Web Application Firewall:DescribeProtectionModuleRules

Struktur parameter Query

Nilai parameter Query harus dikodekan Base64. Nilai yang didekode merupakan string JSON dengan bidang-bidang berikut.

filter (opsional, objek JSON) — kondisi filter:

orderBy (opsional, String) — bidang pengurutan. Nilai yang valid:

• gmt_modified: waktu terakhir aturan dimodifikasi (default)

• action: aksi yang dilakukan ketika aturan sesuai (hanya berlaku untuk aturan kustom)

• name: nama aturan

• status: status aturan

desc (opsional, Boolean) — urutan pengurutan. true: menurun (default). false: menaik.

waf-codec

Contoh:

{
  "codecList": ["url", "base64"]
}

tamperproof

Contoh:

{
  "name": "example",
  "uri": "http://www.example.com/example",
  "status": 1
}

dlp

Contoh:

{
  "name": "example",
  "conditions": [
    {"key": 11, "operation": 1, "value": [{"v": 401}]},
    {"key": "0", "operation": 1, "value": [{"v": "www.example.com"}]}
  ],
  "action": 3
}

ng_account

Contoh:

{
  "domain": "www.example.com",
  "method": "GET,POST",
  "url_path": "/example",
  "account_left": "aaa",
  "action": "monitor"
}

bot_crawler

Contoh:

{
  "Status": 0,
  "Version": 1,
  "Content": {
    "name": "Baidu Spider whitelist",
    "conditions": [],
    "expressions": ["remote_addr inl 'ioc.210d077a-cf34-49ad-a9b3-0aa48095c595' && uri =^ '/'"],
    "bypassTags": "antibot",
    "tags": ["antibot"]
  },
  "RuleId": 20384,
  "Time": 1585818161
}

bot_intelligence

Contoh:

{
  "Status": 1,
  "Version": 1,
  "Content": {
    "name": "IDC IP Address Library-Tencent Cloud",
    "action": "captcha_strict",
    "urlList": [
      {"mode": "prefix-match", "url": "/indexa"},
      {"mode": "regex", "url": "/"},
      {"mode": "eq", "url": "/"}
    ],
    "keyType": "ip"
  },
  "RuleId": 922777,
  "Time": 1585907112
}

antifraud

Contoh:

{
  "uri": "http://1.example.com/example"
}

antifraud_js

Contoh:

{
  "uri": "/example/example"
}

bot_algorithm

Nama algoritma untuk `algorithmName`:

Bidang `config` berdasarkan algoritma:

RR: resourceType (Integer, opsional: 1 sumber daya dinamis, 2 sumber daya statis, -1 sumber daya kustom dengan ekstensi di extensions), minRequestCountPerIp (Integer, wajib; nilai valid: 5–10000), minRatio (Float, wajib; nilai valid: 0,01–1).

PR: keyPathConfiguration (Array, opsional; maksimal 10 path URL, masing-masing dengan method, url, dan matchType (all untuk pencocokan eksak, prefix untuk pencocokan awalan, regex untuk ekspresi reguler)), minRequestCountPerIp (Integer, wajib; nilai valid: 5–10000), minRatio (Float, wajib; nilai valid: 0,01–1).

DPR: method (String, wajib; nilai valid: POST, GET, PUT, DELETE, HEAD, OPTIONS), urlPattern (String, wajib; path dengan parameter kunci diapit {}), minRequestCountPerIp (Integer, wajib; nilai valid: 5–10000), minRatio (Float, wajib; nilai valid: 0,01–1).

SR: maxRequestCountPerSrSession (Integer, wajib; nilai valid: 1–8; sesi dengan jumlah permintaan lebih sedikit dianggap abnormal), minSrSessionCountPerIp (Integer, wajib; nilai valid: 5–300; alamat IP dengan jumlah sesi abnormal melebihi ambang batas ini ditandai).

IND: minIpCount (Integer, wajib; nilai valid: 5–500; alamat IP yang diakses oleh lebih dari jumlah IP ini melalui perangkat Wi-Fi yang sama ditandai), keyPathConfiguration (Array, opsional; struktur sama seperti PR).

Periodicity: minRequestCountPerIp (Integer, wajib; nilai valid: 5–10000), level (Integer, wajib: 0 jelas, 1 moderat, 2 lemah).

Contoh:

{
  "Status": 1,
  "Version": 1,
  "Content": {
    "name": "Dynamic IP address",
    "timeInterval": 60,
    "action": "warn",
    "algorithmName": "IND",
    "config": {
      "minIpCount": 5,
      "keyPathConfiguration": [{"method": "GET", "matchType": "prefix", "url": "/index"}]
    }
  },
  "RuleId": 940180,
  "Time": 1585832957
}

bot_wxbb_pkg

Contoh:

{
  "Version": 0,
  "Content": {
    "nameList": [{"signList": ["xxxxxx", "xxxxx", "xxxx", "xx"], "name": "apk-xxxx"}],
    "name": "test",
    "action": "close"
  },
  "RuleId": 271,
  "Time": 1585836143
}

bot_wxbb

Contoh:

{
  "Version": 6,
  "Content": {
    "blockInvalidSign": true,
    "wxbbVmpFieldValue": "test",
    "blockSimulator": true,
    "matchType": "all",
    "arg": "test",
    "name": "test",
    "action": "close",
    "blockProxy": true,
    "uri": "/index",
    "wxbbVmpFieldType": 1
  },
  "RuleId": 2585,
  "Time": 1586241849
}

ac_blacklist

Contoh:

{
  "empty": false,
  "remoteAddr": ["1.XX.XX.1", "12.XX.XX.2"]
}

ac_highfreq

Contoh:

{
  "interval": 60,
  "ttl": 300,
  "count": 60
}

ac_dirscan

Contoh:

{
  "interval": 10,
  "ttl": 1800,
  "count": 50,
  "weight": 0.7,
  "uriNum": 20
}

ac_custom

Struktur Content bervariasi berdasarkan bidang scene.

{
  "name": "test2",
  "action": "monitor",
  "conditions": [{"contain": 1, "values": "login", "pattern": "contain", "opCode": 1, "opValue": "contain", "key": "URL"}],
  "expressions": ["request_uri contains 'login'"],
  "scene": "custom_acl"
}

{
  "name": "HTTP flood protection rule",
  "conditions": [{"contain": 1, "values": "login", "pattern": "contain", "opCode": 1, "opValue": "contain", "key": "URL"}],
  "expressions": ["request_uri contains 'login'"],
  "action": "block",
  "scene": "custom_cc",
  "ratelimit": {
    "target": "remote_addr",
    "interval": 300,
    "threshold": 2000,
    "status": {
      "code": 404,
      "count": 200
    },
    "scope": "rule",
    "ttl": 1800
  }
}

whitelist

Contoh:

{
  "name": "test",
  "tags": ["cc", "customrule"],
  "bypassTags": "antifraud,dlp,tamperproof",
  "conditions": [{"contain": 1, "values": "login", "pattern": "contain", "opCode": 1, "opValue": "contain", "key": "URL"}],
  "expressions": ["request_uri contains 'login'"]
}