs Domain Tcp Listener Config] - TCP listener configuration.
- tls_
enable int - Log service enabled. 0: Off, 1: On
- tls_
fields_ Getconfig Domain Tls Fields Config - Log field configuration details
- update_
time str - Update time
- vpc_
id str - VPC ID。
- waf_
enable int - WAF protection enabled
- waf_
white_ intreq_ enable - Allowlist request protection enabled
- white_
enable int - Whether to enable allowlist protection.
- white_
field_ intenable - Field allowlist protection enabled
- access
Mode Number - Access mode. 10: CNAME access, 11: Layer 7 load balancing (CLB) access.
- advanced
Defense StringIp - High defense instance IP. Displayed for high-defense WAF access; otherwise blank.
- advanced
Defense StringIpv6 - High defense instance IPv6. Displayed for high-defense WAF access; otherwise blank.
- api
Enable Number - API protection policy enabled. 0: Off, 1: On
- attack
Status Number - Attack status. 0: No attack detected, 1: Attack detected.
- auto
Cc NumberEnable - Whether to enable intelligent CC protection policy. 0: Disabled, 1: Enabled.
- automatic
Black NumberEnable - Whether to enable automatic blocking. 0: Disabled, 1: Enabled.
- backend
Groups List<Property Map> - Origin configuration.
- black
Ip NumberEnable - Denylist policy enabled. 0: Off, 1: On
- black
Lct NumberEnable - Whether to enable regional blocking policy. 0: Disabled; 1: Enabled.
- bot
Dytoken NumberEnable - Dynamic token protection enabled
- bot
Frequency NumberEnable - Bot rate limit policy enabled. 0: Off 1: On
- bot
Repeat NumberEnable - Bot statistics protection policy enabled. 0: Off 1: On
- bot
Sequence NumberDefault Action - Set the default action for the bot behavior map policy. Effective when BotSequenceEnable = 1 is enabled. Default is 0 (Observe). 0: Observe 2: Intercept 6: JS Challenge 7: CAPTCHA.
- bot
Sequence NumberEnable - Whether to enable bot behavior map. 0: Off 1: On.
- cc
Enable Number - Whether to enable CC protection policy. 0: Disabled 1: Enabled.
- certificate
Id String - Certificate ID managed in Certificate Center
- certificate
Name String - Certificate name. Displayed when protocol type includes HTTPS.
- certificate
Platform String - Certificate hosting platform: waf/certificate_service.
- clb
Instance StringIds - CLB instance ID.
- clb
Listener StringId - CLB listener ID.
- clb
Pool StringId - CLB backend server group ID.
- clb
Server StringId - CLB backend server ID
- client
Ip NumberLocation - Client IP acquisition method. 0: Custom header field, 1: Use the first public IP address in the X-Forwarded-For (XFF) field as the real client IP address.
- client
Max NumberBody Size - Maximum client request body size (MB).
- cloud
Access List<Property Map>Configs - LB access parameters.
- cname String
- CNAME record.
- custom
Bot NumberEnable - Whether to enable custom bot protection.
- custom
Headers List<String> - Custom header.
- custom
Rsp NumberEnable - Whether to enable custom response.
- custom
Sni String - Custom SNI.
- defence
Mode Number - Set protection mode for exception ALB instances. 1: Enable protection. The configured protection policies take effect. 2: Pause protection. Only forwarding is performed without inspection; the configured protection policies do not take effect. 3: Origin mode. Requests are sent directly to the origin server and are no longer forwarded to the WAF instance. After configuring exception protection instances, the domain may also have the following protection statuses: 5: Partially enabled. The default protection mode is enabled, but some exception instances are in paused protection or origin mode. 6: Partially paused. The default protection mode is paused, but some exception instances are in enabled protection or origin mode. 7: Partially origin. The default protection mode is origin mode, but some exception instances are in enabled protection or paused protection.
- dlp
Enable Number - Data leakage protection enabled
- domain String
- Protected domain information. Supports wildcard and exact domains
- enable
Custom NumberRedirect - User-defined redirection enabled. 0: Off, 1: On
- enable
Http2 Number - Whether to enable HTTP/2.0. 0: Disabled, 1: Enabled.
- enable
Ipv6 Number - IPv6 request protection supported. 0: Off, 1: On
- enable
Sni Number - Whether to enable SNI configuration. 0: Off, 1: On.
- id String
- Uniquely identifies the resource.
- keep
Alive NumberRequest - Persistent connection reuse count
- keep
Alive NumberTimeout - Persistent connection keep-alive time (seconds)
- lb
Algorithm String - Load balancing algorithm type. wrr: Weighted round robin, wlc: Weighted least connections, sh: Source address hash.
- port Number
- Port number
- project
Name String - Project name.
- protocol
Follow Number - Protocol following enabled. 0: Off, 1: On
- protocol
Ports Property Map - Access port information
- protocols List<String>
- Access protocol type: supports HTTP/HTTPS
- proxy
Config Number - Proxy configuration enabled. 0: Off, 1: On
- proxy
Connect NumberTimeout - Connection timeout between WAF and backend server (seconds).
- proxy
Keep NumberAlive - Number of reusable WAF origin persistent connections.
- proxy
Keep NumberAlive Timeout - Idle persistent connection timeout (seconds)
- proxy
Read NumberTimeout - Timeout for WAF to read response from backend server (seconds).
- proxy
Retry Number - WAF origin retry count.
- proxy
Write NumberTimeout - Timeout for WAF to transmit request to backend server (seconds).
- public
Real NumberServer - CNAME access origin method. 0: Private network origin, 1: Public network origin.
- rsp
Abnormal NumberEnable - Whether to enable abnormal response protection.
- server
Ips String - Service IP
- src
Ips String - WAF origin IP.
- src
Protocol String - Origin protocol.
- ssl
Ciphers List<String> - Cipher suite
- ssl
Protocols List<String> - TLS protocol version. For example: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3
- status Number
- Access status. 0: Normal, 1: DNS not resolved, 2: Configuring, 3: Configuration failed, 4: Configuration not effective, 5: Updating, 6: Instance deleted.
- system
Bot NumberEnable - Whether to enable managed bot protection.
- tamper
Proof NumberEnable - Whether to enable anti-tampering.
- tcp
Listener List<Property Map>Configs - TCP listener configuration.
- tls
Enable Number - Log service enabled. 0: Off, 1: On
- tls
Fields Property MapConfig - Log field configuration details
- update
Time String - Update time
- vpc
Id String - VPC ID。
- waf
Enable Number - WAF protection enabled
- waf
White NumberReq Enable - Allowlist request protection enabled
- white
Enable Number - Whether to enable allowlist protection.
- white
Field NumberEnable - Field allowlist protection enabled
Supporting Types
GetDomainBackendGroup
- Access
Ports List<int> - Access port number.
- Backends
List<Byteplus.
Get Domain Backend Group Backend> - Origin group details.
- Name string
- Origin group name.
- Access
Ports []int - Access port number.
- Backends
[]Get
Domain Backend Group Backend - Origin group details.
- Name string
- Origin group name.
- access
Ports List<Integer> - Access port number.
- backends
List<Get
Domain Backend Group Backend> - Origin group details.
- name String
- Origin group name.
- access
Ports number[] - Access port number.
- backends
Get
Domain Backend Group Backend[] - Origin group details.
- name string
- Origin group name.
- access_
ports Sequence[int] - Access port number.
- backends
Sequence[Get
Domain Backend Group Backend] - Origin group details.
- name str
- Origin group name.
- access
Ports List<Number> - Access port number.
- backends List<Property Map>
- Origin group details.
- name String
- Origin group name.
GetDomainBackendGroupBackend
GetDomainCloudAccessConfig
- Access
Protocol string - Access protocol type
- Defence
Mode int - Protection mode
- Instance
Id string - Load balancing instance ID.
- Instance
Name string - Load balancer instance name.
- Listener
Id string - Load balancing listener ID.
- Lost
Association intFrom Alb - Disassociated from ALB
- Port string
- Listener forwarding rule port number
- Protocol string
- Protocol type for listener forwarding rules.
- Access
Protocol string - Access protocol type
- Defence
Mode int - Protection mode
- Instance
Id string - Load balancing instance ID.
- Instance
Name string - Load balancer instance name.
- Listener
Id string - Load balancing listener ID.
- Lost
Association intFrom Alb - Disassociated from ALB
- Port string
- Listener forwarding rule port number
- Protocol string
- Protocol type for listener forwarding rules.
- access
Protocol String - Access protocol type
- defence
Mode Integer - Protection mode
- instance
Id String - Load balancing instance ID.
- instance
Name String - Load balancer instance name.
- listener
Id String - Load balancing listener ID.
- lost
Association IntegerFrom Alb - Disassociated from ALB
- port String
- Listener forwarding rule port number
- protocol String
- Protocol type for listener forwarding rules.
- access
Protocol string - Access protocol type
- defence
Mode number - Protection mode
- instance
Id string - Load balancing instance ID.
- instance
Name string - Load balancer instance name.
- listener
Id string - Load balancing listener ID.
- lost
Association numberFrom Alb - Disassociated from ALB
- port string
- Listener forwarding rule port number
- protocol string
- Protocol type for listener forwarding rules.
- access_
protocol str - Access protocol type
- defence_
mode int - Protection mode
- instance_
id str - Load balancing instance ID.
- instance_
name str - Load balancer instance name.
- listener_
id str - Load balancing listener ID.
- lost_
association_ intfrom_ alb - Disassociated from ALB
- port str
- Listener forwarding rule port number
- protocol str
- Protocol type for listener forwarding rules.
- access
Protocol String - Access protocol type
- defence
Mode Number - Protection mode
- instance
Id String - Load balancing instance ID.
- instance
Name String - Load balancer instance name.
- listener
Id String - Load balancing listener ID.
- lost
Association NumberFrom Alb - Disassociated from ALB
- port String
- Listener forwarding rule port number
- protocol String
- Protocol type for listener forwarding rules.
GetDomainProtocolPorts
GetDomainTcpListenerConfig
- Access
Protocol string - Access protocol type
- Defence
Mode int - Protection mode
- Instance
Id string - Instance ID.
- Instance
Name string - Instance name.
- Listener
Id string - Listener ID.
- Lost
Association intFrom Alb - Disassociated from ALB
- Port string
- Listener port number
- Protocol string
- Listener protocol type.
- Access
Protocol string - Access protocol type
- Defence
Mode int - Protection mode
- Instance
Id string - Instance ID.
- Instance
Name string - Instance name.
- Listener
Id string - Listener ID.
- Lost
Association intFrom Alb - Disassociated from ALB
- Port string
- Listener port number
- Protocol string
- Listener protocol type.
- access
Protocol String - Access protocol type
- defence
Mode Integer - Protection mode
- instance
Id String - Instance ID.
- instance
Name String - Instance name.
- listener
Id String - Listener ID.
- lost
Association IntegerFrom Alb - Disassociated from ALB
- port String
- Listener port number
- protocol String
- Listener protocol type.
- access
Protocol string - Access protocol type
- defence
Mode number - Protection mode
- instance
Id string - Instance ID.
- instance
Name string - Instance name.
- listener
Id string - Listener ID.
- lost
Association numberFrom Alb - Disassociated from ALB
- port string
- Listener port number
- protocol string
- Listener protocol type.
- access_
protocol str - Access protocol type
- defence_
mode int - Protection mode
- instance_
id str - Instance ID.
- instance_
name str - Instance name.
- listener_
id str - Listener ID.
- lost_
association_ intfrom_ alb - Disassociated from ALB
- port str
- Listener port number
- protocol str
- Listener protocol type.
- access
Protocol String - Access protocol type
- defence
Mode Number - Protection mode
- instance
Id String - Instance ID.
- instance
Name String - Instance name.
- listener
Id String - Listener ID.
- lost
Association NumberFrom Alb - Disassociated from ALB
- port String
- Listener port number
- protocol String
- Listener protocol type.
GetDomainTlsFieldsConfig
GetDomainTlsFieldsConfigHeadersConfig
- Enable int
- Record all header fields
- Excluded
Key List<string>Lists - Exception header fields. Exclude the specified fields from the JSON to help save log storage space.
- Statistical
Key List<string>Lists - Statistics header fields. Use the specified fields for log analysis and alerts.
- Enable int
- Record all header fields
- Excluded
Key []stringLists - Exception header fields. Exclude the specified fields from the JSON to help save log storage space.
- Statistical
Key []stringLists - Statistics header fields. Use the specified fields for log analysis and alerts.
- enable Integer
- Record all header fields
- excluded
Key List<String>Lists - Exception header fields. Exclude the specified fields from the JSON to help save log storage space.
- statistical
Key List<String>Lists - Statistics header fields. Use the specified fields for log analysis and alerts.
- enable number
- Record all header fields
- excluded
Key string[]Lists - Exception header fields. Exclude the specified fields from the JSON to help save log storage space.
- statistical
Key string[]Lists - Statistics header fields. Use the specified fields for log analysis and alerts.
- enable int
- Record all header fields
- excluded_
key_ Sequence[str]lists - Exception header fields. Exclude the specified fields from the JSON to help save log storage space.
- statistical_
key_ Sequence[str]lists - Statistics header fields. Use the specified fields for log analysis and alerts.
- enable Number
- Record all header fields
- excluded
Key List<String>Lists - Exception header fields. Exclude the specified fields from the JSON to help save log storage space.
- statistical
Key List<String>Lists - Statistics header fields. Use the specified fields for log analysis and alerts.
Package Details
- Repository
- bytepluscc byteplus-sdk/pulumi-bytepluscc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
byteplusccTerraform Provider.
Viewing docs for bytepluscc v0.0.21
published on Thursday, Apr 2, 2026 by Byteplus
published on Thursday, Apr 2, 2026 by Byteplus
