DDoS Mitigation

Upsert Protection Profile

put/ddos-mitigation/profiles/{network}

Create or update the protection profile for an IP or network.

If you provide a subnet (for example a /24), the profile is applied to each individual IP in it. Only available for IPs with Premium protection.

Authorization

Authorization

Authorization*string

Bearer YOUR_API_TOKEN with an API token. The X-API-Key: YOUR_API_TOKEN header works too.

Path parameters

network*string

Request body

Schema for creating/updating a protection profile.

application/jsonRequired

tcp_validation_level?integer

Range0 ≤ value ≤ 10Default1

tcp_validation_sym_level?integer

Range0 ≤ value ≤ 10Default0

udp_validation_level?integer

Range0 ≤ value ≤ 10Default0

invalid_filter_level?integer

Range0 ≤ value ≤ 10Default1

fragmented_filter_level?integer

Range0 ≤ value ≤ 10Default1

amplification_udp_level?integer

Range0 ≤ value ≤ 10Default1

amplification_tcp_level?integer

Range0 ≤ value ≤ 10Default1

icmp_rate_limit_level?integer

Range0 ≤ value ≤ 10Default0

same_packet_size_level?integer

Range0 ≤ value ≤ 10Default1

stateful_firewall_level?integer

Range0 ≤ value ≤ 10Default0

default_action?integer

Range0 ≤ value ≤ 2Default0

country_mode?integer

Range0 ≤ value ≤ 2Default0

asn_mode?integer

Range0 ≤ value ≤ 2Default0

prefix_list_mode?integer

Range0 ≤ value ≤ 2Default0

udp_threshold_pps?integer

Range0 ≤ value ≤ 100000000Default200000

tcp_threshold_pps?integer

Range0 ≤ value ≤ 100000000Default100000

tcp_syn_threshold_pps?integer

Range0 ≤ value ≤ 100000000Default10000

tcp_ack_threshold_pps?integer

Range0 ≤ value ≤ 100000000Default100000

icmp_threshold_pps?integer

Range0 ≤ value ≤ 100000000Default2000

udp_threshold_mbps?integer

Range0 ≤ value ≤ 100000Default1000

tcp_threshold_mbps?integer

Range0 ≤ value ≤ 100000Default1000

tcp_syn_threshold_mbps?integer

Range0 ≤ value ≤ 100000Default1000

tcp_ack_threshold_mbps?integer

Range0 ≤ value ≤ 100000Default1000

icmp_threshold_mbps?integer

Range0 ≤ value ≤ 100000Default20

syn_flood_threshold?integer

Range0 ≤ value ≤ 10000Default0

syn_flood_block_secs?integer

Range0 ≤ value ≤ 86400Default60

always_on_mitigation?integer | null

Range0 ≤ value ≤ 1

symmetric_routing?integer | null

Range0 ≤ value ≤ 1

Responses

Successful Response

application/json

detail*string

Example request

PUT/ddos-mitigation/profiles/{network}

curl -X PUT "https://api.cubepath.com/ddos-mitigation/profiles/string" \
  -H "Authorization: Bearer $CUBEPATH_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "tcp_validation_level": 1,
  "tcp_validation_sym_level": 0,
  "udp_validation_level": 0,
  "invalid_filter_level": 1,
  "fragmented_filter_level": 1,
  "amplification_udp_level": 1,
  "amplification_tcp_level": 1,
  "icmp_rate_limit_level": 0,
  "same_packet_size_level": 1,
  "stateful_firewall_level": 0,
  "default_action": 0,
  "country_mode": 0,
  "asn_mode": 0,
  "prefix_list_mode": 0,
  "udp_threshold_pps": 200000,
  "tcp_threshold_pps": 100000,
  "tcp_syn_threshold_pps": 10000,
  "tcp_ack_threshold_pps": 100000,
  "icmp_threshold_pps": 2000,
  "udp_threshold_mbps": 1000,
  "tcp_threshold_mbps": 1000,
  "tcp_syn_threshold_mbps": 1000,
  "tcp_ack_threshold_mbps": 1000,
  "icmp_threshold_mbps": 20,
  "syn_flood_threshold": 0,
  "syn_flood_block_secs": 60,
  "always_on_mitigation": 1,
  "symmetric_routing": 1
}'

Example response

{
  "detail": "string"
}