Developer Documentation
ADC CLI Commands
Current Release 13.1 13.0 12.1

dos-policy

June 28, 2023
Contributed by: 
C

The following operations can be performed on “dos-policy”:

set add rm unset stat show

set dos policy

Modifies the attributes of a DoS protection policy. NOTE: This command is deprecated.

Synopsis

Arguments

name Name of the DoS protection policy to be modified.

qDepth Queue depth. The queue size (the number of outstanding service requests on the system) before DoS protection is activated on the service to which the DoS protection policy is bound. Minimum value: 21

cltDetectRate Client detect rate. Integer representing the percentage of traffic to which the HTTP DoS policy is to be applied after the queue depth condition is satisfied. Minimum value: 1 Maximum value: 100

Example

set dos policy dospol -qdepth 1000

add dos policy

Adds a DoS protection policy to the appliance. Note: To apply DoS protection to a service, bind the DoS policy to the service by using the bind service command. NOTE: This command is deprecated.HTTP DOS protection feature has been deprecated in favour of AppQoE

Synopsis

Arguments

name Name for the HTTP DoS protection policy. Must begin with a letter, number, or the underscore character (_). Other characters allowed, after the first character, are the hyphen (-), period (.) hash (#), space ( ), at (@), equals (=), and colon (:) characters.

qDepth Queue depth. The queue size (the number of outstanding service requests on the system) before DoS protection is activated on the service to which the DoS protection policy is bound. Minimum value: 21

cltDetectRate Client detect rate. Integer representing the percentage of traffic to which the HTTP DoS policy is to be applied after the queue depth condition is satisfied. Minimum value: 0 Maximum value: 100

Example

add dos policy dospol -qdepth 100 -cltDetectRate 90

rm dos policy

Removes a DoS protection policy from the appliance. NOTE: This command is deprecated.HTTP DOS protection feature has been deprecated in favour of AppQoE

Synopsis

Arguments

name Name of the DoS protection policy to be removed.

Example

rm dos policy dospol

unset dos policy

Use this command to remove dos policy settings.Refer to the set dos policy command for meanings of the arguments.NOTE: This command is deprecated.

Synopsis

stat dos policy

Displays statistics of the DoS protection policy. NOTE: This command is deprecated.HTTP DOS protection feature has been deprecated in favour of AppQoE

Synopsis

Arguments

name The name of the DoS protection policy whose statistics must be displayed. If a name is not provided, statistics of all the DoS protection policies are displayed.

detail Specifies detailed output (including more statistics). The output can be quite voluminous. Without this argument, the output will show only a summary.

fullValues Specifies that numbers and strings should be displayed in their full form. Without this option, long strings are shortened and large numbers are abbreviated

ntimes The number of times, in intervals of seven seconds, the statistics should be displayed. Default value: 1 Minimum value: 0

logFile The name of the log file to be used as input.

clearstats Clear the statsistics / counters

Possible values: basic, full

Output

count devno stateflag

Counters

Client detect rate (ClDtRate) Current ratio of JavaScript send rate to the server response rate (Client detect rate)

Physical service IP (SvcIP) IP address of the service to which this policy is bound.

Physical service port (SvcPort) Port address of the service to which this policy is bound.

Current server queue size (CurQSize) Current queue size of the server to which this policy is bound.

DOS transactions (DosTrans) Total number of DoS JavaScript transactions performed for this policy.

Client detect rate mismatch (JsRefusd) Number of times the DoS JavaScript was not sent because the set JavaScript rate was not met for this policy.

Valid clients (TotValCl) Total number of valid DoS cookies received for this policy.

DOS JavaScript bytes served (JsBytSnt) Total number of DoS JavaScript bytes sent for this policy.

Non GET, POST requests Number of non-GET and non-POST requests for which DOS JavaScript was sent.

DOS JavaScript send rate (JSRate) Current rate at which JavaScript is being sent in response to client requests.

Server response rate (RespRate) Current rate at which the server to which this policy is bound is responding.

show dos policy

Displays information about a DoS protection policy. NOTE: This command is deprecated.HTTP DOS protection feature has been deprecated in favour of AppQoE

Synopsis

Arguments

name Name of the DoS protection policy about which to display information. If a name is not provided, information about all DoS protection policies is shown.

Output

qDepth Queue depth. The queue size (the number of outstanding service requests on the system) before DoS protection is activated on the service to which the DoS protection policy is bound.

cltDetectRate Client detect rate. Integer representing the percentage of traffic to which the HTTP DoS policy is to be applied after the queue depth condition is satisfied.

devno count stateflag

Example

show dos policy 1 configured DoS policy: 1) Policy: dospol QDepth: 100 ClientDetectRate: 90 Done

dos-policy
June 28, 2023
Contributed by: 
C
June 28, 2023
Contributed by: 
C

In this article

Site feedback | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.