tencentcloud.DayuDdosPolicy
Explore with Pulumi AI
Use this resource to create dayu DDoS policy
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const testPolicy = new tencentcloud.DayuDdosPolicy("testPolicy", {
blackIps: ["1.1.1.1"],
dropOptions: [{
badConnThreshold: 100,
checkSyncConn: true,
connTimeout: 500,
dConnLimit: 100,
dNewLimit: 100,
dropAbroad: true,
dropIcmp: true,
dropOther: true,
dropTcp: true,
dropUdp: true,
icmpMbpsLimit: 100,
nullConnEnable: true,
otherMbpsLimit: 100,
sConnLimit: 100,
sNewLimit: 100,
synLimit: 100,
synRate: 50,
tcpMbpsLimit: 100,
udpMbpsLimit: 100,
}],
packetFilters: [{
action: "drop",
dEndPort: 1500,
dStartPort: 1000,
depth: 1000,
isInclude: true,
matchBegin: "begin_l5",
matchType: "pcre",
offset: 500,
pktLengthMax: 1400,
pktLengthMin: 1000,
protocol: "tcp",
sEndPort: 2500,
sStartPort: 2000,
}],
portFilters: [{
action: "drop",
endPort: 2500,
kind: 1,
protocol: "all",
startPort: 2000,
}],
resourceType: "bgpip",
watermarkFilters: [{
autoRemove: true,
offset: 50,
openSwitch: true,
tcpPortLists: [
"2000-3000",
"3500-4000",
],
udpPortLists: ["5000-6000"],
}],
whiteIps: ["2.2.2.2"],
});
import pulumi
import pulumi_tencentcloud as tencentcloud
test_policy = tencentcloud.DayuDdosPolicy("testPolicy",
black_ips=["1.1.1.1"],
drop_options=[{
"bad_conn_threshold": 100,
"check_sync_conn": True,
"conn_timeout": 500,
"d_conn_limit": 100,
"d_new_limit": 100,
"drop_abroad": True,
"drop_icmp": True,
"drop_other": True,
"drop_tcp": True,
"drop_udp": True,
"icmp_mbps_limit": 100,
"null_conn_enable": True,
"other_mbps_limit": 100,
"s_conn_limit": 100,
"s_new_limit": 100,
"syn_limit": 100,
"syn_rate": 50,
"tcp_mbps_limit": 100,
"udp_mbps_limit": 100,
}],
packet_filters=[{
"action": "drop",
"d_end_port": 1500,
"d_start_port": 1000,
"depth": 1000,
"is_include": True,
"match_begin": "begin_l5",
"match_type": "pcre",
"offset": 500,
"pkt_length_max": 1400,
"pkt_length_min": 1000,
"protocol": "tcp",
"s_end_port": 2500,
"s_start_port": 2000,
}],
port_filters=[{
"action": "drop",
"end_port": 2500,
"kind": 1,
"protocol": "all",
"start_port": 2000,
}],
resource_type="bgpip",
watermark_filters=[{
"auto_remove": True,
"offset": 50,
"open_switch": True,
"tcp_port_lists": [
"2000-3000",
"3500-4000",
],
"udp_port_lists": ["5000-6000"],
}],
white_ips=["2.2.2.2"])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewDayuDdosPolicy(ctx, "testPolicy", &tencentcloud.DayuDdosPolicyArgs{
BlackIps: pulumi.StringArray{
pulumi.String("1.1.1.1"),
},
DropOptions: tencentcloud.DayuDdosPolicyDropOptionArray{
&tencentcloud.DayuDdosPolicyDropOptionArgs{
BadConnThreshold: pulumi.Float64(100),
CheckSyncConn: pulumi.Bool(true),
ConnTimeout: pulumi.Float64(500),
DConnLimit: pulumi.Float64(100),
DNewLimit: pulumi.Float64(100),
DropAbroad: pulumi.Bool(true),
DropIcmp: pulumi.Bool(true),
DropOther: pulumi.Bool(true),
DropTcp: pulumi.Bool(true),
DropUdp: pulumi.Bool(true),
IcmpMbpsLimit: pulumi.Float64(100),
NullConnEnable: pulumi.Bool(true),
OtherMbpsLimit: pulumi.Float64(100),
SConnLimit: pulumi.Float64(100),
SNewLimit: pulumi.Float64(100),
SynLimit: pulumi.Float64(100),
SynRate: pulumi.Float64(50),
TcpMbpsLimit: pulumi.Float64(100),
UdpMbpsLimit: pulumi.Float64(100),
},
},
PacketFilters: tencentcloud.DayuDdosPolicyPacketFilterArray{
&tencentcloud.DayuDdosPolicyPacketFilterArgs{
Action: pulumi.String("drop"),
DEndPort: pulumi.Float64(1500),
DStartPort: pulumi.Float64(1000),
Depth: pulumi.Float64(1000),
IsInclude: pulumi.Bool(true),
MatchBegin: pulumi.String("begin_l5"),
MatchType: pulumi.String("pcre"),
Offset: pulumi.Float64(500),
PktLengthMax: pulumi.Float64(1400),
PktLengthMin: pulumi.Float64(1000),
Protocol: pulumi.String("tcp"),
SEndPort: pulumi.Float64(2500),
SStartPort: pulumi.Float64(2000),
},
},
PortFilters: tencentcloud.DayuDdosPolicyPortFilterArray{
&tencentcloud.DayuDdosPolicyPortFilterArgs{
Action: pulumi.String("drop"),
EndPort: pulumi.Float64(2500),
Kind: pulumi.Float64(1),
Protocol: pulumi.String("all"),
StartPort: pulumi.Float64(2000),
},
},
ResourceType: pulumi.String("bgpip"),
WatermarkFilters: tencentcloud.DayuDdosPolicyWatermarkFilterArray{
&tencentcloud.DayuDdosPolicyWatermarkFilterArgs{
AutoRemove: pulumi.Bool(true),
Offset: pulumi.Float64(50),
OpenSwitch: pulumi.Bool(true),
TcpPortLists: pulumi.StringArray{
pulumi.String("2000-3000"),
pulumi.String("3500-4000"),
},
UdpPortLists: pulumi.StringArray{
pulumi.String("5000-6000"),
},
},
},
WhiteIps: pulumi.StringArray{
pulumi.String("2.2.2.2"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var testPolicy = new Tencentcloud.DayuDdosPolicy("testPolicy", new()
{
BlackIps = new[]
{
"1.1.1.1",
},
DropOptions = new[]
{
new Tencentcloud.Inputs.DayuDdosPolicyDropOptionArgs
{
BadConnThreshold = 100,
CheckSyncConn = true,
ConnTimeout = 500,
DConnLimit = 100,
DNewLimit = 100,
DropAbroad = true,
DropIcmp = true,
DropOther = true,
DropTcp = true,
DropUdp = true,
IcmpMbpsLimit = 100,
NullConnEnable = true,
OtherMbpsLimit = 100,
SConnLimit = 100,
SNewLimit = 100,
SynLimit = 100,
SynRate = 50,
TcpMbpsLimit = 100,
UdpMbpsLimit = 100,
},
},
PacketFilters = new[]
{
new Tencentcloud.Inputs.DayuDdosPolicyPacketFilterArgs
{
Action = "drop",
DEndPort = 1500,
DStartPort = 1000,
Depth = 1000,
IsInclude = true,
MatchBegin = "begin_l5",
MatchType = "pcre",
Offset = 500,
PktLengthMax = 1400,
PktLengthMin = 1000,
Protocol = "tcp",
SEndPort = 2500,
SStartPort = 2000,
},
},
PortFilters = new[]
{
new Tencentcloud.Inputs.DayuDdosPolicyPortFilterArgs
{
Action = "drop",
EndPort = 2500,
Kind = 1,
Protocol = "all",
StartPort = 2000,
},
},
ResourceType = "bgpip",
WatermarkFilters = new[]
{
new Tencentcloud.Inputs.DayuDdosPolicyWatermarkFilterArgs
{
AutoRemove = true,
Offset = 50,
OpenSwitch = true,
TcpPortLists = new[]
{
"2000-3000",
"3500-4000",
},
UdpPortLists = new[]
{
"5000-6000",
},
},
},
WhiteIps = new[]
{
"2.2.2.2",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.DayuDdosPolicy;
import com.pulumi.tencentcloud.DayuDdosPolicyArgs;
import com.pulumi.tencentcloud.inputs.DayuDdosPolicyDropOptionArgs;
import com.pulumi.tencentcloud.inputs.DayuDdosPolicyPacketFilterArgs;
import com.pulumi.tencentcloud.inputs.DayuDdosPolicyPortFilterArgs;
import com.pulumi.tencentcloud.inputs.DayuDdosPolicyWatermarkFilterArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var testPolicy = new DayuDdosPolicy("testPolicy", DayuDdosPolicyArgs.builder()
.blackIps("1.1.1.1")
.dropOptions(DayuDdosPolicyDropOptionArgs.builder()
.badConnThreshold(100)
.checkSyncConn(true)
.connTimeout(500)
.dConnLimit(100)
.dNewLimit(100)
.dropAbroad(true)
.dropIcmp(true)
.dropOther(true)
.dropTcp(true)
.dropUdp(true)
.icmpMbpsLimit(100)
.nullConnEnable(true)
.otherMbpsLimit(100)
.sConnLimit(100)
.sNewLimit(100)
.synLimit(100)
.synRate(50)
.tcpMbpsLimit(100)
.udpMbpsLimit(100)
.build())
.packetFilters(DayuDdosPolicyPacketFilterArgs.builder()
.action("drop")
.dEndPort(1500)
.dStartPort(1000)
.depth(1000)
.isInclude(true)
.matchBegin("begin_l5")
.matchType("pcre")
.offset(500)
.pktLengthMax(1400)
.pktLengthMin(1000)
.protocol("tcp")
.sEndPort(2500)
.sStartPort(2000)
.build())
.portFilters(DayuDdosPolicyPortFilterArgs.builder()
.action("drop")
.endPort("2500")
.kind(1)
.protocol("all")
.startPort("2000")
.build())
.resourceType("bgpip")
.watermarkFilters(DayuDdosPolicyWatermarkFilterArgs.builder()
.autoRemove(true)
.offset(50)
.openSwitch(true)
.tcpPortLists(
"2000-3000",
"3500-4000")
.udpPortLists("5000-6000")
.build())
.whiteIps("2.2.2.2")
.build());
}
}
resources:
testPolicy:
type: tencentcloud:DayuDdosPolicy
properties:
blackIps:
- 1.1.1.1
dropOptions:
- badConnThreshold: 100
checkSyncConn: true
connTimeout: 500
dConnLimit: 100
dNewLimit: 100
dropAbroad: true
dropIcmp: true
dropOther: true
dropTcp: true
dropUdp: true
icmpMbpsLimit: 100
nullConnEnable: true
otherMbpsLimit: 100
sConnLimit: 100
sNewLimit: 100
synLimit: 100
synRate: 50
tcpMbpsLimit: 100
udpMbpsLimit: 100
packetFilters:
- action: drop
dEndPort: 1500
dStartPort: 1000
depth: 1000
isInclude: true
matchBegin: begin_l5
matchType: pcre
offset: 500
pktLengthMax: 1400
pktLengthMin: 1000
protocol: tcp
sEndPort: 2500
sStartPort: 2000
portFilters:
- action: drop
endPort: '2500'
kind: 1
protocol: all
startPort: '2000'
resourceType: bgpip
watermarkFilters:
- autoRemove: true
offset: 50
openSwitch: true
tcpPortLists:
- 2000-3000
- 3500-4000
udpPortLists:
- 5000-6000
whiteIps:
- 2.2.2.2
Create DayuDdosPolicy Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new DayuDdosPolicy(name: string, args: DayuDdosPolicyArgs, opts?: CustomResourceOptions);
@overload
def DayuDdosPolicy(resource_name: str,
args: DayuDdosPolicyArgs,
opts: Optional[ResourceOptions] = None)
@overload
def DayuDdosPolicy(resource_name: str,
opts: Optional[ResourceOptions] = None,
drop_options: Optional[Sequence[DayuDdosPolicyDropOptionArgs]] = None,
resource_type: Optional[str] = None,
black_ips: Optional[Sequence[str]] = None,
dayu_ddos_policy_id: Optional[str] = None,
name: Optional[str] = None,
packet_filters: Optional[Sequence[DayuDdosPolicyPacketFilterArgs]] = None,
port_filters: Optional[Sequence[DayuDdosPolicyPortFilterArgs]] = None,
watermark_filters: Optional[Sequence[DayuDdosPolicyWatermarkFilterArgs]] = None,
white_ips: Optional[Sequence[str]] = None)
func NewDayuDdosPolicy(ctx *Context, name string, args DayuDdosPolicyArgs, opts ...ResourceOption) (*DayuDdosPolicy, error)
public DayuDdosPolicy(string name, DayuDdosPolicyArgs args, CustomResourceOptions? opts = null)
public DayuDdosPolicy(String name, DayuDdosPolicyArgs args)
public DayuDdosPolicy(String name, DayuDdosPolicyArgs args, CustomResourceOptions options)
type: tencentcloud:DayuDdosPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args DayuDdosPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DayuDdosPolicyArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DayuDdosPolicyArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DayuDdosPolicyArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DayuDdosPolicyArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
DayuDdosPolicy Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The DayuDdosPolicy resource accepts the following input properties:
- Drop
Options List<DayuDdos Policy Drop Option> - Option list of abnormal check of the DDos policy, should set at least one policy.
- Resource
Type string - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - Black
Ips List<string> - Black IP list.
- Dayu
Ddos stringPolicy Id - Id of the watermark.
- Name string
- Name of the DDoS policy. Length should between 1 and 32.
- Packet
Filters List<DayuDdos Policy Packet Filter> - Message filter options list.
- Port
Filters List<DayuDdos Policy Port Filter> - Port limits of abnormal check of the DDos policy.
- Watermark
Filters List<DayuDdos Policy Watermark Filter> - Watermark policy options, and only support one watermark policy at most.
- White
Ips List<string> - White IP list.
- Drop
Options []DayuDdos Policy Drop Option Args - Option list of abnormal check of the DDos policy, should set at least one policy.
- Resource
Type string - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - Black
Ips []string - Black IP list.
- Dayu
Ddos stringPolicy Id - Id of the watermark.
- Name string
- Name of the DDoS policy. Length should between 1 and 32.
- Packet
Filters []DayuDdos Policy Packet Filter Args - Message filter options list.
- Port
Filters []DayuDdos Policy Port Filter Args - Port limits of abnormal check of the DDos policy.
- Watermark
Filters []DayuDdos Policy Watermark Filter Args - Watermark policy options, and only support one watermark policy at most.
- White
Ips []string - White IP list.
- drop
Options List<DayuDdos Policy Drop Option> - Option list of abnormal check of the DDos policy, should set at least one policy.
- resource
Type String - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - black
Ips List<String> - Black IP list.
- dayu
Ddos StringPolicy Id - Id of the watermark.
- name String
- Name of the DDoS policy. Length should between 1 and 32.
- packet
Filters List<DayuDdos Policy Packet Filter> - Message filter options list.
- port
Filters List<DayuDdos Policy Port Filter> - Port limits of abnormal check of the DDos policy.
- watermark
Filters List<DayuDdos Policy Watermark Filter> - Watermark policy options, and only support one watermark policy at most.
- white
Ips List<String> - White IP list.
- drop
Options DayuDdos Policy Drop Option[] - Option list of abnormal check of the DDos policy, should set at least one policy.
- resource
Type string - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - black
Ips string[] - Black IP list.
- dayu
Ddos stringPolicy Id - Id of the watermark.
- name string
- Name of the DDoS policy. Length should between 1 and 32.
- packet
Filters DayuDdos Policy Packet Filter[] - Message filter options list.
- port
Filters DayuDdos Policy Port Filter[] - Port limits of abnormal check of the DDos policy.
- watermark
Filters DayuDdos Policy Watermark Filter[] - Watermark policy options, and only support one watermark policy at most.
- white
Ips string[] - White IP list.
- drop_
options Sequence[DayuDdos Policy Drop Option Args] - Option list of abnormal check of the DDos policy, should set at least one policy.
- resource_
type str - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - black_
ips Sequence[str] - Black IP list.
- dayu_
ddos_ strpolicy_ id - Id of the watermark.
- name str
- Name of the DDoS policy. Length should between 1 and 32.
- packet_
filters Sequence[DayuDdos Policy Packet Filter Args] - Message filter options list.
- port_
filters Sequence[DayuDdos Policy Port Filter Args] - Port limits of abnormal check of the DDos policy.
- watermark_
filters Sequence[DayuDdos Policy Watermark Filter Args] - Watermark policy options, and only support one watermark policy at most.
- white_
ips Sequence[str] - White IP list.
- drop
Options List<Property Map> - Option list of abnormal check of the DDos policy, should set at least one policy.
- resource
Type String - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - black
Ips List<String> - Black IP list.
- dayu
Ddos StringPolicy Id - Id of the watermark.
- name String
- Name of the DDoS policy. Length should between 1 and 32.
- packet
Filters List<Property Map> - Message filter options list.
- port
Filters List<Property Map> - Port limits of abnormal check of the DDos policy.
- watermark
Filters List<Property Map> - Watermark policy options, and only support one watermark policy at most.
- white
Ips List<String> - White IP list.
Outputs
All input properties are implicitly available as output properties. Additionally, the DayuDdosPolicy resource produces the following output properties:
- Create
Time string - Create time of the DDoS policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Id string - Id of policy.
- Scene
Id string - Id of policy case that the DDoS policy works for.
- Watermark
Keys List<DayuDdos Policy Watermark Key> - Watermark content.
- Create
Time string - Create time of the DDoS policy.
- Id string
- The provider-assigned unique ID for this managed resource.
- Policy
Id string - Id of policy.
- Scene
Id string - Id of policy case that the DDoS policy works for.
- Watermark
Keys []DayuDdos Policy Watermark Key - Watermark content.
- create
Time String - Create time of the DDoS policy.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Id String - Id of policy.
- scene
Id String - Id of policy case that the DDoS policy works for.
- watermark
Keys List<DayuDdos Policy Watermark Key> - Watermark content.
- create
Time string - Create time of the DDoS policy.
- id string
- The provider-assigned unique ID for this managed resource.
- policy
Id string - Id of policy.
- scene
Id string - Id of policy case that the DDoS policy works for.
- watermark
Keys DayuDdos Policy Watermark Key[] - Watermark content.
- create_
time str - Create time of the DDoS policy.
- id str
- The provider-assigned unique ID for this managed resource.
- policy_
id str - Id of policy.
- scene_
id str - Id of policy case that the DDoS policy works for.
- watermark_
keys Sequence[DayuDdos Policy Watermark Key] - Watermark content.
- create
Time String - Create time of the DDoS policy.
- id String
- The provider-assigned unique ID for this managed resource.
- policy
Id String - Id of policy.
- scene
Id String - Id of policy case that the DDoS policy works for.
- watermark
Keys List<Property Map> - Watermark content.
Look up Existing DayuDdosPolicy Resource
Get an existing DayuDdosPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: DayuDdosPolicyState, opts?: CustomResourceOptions): DayuDdosPolicy
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
black_ips: Optional[Sequence[str]] = None,
create_time: Optional[str] = None,
dayu_ddos_policy_id: Optional[str] = None,
drop_options: Optional[Sequence[DayuDdosPolicyDropOptionArgs]] = None,
name: Optional[str] = None,
packet_filters: Optional[Sequence[DayuDdosPolicyPacketFilterArgs]] = None,
policy_id: Optional[str] = None,
port_filters: Optional[Sequence[DayuDdosPolicyPortFilterArgs]] = None,
resource_type: Optional[str] = None,
scene_id: Optional[str] = None,
watermark_filters: Optional[Sequence[DayuDdosPolicyWatermarkFilterArgs]] = None,
watermark_keys: Optional[Sequence[DayuDdosPolicyWatermarkKeyArgs]] = None,
white_ips: Optional[Sequence[str]] = None) -> DayuDdosPolicy
func GetDayuDdosPolicy(ctx *Context, name string, id IDInput, state *DayuDdosPolicyState, opts ...ResourceOption) (*DayuDdosPolicy, error)
public static DayuDdosPolicy Get(string name, Input<string> id, DayuDdosPolicyState? state, CustomResourceOptions? opts = null)
public static DayuDdosPolicy get(String name, Output<String> id, DayuDdosPolicyState state, CustomResourceOptions options)
resources: _: type: tencentcloud:DayuDdosPolicy get: id: ${id}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Black
Ips List<string> - Black IP list.
- Create
Time string - Create time of the DDoS policy.
- Dayu
Ddos stringPolicy Id - Id of the watermark.
- Drop
Options List<DayuDdos Policy Drop Option> - Option list of abnormal check of the DDos policy, should set at least one policy.
- Name string
- Name of the DDoS policy. Length should between 1 and 32.
- Packet
Filters List<DayuDdos Policy Packet Filter> - Message filter options list.
- Policy
Id string - Id of policy.
- Port
Filters List<DayuDdos Policy Port Filter> - Port limits of abnormal check of the DDos policy.
- Resource
Type string - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - Scene
Id string - Id of policy case that the DDoS policy works for.
- Watermark
Filters List<DayuDdos Policy Watermark Filter> - Watermark policy options, and only support one watermark policy at most.
- Watermark
Keys List<DayuDdos Policy Watermark Key> - Watermark content.
- White
Ips List<string> - White IP list.
- Black
Ips []string - Black IP list.
- Create
Time string - Create time of the DDoS policy.
- Dayu
Ddos stringPolicy Id - Id of the watermark.
- Drop
Options []DayuDdos Policy Drop Option Args - Option list of abnormal check of the DDos policy, should set at least one policy.
- Name string
- Name of the DDoS policy. Length should between 1 and 32.
- Packet
Filters []DayuDdos Policy Packet Filter Args - Message filter options list.
- Policy
Id string - Id of policy.
- Port
Filters []DayuDdos Policy Port Filter Args - Port limits of abnormal check of the DDos policy.
- Resource
Type string - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - Scene
Id string - Id of policy case that the DDoS policy works for.
- Watermark
Filters []DayuDdos Policy Watermark Filter Args - Watermark policy options, and only support one watermark policy at most.
- Watermark
Keys []DayuDdos Policy Watermark Key Args - Watermark content.
- White
Ips []string - White IP list.
- black
Ips List<String> - Black IP list.
- create
Time String - Create time of the DDoS policy.
- dayu
Ddos StringPolicy Id - Id of the watermark.
- drop
Options List<DayuDdos Policy Drop Option> - Option list of abnormal check of the DDos policy, should set at least one policy.
- name String
- Name of the DDoS policy. Length should between 1 and 32.
- packet
Filters List<DayuDdos Policy Packet Filter> - Message filter options list.
- policy
Id String - Id of policy.
- port
Filters List<DayuDdos Policy Port Filter> - Port limits of abnormal check of the DDos policy.
- resource
Type String - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - scene
Id String - Id of policy case that the DDoS policy works for.
- watermark
Filters List<DayuDdos Policy Watermark Filter> - Watermark policy options, and only support one watermark policy at most.
- watermark
Keys List<DayuDdos Policy Watermark Key> - Watermark content.
- white
Ips List<String> - White IP list.
- black
Ips string[] - Black IP list.
- create
Time string - Create time of the DDoS policy.
- dayu
Ddos stringPolicy Id - Id of the watermark.
- drop
Options DayuDdos Policy Drop Option[] - Option list of abnormal check of the DDos policy, should set at least one policy.
- name string
- Name of the DDoS policy. Length should between 1 and 32.
- packet
Filters DayuDdos Policy Packet Filter[] - Message filter options list.
- policy
Id string - Id of policy.
- port
Filters DayuDdos Policy Port Filter[] - Port limits of abnormal check of the DDos policy.
- resource
Type string - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - scene
Id string - Id of policy case that the DDoS policy works for.
- watermark
Filters DayuDdos Policy Watermark Filter[] - Watermark policy options, and only support one watermark policy at most.
- watermark
Keys DayuDdos Policy Watermark Key[] - Watermark content.
- white
Ips string[] - White IP list.
- black_
ips Sequence[str] - Black IP list.
- create_
time str - Create time of the DDoS policy.
- dayu_
ddos_ strpolicy_ id - Id of the watermark.
- drop_
options Sequence[DayuDdos Policy Drop Option Args] - Option list of abnormal check of the DDos policy, should set at least one policy.
- name str
- Name of the DDoS policy. Length should between 1 and 32.
- packet_
filters Sequence[DayuDdos Policy Packet Filter Args] - Message filter options list.
- policy_
id str - Id of policy.
- port_
filters Sequence[DayuDdos Policy Port Filter Args] - Port limits of abnormal check of the DDos policy.
- resource_
type str - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - scene_
id str - Id of policy case that the DDoS policy works for.
- watermark_
filters Sequence[DayuDdos Policy Watermark Filter Args] - Watermark policy options, and only support one watermark policy at most.
- watermark_
keys Sequence[DayuDdos Policy Watermark Key Args] - Watermark content.
- white_
ips Sequence[str] - White IP list.
- black
Ips List<String> - Black IP list.
- create
Time String - Create time of the DDoS policy.
- dayu
Ddos StringPolicy Id - Id of the watermark.
- drop
Options List<Property Map> - Option list of abnormal check of the DDos policy, should set at least one policy.
- name String
- Name of the DDoS policy. Length should between 1 and 32.
- packet
Filters List<Property Map> - Message filter options list.
- policy
Id String - Id of policy.
- port
Filters List<Property Map> - Port limits of abnormal check of the DDos policy.
- resource
Type String - Type of the resource that the DDoS policy works for. Valid values:
bgpip
,bgp
,bgp-multip
andnet
. - scene
Id String - Id of policy case that the DDoS policy works for.
- watermark
Filters List<Property Map> - Watermark policy options, and only support one watermark policy at most.
- watermark
Keys List<Property Map> - Watermark content.
- white
Ips List<String> - White IP list.
Supporting Types
DayuDdosPolicyDropOption, DayuDdosPolicyDropOptionArgs
- Bad
Conn doubleThreshold - The number of new connections based on destination IP that trigger suppression of connections. Valid value ranges: (0~4294967295).
- Check
Sync boolConn - Indicate whether to check null connection or not.
- Conn
Timeout double - Connection timeout of abnormal connection check. Valid value ranges: (0~65535).
- DConn
Limit double - The limit of concurrent connections based on destination IP. Valid value ranges: (0~4294967295).
- DNew
Limit double - The limit of new connections based on destination IP. Valid value ranges: (0~4294967295).
- Drop
Abroad bool - Indicate whether to drop abroad traffic or not.
- Drop
Icmp bool - Indicate whether to drop ICMP protocol or not.
- Drop
Other bool - Indicate whether to drop other protocols(exclude TCP/UDP/ICMP) or not.
- Drop
Tcp bool - Indicate whether to drop TCP protocol or not.
- Drop
Udp bool - Indicate to drop UDP protocol or not.
- Icmp
Mbps doubleLimit - The limit of ICMP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- Null
Conn boolEnable - Indicate to enable null connection or not.
- Other
Mbps doubleLimit - The limit of other protocols(exclude TCP/UDP/ICMP) traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- SConn
Limit double - The limit of concurrent connections based on source IP. Valid value ranges: (0~4294967295).
- SNew
Limit double - The limit of new connections based on source IP. Valid value ranges: (0~4294967295).
- Syn
Limit double - The limit of syn of abnormal connection check. Valid value ranges: (0~100).
- Tcp
Mbps doubleLimit - The limit of TCP traffic. Valid value ranges: (0~4294967295)(Mbps).
- Udp
Mbps doubleLimit - The limit of UDP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- Syn
Rate double - The percentage of syn in ack of abnormal connection check. Valid value ranges: (0~100).
- Bad
Conn float64Threshold - The number of new connections based on destination IP that trigger suppression of connections. Valid value ranges: (0~4294967295).
- Check
Sync boolConn - Indicate whether to check null connection or not.
- Conn
Timeout float64 - Connection timeout of abnormal connection check. Valid value ranges: (0~65535).
- DConn
Limit float64 - The limit of concurrent connections based on destination IP. Valid value ranges: (0~4294967295).
- DNew
Limit float64 - The limit of new connections based on destination IP. Valid value ranges: (0~4294967295).
- Drop
Abroad bool - Indicate whether to drop abroad traffic or not.
- Drop
Icmp bool - Indicate whether to drop ICMP protocol or not.
- Drop
Other bool - Indicate whether to drop other protocols(exclude TCP/UDP/ICMP) or not.
- Drop
Tcp bool - Indicate whether to drop TCP protocol or not.
- Drop
Udp bool - Indicate to drop UDP protocol or not.
- Icmp
Mbps float64Limit - The limit of ICMP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- Null
Conn boolEnable - Indicate to enable null connection or not.
- Other
Mbps float64Limit - The limit of other protocols(exclude TCP/UDP/ICMP) traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- SConn
Limit float64 - The limit of concurrent connections based on source IP. Valid value ranges: (0~4294967295).
- SNew
Limit float64 - The limit of new connections based on source IP. Valid value ranges: (0~4294967295).
- Syn
Limit float64 - The limit of syn of abnormal connection check. Valid value ranges: (0~100).
- Tcp
Mbps float64Limit - The limit of TCP traffic. Valid value ranges: (0~4294967295)(Mbps).
- Udp
Mbps float64Limit - The limit of UDP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- Syn
Rate float64 - The percentage of syn in ack of abnormal connection check. Valid value ranges: (0~100).
- bad
Conn DoubleThreshold - The number of new connections based on destination IP that trigger suppression of connections. Valid value ranges: (0~4294967295).
- check
Sync BooleanConn - Indicate whether to check null connection or not.
- conn
Timeout Double - Connection timeout of abnormal connection check. Valid value ranges: (0~65535).
- d
Conn DoubleLimit - The limit of concurrent connections based on destination IP. Valid value ranges: (0~4294967295).
- d
New DoubleLimit - The limit of new connections based on destination IP. Valid value ranges: (0~4294967295).
- drop
Abroad Boolean - Indicate whether to drop abroad traffic or not.
- drop
Icmp Boolean - Indicate whether to drop ICMP protocol or not.
- drop
Other Boolean - Indicate whether to drop other protocols(exclude TCP/UDP/ICMP) or not.
- drop
Tcp Boolean - Indicate whether to drop TCP protocol or not.
- drop
Udp Boolean - Indicate to drop UDP protocol or not.
- icmp
Mbps DoubleLimit - The limit of ICMP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- null
Conn BooleanEnable - Indicate to enable null connection or not.
- other
Mbps DoubleLimit - The limit of other protocols(exclude TCP/UDP/ICMP) traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- s
Conn DoubleLimit - The limit of concurrent connections based on source IP. Valid value ranges: (0~4294967295).
- s
New DoubleLimit - The limit of new connections based on source IP. Valid value ranges: (0~4294967295).
- syn
Limit Double - The limit of syn of abnormal connection check. Valid value ranges: (0~100).
- tcp
Mbps DoubleLimit - The limit of TCP traffic. Valid value ranges: (0~4294967295)(Mbps).
- udp
Mbps DoubleLimit - The limit of UDP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- syn
Rate Double - The percentage of syn in ack of abnormal connection check. Valid value ranges: (0~100).
- bad
Conn numberThreshold - The number of new connections based on destination IP that trigger suppression of connections. Valid value ranges: (0~4294967295).
- check
Sync booleanConn - Indicate whether to check null connection or not.
- conn
Timeout number - Connection timeout of abnormal connection check. Valid value ranges: (0~65535).
- d
Conn numberLimit - The limit of concurrent connections based on destination IP. Valid value ranges: (0~4294967295).
- d
New numberLimit - The limit of new connections based on destination IP. Valid value ranges: (0~4294967295).
- drop
Abroad boolean - Indicate whether to drop abroad traffic or not.
- drop
Icmp boolean - Indicate whether to drop ICMP protocol or not.
- drop
Other boolean - Indicate whether to drop other protocols(exclude TCP/UDP/ICMP) or not.
- drop
Tcp boolean - Indicate whether to drop TCP protocol or not.
- drop
Udp boolean - Indicate to drop UDP protocol or not.
- icmp
Mbps numberLimit - The limit of ICMP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- null
Conn booleanEnable - Indicate to enable null connection or not.
- other
Mbps numberLimit - The limit of other protocols(exclude TCP/UDP/ICMP) traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- s
Conn numberLimit - The limit of concurrent connections based on source IP. Valid value ranges: (0~4294967295).
- s
New numberLimit - The limit of new connections based on source IP. Valid value ranges: (0~4294967295).
- syn
Limit number - The limit of syn of abnormal connection check. Valid value ranges: (0~100).
- tcp
Mbps numberLimit - The limit of TCP traffic. Valid value ranges: (0~4294967295)(Mbps).
- udp
Mbps numberLimit - The limit of UDP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- syn
Rate number - The percentage of syn in ack of abnormal connection check. Valid value ranges: (0~100).
- bad_
conn_ floatthreshold - The number of new connections based on destination IP that trigger suppression of connections. Valid value ranges: (0~4294967295).
- check_
sync_ boolconn - Indicate whether to check null connection or not.
- conn_
timeout float - Connection timeout of abnormal connection check. Valid value ranges: (0~65535).
- d_
conn_ floatlimit - The limit of concurrent connections based on destination IP. Valid value ranges: (0~4294967295).
- d_
new_ floatlimit - The limit of new connections based on destination IP. Valid value ranges: (0~4294967295).
- drop_
abroad bool - Indicate whether to drop abroad traffic or not.
- drop_
icmp bool - Indicate whether to drop ICMP protocol or not.
- drop_
other bool - Indicate whether to drop other protocols(exclude TCP/UDP/ICMP) or not.
- drop_
tcp bool - Indicate whether to drop TCP protocol or not.
- drop_
udp bool - Indicate to drop UDP protocol or not.
- icmp_
mbps_ floatlimit - The limit of ICMP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- null_
conn_ boolenable - Indicate to enable null connection or not.
- other_
mbps_ floatlimit - The limit of other protocols(exclude TCP/UDP/ICMP) traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- s_
conn_ floatlimit - The limit of concurrent connections based on source IP. Valid value ranges: (0~4294967295).
- s_
new_ floatlimit - The limit of new connections based on source IP. Valid value ranges: (0~4294967295).
- syn_
limit float - The limit of syn of abnormal connection check. Valid value ranges: (0~100).
- tcp_
mbps_ floatlimit - The limit of TCP traffic. Valid value ranges: (0~4294967295)(Mbps).
- udp_
mbps_ floatlimit - The limit of UDP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- syn_
rate float - The percentage of syn in ack of abnormal connection check. Valid value ranges: (0~100).
- bad
Conn NumberThreshold - The number of new connections based on destination IP that trigger suppression of connections. Valid value ranges: (0~4294967295).
- check
Sync BooleanConn - Indicate whether to check null connection or not.
- conn
Timeout Number - Connection timeout of abnormal connection check. Valid value ranges: (0~65535).
- d
Conn NumberLimit - The limit of concurrent connections based on destination IP. Valid value ranges: (0~4294967295).
- d
New NumberLimit - The limit of new connections based on destination IP. Valid value ranges: (0~4294967295).
- drop
Abroad Boolean - Indicate whether to drop abroad traffic or not.
- drop
Icmp Boolean - Indicate whether to drop ICMP protocol or not.
- drop
Other Boolean - Indicate whether to drop other protocols(exclude TCP/UDP/ICMP) or not.
- drop
Tcp Boolean - Indicate whether to drop TCP protocol or not.
- drop
Udp Boolean - Indicate to drop UDP protocol or not.
- icmp
Mbps NumberLimit - The limit of ICMP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- null
Conn BooleanEnable - Indicate to enable null connection or not.
- other
Mbps NumberLimit - The limit of other protocols(exclude TCP/UDP/ICMP) traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- s
Conn NumberLimit - The limit of concurrent connections based on source IP. Valid value ranges: (0~4294967295).
- s
New NumberLimit - The limit of new connections based on source IP. Valid value ranges: (0~4294967295).
- syn
Limit Number - The limit of syn of abnormal connection check. Valid value ranges: (0~100).
- tcp
Mbps NumberLimit - The limit of TCP traffic. Valid value ranges: (0~4294967295)(Mbps).
- udp
Mbps NumberLimit - The limit of UDP traffic rate. Valid value ranges: (0~4294967295)(Mbps).
- syn
Rate Number - The percentage of syn in ack of abnormal connection check. Valid value ranges: (0~100).
DayuDdosPolicyPacketFilter, DayuDdosPolicyPacketFilterArgs
- Action string
- Action of port to take. Valid values:
drop
,drop_black
,drop_rst
,drop_black_rst
,transmit
.drop
(drop the packet),drop_black
(drop the packet and black the ip),drop_rst
(drop the packet and disconnect),drop_black_rst
(drop the packet, black the ip and disconnect),transmit
(transmit the packet). - DEnd
Port double - End port of the destination. Valid value ranges: (0~65535). It must be greater than
d_start_port
. - DStart
Port double - Start port of the destination. Valid value ranges: (0~65535).
- Depth double
- The depth of match. Valid value ranges: (0~1500).
- Is
Include bool - Indicate whether to include the key word/regular expression or not.
- Match
Begin string - Indicate whether to check load or not,
begin_l5
means to match andno_match
means not. - Match
Str string - The key word or regular expression.
- Match
Type string - Match type. Valid values:
sunday
andpcre
.sunday
means key word match whilepcre
means regular match. - Offset double
- The offset of match. Valid value ranges: (0~1500).
- Pkt
Length doubleMax - The max length of the packet. Valid value ranges: (0~1500)(Mbps). It must be greater than
pkt_length_min
. - Pkt
Length doubleMin - The minimum length of the packet. Valid value ranges: (0~1500)(Mbps).
- Protocol string
- Protocol. Valid values:
tcp
,udp
,icmp
,all
. - SEnd
Port double - End port of the source. Valid value ranges: (0~65535). It must be greater than
s_start_port
. - SStart
Port double - Start port of the source. Valid value ranges: (0~65535).
- Action string
- Action of port to take. Valid values:
drop
,drop_black
,drop_rst
,drop_black_rst
,transmit
.drop
(drop the packet),drop_black
(drop the packet and black the ip),drop_rst
(drop the packet and disconnect),drop_black_rst
(drop the packet, black the ip and disconnect),transmit
(transmit the packet). - DEnd
Port float64 - End port of the destination. Valid value ranges: (0~65535). It must be greater than
d_start_port
. - DStart
Port float64 - Start port of the destination. Valid value ranges: (0~65535).
- Depth float64
- The depth of match. Valid value ranges: (0~1500).
- Is
Include bool - Indicate whether to include the key word/regular expression or not.
- Match
Begin string - Indicate whether to check load or not,
begin_l5
means to match andno_match
means not. - Match
Str string - The key word or regular expression.
- Match
Type string - Match type. Valid values:
sunday
andpcre
.sunday
means key word match whilepcre
means regular match. - Offset float64
- The offset of match. Valid value ranges: (0~1500).
- Pkt
Length float64Max - The max length of the packet. Valid value ranges: (0~1500)(Mbps). It must be greater than
pkt_length_min
. - Pkt
Length float64Min - The minimum length of the packet. Valid value ranges: (0~1500)(Mbps).
- Protocol string
- Protocol. Valid values:
tcp
,udp
,icmp
,all
. - SEnd
Port float64 - End port of the source. Valid value ranges: (0~65535). It must be greater than
s_start_port
. - SStart
Port float64 - Start port of the source. Valid value ranges: (0~65535).
- action String
- Action of port to take. Valid values:
drop
,drop_black
,drop_rst
,drop_black_rst
,transmit
.drop
(drop the packet),drop_black
(drop the packet and black the ip),drop_rst
(drop the packet and disconnect),drop_black_rst
(drop the packet, black the ip and disconnect),transmit
(transmit the packet). - d
End DoublePort - End port of the destination. Valid value ranges: (0~65535). It must be greater than
d_start_port
. - d
Start DoublePort - Start port of the destination. Valid value ranges: (0~65535).
- depth Double
- The depth of match. Valid value ranges: (0~1500).
- is
Include Boolean - Indicate whether to include the key word/regular expression or not.
- match
Begin String - Indicate whether to check load or not,
begin_l5
means to match andno_match
means not. - match
Str String - The key word or regular expression.
- match
Type String - Match type. Valid values:
sunday
andpcre
.sunday
means key word match whilepcre
means regular match. - offset Double
- The offset of match. Valid value ranges: (0~1500).
- pkt
Length DoubleMax - The max length of the packet. Valid value ranges: (0~1500)(Mbps). It must be greater than
pkt_length_min
. - pkt
Length DoubleMin - The minimum length of the packet. Valid value ranges: (0~1500)(Mbps).
- protocol String
- Protocol. Valid values:
tcp
,udp
,icmp
,all
. - s
End DoublePort - End port of the source. Valid value ranges: (0~65535). It must be greater than
s_start_port
. - s
Start DoublePort - Start port of the source. Valid value ranges: (0~65535).
- action string
- Action of port to take. Valid values:
drop
,drop_black
,drop_rst
,drop_black_rst
,transmit
.drop
(drop the packet),drop_black
(drop the packet and black the ip),drop_rst
(drop the packet and disconnect),drop_black_rst
(drop the packet, black the ip and disconnect),transmit
(transmit the packet). - d
End numberPort - End port of the destination. Valid value ranges: (0~65535). It must be greater than
d_start_port
. - d
Start numberPort - Start port of the destination. Valid value ranges: (0~65535).
- depth number
- The depth of match. Valid value ranges: (0~1500).
- is
Include boolean - Indicate whether to include the key word/regular expression or not.
- match
Begin string - Indicate whether to check load or not,
begin_l5
means to match andno_match
means not. - match
Str string - The key word or regular expression.
- match
Type string - Match type. Valid values:
sunday
andpcre
.sunday
means key word match whilepcre
means regular match. - offset number
- The offset of match. Valid value ranges: (0~1500).
- pkt
Length numberMax - The max length of the packet. Valid value ranges: (0~1500)(Mbps). It must be greater than
pkt_length_min
. - pkt
Length numberMin - The minimum length of the packet. Valid value ranges: (0~1500)(Mbps).
- protocol string
- Protocol. Valid values:
tcp
,udp
,icmp
,all
. - s
End numberPort - End port of the source. Valid value ranges: (0~65535). It must be greater than
s_start_port
. - s
Start numberPort - Start port of the source. Valid value ranges: (0~65535).
- action str
- Action of port to take. Valid values:
drop
,drop_black
,drop_rst
,drop_black_rst
,transmit
.drop
(drop the packet),drop_black
(drop the packet and black the ip),drop_rst
(drop the packet and disconnect),drop_black_rst
(drop the packet, black the ip and disconnect),transmit
(transmit the packet). - d_
end_ floatport - End port of the destination. Valid value ranges: (0~65535). It must be greater than
d_start_port
. - d_
start_ floatport - Start port of the destination. Valid value ranges: (0~65535).
- depth float
- The depth of match. Valid value ranges: (0~1500).
- is_
include bool - Indicate whether to include the key word/regular expression or not.
- match_
begin str - Indicate whether to check load or not,
begin_l5
means to match andno_match
means not. - match_
str str - The key word or regular expression.
- match_
type str - Match type. Valid values:
sunday
andpcre
.sunday
means key word match whilepcre
means regular match. - offset float
- The offset of match. Valid value ranges: (0~1500).
- pkt_
length_ floatmax - The max length of the packet. Valid value ranges: (0~1500)(Mbps). It must be greater than
pkt_length_min
. - pkt_
length_ floatmin - The minimum length of the packet. Valid value ranges: (0~1500)(Mbps).
- protocol str
- Protocol. Valid values:
tcp
,udp
,icmp
,all
. - s_
end_ floatport - End port of the source. Valid value ranges: (0~65535). It must be greater than
s_start_port
. - s_
start_ floatport - Start port of the source. Valid value ranges: (0~65535).
- action String
- Action of port to take. Valid values:
drop
,drop_black
,drop_rst
,drop_black_rst
,transmit
.drop
(drop the packet),drop_black
(drop the packet and black the ip),drop_rst
(drop the packet and disconnect),drop_black_rst
(drop the packet, black the ip and disconnect),transmit
(transmit the packet). - d
End NumberPort - End port of the destination. Valid value ranges: (0~65535). It must be greater than
d_start_port
. - d
Start NumberPort - Start port of the destination. Valid value ranges: (0~65535).
- depth Number
- The depth of match. Valid value ranges: (0~1500).
- is
Include Boolean - Indicate whether to include the key word/regular expression or not.
- match
Begin String - Indicate whether to check load or not,
begin_l5
means to match andno_match
means not. - match
Str String - The key word or regular expression.
- match
Type String - Match type. Valid values:
sunday
andpcre
.sunday
means key word match whilepcre
means regular match. - offset Number
- The offset of match. Valid value ranges: (0~1500).
- pkt
Length NumberMax - The max length of the packet. Valid value ranges: (0~1500)(Mbps). It must be greater than
pkt_length_min
. - pkt
Length NumberMin - The minimum length of the packet. Valid value ranges: (0~1500)(Mbps).
- protocol String
- Protocol. Valid values:
tcp
,udp
,icmp
,all
. - s
End NumberPort - End port of the source. Valid value ranges: (0~65535). It must be greater than
s_start_port
. - s
Start NumberPort - Start port of the source. Valid value ranges: (0~65535).
DayuDdosPolicyPortFilter, DayuDdosPolicyPortFilterArgs
- Action string
- Action of port to take. Valid values:
drop
,transmit
. - End
Port double - End port. Valid value ranges: (0~65535). It must be greater than
start_port
. - Kind double
- The type of forbidden port. Valid values:
0
,1
,2
.0
for destination ports make effect,1
for source ports make effect.2
for both destination and source ports. - Protocol string
- Protocol. Valid values are
tcp
,udp
,icmp
,all
. - Start
Port double - Start port. Valid value ranges: (0~65535).
- Action string
- Action of port to take. Valid values:
drop
,transmit
. - End
Port float64 - End port. Valid value ranges: (0~65535). It must be greater than
start_port
. - Kind float64
- The type of forbidden port. Valid values:
0
,1
,2
.0
for destination ports make effect,1
for source ports make effect.2
for both destination and source ports. - Protocol string
- Protocol. Valid values are
tcp
,udp
,icmp
,all
. - Start
Port float64 - Start port. Valid value ranges: (0~65535).
- action String
- Action of port to take. Valid values:
drop
,transmit
. - end
Port Double - End port. Valid value ranges: (0~65535). It must be greater than
start_port
. - kind Double
- The type of forbidden port. Valid values:
0
,1
,2
.0
for destination ports make effect,1
for source ports make effect.2
for both destination and source ports. - protocol String
- Protocol. Valid values are
tcp
,udp
,icmp
,all
. - start
Port Double - Start port. Valid value ranges: (0~65535).
- action string
- Action of port to take. Valid values:
drop
,transmit
. - end
Port number - End port. Valid value ranges: (0~65535). It must be greater than
start_port
. - kind number
- The type of forbidden port. Valid values:
0
,1
,2
.0
for destination ports make effect,1
for source ports make effect.2
for both destination and source ports. - protocol string
- Protocol. Valid values are
tcp
,udp
,icmp
,all
. - start
Port number - Start port. Valid value ranges: (0~65535).
- action str
- Action of port to take. Valid values:
drop
,transmit
. - end_
port float - End port. Valid value ranges: (0~65535). It must be greater than
start_port
. - kind float
- The type of forbidden port. Valid values:
0
,1
,2
.0
for destination ports make effect,1
for source ports make effect.2
for both destination and source ports. - protocol str
- Protocol. Valid values are
tcp
,udp
,icmp
,all
. - start_
port float - Start port. Valid value ranges: (0~65535).
- action String
- Action of port to take. Valid values:
drop
,transmit
. - end
Port Number - End port. Valid value ranges: (0~65535). It must be greater than
start_port
. - kind Number
- The type of forbidden port. Valid values:
0
,1
,2
.0
for destination ports make effect,1
for source ports make effect.2
for both destination and source ports. - protocol String
- Protocol. Valid values are
tcp
,udp
,icmp
,all
. - start
Port Number - Start port. Valid value ranges: (0~65535).
DayuDdosPolicyWatermarkFilter, DayuDdosPolicyWatermarkFilterArgs
- Auto
Remove bool - Indicate whether to auto-remove the watermark or not.
- Offset double
- The offset of watermark. Valid value ranges: (0~1500).
- Open
Switch bool - Indicate whether to open watermark or not. It muse be set
true
when any field of watermark was set. - Tcp
Port List<string>Lists - Port range of TCP, the format is like
2000-3000
. - Udp
Port List<string>Lists - Port range of TCP, the format is like
2000-3000
.
- Auto
Remove bool - Indicate whether to auto-remove the watermark or not.
- Offset float64
- The offset of watermark. Valid value ranges: (0~1500).
- Open
Switch bool - Indicate whether to open watermark or not. It muse be set
true
when any field of watermark was set. - Tcp
Port []stringLists - Port range of TCP, the format is like
2000-3000
. - Udp
Port []stringLists - Port range of TCP, the format is like
2000-3000
.
- auto
Remove Boolean - Indicate whether to auto-remove the watermark or not.
- offset Double
- The offset of watermark. Valid value ranges: (0~1500).
- open
Switch Boolean - Indicate whether to open watermark or not. It muse be set
true
when any field of watermark was set. - tcp
Port List<String>Lists - Port range of TCP, the format is like
2000-3000
. - udp
Port List<String>Lists - Port range of TCP, the format is like
2000-3000
.
- auto
Remove boolean - Indicate whether to auto-remove the watermark or not.
- offset number
- The offset of watermark. Valid value ranges: (0~1500).
- open
Switch boolean - Indicate whether to open watermark or not. It muse be set
true
when any field of watermark was set. - tcp
Port string[]Lists - Port range of TCP, the format is like
2000-3000
. - udp
Port string[]Lists - Port range of TCP, the format is like
2000-3000
.
- auto_
remove bool - Indicate whether to auto-remove the watermark or not.
- offset float
- The offset of watermark. Valid value ranges: (0~1500).
- open_
switch bool - Indicate whether to open watermark or not. It muse be set
true
when any field of watermark was set. - tcp_
port_ Sequence[str]lists - Port range of TCP, the format is like
2000-3000
. - udp_
port_ Sequence[str]lists - Port range of TCP, the format is like
2000-3000
.
- auto
Remove Boolean - Indicate whether to auto-remove the watermark or not.
- offset Number
- The offset of watermark. Valid value ranges: (0~1500).
- open
Switch Boolean - Indicate whether to open watermark or not. It muse be set
true
when any field of watermark was set. - tcp
Port List<String>Lists - Port range of TCP, the format is like
2000-3000
. - udp
Port List<String>Lists - Port range of TCP, the format is like
2000-3000
.
DayuDdosPolicyWatermarkKey, DayuDdosPolicyWatermarkKeyArgs
- Content string
- Content of the watermark.
- Create
Time string - Create time of the DDoS policy.
- Id string
- Id of the watermark.
- Open
Switch bool - Indicate whether to auto-remove the watermark or not.
- Content string
- Content of the watermark.
- Create
Time string - Create time of the DDoS policy.
- Id string
- Id of the watermark.
- Open
Switch bool - Indicate whether to auto-remove the watermark or not.
- content String
- Content of the watermark.
- create
Time String - Create time of the DDoS policy.
- id String
- Id of the watermark.
- open
Switch Boolean - Indicate whether to auto-remove the watermark or not.
- content string
- Content of the watermark.
- create
Time string - Create time of the DDoS policy.
- id string
- Id of the watermark.
- open
Switch boolean - Indicate whether to auto-remove the watermark or not.
- content str
- Content of the watermark.
- create_
time str - Create time of the DDoS policy.
- id str
- Id of the watermark.
- open_
switch bool - Indicate whether to auto-remove the watermark or not.
- content String
- Content of the watermark.
- create
Time String - Create time of the DDoS policy.
- id String
- Id of the watermark.
- open
Switch Boolean - Indicate whether to auto-remove the watermark or not.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloud
Terraform Provider.