Web Application Firewall:ModifyProtectionModuleRule

tamperproof — Pencegahan perubahan situs web

Contoh:

{
  "name": "example",
  "uri": "http://www.example.com/example",
  "status": 1
}

dlp — Pencegahan kebocoran data

struktur kondisi:

struktur nilai:

• Ketika key adalah 0: tetapkan v ke URL.

• Ketika key adalah 11: tetapkan v ke kode status HTTP. Nilai yang valid: 400, 401, 402, 403, 404, 405–499, 500, 501, 502, 503, 504, 505–599.

• Ketika key adalah 10: tetapkan k ke jenis data sensitif. Nilai yang valid: 100 (nomor KTP), 101 (nomor kartu kredit), 102 (nomor telepon), 103 (kata sensitif default).

Contoh:

{
  "name": "example",
  "conditions": [
    {"key": 11, "operation": 1, "value": [{"v": 401}]},
    {"key": "0", "operation": 1, "value": [{"v": "www.example.com"}]}
  ],
  "action": 3
}

ng_account — Keamanan akun

Contoh:

{
  "url_path": "/example",
  "method": "POST,GET,PUT,DELETE",
  "account_left": "aaa",
  "password_left": "123",
  "action": "monitor"
}

bot_intelligence — Intelijen ancaman bot

Struktur urlList:

Contoh:

{
  "urlList": [
    {"mode": "prefix-match", "url": "/indexa"},
    {"mode": "regex", "url": "/"},
    {"mode": "eq", "url": "/"}
  ],
  "name": "IDC IP Address Library-Tencent Cloud",
  "action": "captcha_strict",
  "status": 1
}

bot_algorithm — Algoritma cerdas (manajemen bot)

Struktur config berdasarkan algorithmName:

RR (crawler sumber daya khusus):

PR (crawler path tertentu):

DPR (crawler round-robin parameter):

SR (crawler alamat IP dinamis):

IND (crawler perangkat proxy):

Periodicity (crawler periodik):

Contoh:

{
  "name": "Identifikasi crawler untuk perangkat proxy",
  "algorithmName": "IND",
  "timeInterval": "60",
  "action": "warn",
  "config": {
    "minIpCount": 5,
    "keyPathConfiguration": [{"url": "/index", "method": "GET", "matchType": "prefix"}]
  }
}

bot_wxbb_pkg — Perlindungan versi (perlindungan aplikasi)

Struktur nameList:

Contoh:

{
  "name": "test",
  "action": "close",
  "nameList": [{
    "name": "apk-xxxx",
    "signList": ["xxxxxx", "xxxxx", "xxxx", "xx"]
  }]
}

bot_wxbb — Perlindungan path (perlindungan aplikasi)

Contoh:

{
  "name": "test",
  "uri": "/index",
  "matchType": "all",
  "arg": "test",
  "action": "close",
  "hasTag": true,
  "wxbbVmpFieldType": 2,
  "wxbbVmpFieldValue": "test",
  "blockInvalidSign": 1,
  "blockProxy": 1
}

antifraud — Kontrol risiko data

Contoh:

{
  "uri": "http://1.example.com/example"
}

antifraud_js — Kontrol risiko data (injeksi JavaScript)

Contoh:

{
  "uri": "/example/example"
}

ac_blacklist — Daftar hitam alamat IP

Struktur area:

Contoh:

{
  "remoteAddr": ["1.XX.XX.1", "2.XX.XX.2"],
  "area": [
    {
      "countryCodes": ["CN"],
      "regionCodes": ["310000", "530000"]
    },
    {
      "countryCodes": ["AD", "AL"]
    }
  ]
}

ac_highfreq — Pemblokiran serangan frekuensi tinggi

Contoh:

{
  "interval": 60,
  "ttl": 300,
  "count": 60
}

ac_dirscan — Perlindungan pemindaian

Contoh:

{
  "interval": 10,
  "ttl": 1800,
  "count": 50,
  "weight": 0.7,
  "uriNum": 20
}

ac_custom — Kebijakan perlindungan kustom

Struktur parameter Rule bervariasi berdasarkan parameter scene.

{
  "action": "monitor",
  "name": "test",
  "scene": "custom_acl",
  "conditions": [{"opCode": 1, "key": "URL", "values": "/example"}]
}

{
  "name": "Aturan perlindungan flood HTTP",
  "conditions": [{"opCode": 1, "key": "URL", "values": "/example"}],
  "action": "block",
  "scene": "custom_cc",
  "ratelimit": {
    "target": "remote_addr",
    "interval": 300,
    "threshold": 2000,
    "status": {
      "code": 404,
      "count": 200
    },
    "scope": "rule",
    "ttl": 1800
  }
}

whitelist — Daftar putih website

Nilai yang valid untuk tags:

Nilai dalam tags harus semuanya termasuk dalam kategori daftar putih yang sama. Misalnya, regular (daftar putih pencegahan intrusi web) dan cc (daftar putih kontrol akses atau pembatasan kecepatan) tidak dapat ditentukan bersamaan.

Contoh:

{
  "name": "test",
  "tags": ["cc", "customrule"],
  "conditions": [{"opCode": 1, "key": "URL", "values": "/example"}]
}