CaaS / CVPC API Developer Center

Firewall

Directions

replaceNetworkAcl is used for firewall service configuration.

Request Parameter

Parameter Directions Note
networkAclId Firewall Instance ID
Type : String
Default Value : No
Whether it is plural : No
policyString List of Firewall Configuration Setup
Type : String
Default Value : No
Whether it is plural : Yes
Please see the directions of policyString in Request Parameter Example in createNetworkAcl

businessTag

Service category
Type : String
Default Value : No
Whether it is plural : No
CaaS cb168f20-c515-4e41-84cd-830dedfe7f49;
CVPC a2931aa4-8751-4f09-8df3-bcc0d18f8b75;

Response Parameter

Parameter Directions Note
requestId       

(Not a necessary parameter)

Request ID
Type : JSON value : string
Whether it is plural : No
It is automatically produced by the system
statusMap Firewall Instance ID - Status List
Type : JSON value : object
Whether it is plural : Yes
object format is {string,string}
Example:
{ "BF550100010003": "setting" }

CaaS Request Example

https://hws.hicloud.hinet.net/cloud_hws/api/hws/?action=replaceNetworkAcl
&networkAclId=BF550100010003
&policyString=1;;1;;all;;deny;;TCP;;53-53
&chtAuthType=hwspass
&version=${version}
&expires=${expires}
&accessKey=${accessKey}
&signature=${signature}
&businessTag=cb168f20-c515-4e41-84cd-830dedfe7f49

		

CaaS Response Example

{
	"requestId":"xxxEXAMPLE",
	"statusMap": {
		"BF550100010003": "setting"
	}
}
		

CVPC Request Example

		
https://hws.hicloud.hinet.net/cloud_hws/api/hws/?action=replaceNetworkAcl
&networkAclId=BF550100010003
&policyString=0;;1;;subnet$0.0.0.0;;nat$VT55020001IOSL;;accept;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;0::1;;1;;subnet$192.168.55.0/24;;portforward$VT55020001IOSJ;;accept;;IP/6;;;;LOG$1;;0::2;;1;;fqdn$xxxxx;;slb$VL55020001IOSR;;accept;;ICMP;;;;LOG$1;;0::3;;0;;subnet$192.168.55.0/24;;iprange$192.168.55.0-192.168.55.100;;accept;;UDP/3306-3306,TCP/27017-27017;;;;LOG$1,IP_POOL$210.61.223.76-210.61.223.76;;1::4;;1;;subnet$192.168.55.0/24;;subnet$192.168.55.0/24;;deny;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;2::5;;1;;subnet$192.168.55.0/24;;subnet$192.168.55.0/24;;accept;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;3::7;;1;;subnet$192.168.55.0/24;;subnet$192.168.55.0/24;;accept;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;4
&chtAuthType=hwspass
&version=${version}
&expires=${expires}
&accessKey=${accessKey}
&signature=${signature}
&businessTag=a2931aa4-8751-4f09-8df3-bcc0d18f8b75
		

CVPC Response Example

		{"requestId":"2c957f615865ec0c0158660fb1ef0009","statusMap":{"{0;;1;;subnet$0.0.0.0;;nat$VT55020001IOSL;;accept;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;0::1;;1;;subnet$192.168.55.0/24;;portforward$VT55020001IOSJ;;accept;;IP/6;;;;LOG$1;;0::2;;1;;fqdn$xxxxx;;slb$VL55020001IOSR;;accept;;ICMP;;;;LOG$1;;0::3;;0;;subnet$192.168.55.0/24;;iprange$192.168.55.0-192.168.55.100;;accept;;UDP/3306-3306,TCP/27017-27017;;;;LOG$1,IP_POOL$210.61.223.76-210.61.223.76;;1::4;;1;;subnet$192.168.55.0/24;;subnet$192.168.55.0/24;;deny;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;2::5;;1;;subnet$192.168.55.0/24;;subnet$192.168.55.0/24;;accept;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;3::7;;1;;subnet$192.168.55.0/24;;subnet$192.168.55.0/24;;accept;;TCP/3306-3306,TCP/27017-27017;;;;LOG$1;;4::}":"setting"}}
		

Related Links

describeNetworkAcls

Error Message

OrderProcessFail