yexinru/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
Files
fad830606118e9aa024a1c2926be1aa4eccc8784
doc-exports/docs/cfw/api-ref/AddAclRule.html
qiaoli 9776db0ee8 First version of the CFW API 
Reviewed-by: Gladkov, Maksim <mgladkov@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: qiaoli <qiaoli@huawei.com>
Co-committed-by: qiaoli <qiaoli@huawei.com>
2025-01-21 07:59:01 +00:00

997 lines
78 KiB
HTML
Raw Blame History

<a name="AddAclRule"></a><a name="AddAclRule"></a>
<h1 class="topictitle1">Creating an ACL Rule</h1>
<div id="body1708331107508"><div class="section" id="AddAclRule__section1783512321289"><h4 class="sectiontitle">Function</h4><p id="AddAclRule__p2083563210280">This API is used to create an ACL rule.</p>
</div>
<div class="section" id="AddAclRule__section6836532102810"><h4 class="sectiontitle">URI</h4><p id="AddAclRule__p198361832142811">POST /v1/{project_id}/acl-rule</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__table6836193292816" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Path Parameters</caption><thead align="left"><tr id="AddAclRule__row483673242818"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.1"><p id="AddAclRule__p168378328287">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.2"><p id="AddAclRule__p1483743215283">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.3"><p id="AddAclRule__p12837143212285">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.2.3.2.5.1.4"><p id="AddAclRule__p983753282815">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row1483616328285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.1 "><p id="AddAclRule__p13837143218287">project_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.2 "><p id="AddAclRule__p2837232152818">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.3 "><p id="AddAclRule__p15837203232817">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.2.3.2.5.1.4 "><p id="AddAclRule__p58381732152818">Project ID, which can be obtained by calling an API or from the console. For details, see <a href="cfw_02_0015.html">Obtaining a Project ID</a>.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__table7838153232811" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Query Parameters</caption><thead align="left"><tr id="AddAclRule__row188381232142816"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.4.2.5.1.1"><p id="AddAclRule__p3838203211286">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.4.2.5.1.2"><p id="AddAclRule__p11838133212289">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.4.2.5.1.3"><p id="AddAclRule__p1883863214282">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.2.4.2.5.1.4"><p id="AddAclRule__p7839143217283">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row5838113216289"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.4.2.5.1.1 "><p id="AddAclRule__p48391132152811">enterprise_project_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.4.2.5.1.2 "><p id="AddAclRule__p1583923222816">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.4.2.5.1.3 "><p id="AddAclRule__p15839173232811">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.2.4.2.5.1.4 "><p id="AddAclRule__p1283923213282">Enterprise project ID, which is the ID of a project planned based on organizations. You can obtain the enterprise project ID by referring to <a href="cfw_02_0027.html">Obtaining an Enterprise Project ID</a>. If the enterprise project function is not enabled, the value is <strong id="AddAclRule__b4839532162812">0</strong>.</p>
</td>
</tr>
<tr id="AddAclRule__row1883893215286"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.4.2.5.1.1 "><p id="AddAclRule__p1483918329283">fw_instance_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.4.2.5.1.2 "><p id="AddAclRule__p13839123262819">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.4.2.5.1.3 "><p id="AddAclRule__p1083910321286">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.2.4.2.5.1.4 "><p id="AddAclRule__p9840163215281">Firewall ID, which can be obtained by referring to <a href="cfw_02_0028.html">Obtaining a Firewall ID</a>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="AddAclRule__section1484014325280"><h4 class="sectiontitle">Request Parameters</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__HeaderParameter" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Request header parameters</caption><thead align="left"><tr id="AddAclRule__row88407325282"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.1"><p id="AddAclRule__p19841123213284">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.2"><p id="AddAclRule__p18841183212816">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.3"><p id="AddAclRule__p1484110328289">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.2.2.5.1.4"><p id="AddAclRule__p784143213285">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row11840163212289"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="AddAclRule__p19841832162815">X-Auth-Token</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="AddAclRule__p1684111325283">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.3 "><p id="AddAclRule__p1841332172816">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.2.2.5.1.4 "><p id="AddAclRule__p4841032142818">User token. You can obtain the token by referring to <a href="cfw_02_0029.html">Obtaining a User Token</a>.</p>
</td>
</tr>
<tr id="AddAclRule__row270285082820"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="AddAclRule__p16987185572214">Content-Type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="AddAclRule__p1453216872313">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.3 "><p id="AddAclRule__p598785514223">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.2.2.5.1.4 "><p id="AddAclRule__p1821149193417">Content type. It can only be set to application/json.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_AddRuleAclDto" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Request body parameters</caption><thead align="left"><tr id="AddAclRule__row784211328282"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.5.1.1"><p id="AddAclRule__p5842032202817">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.5.1.2"><p id="AddAclRule__p5843183218286">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.5.1.3"><p id="AddAclRule__p128432032152815">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.3.2.5.1.4"><p id="AddAclRule__p13843123282812">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row188421332112818"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.1 "><p id="AddAclRule__p9843163217280">object_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.2 "><p id="AddAclRule__p18843123216281">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.3 "><p id="AddAclRule__p68431632172819">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.3.2.5.1.4 "><p id="AddAclRule__p8843632122816">Protected object ID, which is used to distinguish between Internet border protection and VPC border protection after a cloud firewall is created. You can obtain the ID by calling the <a href="ListFirewallDetail.html">API for querying firewall instances</a>. In the return value, find the ID in <strong id="AddAclRule__b684413282812">data.records.protect_objects.object_id</strong> (The period [.] is used to separate different levels of objects). If the value of <strong id="AddAclRule__b1484415329287">type</strong> is <strong id="AddAclRule__b2844153214286">0</strong>, the protected object ID belongs to the Internet border. If the value of <strong id="AddAclRule__b2084418322283">type</strong> is <strong id="AddAclRule__b198445324286">1</strong>, the protected object ID belongs to the VPC border. You can obtain the value of <strong id="AddAclRule__b12844173210285">type</strong> from <strong id="AddAclRule__b1984473216282">data.records.protect_objects.type</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row08426321280"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.1 "><p id="AddAclRule__p13844532142813">type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.2 "><p id="AddAclRule__p0844143282815">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.3 "><p id="AddAclRule__p28449326286">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.3.2.5.1.4 "><p id="AddAclRule__p16844163252818">Rule type: <strong id="AddAclRule__b984416327280">0</strong> (Internet border rule), <strong id="AddAclRule__b1884414320285">1</strong> (inter-VPC rule), or <strong id="AddAclRule__b1884443222813">2</strong> (NAT rule). When <strong id="AddAclRule__b0844143220289">type</strong> is set to <strong id="AddAclRule__b084453217284">0</strong>, the source and destination addresses of the rule must be EIPs or domain names of the public network. For an inter-VPC rule, the source and destination addresses must be private IP addresses. For a NAT rule, the source address must be a private IP address, and the destination address must be an EIP or domain name of the public network.</p>
</td>
</tr>
<tr id="AddAclRule__row084213214281"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.1 "><p id="AddAclRule__p188447328287">rules</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.2 "><p id="AddAclRule__p1284518327284">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.3 "><p id="AddAclRule__p284519324284">Array of <a href="#AddAclRule__request_rules">rules</a> objects</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.3.2.5.1.4 "><p id="AddAclRule__p1384516322281">Rule list in a rule addition request.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_rules"></a><a name="request_rules"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_rules" frame="border" border="1" rules="all"><caption><b>Table 5 </b>rules</caption><thead align="left"><tr id="AddAclRule__row2845732102811"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.4.2.5.1.1"><p id="AddAclRule__p084793219280">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.4.2.5.1.2"><p id="AddAclRule__p584783216281">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.4.2.5.1.3"><p id="AddAclRule__p8847113219283">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.4.2.5.1.4"><p id="AddAclRule__p484713252811">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row12845832102814"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p5847432112815">name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p1284819321280">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p11848123272818">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p118481326288">Rule name.</p>
</td>
</tr>
<tr id="AddAclRule__row88451632132814"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p128485324281">sequence</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p2848632132812">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p13848123212282"><a href="#AddAclRule__request_OrderRuleAclDto">OrderRuleAclDto</a> object</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p1684893222817">Request body for changing the rule sequence.</p>
</td>
</tr>
<tr id="AddAclRule__row3845832102812"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p48481132172810">address_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p1084973252811">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p15849203202814">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p084923212815">Address type: <strong id="AddAclRule__b1084963212817">0</strong> (IPv4), <strong id="AddAclRule__b118491632202810">1</strong> (IPv6).</p>
</td>
</tr>
<tr id="AddAclRule__row1284673213289"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p3849153217282">action_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p284903214289">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p684983242819">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p178491432182813">Rule action: <strong id="AddAclRule__b58502329285">0</strong> (permit), <strong id="AddAclRule__b685012326282">1</strong> (deny).</p>
</td>
</tr>
<tr id="AddAclRule__row0846153262811"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p15850103232810">status</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p58501323281">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p88501332102812">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p685015324284">Rule status: <strong id="AddAclRule__b3850103252811">0</strong> (disabled), <strong id="AddAclRule__b38509327287">1</strong> (enabled).</p>
</td>
</tr>
<tr id="AddAclRule__row984683242810"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p10850532122817">applications</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p19850132122811">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p1685003215287">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p185153222818">Rule application list. Rule application type: <strong id="AddAclRule__b28511232122816">HTTP</strong>, <strong id="AddAclRule__b18851193211280">HTTPS</strong>, <strong id="AddAclRule__b11851153220288">TLS1</strong>, <strong id="AddAclRule__b1885103252817">DNS</strong>, <strong id="AddAclRule__b138511432112818">SSH</strong>, <strong id="AddAclRule__b11851163252812">MYSQL</strong>, <strong id="AddAclRule__b15851113222813">SMTP</strong>, <strong id="AddAclRule__b68511932192815">RDP</strong>, <strong id="AddAclRule__b12851193222817">RDPS</strong>, <strong id="AddAclRule__b2851532132814">VNC</strong>, <strong id="AddAclRule__b158511232172819">POP3</strong>, <strong id="AddAclRule__b7851113212810">IMAP4</strong>, <strong id="AddAclRule__b4851133210287">SMTPS</strong>, <strong id="AddAclRule__b1885173213286">POP3S</strong>, <strong id="AddAclRule__b16851163222818">FTPS</strong>, <strong id="AddAclRule__b88512032182815">ANY</strong>, or <strong id="AddAclRule__b19851032182811">BGP</strong>.</p>
</td>
</tr>
<tr id="AddAclRule__row38461732122818"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p585183220288">applicationsJsonString</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p18851193282811">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p108511732152813">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p1585216327286">JSON string converted from the <strong id="AddAclRule__b6852432102818">applications</strong> field in the application list.</p>
</td>
</tr>
<tr id="AddAclRule__row108467322285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p88527324284">long_connect_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p585212324285">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p168521332172817">Long</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p6852163218287">Persistent connection duration.</p>
</td>
</tr>
<tr id="AddAclRule__row1684613218283"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p58521932202819">long_connect_time_hour</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p485220325283">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p1885219324286">Long</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p6853153211284">Persistent connection duration (hour).</p>
</td>
</tr>
<tr id="AddAclRule__row1284693217287"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p58531932142815">long_connect_time_minute</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p14853143219285">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p1385343212815">Long</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p68531432162817">Persistent connection duration (minute).</p>
</td>
</tr>
<tr id="AddAclRule__row1846173282819"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p14853332122814">long_connect_time_second</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p1285363272817">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p4854193252816">Long</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p8854123212817">Persistent connection duration (second).</p>
</td>
</tr>
<tr id="AddAclRule__row4846632102816"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p7854432162815">long_connect_enable</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p15854932162811">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p5854173222815">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p3854183262819">Whether to support persistent connections: <strong id="AddAclRule__b7854932202811">0</strong> (no), <strong id="AddAclRule__b785413252810">1</strong> (yes).</p>
</td>
</tr>
<tr id="AddAclRule__row1184693218287"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p19854732182817">description</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p785463272810">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p5855532122817">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p8855123262818">Description.</p>
</td>
</tr>
<tr id="AddAclRule__row38469321288"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p14855632172813">direction</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p8855113212283">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p7855133212286">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p585533212284">Direction: <strong id="AddAclRule__b16855183222814">0</strong> (inbound) or <strong id="AddAclRule__b785519329287">1</strong> (outbound). This parameter is mandatory when <strong id="AddAclRule__b185515322281">type</strong> is set to <strong id="AddAclRule__b185573210288">0</strong> (Internet rule) or <strong id="AddAclRule__b8855183212819">2</strong> (NAT rule).</p>
</td>
</tr>
<tr id="AddAclRule__row2084673216285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p18568325286">source</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p385617322286">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p48562327283"><a href="#AddAclRule__request_RuleAddressDtoForRequest">RuleAddressDtoForRequest</a> object</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p6856173215286">Source address Data Transport Object.</p>
</td>
</tr>
<tr id="AddAclRule__row5846203232811"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p5856183219285">destination</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p3856163220288">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p178561832102815"><a href="#AddAclRule__request_RuleAddressDtoForRequest">RuleAddressDtoForRequest</a> object</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p118564322287">Destination address Data Transport Object.</p>
</td>
</tr>
<tr id="AddAclRule__row1984693214285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p198575328285">service</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p1185783211286">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p118571532152815"><a href="#AddAclRule__request_RuleServiceDto">RuleServiceDto</a> object</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p485711325289">Service object.</p>
</td>
</tr>
<tr id="AddAclRule__row1584643242814"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="AddAclRule__p4857232162813">tag</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.2 "><p id="AddAclRule__p1857183219288">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="AddAclRule__p7857203272814"><a href="#AddAclRule__request_TagsVO">TagsVO</a> object</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.4.2.5.1.4 "><p id="AddAclRule__p1885816324283">Tag object attached to a rule.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_OrderRuleAclDto"></a><a name="request_OrderRuleAclDto"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_OrderRuleAclDto" frame="border" border="1" rules="all"><caption><b>Table 6 </b>OrderRuleAclDto</caption><thead align="left"><tr id="AddAclRule__row108582322283"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.5.2.5.1.1"><p id="AddAclRule__p985993219287">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.5.2.5.1.2"><p id="AddAclRule__p14859932112810">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.5.2.5.1.3"><p id="AddAclRule__p985993222815">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.5.2.5.1.4"><p id="AddAclRule__p885963219288">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row985813252820"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.1 "><p id="AddAclRule__p1985919327286">dest_rule_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.2 "><p id="AddAclRule__p0859173232815">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.3 "><p id="AddAclRule__p28591032162811">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.5.2.5.1.4 "><p id="AddAclRule__p188591432162816">ID of the target rule. The added rule is placed after this rule. This parameter cannot be left blank when the added rule is not pinned on top, and can be left blank when the added rule is pinned on top. The rule ID can be obtained by calling the <a href="ListAclRules.html">API for querying protection rules</a>. Find the value in <strong id="AddAclRule__b486013220289">data.records.rule_id</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row885810323287"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.1 "><p id="AddAclRule__p158601632152812">top</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.2 "><p id="AddAclRule__p14860143219282">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.3 "><p id="AddAclRule__p48602032152813">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.5.2.5.1.4 "><p id="AddAclRule__p3860133222814">Whether to pin on top: <strong id="AddAclRule__b286013325288">0</strong> (no), <strong id="AddAclRule__b68604328287">1</strong> (yes).</p>
</td>
</tr>
<tr id="AddAclRule__row5858163242816"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.1 "><p id="AddAclRule__p186033202817">bottom</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.2 "><p id="AddAclRule__p9860143282819">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.3 "><p id="AddAclRule__p186003292816">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.5.2.5.1.4 "><p id="AddAclRule__p188611632172819">Whether to pin to bottom: <strong id="AddAclRule__b178611532162812">0</strong> (no), <strong id="AddAclRule__b8861143218283">1</strong> (yes).</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_RuleAddressDtoForRequest"></a><a name="request_RuleAddressDtoForRequest"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_RuleAddressDtoForRequest" frame="border" border="1" rules="all"><caption><b>Table 7 </b>RuleAddressDtoForRequest</caption><thead align="left"><tr id="AddAclRule__row11861332112813"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.6.2.5.1.1"><p id="AddAclRule__p1886212322289">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.6.2.5.1.2"><p id="AddAclRule__p1586263232810">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.6.2.5.1.3"><p id="AddAclRule__p9862143232815">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.6.2.5.1.4"><p id="AddAclRule__p286253216285">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row1886133213288"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p68631832122813">type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p086323292810">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p158638327283">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p1886343216289">Address type: <strong id="AddAclRule__b1863132162815">0</strong> (manual input), <strong id="AddAclRule__b14863113232810">1</strong> (associated IP address group), <strong id="AddAclRule__b1386323212817">2</strong> (domain name), <strong id="AddAclRule__b20863193232811">3</strong> (geographical location), <strong id="AddAclRule__b18863143215280">4</strong> (domain name group) <strong id="AddAclRule__b148631832192813">5</strong> (multiple objects), <strong id="AddAclRule__b19863193282819">6</strong> (domain name group - network), <strong id="AddAclRule__b1286383219288">7</strong> (domain name group - application).</p>
</td>
</tr>
<tr id="AddAclRule__row386183215282"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p1686383272812">address_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p18636326282">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p188632032132810">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p1586410321288">Address type: <strong id="AddAclRule__b5864143211284">0</strong> (IPv4), <strong id="AddAclRule__b786493272816">1</strong> (IPv6). If <strong id="AddAclRule__b58641332192816">type</strong> is <strong id="AddAclRule__b1786443202813">0</strong>, the input cannot be left blank.</p>
</td>
</tr>
<tr id="AddAclRule__row1861732172811"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p1286403272819">address</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p1686433292818">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p38648327288">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p88642321288">IP address information. It cannot be left blank if <strong id="AddAclRule__b168642321289">type</strong> is set to <strong id="AddAclRule__b12864163215286">0</strong>.</p>
</td>
</tr>
<tr id="AddAclRule__row17861133272811"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p15864532142819">address_set_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p886413326282">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p5865332102820">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p886520325287">ID of an associated IP address group. This parameter cannot be left blank when <strong id="AddAclRule__b1386563215288">type</strong> is set to <strong id="AddAclRule__b1986583218282">1</strong>. You can obtain the value by calling the <a href="ListAddressSets.html">API for querying the address group list</a>. Find the value in <strong id="AddAclRule__b586516322287">data.records.set_id</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row186173262813"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p188651032172815">address_set_name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p12865163272811">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p1486515321281">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p086510327283">Name of an associated IP address group. This parameter cannot be left blank when <strong id="AddAclRule__b0865193219283">type</strong> is set to <strong id="AddAclRule__b48651232142811">1</strong>. You can obtain the value by calling the <a href="ListAddressSets.html">API for querying the address group list</a>. Find the value in <strong id="AddAclRule__b8865153219286">data.records.name</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row9861143217286"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p188651323284">domain_address_name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p1986683213280">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p11866133202817">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p6866103252819">Name of a domain name address. This parameter is valid when <strong id="AddAclRule__b168669323285">type</strong> is set to <strong id="AddAclRule__b3866332112816">2</strong> (domain name) or <strong id="AddAclRule__b386616329289">7</strong> (application domain name group).</p>
</td>
</tr>
<tr id="AddAclRule__row88611332122817"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p168666326286">region_list_json</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p188668328280">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p12866532172810">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p168661332172815">JSON value of the rule region list.</p>
</td>
</tr>
<tr id="AddAclRule__row6861153272813"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p1686673212819">region_list</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p20867632172813">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p88678321286">Array of <a href="#AddAclRule__request_IpRegionDto">IpRegionDto</a> objects</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p108671532192814">Rule region list.</p>
</td>
</tr>
<tr id="AddAclRule__row686120327285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p9867123242813">domain_set_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p886710328283">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p15867173215285">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p486753292813">Domain group ID. The value cannot be left blank when <strong id="AddAclRule__b138678321281">type</strong> is set to <strong id="AddAclRule__b88671232112811">4</strong> (domain name group) or <strong id="AddAclRule__b38671932102814">7</strong> (domain name group - application). Its value can be obtained by calling the <a href="ListDomainSets.html">API for querying the domain name group list</a>. Find the value in <strong id="AddAclRule__b198671032122812">data.records.set_id</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row198611032192811"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p486811329282">domain_set_name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p1086815321286">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p9984173217288">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p10984133222814">Domain group name. The value cannot be left blank when <strong id="AddAclRule__b39841532142819">type</strong> is set to <strong id="AddAclRule__b19984193218283">4</strong> (domain name group) or <strong id="AddAclRule__b198483219282">7</strong> (domain name group - application). Its value can be obtained by calling the <a href="ListDomainSets.html">API for querying the domain name group list</a>. Find the value in <strong id="AddAclRule__b3984183210284">data.records.name</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row148619325284"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p1598463262814">ip_address</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p098483232818">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p2984113282814">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p59846329285">IP address list. This parameter cannot be left blank when <strong id="AddAclRule__b598403252814">type</strong> is set to <strong id="AddAclRule__b6984193212286">5</strong> (multiple objects).</p>
</td>
</tr>
<tr id="AddAclRule__row10862123252810"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p139842326284">address_set_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p1798416327282">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p298463282818">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p1398493220283">Address group type. It cannot be left blank when <strong id="AddAclRule__b99841732102818">type</strong> is set to <strong id="AddAclRule__b09845329289">1</strong> (associated IP address group). It value can be <strong id="AddAclRule__b179841432192815">0</strong> (user-defined address group), <strong id="AddAclRule__b129841324282">1</strong> (WAF back-to-source IP address group), <strong id="AddAclRule__b4984183232818">2</strong> (DDoS back-to-source IP address group), or <strong id="AddAclRule__b298423222816">3</strong> (NAT64 address group).</p>
</td>
</tr>
<tr id="AddAclRule__row1486213262818"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p1898453232815">predefined_group</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p59843324288">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p198416327285">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p898483216283">Pre-defined address group ID list. This parameter cannot be left blank when <strong id="AddAclRule__b3984732172813">type</strong> is set to <strong id="AddAclRule__b49841432152818">5</strong> (multiple objects). Its value can be obtained by calling the <a href="ListAddressSets.html">API for querying the address group list</a>. Find the value in <strong id="AddAclRule__b198443210282">data.records.set_id</strong> (The period [.] is used to separate different levels of objects). In the search criteria, <strong id="AddAclRule__b8984183220287">query_address_set_type</strong> must be set to <strong id="AddAclRule__b18984183211284">1</strong> (predefined address group).</p>
</td>
</tr>
<tr id="AddAclRule__row18621324288"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="AddAclRule__p79851732132813">address_group</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.2 "><p id="AddAclRule__p1098593218288">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="AddAclRule__p119851832182811">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.6.2.5.1.4 "><p id="AddAclRule__p18985173252815">Address group ID list. This parameter cannot be left blank when <strong id="AddAclRule__b2985153222813">type</strong> is set to <strong id="AddAclRule__b179851932112815">5</strong> (multiple objects). Its value can be obtained by calling the <a href="ListAddressSets.html">API for querying the address group list</a>. Find the value in <strong id="AddAclRule__b14985193214285">data.records.set_id</strong> (The period [.] is used to separate different levels of objects). In the search criteria, <strong id="AddAclRule__b2985153213283">query_address_set_type</strong> must be set to <strong id="AddAclRule__b19851432152811">0</strong> (user-defined address group).</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_IpRegionDto"></a><a name="request_IpRegionDto"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_IpRegionDto" frame="border" border="1" rules="all"><caption><b>Table 8 </b>IpRegionDto</caption><thead align="left"><tr id="AddAclRule__row1687163218281"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.7.2.5.1.1"><p id="AddAclRule__p16985232102810">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.7.2.5.1.2"><p id="AddAclRule__p139859329289">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.7.2.5.1.3"><p id="AddAclRule__p109851532122819">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.7.2.5.1.4"><p id="AddAclRule__p1898514320288">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row1187133220285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.1 "><p id="AddAclRule__p498553216286">region_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.2 "><p id="AddAclRule__p109851732142811">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.3 "><p id="AddAclRule__p998583252818">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.7.2.5.1.4 "><p id="AddAclRule__p89851032192818">Region ID. You can obtain the ID by referring to <a href="cfw_02_0030.html">Obtaining Information About Account, IAM User, Group, Project, Region, and Agency</a>.</p>
</td>
</tr>
<tr id="AddAclRule__row14871832172814"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.1 "><p id="AddAclRule__p6985173212286">region_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.2 "><p id="AddAclRule__p998563213282">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.3 "><p id="AddAclRule__p4986032162816">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.7.2.5.1.4 "><p id="AddAclRule__p498693217286">Region type: <strong id="AddAclRule__b9986203282817">0</strong> (country), <strong id="AddAclRule__b18986163212810">1</strong> (province), and <strong id="AddAclRule__b1398663282820">2</strong> (continent). It can be obtained from the <a href="cfw_02_0031.html">region information table</a>.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_RuleServiceDto"></a><a name="request_RuleServiceDto"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_RuleServiceDto" frame="border" border="1" rules="all"><caption><b>Table 9 </b>RuleServiceDto</caption><thead align="left"><tr id="AddAclRule__row18731032162813"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.8.2.5.1.1"><p id="AddAclRule__p798613242810">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.8.2.5.1.2"><p id="AddAclRule__p199861832102816">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.8.2.5.1.3"><p id="AddAclRule__p1898663217288">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.8.2.5.1.4"><p id="AddAclRule__p11986153211282">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row11873103202819"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p1198616327283">type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p1098611326280">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p29861032142819">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p4986123220285">Service input type: <strong id="AddAclRule__b1898616329285">0</strong> (manual), <strong id="AddAclRule__b19986732102819">1</strong> (automatic).</p>
</td>
</tr>
<tr id="AddAclRule__row18737329281"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p159865327282">protocol</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p14986123211286">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p5986232132812">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p4986332122814">Protocol type: <strong id="AddAclRule__b149862325280">6</strong> (TCP), <strong id="AddAclRule__b798613211288">17</strong> (UDP), <strong id="AddAclRule__b14986332172820">1</strong> (ICMP), <strong id="AddAclRule__b14986113219281">58</strong> (ICMPv6), or <strong id="AddAclRule__b9986632102816">-1</strong> (any). It cannot be left blank when <strong id="AddAclRule__b1998620324287">type</strong> is set to <strong id="AddAclRule__b9986232182816">0</strong> (manual).</p>
</td>
</tr>
<tr id="AddAclRule__row158738325283"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p398614324282">protocols</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p19986173292812">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p4986632202818">Array of integers</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p198643215285">Protocol list. Protocol type: <strong id="AddAclRule__b1198633242811">6</strong> (TCP), <strong id="AddAclRule__b14986123214287">17</strong> (UDP), <strong id="AddAclRule__b2098693213280">1</strong> (ICMP), <strong id="AddAclRule__b298693242811">58</strong> (ICMPv6), or <strong id="AddAclRule__b13986113282811">-1</strong> (any). It cannot be left blank when <strong id="AddAclRule__b15986183218283">type</strong> is set to <strong id="AddAclRule__b15986133211282">0</strong> (manual).</p>
</td>
</tr>
<tr id="AddAclRule__row987343211286"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p498616328285">source_port</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p4986183252815">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p5986832192815">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p119871732142813">Source port.</p>
</td>
</tr>
<tr id="AddAclRule__row1887353252818"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p1798714324286">dest_port</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p8987632132816">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p798793282813">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p29871732162818">Destination port.</p>
</td>
</tr>
<tr id="AddAclRule__row1587313242810"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p6987133222816">service_set_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p1798711323280">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p19877326286">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p3987183215281">Service group ID. This parameter cannot be left blank when <strong id="AddAclRule__b1998733272813">type</strong> is set to <strong id="AddAclRule__b1898743292813">1</strong> (associated IP address group). Its value can be obtained by calling the <a href="ListServiceSets.html">API for querying the service group list</a>. Find the value in <strong id="AddAclRule__b16987193272818">data.records.set_id</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row1087303218284"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p9987153220288">service_set_name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p4987173211285">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p2098763282811">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p798783216282">Service group name. This parameter cannot be left blank when <strong id="AddAclRule__b18987153220284">type</strong> is set to <strong id="AddAclRule__b1998713326288">1</strong> (associated IP address group). Its value can be obtained by calling the <a href="ListServiceSets.html">API for querying the service group list</a>. Find the value in <strong id="AddAclRule__b1987173262810">data.records.name</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
<tr id="AddAclRule__row1487318327283"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p498773212289">custom_service</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p69871321287">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p198763262819">Array of <a href="#AddAclRule__request_ServiceItem">ServiceItem</a> objects</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p998713323285">Custom service.</p>
</td>
</tr>
<tr id="AddAclRule__row108741324288"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p39879326284">predefined_group</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p17987143232819">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p149871832132814">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p15987193214282">Predefined service group ID list. The service group ID can be obtained by calling the <a href="ListServiceSets.html">API for querying the service group list</a>. Find the value in <strong id="AddAclRule__b10987832192815">data.records.set_id</strong> (The period [.] is used to separate different levels of objects). In the search criteria, <strong id="AddAclRule__b2987132152810">query_service_set_type</strong> must be set to <strong id="AddAclRule__b198713324281">1</strong> (predefined service group).</p>
</td>
</tr>
<tr id="AddAclRule__row128741632132816"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p14987183242810">service_group</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p18987183222810">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p39871327285">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p898733214289">Service group ID list. The service group ID can be obtained by calling the <a href="ListServiceSets.html">API for querying the service group list</a>. Find the value in <strong id="AddAclRule__b598723214287">data.records.set_id</strong> (The period [.] is used to separate different levels of objects). In the search criteria, <strong id="AddAclRule__b998717327284">query_service_set_type</strong> must be set to <strong id="AddAclRule__b89871532122813">0</strong> (user-defined service group).</p>
</td>
</tr>
<tr id="AddAclRule__row6874832162818"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p15987113232815">service_group_names</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p1198793262815">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p18987173202815">Array of <a href="#AddAclRule__request_ServiceGroupVO">ServiceGroupVO</a> objects</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p89881532152814">Service group name list.</p>
</td>
</tr>
<tr id="AddAclRule__row0874163222814"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.1 "><p id="AddAclRule__p898816324282">service_set_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.2 "><p id="AddAclRule__p1398823262814">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.8.2.5.1.3 "><p id="AddAclRule__p9988123202818">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.8.2.5.1.4 "><p id="AddAclRule__p139887320280">Service group type: <strong id="AddAclRule__b16988203217281">0</strong> (user-defined service group), <strong id="AddAclRule__b169882327285">1</strong> (common web service), <strong id="AddAclRule__b169883323285">2</strong> (common remote login and ping), or <strong id="AddAclRule__b0988143210289">3</strong> (common database).</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_ServiceItem"></a><a name="request_ServiceItem"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_ServiceItem" frame="border" border="1" rules="all"><caption><b>Table 10 </b>ServiceItem</caption><thead align="left"><tr id="AddAclRule__row168796323285"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.9.2.5.1.1"><p id="AddAclRule__p10988832142813">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.9.2.5.1.2"><p id="AddAclRule__p498813321286">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.9.2.5.1.3"><p id="AddAclRule__p3988203210284">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.9.2.5.1.4"><p id="AddAclRule__p6988232162810">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row16879143215280"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.1 "><p id="AddAclRule__p198843212817">protocol</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.2 "><p id="AddAclRule__p498873262819">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.3 "><p id="AddAclRule__p159881432182810">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.9.2.5.1.4 "><p id="AddAclRule__p149881832102813">Protocol type: <strong id="AddAclRule__b098863292817">6</strong> (TCP), <strong id="AddAclRule__b1988183202811">17</strong> (UDP), <strong id="AddAclRule__b19881832122819">1</strong> (ICMP), <strong id="AddAclRule__b398813212817">58</strong> (ICMPv6), or <strong id="AddAclRule__b1198873219286">-1</strong> (any). It cannot be left blank when <strong id="AddAclRule__b4988203252814">RuleServiceDto.type</strong> is set to <strong id="AddAclRule__b1198819322289">0</strong> (manual).</p>
</td>
</tr>
<tr id="AddAclRule__row17880113214285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.1 "><p id="AddAclRule__p1988163218286">source_port</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.2 "><p id="AddAclRule__p2098812323286">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.3 "><p id="AddAclRule__p209881032182814">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.9.2.5.1.4 "><p id="AddAclRule__p169881432112812">Source port.</p>
</td>
</tr>
<tr id="AddAclRule__row288053219281"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.1 "><p id="AddAclRule__p11988113212818">dest_port</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.2 "><p id="AddAclRule__p15988143292810">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.3 "><p id="AddAclRule__p17988133217282">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.9.2.5.1.4 "><p id="AddAclRule__p17988332162819">Destination port.</p>
</td>
</tr>
<tr id="AddAclRule__row20880193210287"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.1 "><p id="AddAclRule__p12988732132812">description</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.2 "><p id="AddAclRule__p139884322288">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.3 "><p id="AddAclRule__p99881032132810">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.9.2.5.1.4 "><p id="AddAclRule__p5988133212811">Service member description.</p>
</td>
</tr>
<tr id="AddAclRule__row9880193214284"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.1 "><p id="AddAclRule__p19881932122812">name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.2 "><p id="AddAclRule__p159882323286">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.9.2.5.1.3 "><p id="AddAclRule__p5989832122818">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.9.2.5.1.4 "><p id="AddAclRule__p10989143222820">Service member name.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_ServiceGroupVO"></a><a name="request_ServiceGroupVO"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_ServiceGroupVO" frame="border" border="1" rules="all"><caption><b>Table 11 </b>ServiceGroupVO</caption><thead align="left"><tr id="AddAclRule__row198827320286"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.10.2.5.1.1"><p id="AddAclRule__p298903232811">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.10.2.5.1.2"><p id="AddAclRule__p6989153213288">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.10.2.5.1.3"><p id="AddAclRule__p1989132182818">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.10.2.5.1.4"><p id="AddAclRule__p0989832102816">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row18824323284"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.1 "><p id="AddAclRule__p4989103252812">name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.2 "><p id="AddAclRule__p2989232132810">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.3 "><p id="AddAclRule__p1598953252815">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.10.2.5.1.4 "><p id="AddAclRule__p179893325286">Service group name.</p>
</td>
</tr>
<tr id="AddAclRule__row1088273252818"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.1 "><p id="AddAclRule__p159892032102811">protocols</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.2 "><p id="AddAclRule__p9989163292810">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.3 "><p id="AddAclRule__p49891532112813">Array of integers</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.10.2.5.1.4 "><p id="AddAclRule__p10989183262818">Protocol list. Protocol type: <strong id="AddAclRule__b139891932172811">6</strong> (TCP), <strong id="AddAclRule__b3989232192811">17</strong> (UDP), <strong id="AddAclRule__b2098973217285">1</strong> (ICMP), <strong id="AddAclRule__b79892032152820">58</strong> (ICMPv6), or <strong id="AddAclRule__b15989132152813">-1</strong> (any).</p>
</td>
</tr>
<tr id="AddAclRule__row10882163212810"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.1 "><p id="AddAclRule__p7989113219289">service_set_type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.2 "><p id="AddAclRule__p109891832142817">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.3 "><p id="AddAclRule__p7989103215284">Integer</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.10.2.5.1.4 "><p id="AddAclRule__p2989203212820">Service group type: <strong id="AddAclRule__b89892326281">0</strong> (user-defined service group), <strong id="AddAclRule__b898923215286">1</strong> (predefined service group).</p>
</td>
</tr>
<tr id="AddAclRule__row1882432192817"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.1 "><p id="AddAclRule__p13989133219286">set_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.2 "><p id="AddAclRule__p8989193202818">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.10.2.5.1.3 "><p id="AddAclRule__p0989132182820">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.10.2.5.1.4 "><p id="AddAclRule__p2098916328282">Service group ID, which can be obtained by calling the <a href="ListServiceSets.html">API for querying the service group list</a>. Find the value in <strong id="AddAclRule__b4989143282811">data.records.set_id</strong> (The period [.] is used to separate different levels of objects).</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__request_TagsVO"></a><a name="request_TagsVO"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__request_TagsVO" frame="border" border="1" rules="all"><caption><b>Table 12 </b>TagsVO</caption><thead align="left"><tr id="AddAclRule__row188841432132814"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.11.2.5.1.1"><p id="AddAclRule__p10990332102815">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.11.2.5.1.2"><p id="AddAclRule__p29901932162817">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.11.2.5.1.3"><p id="AddAclRule__p1599033252813">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.11.2.5.1.4"><p id="AddAclRule__p1499019325289">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row14885132102815"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.1 "><p id="AddAclRule__p1799063215283">tag_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.2 "><p id="AddAclRule__p159901832122818">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.3 "><p id="AddAclRule__p1099053213286">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.11.2.5.1.4 "><p id="AddAclRule__p18990132182819">Rule ID.</p>
</td>
</tr>
<tr id="AddAclRule__row9885103212289"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.1 "><p id="AddAclRule__p1299013262813">tag_key</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.2 "><p id="AddAclRule__p6990123210284">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.3 "><p id="AddAclRule__p1990103272810">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.11.2.5.1.4 "><p id="AddAclRule__p699013328284">Rule tag key.</p>
</td>
</tr>
<tr id="AddAclRule__row148853327283"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.1 "><p id="AddAclRule__p1599013215282">tag_value</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.2 "><p id="AddAclRule__p16990183292814">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.11.2.5.1.3 "><p id="AddAclRule__p179901132172818">String</p>
</td>
<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.11.2.5.1.4 "><p id="AddAclRule__p19903328283">Rule tag value.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="AddAclRule__section2990133213285"><h4 class="sectiontitle">Response Parameters</h4><p id="AddAclRule__p5990203242810"><strong id="AddAclRule__b13990133242819">Status code: 200</strong></p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__response_AddRuleIdListResponse" frame="border" border="1" rules="all"><caption><b>Table 13 </b>Response body parameters</caption><thead align="left"><tr id="AddAclRule__row1088653292818"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.3.2.4.1.1"><p id="AddAclRule__p9990132152812">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.3.2.4.1.2"><p id="AddAclRule__p19901325288">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.3.2.4.1.3"><p id="AddAclRule__p5990163216289">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row10886632122812"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="AddAclRule__p699083282815">data</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="AddAclRule__p0990103218288"><a href="#AddAclRule__response_RuleIdList">RuleIdList</a> object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="AddAclRule__p139902032132810">Data of the return value for creating a rule.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__response_RuleIdList"></a><a name="response_RuleIdList"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__response_RuleIdList" frame="border" border="1" rules="all"><caption><b>Table 14 </b>RuleIdList</caption><thead align="left"><tr id="AddAclRule__row11887153217283"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.4.2.4.1.1"><p id="AddAclRule__p3991932182819">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.4.2.4.1.2"><p id="AddAclRule__p1899119325286">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.4.2.4.1.3"><p id="AddAclRule__p159911832172816">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row12887163252810"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.4.2.4.1.1 "><p id="AddAclRule__p179911432122814">rules</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.4.2.4.1.2 "><p id="AddAclRule__p11991103292811">Array of <a href="#AddAclRule__response_RuleId">RuleId</a> objects</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.4.2.4.1.3 "><p id="AddAclRule__p899173220281">Rule ID list.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="AddAclRule__response_RuleId"></a><a name="response_RuleId"></a><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__response_RuleId" frame="border" border="1" rules="all"><caption><b>Table 15 </b>RuleId</caption><thead align="left"><tr id="AddAclRule__row178886322281"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.5.2.4.1.1"><p id="AddAclRule__p12991232122814">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.5.2.4.1.2"><p id="AddAclRule__p19991432152814">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.5.2.4.1.3"><p id="AddAclRule__p399163213285">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row208887327282"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.1 "><p id="AddAclRule__p199913329285">id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.2 "><p id="AddAclRule__p139918324287">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.5.2.4.1.3 "><p id="AddAclRule__p1799133282811">Rule ID.</p>
</td>
</tr>
<tr id="AddAclRule__row158883326285"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.1 "><p id="AddAclRule__p2991183215281">name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.2 "><p id="AddAclRule__p099123219284">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.5.2.4.1.3 "><p id="AddAclRule__p7991193272819">Rule name.</p>
</td>
</tr>
</tbody>
</table>
</div>
<p id="AddAclRule__p6991153210286"><strong id="AddAclRule__b9991183220289">Status code: 400</strong></p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__response_ErrorRsp" frame="border" border="1" rules="all"><caption><b>Table 16 </b>Response body parameters</caption><thead align="left"><tr id="AddAclRule__row3890153212811"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.7.2.4.1.1"><p id="AddAclRule__p39915323287">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.7.2.4.1.2"><p id="AddAclRule__p139911832152818">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.7.2.4.1.3"><p id="AddAclRule__p399163272819">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row1089063292816"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.7.2.4.1.1 "><p id="AddAclRule__p399173262811">error_code</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.7.2.4.1.2 "><p id="AddAclRule__p18991153252813">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.7.2.4.1.3 "><p id="AddAclRule__p0991133216281">Error code.</p>
</td>
</tr>
<tr id="AddAclRule__row38901132172814"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.7.2.4.1.1 "><p id="AddAclRule__p20991143292812">error_msg</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.7.2.4.1.2 "><p id="AddAclRule__p1199143215285">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.7.2.4.1.3 "><p id="AddAclRule__p599163214284">Error description.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="AddAclRule__section8991532102815"><h4 class="sectiontitle">Example Requests</h4><p id="AddAclRule__p1199263282815">The following example shows how to add an IPv4 inbound rule. The rule name is <strong id="AddAclRule__b13992133219281">Test rule</strong>, the source is the IP address 1.1.1.1, the destination is the IP address 2.2.2.2, the service type is service, the protocol type is TCP, the source port is 0, and the destination port is 0. Persistent connections are not supported. The action is to allow. The status is enabled.</p>
<pre class="screen" id="AddAclRule__screen19992932162810">https://{Endpoint}/v1/9d80d070b6d44942af73c9c3d38e0429/acl-rule
{
"object_id" : "ae42418e-f077-41a0-9d3b-5b2f5ad9102b",
"rules" : [ {
"name" : "Test rule.",
"status" : 1,
"action_type" : 0,
"description" : "",
"source" : {
"type" : 0,
"address" : "1.1.1.1"
},
"destination" : {
"type" : 0,
"address" : "2.2.2.2"
},
"service" : {
"type" : 0,
"protocol" : 6,
"source_port" : "0",
"dest_port" : "0"
},
"address_type" : 0,
"tag" : {
"tag_key" : "",
"tag_value" : ""
},
"long_connect_enable" : 0,
"direction" : 0,
"sequence" : {
"top" : 1,
"dest_rule_id" : null
}
} ],
"type" : 0
}</pre>
</div>
<div class="section" id="AddAclRule__section9992123210282"><h4 class="sectiontitle">Example Responses</h4><p id="AddAclRule__p13992532112812"><strong id="AddAclRule__b9992103252820">Status code: 200</strong></p>
<p id="AddAclRule__p139921932172815">Response to the request for creating an ACL rule.</p>
<pre class="screen" id="AddAclRule__screen1699263272817">{
"data" : {
"rules" : [ {
"id" : "0475c516-0e41-4caf-990b-0c504eebd73f",
"name" : "testName"
} ]
}
}</pre>
<p id="AddAclRule__p99931632162816"><strong id="AddAclRule__b7993143252816">Status code: 400</strong></p>
<p id="AddAclRule__p1999316324280">Bad Request</p>
<pre class="screen" id="AddAclRule__screen10993163272812">{
"error_code" : "CFW.00900016",
"error_msg" : "Import is in progress. Please wait until it is complete."
}</pre>
</div>
<div class="section" id="AddAclRule__section999814322282"><h4 class="sectiontitle">Status Codes</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="AddAclRule__status_code" frame="border" border="1" rules="all"><thead align="left"><tr id="AddAclRule__row9915183211284"><th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.7.2.1.3.1.1"><p id="AddAclRule__p1799814321289">Status Code</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="85%" id="mcps1.3.7.2.1.3.1.2"><p id="AddAclRule__p199815328281">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="AddAclRule__row139151332122813"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="AddAclRule__p499816328287">200</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="AddAclRule__p10998183219285">Response to the request for creating an ACL rule.</p>
</td>
</tr>
<tr id="AddAclRule__row13915173210284"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="AddAclRule__p4998113218286">400</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="AddAclRule__p159981032112812">Bad Request</p>
</td>
</tr>
<tr id="AddAclRule__row2915432192815"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="AddAclRule__p89981132192818">401</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="AddAclRule__p599873292816">Unauthorized</p>
</td>
</tr>
<tr id="AddAclRule__row15915143292818"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="AddAclRule__p159981532122814">403</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="AddAclRule__p1099819322280">Forbidden</p>
</td>
</tr>
<tr id="AddAclRule__row1391533212281"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="AddAclRule__p799933262815">404</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="AddAclRule__p799912322284">Not Found</p>
</td>
</tr>
<tr id="AddAclRule__row591563211285"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="AddAclRule__p1599911320282">500</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="AddAclRule__p209992327286">Internal Server Error</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="AddAclRule__section1999914327282"><h4 class="sectiontitle">Error Codes</h4><p id="AddAclRule__p299973213288">See <a href="ErrorCode.html">Error Codes</a>.</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="topic_300000002.html">ACL Rule Management</a></div>
</div>
</div>
View Git Blame Copy Permalink