SetLoadBalancerHTTPSListenerAttribute

The operation that you want to perform.

Set the value to SetLoadBalancerHTTPSListenerAttribute.

The frontend port that is used by the CLB instance.

Valid values: 1 to 65535.

The ID of the CLB instance.

The ID of the region where the CLB instance is deployed.

You can call the DescribeRegions operation to query the most recent region list.

The bandwidth limit of the listener. Unit: Mbit/s.

Valid values: -1 and 1 to 5120.

• -1: If you set the value to -1, the bandwidth of the listener is unlimited.
• 1 to 5120: If you set a value from 1 to 5120, the value that you specify equals the bandwidth limit of the listener. The sum of bandwidth limit values that you specify for all listeners of the CLB instance cannot exceed the bandwidth limit of the CLB instance.

Specifies whether to use the X-Forwarded-For header to retrieve client IP addresses. Valid values:

• on: yes
• off: no

The scheduling algorithm. Valid values:

• wrr: Backend servers that have higher weights receive more requests than backend servers that have lower weights.
• rr: Requests are distributed to backend servers in sequence.

Specifies whether to enable session persistence. Valid values:

• on: yes
• off: no

The method that is used to handle a cookie. Valid values:

• insert: inserts a cookie.

  CLB inserts a cookie (SERVERID) into the first HTTP or HTTPS response that is sent to a client. The next request from the client will contain this cookie, and the listener will distribute this request to the recorded backend server.

• server: rewrites a cookie.

  When CLB detects a user-defined cookie, it overwrites the original cookie with the user-defined cookie. The next request from the client will contain the user-defined cookie, and the listener will distribute this request to the recorded backend server.

The timeout period of the cookie. Unit: seconds.

Valid values: 1 to 86400.

The cookie to be configured on the backend server.

The cookie must be 1 to 200 characters in length, and can contain only ASCII characters and digits. It cannot contain commas (,), semicolons (;), or space characters. It cannot start with a dollar sign ($).

Specifies whether to enable health checks. Valid values:

• on: yes
• off: no

The HTTP method that is used for health checks. Valid values: head and get.

The domain name that is used for health checks. Valid values:

• $_ip: the private IP address of a backend server. If you do not set this parameter or set the parameter to $_ip, the CLB instance uses the private IP address of each backend server as the domain name for health checks.
• domain: The domain name must be 1 to 80 characters in length, and can contain letters, digits, periods (.),and hyphens (-).

The URL that is used for health checks.

The URL must be 1 to 80 characters in length and can contain letters, digits, and the following characters: - / . % ? # &. The URL must not be a single forward slash (/) but it must start with a forward slash (/).

The number of health checks that an unhealthy backend server must consecutively pass before it can be declared healthy (from fail to success).

Valid values: 2 to 10.

The number of health checks that a healthy backend server must consecutively fail before it can be declared unhealthy (from success to fail).

Valid values: 2 to 10.

The timeout period of a health check response. If a backend server does not respond within the specified timeout period, the health check fails. Unit: seconds.

Valid values: 1 to 300.

If the value of the HealthCheckTimeout parameter is smaller than that of the HealthCheckInterval parameter, the timeout period specified by the HealthCheckTimeout parameter is ignored and the period of time specified by the HealthCheckInterval parameter is used as the timeout period.

The interval between two consecutive health checks. Unit: seconds.

Valid values: 1 to 50.

The port that is used for health checks.

Valid values: 1 to 65535.

The HTTP status code of a successful health check. Separate multiple HTTP status codes with commas (,).

Valid values: http_2xx, http_3xx, http_4xx, and http_5xx.

The ID of the server certificate.

The ID of the CA certificate.

• If both the CA certificate and the server certificate are uploaded, mutual authentication is used.
• If you upload only the server certificate, one-way authentication is used.

Specifies whether to use a vServer group. Valid values:

• on: yes
• off: no

The ID of the vServer group.

Specifies whether to use the SLB-IP header to obtain the virtual IP address (VIP) requested by the client. Valid values:

• on: yes
• off: no

Specifies whether to use the SLB-ID header to retrieve the ID of the CLB instance. Valid values:

• on: yes
• off: no

Specifies whether to use the X-Forwarded-Proto header to retrieve the listener protocol. Valid values:

• on: yes
• off: no

Specifies whether to enable Gzip compression to compress specific types of files. Valid values:

• on: yes
• off: no

The ID of the network access control list (ACL) that you want to associate with the listener.

If AclStatus is set to on, this parameter is required.

The type of network ACL. Valid values:

• white: a whitelist. Only requests from the IP addresses or CIDR blocks in the network ACL are forwarded. Whitelists apply to scenarios where you want to allow only specific IP addresses to access an application. Your business may be adversely affected if the whitelist is not set properly. After a whitelist is configured, only IP addresses in the whitelist can access the CLB listener.

  If no IP address is added to the whitelist, the CLB listener forwards all requests.

• black: a blacklist. All requests from the IP addresses or CIDR blocks in the network ACL are denied. Blacklists apply to scenarios where you want to deny access from specified IP addresses to an application.

  If no IP address is added to the blacklist, the listener forwards all requests.

Specifies whether to enable access control. Valid values:

• on: enables access control
• off: disables access control

The timeout period of an idle connection. Unit: seconds. Valid values: 1 to 60. Default value: 15.

If no request is received within the specified timeout period, CLB closes the connection. When another request is received, CLB establishes a new connection.

The timeout period of a request. Unit: seconds. Valid values: 1 to 180. Default value: 60.

If no response is received from the backend server during the request timeout period, CLB sends an HTTP 504 error code to the client.

Specifies whether to use HTTP 2.0. Valid values:

• on: yes
• off: no

The Transport Layer Security (TLS) security policy. Each security policy contains TLS protocol versions and cipher suites available for HTTPS.

• tls_cipher_policy_1_0:

  Supported TLS versions: TLS 1.0, TLS 1.1, and TLS 1.2

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA256, AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, AES128-SHA, AES256-SHA, and DES-CBC3-SHA

• tls_cipher_policy_1_1:

  Supported TLS versions: TLS 1.1 and TLS 1.2

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA256, AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, AES128-SHA, AES256-SHA, and DES-CBC3-SHA

• tls_cipher_policy_1_2

  Supported TLS version: TLS 1.2

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA256, AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, AES128-SHA, AES256-SHA, and DES-CBC3-SHA

• tls_cipher_policy_1_2_strict

  Supported TLS version: TLS 1.2

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, ECDHE-RSA-AES128-SHA, and ECDHE-RSA-AES256-SHA

• tls_cipher_policy_1_2_strict_with_1_3

  Supported TLS versions: TLS 1.2 and TLS 1.3

  Supported cipher suites: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_AES_128_CCM_SHA256, TLS_AES_128_CCM_8_SHA256, ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES128-SHA256, ECDHE-ECDSA-AES256-SHA384, ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, ECDHE-ECDSA-AES128-SHA, ECDHE-ECDSA-AES256-SHA, ECDHE-RSA-AES128-SHA, and ECDHE-RSA-AES256-SHA

The description of the listener.

The ID of the request.