Help Center/ Cloud Firewall/ API Reference (Ankara Region)/ API/ ACL Rule Management/ Updating an ACL Rule

Updated on 2024-12-05 GMT+08:00

Online Debugging

CLI Examples

View PDF

Updating an ACL Rule

Function

This API is used to update an ACL rule.

Calling Method

For details, see Calling APIs.

URI

PUT /v1/{project_id}/acl-rule/{acl_rule_id}

**Table 1** Path Parameters
Parameter	Mandatory	Type	Description
project_id	Yes	String	Project ID
acl_rule_id	Yes	String	Rule ID

**Table 2** Query Parameters
Parameter	Mandatory	Type	Description
enterprise_project_id	No	String	Enterprise project id, the id generated by the enterprise project after the user supports the enterprise project.
fw_instance_id	No	String	Firewall instance ID, which is automatically generated after a CFW instance is created. You can obtain the ID by calling the API used for querying a firewall instance. For details, see the API Explorer and Help Center FAQ.By default, if fw_instance_Id is not specified, information about the first firewall under the account is returned. If fw_instance_Id is specified, information about the firewall with this fw_instance_Id is returned.If object_Id is specified, information about the firewall with this object_Id is returned by default. If both fw_instance_Id and object_Id are specified, the specified object_Id must belong to the specified firewall.

Request Parameters

**Table 3** Request header parameters
Parameter	Mandatory	Type	Description
X-Auth-Token	Yes	String	User token. It can be obtained by calling the IAM API used to obtain a user token. The value of X-Subject-Token in the response header is a token.

**Table 4** Request body parameters
Parameter	Mandatory	Type	Description
address_type	No	Integer	Address type. The value can be 0 (IPv4) or 1 (IPv6). Enumeration values: 0 1
name	No	String	Rule name
sequence	No	OrderRuleAclDto object	UpdateRuleAclDto
direction	No	Integer	Direction: 0 means outside to inside, 1 means inside to outside, direction value is required when rule type is internet or nat. Enumeration values: 0 1
action_type	No	Integer	Action. 0: allow; 1: deny Enumeration values: 0 1
status	No	Integer	Rule delivery status. 0: disabled; 1: enabled.
applications	No	Array of strings	applications
applicationsJsonString	No	String	applications json string
description	No	String	Description
long_connect_time_hour	No	Long	Persistent connection duration (hour)
long_connect_time_minute	No	Long	Persistent connection duration (hour)
long_connect_time_second	No	Long	Persistent connection duration (minute)
long_connect_time	No	Long	Persistent connection duration
long_connect_enable	No	Integer	Whether to support persistent connections. 0: not supported; 1: supported. Enumeration values: 0 1
source	No	RuleAddressDto object	rule address dto
destination	No	RuleAddressDto object	rule address dto
service	No	RuleServiceDto object	rule service dto
type	No	Integer	Rule type. The value can be 0 (Internet rule), 1 (VPC rule), or 2 (NAT rule). Enumeration values: 0 1 2
tag	No	TagsVO object	tag

**Table 5** OrderRuleAclDto
Parameter	Mandatory	Type	Description
dest_rule_id	No	String	ID of the rule that the added rule will follow. This parameter cannot be left blank if the rule is not pinned on top, and is empty when the added rule is pinned on top.
top	No	Integer	Whether to pin on top. The options are as follows: 0: no; 1: yes.
bottom	No	Integer	Whether to pin on bottom. The options are as follows: 0: no; 1: yes.

**Table 6** RuleAddressDto
Parameter	Mandatory	Type	Description
type	Yes	Integer	Source type. 0: manual input; 1: associated IP address group; 2: domain name; 3: region; 4: domain set 5: multi object, 6: domain set dns, 7: domain url profile
address_type	No	Integer	Source type. 0: IPv4; 1: IPv6, it is applied when type is 0.
address	No	String	Source IP address. The value cannot be empty for the manual type, and cannot be empty for the automatic or domain type, it is applied when type is 0.
address_set_id	No	String	ID of the associated IP address group. The value cannot be empty for the automatic type or for the manual or domain type, it is applied when type is 1.
address_set_name	No	String	IP address group name, it is applied when type is 1.
domain_address_name	No	String	Name of the domain name address. This parameter cannot be left empty for the domain name type, and is empty for the manual or automatic type,it is applied when type is 2 or 7.
region_list_json	No	String	JSON value of the rule region list,it is applied when type is 3.
region_list	No	Array of IpRegionDto objects	Region list of a rule,it is applied when type is 3.
domain_set_id	No	String	domain set id,it is applied when type is 4 or 6.
domain_set_name	No	String	domain set name,it is applied when type is 4 or 6.
ip_address	No	Array of strings	IP address list, it is applied when type is 5
address_group	No	Array of strings	address group, it is applied when type is 5.
address_group_names	No	Array of AddressGroupVO objects	Address set list, it is applied in the response.
address_set_type	No	Integer	Address set type, 0 indicates a custom define address set, 1 indicates a WAF return-to-source IP address set, 2 indicates a DDoS return-to-source IP address set, and 3 indicates a NAT64 translation address set, it is applied when type is 1.
predefined_group	No	Array of strings	predefined group, it is applied when type is 5.

**Table 7** IpRegionDto
Parameter	Mandatory	Type	Description
region_id	No	String	region id
description_cn	No	String	cn description
description_en	No	String	en description
region_type	No	Integer	Region type, 0 means country, 1 means province, 2 means continent

**Table 8** AddressGroupVO
Parameter	Mandatory	Type	Description
address_set_type	No	Integer	Address set type, 0 indicates a custom define address set, 1 indicates a WAF return-to-source IP address set, 2 indicates a DDoS return-to-source IP address set, and 3 indicates a NAT64 translation address set.
name	No	String	name
set_id	No	String	address set id

**Table 9** RuleServiceDto
Parameter	Mandatory	Type	Description
type	Yes	Integer	Service input type. The value 0 indicates manual input, and the value 1 indicates automatic input.
protocol	No	Integer	Protocol type. The value 6 indicates TCP, 17 indicates UDP, 1 indicates ICMP, 58 indicates ICMPv6, and -1 indicates any protocol. Regarding the addition type, a null value indicates it is automatically added.
protocols	No	Array of integers	Protocols
source_port	No	String	Source port
dest_port	No	String	Destination port
service_set_id	No	String	Service group ID. This parameter is left blank for the manual type and cannot be left blank for the automatic type.
service_set_name	No	String	Service group name
custom_service	No	Array of ServiceItem objects	custom service
predefined_group	No	Array of strings	predefined group
service_group	No	Array of strings	Service group list
service_group_names	No	Array of ServiceGroupVO objects	Service group name list
service_set_type	No	Integer	Service set type, 0 indicates a custom service set, 1 indicates a predefined service set, 2 indicates commonly used remote login and PING, 3 indicates commonly used databases

**Table 10** ServiceItem
Parameter	Mandatory	Type	Description
protocol	No	Integer	Protocol type. The value 6 indicates TCP, 17 indicates UDP, 1 indicates ICMP, 58 indicates ICMPv6, and -1 indicates any protocol. Regarding the addition type, a null value indicates it is automatically added.
source_port	No	String	source port
dest_port	No	String	destination port
description	No	String	description
name	No	String	name

**Table 11** ServiceGroupVO
Parameter	Mandatory	Type	Description
name	No	String	service group name
protocols	No	Array of integers	protocols
service_set_type	No	Integer	Query service set type, 0 means custom define service set, 1 means predefine service set.
set_id	No	String	service set id

**Table 12** TagsVO
Parameter	Mandatory	Type	Description
tag_id	No	String	tag id
tag_key	No	String	tag key
tag_value	No	String	tag value

Response Parameters

Status code: 200

**Table 13** Response body parameters
Parameter	Type	Description
data	RuleId object	Rule ID

**Table 14** RuleId
Parameter	Type	Description
id	String	id
name	String	name

Status code: 400

**Table 15** Response body parameters
Parameter	Type	Description
error_code	String	Error code Minimum: 8 Maximum: 36
error_msg	String	Description Minimum: 2 Maximum: 512

Example Requests

The following example shows how to update an IPv4 inbound rule. The rule name is TestRule, the source is the IP address 1.1.1.1, the destination is the IP address 2.2.2.2, the service type is service, the protocol type is TCP, the source port is 0, and the destination port is 0. Persistent connections are not supported. The action is to allow. The status is enabled.

https://{Endpoint}/v1/9d80d070b6d44942af73c9c3d38e0429/acl-rule/ceaa0407-b9c8-4dfd-9eca-b6ead2dfd031

{
  "name" : "TestRule",
  "status" : 1,
  "action_type" : 0,
  "description" : "",
  "source" : {
    "type" : 0,
    "address" : "1.1.1.1"
  },
  "destination" : {
    "type" : 0,
    "address" : "2.2.2.2"
  },
  "service" : {
    "type" : 0,
    "protocol" : 6,
    "source_port" : "0",
    "dest_port" : "0"
  },
  "type" : 0,
  "address_type" : 0,
  "tag" : {
    "tag_key" : "",
    "tag_value" : ""
  },
  "long_connect_enable" : 0,
  "direction" : 0
}

Example Responses

Status code: 200

{
  "data" : {
    "id" : "ceaa0407-b9c8-4dfd-9eca-b6ead2dfd031"
  }
}

Status code: 400

Bad Request

{
  "error_code" : "CFW.00200005",
  "error_msg" : "operation content does not exist"
}

Status Codes

Status Code	Description
200	OK
400	Bad Request
401	Unauthorized
403	Forbidden
404	Not Found
500	Internal Server Error

Error Codes

See Error Codes.

Parent topic: ACL Rule Management

Previous topic: Batch Delete Acl Rules

Next topic: Updating Rule Actions in Batches

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot