示例1:更新DDoS防护
场景描述
当您需要更新某个IP的防护策略时,您可以通过Anti-DDoS界面在线修改,或者调用Anti-DDoS的API接口修改。
- 用户先查询名下所有主机的配置监控状态。
- 用户再查询Anti-DDoS服务的配置策略列表。
- 用户根据配置参数,修改IP的防护策略为目标策略。
- 用户根据3返回的任务ID,查询更新防护DDoS防护策略任务的执行情况。
涉及接口
- 查询EIP防护状态列表:批量查询用户所有主机的配置监控状态。
- 查询Anti-DDoS配置可选范围:查询AntiDDOS服务的配置策略列表。
- 更新Anti-DDoS服务:更新IP的AntiDDoS安全服务配置策略。
- 查询Anti-DDoS任务:根据任务ID获取任务状态。
操作步骤
- 批量查询用户所有主机的配置监控状态。
- 接口相关信息
URI格式:GET /v1/{project_id}/antiddos
详情请参见“查询EIP防护状态列表”。
- 请求示例
GET: https://{endpoint}/v1/1858a4e1f99d4454bd6a539d5477f5de/antiddos
{endpoint}信息请从地区和终端节点获取。
Body:
{ }
- 响应示例
{ "total": 1, "ddosStatus": [ { "floating_ip_id": "18e6ace5-eb36-4196-a15e-1e000c24e026", "floating_ip_address": "139.9.116.167", "network_type": "EIP", "status": "normal", "blackhole_endtime": 0, "protect_type": "default", "traffic_threshold": 99, "http_threshold": 0 } ] }
- 接口相关信息
- 查询AntiDDOS服务的配置策略列表。
- 接口相关信息
URI格式:GET /v2/{project_id}/antiddos/query-config-list
详情请参见“查询Anti-DDoS配置可选范围”。
- 请求示例
GET: https://{endpoint}/v2/1858a4e1f99d4454bd6a539d5477f5de/antiddos/query-config-list
{endpoint}信息请从地区和终端节点获取。
Body:
{ }
- 响应示例
{ "traffic_limited_list": [ { "traffic_pos_id": 1, "traffic_per_second": 10, "packet_per_second": 2000 }, { "traffic_pos_id": 2, "traffic_per_second": 30, "packet_per_second": 6000 }, { "traffic_pos_id": 3, "traffic_per_second": 50, "packet_per_second": 10000 }, { "traffic_pos_id": 4, "traffic_per_second": 70, "packet_per_second": 15000 }, { "traffic_pos_id": 5, "traffic_per_second": 100, "packet_per_second": 20000 }, { "traffic_pos_id": 6, "traffic_per_second": 150, "packet_per_second": 25000 }, { "traffic_pos_id": 7, "traffic_per_second": 200, "packet_per_second": 35000 }, { "traffic_pos_id": 8, "traffic_per_second": 250, "packet_per_second": 50000 }, { "traffic_pos_id": 9, "traffic_per_second": 300, "packet_per_second": 70000 }, { "traffic_pos_id": 88, "traffic_per_second": 1000, "packet_per_second": 300000 } ], "http_limited_list": [ { "http_request_pos_id": 1, "http_packet_per_second": 100 }, { "http_request_pos_id": 2, "http_packet_per_second": 150 }, { "http_request_pos_id": 3, "http_packet_per_second": 240 }, { "http_request_pos_id": 4, "http_packet_per_second": 350 }, { "http_request_pos_id": 5, "http_packet_per_second": 480 }, { "http_request_pos_id": 6, "http_packet_per_second": 550 }, { "http_request_pos_id": 7, "http_packet_per_second": 700 }, { "http_request_pos_id": 8, "http_packet_per_second": 850 }, { "http_request_pos_id": 9, "http_packet_per_second": 1000 }, { "http_request_pos_id": 10, "http_packet_per_second": 1500 }, { "http_request_pos_id": 11, "http_packet_per_second": 2000 }, { "http_request_pos_id": 12, "http_packet_per_second": 3000 }, { "http_request_pos_id": 13, "http_packet_per_second": 5000 }, { "http_request_pos_id": 14, "http_packet_per_second": 10000 }, { "http_request_pos_id": 15, "http_packet_per_second": 20000 } ], "connection_limited_list": [ { "cleaning_access_pos_id": 1, "new_connection_limited": 10, "total_connection_limited": 30 }, { "cleaning_access_pos_id": 2, "new_connection_limited": 20, "total_connection_limited": 100 }, { "cleaning_access_pos_id": 3, "new_connection_limited": 30, "total_connection_limited": 200 }, { "cleaning_access_pos_id": 4, "new_connection_limited": 40, "total_connection_limited": 250 }, { "cleaning_access_pos_id": 5, "new_connection_limited": 50, "total_connection_limited": 300 }, { "cleaning_access_pos_id": 6, "new_connection_limited": 60, "total_connection_limited": 500 }, { "cleaning_access_pos_id": 7, "new_connection_limited": 70, "total_connection_limited": 600 }, { "cleaning_access_pos_id": 8, "new_connection_limited": 80, "total_connection_limited": 700 } ], "extend_ddos_config": [] }
- 接口相关信息
- 更新IP的AntiDDoS安全服务配置策略。
- 接口相关信息
URI格式:PUT /v1/{project_id}/antiddos/{floating_ip_id}
详情请参见“更新Anti-DDoS服务”。
- 请求示例
PUT: https://{endpoint}/v1/1858a4e1f99d4454bd6a539d5477f5de/antiddos/18e6ace5-eb36-4196-a15e-1e000c24e026
{endpoint}信息请从地区和终端节点获取。
Body:
{ "app_type_id": 1, "cleaning_access_pos_id": 8, "enable_L7": false, "http_request_pos_id": 8, "traffic_pos_id": 8 }
- 响应示例
{ "error_code": "10000000", "error_msg": "The task has been received and is being handled", "task_id": "59385d2a-6266-4d3a-9122-a228c530f557" }
- 接口相关信息
- 根据3返回的任务ID获取任务状态。
- 接口相关信息
URI格式:GET /v2/{project_id}/query-task-status
详情请参见“查询Anti-DDoS任务”。
- 请求示例
GET: https://{endpoint}/v2/1858a4e1f99d4454bd6a539d5477f5de/query-task-status?task_id=59385d2a-6266-4d3a-9122-a228c530f557
{endpoint}信息请从地区和终端节点获取。
Body:
{ }
- 响应示例
{ "task_status": "success", "task_msg": "" }
- 接口相关信息