Error Codes

Module	Status Code	Error Code	Message	Description	Measure
Common module	400	CFW.00109004	HTTP request error	HTTP request error	Try again later or contact technical support.
	400	CFW.00300001	Failed to query the database.	Failed to query the database.	Contact technical support.
	400	CFW.00400008	The protected object does not exist.	The protected object does not exist.	Contact technical support.
	400	CFW.00800001	An exception occurred when querying ETCD.	An exception occurred when querying ETCD.	Contact technical support.
	400	CFW.00800002	An exception occurred when querying ETCD.	An exception occurred when querying ETCD.	Contact technical support.
	400	CFW.00800003	An exception occurred when querying ETCD.	An exception occurred when querying ETCD.	Contact technical support.
	400	CFW.01100008	Configurations cannot be delivered during cluster scale-out.	Configurations cannot be delivered during cluster scale-out.	Contact technical support.
DNS resolution	400	CFW.00200005	The domain name group in the request does not exist.	The domain name group in the request does not exist.	Check whether the domain name group carried in the request exists.
Deleting a domain name	400	CFW.00200005	The domain name group in the request does not exist.	The domain name group in the request does not exist.	Check whether the domain name group carried in the request exists.
Deleting a domain name group	400	CFW.00200004	The domain name group to be deleted is referenced.	The domain name group to be deleted is referenced.	Delete the rules that reference the domain name group and then delete the domain name group.
Deleting a domain name group	400	CFW.00200005	The domain name group in the request does not exist.	The domain name group in the request does not exist.	Check whether the domain name group carried in the request exists.
Updating a domain group	400	CFW.00200005	The domain name group in the request does not exist.	The domain name group in the request does not exist.	Check whether the domain name group carried in the request exists.
Querying access control logs	400	CFW.00500002	Invalid interval	Invalid interval	Contact technical support.
Querying attack logs	400	CFW.00500002	Invalid interval	Invalid interval	Contact technical support.
Querying attack logs	400	CFW.00500004	The page jump spacing is too large.	The page jump spacing is too large.	Contact technical support.
Querying traffic logs	400	CFW.00500002	Invalid interval	Invalid interval	Contact technical support.
Querying the protected EIP list	400	CFW.00200030	Incorrect address type	Incorrect address type	Contact technical support.
Querying the protected EIP list	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.
Querying the rule list	400	CFW.00200030	Incorrect address type	Incorrect address type	Contact technical support.
Adding an ACL rule	400	CFW.00200001	The rule direction cannot be empty.	The rule direction cannot be empty.	Check whether the rule direction in the request parameter is empty.
	400	CFW.00200005	The address group ID in the request does not exist.	The address group ID in the request does not exist.	Check whether the address group ID carried in the request exists.
	400	CFW.00200005	The service group ID in the request does not exist.	The service group ID in the request does not exist.	Check whether the service group ID in the request exists.
	400	CFW.00200005	The domain name group in the request does not exist.	The domain name group in the request does not exist.	Check whether the domain name group carried in the request exists.
	400	CFW.00200007	The rule name carried in the request is the same as a rule name in the database.	The rule name carried in the request is the same as a rule name in the database.	Delete duplicate rules from the request.
	400	CFW.00200020	Up to 20 ACL rules can be added.	Up to 20 ACL rules can be added.	Reduce the number of ACL rules to be added.
	400	CFW.00200025	The time limit of persistent connection is exceeded.	The time limit of persistent connection is exceeded.	Ensure that the duration of the persistent connection is in the range from 1 second to 1000 days.
	400	CFW.00200026	The number of persistent connection rules reaches the upper limit.	The number of persistent connection rules reaches the upper limit.	Delete unnecessary persistent connection rules.
	400	CFW.00200028	Inconsistent address types	Inconsistent address types	Ensure the address types are the same.
	400	CFW.00200032	The engine does not support IPv6.	The engine does not support IPv6.	Contact technical support.
	400	CFW.00400007	The types of the added rules are inconsistent.	The types of the added rules are inconsistent.	Ensure the types of the added rules are the same.
	400	CFW.00400010	The protocol is not supported by the persistent connection.	The protocol is not supported by the persistent connection.	Ensure the protocol is TCP or UDP.
Updating an ACL rule	400	CFW.00200005	The address group ID in the request does not exist.	The address group ID in the request does not exist.	Check whether the address group ID carried in the request is correct.
	400	CFW.00200005	The service group ID in the request does not exist.	The service group ID in the request does not exist.	Check whether the service group ID carried in the request is correct.
	400	CFW.00200005	The domain name group in the request does not exist.	The domain name group in the request does not exist.	Check whether the domain name group carried in the request is correct.
	400	CFW.00200007	The rule name carried in the request is the same as a rule name in the database.	The rule name carried in the request is the same as a rule name in the database.	Delete duplicate rules from the request.
	400	CFW.00200025	The time limit of persistent connection is exceeded.	The time limit of persistent connection is exceeded.	Ensure that the duration of the persistent connection is in the range from 1 second to 1000 days.
	400	CFW.00200026	The number of persistent connection rules reaches the upper limit.	The number of persistent connection rules reaches the upper limit.	Delete unnecessary persistent connection rules.
	400	CFW.00200028	Inconsistent address types	Inconsistent address types	Ensure the address types are the same.
	400	CFW.00400010	The protocol is not supported by the persistent connection.	The protocol is not supported by the persistent connection.	Ensure the protocol is TCP or UDP.
Modifying the priority of an ACL rule	400	CFW.00400002	No operation is required.	No operation is required.	Contact technical support.
Deleting the rule hit count	400	CFW.00400006	An error occurred when the rule hit count is deleted.	An error occurred when the rule hit count is deleted.	Check whether the parameter value is valid.
Creating a packet capture task	400	CFW.00200028	Inconsistent address types	Inconsistent address types	Ensure the address types are the same.
Creating a packet capture task	400	CFW.00200032	The engine does not support IPv6.	The engine does not support IPv6.	Contact technical support.
Querying the packet capture task list	400	CFW.00200030	Incorrect address type	Incorrect address type	Contact technical support.
Creating an east-west CFW instance	400	CFW.00700001	The associated ER does not exist.	The associated ER does not exist.	The associated ER does not exist.
	400	CFW.00700002	The associated VPC does not exist.	The associated VPC does not exist.	Check whether the VPC exists.
	400	CFW.00700003	The network segments of the associated subnets conflict.	The network segments of the associated subnets conflict.	Ensure the subnet to be created does not overlap with the subnet CIDR block in the existing VPC.
	400	CFW.00700004	Failed to create the subnet.	Failed to create the subnet.	Contact technical support.
	400	CFW.00700007	ER failed to create a VPC connection	ER failed to create a VPC connection	Contact technical support.
	400	CFW.00700012	Failed to modify the route.	Failed to modify the route.	Contact technical support.
	400	CFW.00700015	Failed to query VPC quotas.	Failed to query VPC quotas.	Contact technical support.
	400	CFW.00700016	Insufficient route table quota for the VPC.	Insufficient route table quota for the VPC.	Delete the existing route table in the VPC.
Changing the east-west protection status	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.
Creating a firewall	400	CFW.00600003	The available specifications are empty.	The available specifications are empty.	Contact technical support.
Deleting a firewall	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.
Adding an address group	400	CFW.00200001	The address group name is empty.	The address group name is empty.	Check whether the address group name in the request is empty.
	400	CFW.00200007	The address group name carried in the request is the same as an address group name in the database.	The address group name carried in the request is the same as an address group name in the database.	Delete duplicate address group names from the request.
	400	CFW.00200032	The engine does not support IPv6.	The engine does not support IPv6.	Contact technical support.
	400	CFW.00900020	The number of address groups exceeds the upper limit.	The number of address groups exceeds the upper limit.	Delete some address groups.
Adding an address group member list	400	CFW.00200001	The address group member list is empty.	The address group member list is empty.	Check whether the address group member list in the request is empty.
Obtaining the address group list	400	CFW.00200030	Incorrect address type	Incorrect address type	Contact technical support.
Updating an address group	400	CFW.00200005	The address group in the request does not exist.	The address group in the request does not exist.	Check whether the address group carried in the request exists.
	400	CFW.00200007	The address group name carried in the request is the same as an address group name in the database.	The address group name carried in the request is the same as an address group name in the database.	Delete duplicate address group names from the request.
	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.
Deleting an address group	400	CFW.00200004	The address group to be deleted is being referenced.	The address group to be deleted is being referenced.	Delete the rules that reference the address group and then delete the address group.
Deleting an address group	400	CFW.00200005	The address group in the request does not exist.	The address group in the request does not exist.	Check whether the address group carried in the request exists.
Updating members in an address group	400	CFW.00400004	The member already exists.	The member already exists.	Delete unnecessary address group members.
Adding a service group	400	CFW.00200007	The service group name carried in the request is the same as a service group name in the database.	The service group name carried in the request is the same as a service group name in the database.	Delete duplicate service group names from the request.
Adding a service group	400	CFW.00200024	The number of added service groups exceeds the upper limit.	The number of added service groups exceeds the upper limit.	Remove unnecessary service groups and try again.
Adding a member to a service group	400	CFW.00400004	The member already exists.	The member already exists.	Delete unnecessary service group members.
Adding a member to a service group	400	CFW.00900030	The total number of services reaches the upper limit.	The total number of services reaches the upper limit.	Delete unnecessary service group members.
Updating a service group	400	CFW.00200005	The service group in the request does not exist.	The service group in the request does not exist.	Check whether the service group in the request exists.
Updating a service group	400	CFW.00200007	The address group name carried in the request is the same as an address group name in the database.	The address group name carried in the request is the same as an address group name in the database.	Delete duplicate service group names from the request.
Deleting a service group	400	CFW.00200004	The service group to be deleted is being referenced.	The service group to be deleted is being referenced.	Delete the rules that reference the service group and then delete the address group.
Deleting a service group	400	CFW.00200005	The service group in the request does not exist.	The service group in the request does not exist.	Check whether the service group in the request exists.
Updating a member in a service group	400	CFW.00400004	The member already exists.	The member already exists.	Delete unnecessary service group members.
Configuring the blacklist or whitelist	400	CFW.00200022	It is not allowed to configuring all IP address segments in the blacklist and whitelist.	It is not allowed to configuring all IP address segments in the blacklist and whitelist.	Set specific IP address segments in the blacklist and whitelist.
	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.
	400	CFW.00200032	The engine does not support IPv6.	The engine does not support IPv6.	Contact technical support.
	400	CFW.00400011	Duplicate blacklist and whitelist information.	Duplicate blacklist and whitelist information.	Ensure unique blacklist and whitelist items are added.
	400	CFW.00400012	East-west protection does not support IPv6, and the private IP address blacklist and whitelist cannot be delivered.	East-west protection does not support IPv6, and the private IP address blacklist and whitelist cannot be delivered.	Add east-west protection.
	400	CFW.00400013	The number of records in the blacklist and whitelist has reached the upper limit (2000).	The number of records in the blacklist and whitelist has reached the upper limit (2000).	Delete unnecessary blacklist or whitelist items.
Updating the blacklist or whitelist	400	CFW.00200005	The blacklist or whitelist item carried in the request does not exist.	The blacklist or whitelist item carried in the request does not exist.	Check whether the blacklist and whitelist items carried in the request exist.
	400	CFW.00200005	The blacklist or whitelist item carried in the request does not exist.	The blacklist or whitelist item carried in the request does not exist.	Check whether the blacklist and whitelist items carried in the request exist.
	400	CFW.00200022	It is not allowed to configuring all IP address segments in the blacklist and whitelist.	It is not allowed to configuring all IP address segments in the blacklist and whitelist.	Set specific IP address segments in the blacklist and whitelist.
	400	CFW.00200032	The engine does not support IPv6.	The engine does not support IPv6.	Contact technical support.
	400	CFW.00200036	The CIDR block cannot be changed to a private network segment.	The CIDR block cannot be changed to a private network segment.	Contact technical support.
	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.
	400	CFW.00400011	Duplicate blacklist and whitelist information.	Duplicate blacklist and whitelist information.	Ensure unique blacklist and whitelist items are added.
	400	CFW.00200028	Inconsistent address types	Inconsistent address types	Ensure the address types are the same.
Removing a blacklisted or whitelisted item	400	CFW.00200005	The blacklist or whitelist item carried in the request does not exist.	The blacklist or whitelist item carried in the request does not exist.	Check whether the blacklist and whitelist items carried in the request exist.
User-defined IPS rules	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.
Changing the IPS switch status	400	CFW.00200023	Failed to call the background API for modifying the IPS switch status.	Failed to call the background API for modifying the IPS switch status.	Try again later or contact technical support.
Changing the IPS switch status	400	CFW.00200110	Basic defense cannot be operated.	Basic defense cannot be operated.	Contact technical support.
Changing the EIP protection mode	400	CFW.00200016	Incorrect instance status	Incorrect instance status	Contact technical support.