List Instance rulesets
GET /v1/{crn}/rulesets
List all rulesets at the instance level.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get an instance ruleset
GET /v1/{crn}/rulesets/{ruleset_id}
View a specific instance ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update an instance ruleset
PUT /v1/{crn}/rulesets/{ruleset_id}
Update a specific instance ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rules.update
Request
Request Body
ruleset_update
description
string
Description of the ruleset
kind
string
name
string
Human readable name of the ruleset.
phase
string
The phase of the ruleset.
rules
array
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete an instance ruleset
DELETE /v1/{crn}/rulesets/{ruleset_id}
Delete a specific instance ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
204 - Success
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List version of an instance ruleset
GET /v1/{crn}/rulesets/{ruleset_id}/versions
List all versions of a specific instance ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-versions.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a specific version of an instance ruleset
GET /v1/{crn}/rulesets/{ruleset_id}/versions/{ruleset_version}
View a specific version of a specific instance ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-versions.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
ruleset_version
Required *
string
The version of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a specific version of an instance ruleset
DELETE /v1/{crn}/rulesets/{ruleset_id}/versions/{ruleset_version}
Delete a specific version of a specific instance ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-versions.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
ruleset_version
Required *
string
The version of the ruleset
Query Parameters
Response
204 - Success
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get an instance entrypoint ruleset
GET /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint
Get the instance ruleset for the given phase's entrypoint.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-phases-entrypoint.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_phase
Required *
The phase of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update an instance entrypoint ruleset
PUT /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint
Updates the instance ruleset for the given phase's entry point.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-phases-entrypoint.update
Request
Request Body
ruleset_update
description
string
Description of the ruleset
kind
string
name
string
Human readable name of the ruleset.
phase
string
The phase of the ruleset.
rules
array
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_phase
Required *
The phase of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List an instance entry point ruleset's versions
GET /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint/versions
Lists the instance ruleset versions for the given phase's entry point.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_phase
Required *
The phase of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get an instance entry point ruleset version
GET /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}
Fetches a specific version of an instance entry point ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-phases-entrypoint-versions.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_phase
Required *
The phase of the ruleset
ruleset_version
Required *
string
The version of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create an instance ruleset rule
POST /v1/{crn}/rulesets/{ruleset_id}/rules
Create an instance ruleset rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-rules.create
Request
Request Body
rule_create
action
Required *
string
What happens when there is a match for the rule expression
action_parameters
action_parameters
id
string
Unique ID of the ruleset
overrides
object
version
string
The version of the ruleset. Use "latest" to get the latest version.
ruleset
string
Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.
rulesets
array
List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.
response
object
description
string
enabled
boolean
expression
Required *
string
The expression defining which traffic will match the rule.
id
string
logging
logging
enabled
Required *
boolean
ref
string
The reference of the rule (the rule ID by default).
position
position
before
string
The rule ID to place this rule before
after
string
The rule ID to place this rule after
index
integer
The index to place this rule at
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
rule_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update an instance ruleset rule
PATCH /v1/{crn}/rulesets/{ruleset_id}/rules/{rule_id}
Update an instance ruleset rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-rules.update
Request
Request Body
rule_update
action
string
What happens when there is a match for the rule expression
action_parameters
action_parameters
id
string
Unique ID of the ruleset
overrides
object
version
string
The version of the ruleset. Use "latest" to get the latest version.
ruleset
string
Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.
rulesets
array
List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.
response
object
description
string
enabled
boolean
expression
string
The expression defining which traffic will match the rule.
id
string
logging
logging
enabled
Required *
boolean
ref
string
The reference of the rule (the rule ID by default).
position
position
before
string
The rule ID to place this rule before
after
string
The rule ID to place this rule after
index
integer
The index to place this rule at
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
rule_id
Required *
string
ID of a specific rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
rule_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete an instance ruleset rule
DELETE /v1/{crn}/rulesets/{ruleset_id}/rules/{rule_id}
Delete an instance ruleset rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-rules.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
rule_id
Required *
string
ID of a specific rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
rule_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List an instance ruleset verion's rules by tag
GET /v1/{crn}/rulesets/{ruleset_id}/versions/{ruleset_version}/by_tag/{rule_tag}
Lists rules by tag for a specific version of an instance ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rulesets-versions-by-tag.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
ruleset_id
Required *
string
ID of a specific ruleset
ruleset_version
Required *
string
The version of the ruleset
rule_tag
Required *
string
A category of the rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List zone rulesets
GET /v1/{crn}/zones/{zone_identifier}/rulesets
List all rulesets at the zone level.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a zone ruleset
GET /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}
View a specific zone ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a zone ruleset
PUT /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}
Update a specific zone ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets.update
Request
Request Body
ruleset_update
description
string
Description of the ruleset
kind
string
name
string
Human readable name of the ruleset.
phase
string
The phase of the ruleset.
rules
array
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a zone ruleset
DELETE /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}
Delete a specific zone ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
204 - Success
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List version of a zone ruleset
GET /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/versions
List all versions of a specific zone ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-versions.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a specific version of a zone ruleset
GET /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/versions/{ruleset_version}
View a specific version of a specific zone ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-versions.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
ruleset_version
Required *
string
The version of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a specific version of a zone ruleset
DELETE /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/versions/{ruleset_version}
Delete a specific version of a specific zone ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-versions.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
ruleset_version
Required *
string
The version of the ruleset
Query Parameters
Response
204 - Success
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a zone entrypoint ruleset
GET /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint
Get the zone ruleset for the given phase's entrypoint.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-phases-entrypoint.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_phase
Required *
The phase of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a zone entrypoint ruleset
PUT /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint
Updates the instance ruleset for the given phase's entry point.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-phases-entrypoint.update
Request
Request Body
ruleset_update
description
string
Description of the ruleset
kind
string
name
string
Human readable name of the ruleset.
phase
string
The phase of the ruleset.
rules
array
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_phase
Required *
The phase of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List a zone entry point ruleset's versions
GET /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint/versions
Lists the zone ruleset versions for the given phase's entry point.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-phases-entrypoint-versions.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_phase
Required *
The phase of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a zone entry point ruleset version
GET /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}
Fetches a specific version of a zone entry point ruleset.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-phases-entrypoint-versions.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_phase
Required *
The phase of the ruleset
ruleset_version
Required *
string
The version of the ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ruleset_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create a zone ruleset rule
POST /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/rules
Create a zone ruleset rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-rules.create
Request
Request Body
rule_create
action
Required *
string
What happens when there is a match for the rule expression
action_parameters
action_parameters
id
string
Unique ID of the ruleset
overrides
object
version
string
The version of the ruleset. Use "latest" to get the latest version.
ruleset
string
Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.
rulesets
array
List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.
response
object
description
string
enabled
boolean
expression
Required *
string
The expression defining which traffic will match the rule.
id
string
logging
logging
enabled
Required *
boolean
ref
string
The reference of the rule (the rule ID by default).
position
position
before
string
The rule ID to place this rule before
after
string
The rule ID to place this rule after
index
integer
The index to place this rule at
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
rule_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a zone ruleset rule
PATCH /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/rules/{rule_id}
Update a zone ruleset rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-rules.update
Request
Request Body
rule_update
action
string
What happens when there is a match for the rule expression
action_parameters
action_parameters
id
string
Unique ID of the ruleset
overrides
object
version
string
The version of the ruleset. Use "latest" to get the latest version.
ruleset
string
Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.
rulesets
array
List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.
response
object
description
string
enabled
boolean
expression
string
The expression defining which traffic will match the rule.
id
string
logging
logging
enabled
Required *
boolean
ref
string
The reference of the rule (the rule ID by default).
position
position
before
string
The rule ID to place this rule before
after
string
The rule ID to place this rule after
index
integer
The index to place this rule at
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
rule_id
Required *
string
ID of a specific rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
rule_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a zone ruleset rule
DELETE /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/rules/{rule_id}
Delete an instance ruleset rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone-rulesets-rules.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
ruleset_id
Required *
string
ID of a specific ruleset
rule_id
Required *
string
ID of a specific rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
rule_details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Routing feature smart routing setting
GET /v1/{crn}/zones/{zone_identifier}/routing/smart_routing
Get Routing feature smart routing setting for a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.smart-routing.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update Routing feature smart route setting
PATCH /v1/{crn}/zones/{zone_identifier}/routing/smart_routing
Update Routing feature smart route setting for a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.smart-routing.update
Request
Request Body
smart_routing_setting
Update Routing feature smart routing setting.
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get routing tiered cache setting
GET /v1/{crn}/zones/{zone_identifier}/routing/tiered_caching
Get routing tiered cache setting for a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.tiered-caching.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update routing tiered cache setting
PATCH /v1/{crn}/zones/{zone_identifier}/routing/tiered_caching
Update routing tiered cache setting for a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.tiered-caching.update
Request
Request Body
routing_tiered_caching_setting
Update routing tiered cache setting.
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Routing Latency Analytics
GET /v1/{crn}/zones/{zone_identifier}/routing/latency
Get Routing Latency Analytics for a given zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
bins
integer
The number of bins
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Routing Latency Colos Analytics
GET /v1/{crn}/zones/{zone_identifier}/routing/latency/colos
Get Routing Latency Colos Analytics for a given zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get zone DNSSEC
GET /v1/{crn}/zones/{zone_identifier}/dnssec
Get DNSSEC setting for a given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.dnssec.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update zone DNSSEC
PATCH /v1/{crn}/zones/{zone_identifier}/dnssec
Update DNSSEC setting for given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.dnssec.update
Request
Request Body
dnssec_input
Update zone DNSSEC setting.
status
Required *
string
Status
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get zone CNAME flattening
GET /v1/{crn}/zones/{zone_identifier}/settings/cname_flattening
Get CNAME flattening setting for a given zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
cname_flattening_response
CNAME Flattening response
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update zone CNAME flattening
PATCH /v1/{crn}/zones/{zone_identifier}/settings/cname_flattening
Update CNAME flattening setting for given zone.
Request
Request Body
cname_flattening_input
Update zone CNAME flattening setting.
value
Required *
string
Valid values are "flatten_at_root", "flatten_all". "flatten_at_root" - Flatten CNAME at root domain. This is the default value. "flatten_all" - Flatten all CNAME records under your domain.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
cname_flattening_response
CNAME Flattening response
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get opportunistic encryption setting
GET /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_encryption
Get opportunistic encryption setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update opportunistic encryption setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_encryption
Update opportunistic encryption setting for a zone.
Request
Request Body
opportunistic_encryption_setting
Update opportunistic encryption setting.
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get opportunistic onion setting
GET /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_onion
Get opportunistic onion setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update opportunistic onion setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_onion
Update opportunistic onion setting for a zone.
Request
Request Body
opportunistic_onion_setting
Update opportunistic encryption setting.
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get challenge TTL setting
GET /v1/{crn}/zones/{zone_identifier}/settings/challenge_ttl
Get challenge TTL setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update challenge TTL setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/challenge_ttl
Update challenge TTL setting for a zone.
Request
Request Body
challenge_ttl_setting
Update challenge TTL setting
value
Required *
integer
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get automatic https rewrites setting
GET /v1/{crn}/zones/{zone_identifier}/settings/automatic_https_rewrites
Get automatic https rewrites setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update automatic https rewrites setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/automatic_https_rewrites
Update automatic https rewrites setting for a zone.
Request
Request Body
automatic_https_rewrites_setting
Update automatic https rewrites setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get true client IP setting
GET /v1/{crn}/zones/{zone_identifier}/settings/true_client_ip_header
Get true client IP setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update true client IP setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/true_client_ip_header
Update true client IP setting for a zone.
Request
Request Body
zone_property_on_off_setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get always use https setting
GET /v1/{crn}/zones/{zone_identifier}/settings/always_use_https
Get always use https setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update always use https setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/always_use_https
Update always use https setting for a zone.
Request
Request Body
zone_property_on_off_setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get image size optimization setting
GET /v1/{crn}/zones/{zone_identifier}/settings/image_size_optimization
Get image size optimization setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update image size optimization setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/image_size_optimization
Update image size optimization setting for a zone.
Request
Request Body
image_size_optimization_setting
Update image size optimization setting
value
Required *
string
Valid values are "lossy", "off", "lossless". "lossy" - The file size of JPEG images is reduced using lossy compression, which might reduce visual quality. "off" - Disable Image Size Optimization. "lossless" - Reduce the size of image files without impacting visual quality.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get script load optimization setting
GET /v1/{crn}/zones/{zone_identifier}/settings/script_load_optimization
Get script load optimization setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update script load optimization setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/script_load_optimization
Update script load optimization setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update script load optimization setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get image load optimization setting
GET /v1/{crn}/zones/{zone_identifier}/settings/image_load_optimization
Get image load optimization setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update image load optimization setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/image_load_optimization
Update image load optimization setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update image load optimization setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get minify setting
GET /v1/{crn}/zones/{zone_identifier}/settings/minify
Get minify setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update minify setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/minify
Update minify setting for a zone.
Request
Request Body
minify_setting
Update minify setting
value
Required *
object
Value
css
Required *
string
Automatically minify all CSS for your website.
html
Required *
string
Automatically minify all HTML for your website.
js
Required *
string
Automatically minify all JavaScript for your website.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get minimum TLS version setting
GET /v1/{crn}/zones/{zone_identifier}/settings/min_tls_version
Get minimum TLS version setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update minimum TLS version setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/min_tls_version
Update minimum TLS version setting for a zone.
Request
Request Body
min_tls_version_setting
Update minimum TLS version setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get IP geolocation setting
GET /v1/{crn}/zones/{zone_identifier}/settings/ip_geolocation
Get IP geolocation setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update IP geolocation setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/ip_geolocation
Update IP geolocation setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update IP geolocation setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get server side exclude setting
GET /v1/{crn}/zones/{zone_identifier}/settings/server_side_exclude
Get server side exclude setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update server side exclude setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/server_side_exclude
Update server side exclude setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update server side exclude setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get HTTP strict transport security setting
GET /v1/{crn}/zones/{zone_identifier}/settings/security_header
Get HTTP strict transport security setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update HTTP strict transport security setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/security_header
Update HTTP strict transport security setting for a zone.
Request
Request Body
security_header_setting
Update HTTP strict transport security setting
value
Required *
object
Value
strict_transport_security
Required *
object
Strict transport security
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get mobile redirect setting
GET /v1/{crn}/zones/{zone_identifier}/settings/mobile_redirect
Get mobile redirect setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update mobile redirect setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/mobile_redirect
Update mobile redirect setting for a zone.
Request
Request Body
mobile_redirec_setting
Update mobile redirect setting
value
Required *
object
Value
status
Required *
string
Whether or not the mobile redirection is enabled
mobile_subdomain
Required *
string
Which subdomain prefix you wish to redirect visitors on mobile devices to
strip_uri
Required *
boolean
Whether to drop the current page path and redirect to the mobile subdomain URL root or to keep the path and redirect to the same page on the mobile subdomain
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get prefetch URLs from header setting
GET /v1/{crn}/zones/{zone_identifier}/settings/prefetch_preload
Get prefetch URLs from header setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update prefetch URLs from header setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/prefetch_preload
Update prefetch URLs from header setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update prefetch URLs from header setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get HTTP/2 setting
GET /v1/{crn}/zones/{zone_identifier}/settings/http2
Get HTTP/2 setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update HTTP/2 setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/http2
Update HTTP/2 setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update HTTP/2 setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get HTTP/3 setting
GET /v1/{crn}/zones/{zone_identifier}/settings/http3
Get HTTP/3 setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update HTTP/3 setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/http3
Update HTTP/3 setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update HTTP/3 setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get IPv6 compatibility setting
GET /v1/{crn}/zones/{zone_identifier}/settings/ipv6
Get IPv6 compatibility setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update IPv6 compatibility setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/ipv6
Update IPv6 compatibility setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update IPv6 compatibility setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get web sockets setting
GET /v1/{crn}/zones/{zone_identifier}/settings/websockets
Get web sockets setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update web sockets setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/websockets
Update web sockets setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update web sockets setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get pseudo IPv4 setting
GET /v1/{crn}/zones/{zone_identifier}/settings/pseudo_ipv4
Get pseudo IPv4 setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update pseudo IPv4 setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/pseudo_ipv4
Update pseudo IPv4 setting for a zone.
Request
Request Body
pseudo_ipv4_setting
Update pseudo IPv4 setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get response buffering setting
GET /v1/{crn}/zones/{zone_identifier}/settings/response_buffering
Get response buffering setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update response buffering setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/response_buffering
Update response buffering setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update response buffering setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get hotlink protection setting
GET /v1/{crn}/zones/{zone_identifier}/settings/hotlink_protection
Get hotlink protection setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update hotlink protection setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/hotlink_protection
Update hotlink protection setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update hotlink protection setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get maximum upload size setting
GET /v1/{crn}/zones/{zone_identifier}/settings/max_upload
Get maximum upload size setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update maximum upload size setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/max_upload
Update maximum upload size setting for a zone.
Request
Request Body
max_upload_setting
Update maximum upload size setting
value
Required *
integer
Valid values(in MB) for "max_upload" are 100, 125, 150, 175, 200, 225, 250, 275, 300, 325, 350, 375, 400, 425, 450, 475, 500. Values 225, 250, 275, 300, 325, 350, 375, 400, 425, 450, 475, 500 are only for Enterprise Plan.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get TLS Client Auth setting
GET /v1/{crn}/zones/{zone_identifier}/settings/tls_client_auth
Get TLS Client Auth setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update TLS Client Auth setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/tls_client_auth
Update TLS Client Auth setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update TLS Client Auth setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get brotli setting
GET /v1/{crn}/zones/{zone_identifier}/settings/brotli
Get brotli setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update brotli setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/brotli
Update brotli setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update brotli setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get proxy read timeout setting
GET /v1/{crn}/zones/{zone_identifier}/settings/proxy_read_timeout
Get proxy read timeout setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update proxy read timeout setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/proxy_read_timeout
Update proxy read timeout setting for a zone.
Request
Request Body
proxy_read_timeout_setting
Update proxy read timeout setting
value
Required *
number
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get browser check setting
GET /v1/{crn}/zones/{zone_identifier}/settings/browser_check
Get browser check setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update browser check setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/browser_check
Update browser check setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update browser check setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get enable error pages on setting
GET /v1/{crn}/zones/{zone_identifier}/settings/origin_error_page_pass_thru
Get enable error pages on setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update enable error pages on setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/origin_error_page_pass_thru
Update enable error pages on setting for a zone.
Request
Request Body
zone_property_on_off_setting
Update Enable error pages on setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get web application firewall setting
GET /v1/{crn}/zones/{zone_identifier}/settings/waf
Get web application firewall setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update web application firewall setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/waf
A Web Application Firewall (WAF) blocks requests that contain malicious content.
Request
Request Body
zone_property_on_off_setting
Update web application firewall setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get ciphers setting
GET /v1/{crn}/zones/{zone_identifier}/settings/ciphers
Get ciphers setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update ciphers setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/ciphers
Update ciphers setting for a zone.
Request
Request Body
ciphers_setting
Update ciphers setting
value
Required *
array
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get origin max http version setting
GET /v1/{crn}/zones/{zone_identifier}/settings/origin_max_http_version
Get origin max http version setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update origin max http version setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/origin_max_http_version
Update origin max http version setting for a zone.
Request
Request Body
origin_max_http_version
Update ciphers setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get origin post quantum encryption setting
GET /v1/{crn}/zones/{zone_identifier}/cache/origin_post_quantum_encryption
Get origin post quantum encryption setting for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name (CRN) of resource instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was the get successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update origin post quantum encryption setting
PUT /v1/{crn}/zones/{zone_identifier}/cache/origin_post_quantum_encryption
Update origin post quantum encryption setting for a zone.
Request
Request Body
origin_post_quantum_encryption
Update ciphers setting
value
Required *
string
Instructs CIS to use Post-Quantum (PQ) key agreement algorithms when connecting to your origin.
- `preferred`: Instructs CIS to opportunistically send a Post-Quantum keyshare in the first message to the origin for fastest connections when the origin supports and prefers PQ.
- `supported`: The PQ algorithms are advertised but used only when requested by the origin.
- `off`: The PQ algorithms are not advertised.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name (CRN) of resource instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
success
boolean
Was the get successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get replace insecure Javascript setting
GET /v1/{crn}/zones/{zone_identifier}/settings/replace_insecure_js
Get replace insecure Javascript for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name (CRN) of resource instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
result_info
object
Result information
success
boolean
Was the get successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update replace insecure Javascript setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/replace_insecure_js
Update replace insecure Javascript setting for a zone.
Request
Request Body
replace_insecure_js
Update ciphers setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name (CRN) of resource instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
result_info
object
Result information
success
boolean
Was the get successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Get email address obfuscation setting
GET /v1/{crn}/zones/{zone_identifier}/settings/email_obfuscation
Get email address obfuscation for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name (CRN) of resource instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
result_info
object
Result information
success
boolean
Was the get successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
Update email address obfuscation setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/email_obfuscation
Update email address obfuscation setting for a zone.
Request
Request Body
email_obfuscation
Update email address obfuscation setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name (CRN) of resource instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Container for response information
result_info
object
Result information
success
boolean
Was the get successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
500 - Internal server error
List all IP addresses used by the CIS proxy
GET /v1/ips
List of all IP addresses used by the CIS proxy.
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backend endpoint did not respond on time
List all load balancers
GET /v1/{crn}/zones/{zone_identifier}/load_balancers
List configured load balancers.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancers.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_result
Result
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create load balancer
POST /v1/{crn}/zones/{zone_identifier}/load_balancers
Create a load balancer for a given zone. The zone should be active before placing an order of a load balancer.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancers.create
Request
Request Body
load_balancer_req
Order a load balancer.
name
Required *
string
Name
fallback_pool
Required *
string
Fallback pool
default_pools
Required *
default_pools
Default pools
description
string
Desc
ttl
integer
TTL
region_pools
region_pools
Region pools
pop_pools
pop_pools
Pop pools
proxied
boolean
Proxied
enabled
boolean
Enabled/disabled
session_affinity
string
Session affinity
steering_policy
string
Steering policy
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_pack
Load balancer pack
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Edit load balancer
PUT /v1/{crn}/zones/{zone_identifier}/load_balancers/{load_balancer_identifier}
Edit porperties of an existing load balancer.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancers.update
Request
Request Body
load_balancer_req
Edit properties
name
Required *
string
Name
fallback_pool
Required *
string
Fallback pool
default_pools
Required *
default_pools
Default pools
description
string
Desc
ttl
integer
TTL
region_pools
region_pools
Region pools
pop_pools
pop_pools
Pop pools
proxied
boolean
Proxied
enabled
boolean
Enabled/disabled
session_affinity
string
Session affinity
steering_policy
string
Steering policy
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
load_balancer_identifier
Required *
string
Load balancer identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_pack
Load balancer pack
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete load balancer
DELETE /v1/{crn}/zones/{zone_identifier}/load_balancers/{load_balancer_identifier}
Delete a load balancer.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancers.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
load_balancer_identifier
Required *
string
Load balancer identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get load balancer
GET /v1/{crn}/zones/{zone_identifier}/load_balancers/{load_balancer_identifier}
For a given zone identifier and load balancer ID, get the load balancer settings.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
load_balancer_identifier
Required *
string
Load balancer identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_pack
Load balancer pack
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Export zone file
GET /v1/{crn}/zones/{zone_identifier}/dns_records_bulk
Export zone file
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.dns-records-bulk.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Import zone file
POST /v1/{crn}/zones/{zone_identifier}/dns_records_bulk
Import zone file
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.dns-records-bulk.create
Request
Request Body
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
DNS record
timing
object
Timing object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all firewall access rules
GET /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules
List all firewall access rules for a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.ip-firewall-rules.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
notes
string
Search access rules by note.(Not case sensitive)
mode
string
Search access rules by mode.
configuration.target
string
Search access rules by configuration target
configuration.value
string
Search access rules by configuration value which can be IP, IPrange, or country code
page
integer
Page number of paginated results.
per_page
integer
Maximum number of access rules per page.
order
string
Field by which to order list of access rules.
direction
string
Direction in which to order results [ascending/descending order].
match
string
Whether to match all (all) or atleast one search parameter (any).
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create firewall access rule
POST /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules
Create a new firewall access rule for a given zone under a service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.ip-firewall-rules.create
Request
Request Body
zone_access_rule_input
Access rule parameters.
mode
Required *
string
The action to apply to a matched request
notes
Required *
string
A personal note about the rule. Typically used as a reminder or explanation for the rule.
configuration
Required *
object
Configuration object specifying access rule
target
Required *
string
The request property to target
value
Required *
string
Value for the given target. For `ip`, the value is a valid IP address. For `ip_range`, the value specifies an IP range limited to /16 and /24. For `asn`, the value is an AS number. For `country`, the value is a country code for the country.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
zone_access_rule_object
Access rule object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete firewall access rule
DELETE /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules/{accessrule_identifier}
Delete an access rule, given its ID.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.ip-firewall-rules.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
accessrule_identifier
Required *
string
Identifier of the access rule to be deleted.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get firewall access rule
GET /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules/{accessrule_identifier}
Get the details of a firewall access rule for a given zone under a given service instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
accessrule_identifier
Required *
string
Identifier of firewall access rule for the given zone.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
zone_access_rule_object
Access rule object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update firewall access rule
PATCH /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules/{accessrule_identifier}
Update an existing firewall access rule for a given zone under a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.ip-firewall-rules.update
Request
Request Body
zone_access_rule_update_input
mode
Required *
string
The action to apply to a matched request
notes
Required *
string
A personal note about the rule. Typically used as a reminder or explanation for the rule.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
accessrule_identifier
Required *
string
Identifier of firewall access rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
zone_access_rule_object
Access rule object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all user-agent blocking rules
GET /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules
List all user agent blocking rules.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.ua-rules.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
page
integer
Page number of paginated results.
per_page
integer
Maximum number of user-agent rules per page.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create user-agent blocking rule
POST /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules
Create a new user-agent blocking rule for a given zone under a service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.ua-rules.create
Request
Request Body
useragent_rule_input
User-agent blocking rule parameters.
paused
boolean
Whether this user-agent rule is currently disabled.
description
string
Some useful information about this rule to help identify the purpose of it.
mode
Required *
string
The type of action to perform.
configuration
Required *
object
Target/Value pair to use for this rule. The value is the exact UserAgent to match
target
Required *
string
Properties
value
Required *
string
The exact UserAgent string to match with this rule.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
useragent_rule_object
User agent rule object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete user-agent blocking rule
DELETE /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules/{useragent_rule_identifier}
Delete a user-agent blocking rule for a particular zone, given its ID.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.ua-rules.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
useragent_rule_identifier
Required *
string
Identifier of the user-agent rule to be deleted.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get user-agent blocking rule
GET /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules/{useragent_rule_identifier}
For a given service instance, zone ID and user-agent rule ID, get the user-agent blocking rule details.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
useragent_rule_identifier
Required *
string
Identifier of user-agent blocking rule for the given zone.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
useragent_rule_object
User agent rule object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update user-agent blocking rule
PUT /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules/{useragent_rule_identifier}
Update an existing user-agent blocking rule for a given zone under a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.ua-rules.update
Request
Request Body
useragent_rule_input
paused
boolean
Whether this user-agent rule is currently disabled.
description
string
Some useful information about this rule to help identify the purpose of it.
mode
Required *
string
The type of action to perform.
configuration
Required *
object
Target/Value pair to use for this rule. The value is the exact UserAgent to match
target
Required *
string
Properties
value
Required *
string
The exact UserAgent string to match with this rule.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
useragent_rule_identifier
Required *
string
Identifier of user-agent rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
useragent_rule_object
User agent rule object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Firewall event analytics data
GET /v2/{crn}/zones/{zone_id}/analytics/firewall_events
Provides a full log of the mitigations performed by the CIS Firewall features including; Firewall Rules, Rate Limiting, Security Level, Access Rules (IP, IP Range, ASN, and Country), WAF (Web Application Firewall), User Agent Blocking, Zone Lockdown, and Advanced DDoS Protection.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.firewall-events-analytics.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
dataset
string
The dataset of analytics data.
filter
string
The 'datetime' is a filter base on time range. This filter can combine with operators ('gt', 'lt', 'geq', 'leq', 'neq', and 'in') to filter data by specified time range, e.g., `filter=datetime_geq:2020-06-28T00:00:00Z&filter=datetime_leq:2020-06-29T00:00:00Z`.
limit
integer
The number of events to return. (minimum is 1 and maximum is 10000)
orderBy
string
Output order of the events.
Response
200 - Success
data
firewall_event_analytics_data
Data container for response data
400 - Bad input parameter
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all load balancer events
GET /v1/{crn}/load_balancers/events
Get load balancer events for all origins.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancer-events.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
result
array
Result of the operation
result_info
result_info
Result information
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get WAF setting
GET /v1/{crn}/zones/{zone_id}/settings/waf
Get WAF of a specific zone. WAF is moving to the Managed Rules engine for enhanced performance and security. For information about migrating to Managed Rules, see Migration to managed rules. This API is not available post-migration.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Set WAF setting
PATCH /v1/{crn}/zones/{zone_id}/settings/waf
Set WAF (on | off) for a specific zone. WAF is moving to the Managed Rules engine for enhanced performance and security. For information about migrating to Managed Rules, see Migration to managed rules. This API is not available post-migration.
Request
Request Body
waf-body
The valid value is on | off.
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get security-level setting
GET /v1/{crn}/zones/{zone_identifier}/settings/security_level
For a given zone identifier, get security-level setting.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result object
result_info
result_info
Result information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Set security-level setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/security_level
For a given zone identifier, set security-level setting.
Request
Request Body
security_level_setting_req
Set security-level setting.
value
Required *
string
Security level
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result object
result_info
result_info
Result information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all rate limits
GET /v1/{crn}/zones/{zone_identifier}/rate_limits
The details of Rate Limit for a given zone under a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rate-limits.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
page
integer
Page number of paginated results.
per_page
integer
Maximum number of rate limits per page.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create rate limit
POST /v1/{crn}/zones/{zone_identifier}/rate_limits
Create a new rate limit for a given zone under a service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rate-limits.create
Request
Request Body
ratelimit_input
Rate limit parameters.
disabled
boolean
Whether this ratelimit is currently disabled.
description
string
A note that you can use to describe the reason for a rate limit.
bypass
array
Criteria that would allow the rate limit to be bypassed, for example to express that you shouldn't apply a rate limit to a given set of URLs
threshold
Required *
integer
The threshold that triggers the rate limit mitigations, combine with period. i.e. threshold per period
period
Required *
integer
The time in seconds to count matching traffic. If the count exceeds threshold within this period the action will be performed
action
Required *
object
Action
mode
Required *
string
The type of action to perform.
timeout
integer
The time in seconds as an integer to perform the mitigation action. Must be the same or greater than the period. This field is valid only when mode is "simulate" or "ban"
response
object
Custom content-type and body to return, this overrides the custom error for the zone. This field is not required. Omission will result in default HTML error page.This field is valid only when mode is "simulate" or "ban"
correlate
object
Enable NAT based rate limits
by
Required *
string
NAT rate limits by
match
Required *
object
Determines which traffic the rate limit counts towards the threshold. Needs to be one of "request" or "response" objects.
request
object
Request
response
object
Response
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ratelimit_object
Rate limit object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete rate limit
DELETE /v1/{crn}/zones/{zone_identifier}/rate_limits/{rate_limit_identifier}
Delete a rate limit, given its ID.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.rate-limits.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
rate_limit_identifier
Required *
string
Identifier of the rate limit to be deleted.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a rate limit
GET /v1/{crn}/zones/{zone_identifier}/rate_limits/{rate_limit_identifier}
Get the details of a rate limit for a given zone under a given service instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
rate_limit_identifier
Required *
string
Identifier of rate limit for the given zone.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ratelimit_object
Rate limit object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update rate limit
PUT /v1/{crn}/zones/{zone_identifier}/rate_limits/{rate_limit_identifier}
Update an existing rate limit for a given zone under a service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.rate-limits.update
Request
Request Body
ratelimit_input
disabled
boolean
Whether this ratelimit is currently disabled.
description
string
A note that you can use to describe the reason for a rate limit.
bypass
array
Criteria that would allow the rate limit to be bypassed, for example to express that you shouldn't apply a rate limit to a given set of URLs
threshold
Required *
integer
The threshold that triggers the rate limit mitigations, combine with period. i.e. threshold per period
period
Required *
integer
The time in seconds to count matching traffic. If the count exceeds threshold within this period the action will be performed
action
Required *
object
Action
mode
Required *
string
The type of action to perform.
timeout
integer
The time in seconds as an integer to perform the mitigation action. Must be the same or greater than the period. This field is valid only when mode is "simulate" or "ban"
response
object
Custom content-type and body to return, this overrides the custom error for the zone. This field is not required. Omission will result in default HTML error page.This field is valid only when mode is "simulate" or "ban"
correlate
object
Enable NAT based rate limits
by
Required *
string
NAT rate limits by
match
Required *
object
Determines which traffic the rate limit counts towards the threshold. Needs to be one of "request" or "response" objects.
request
object
Request
response
object
Response
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
rate_limit_identifier
Required *
string
Identifier of rate limit
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ratelimit_object
Rate limit object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get rate limit analytics
GET /v1/{crn}/zones/{zone_identifier}/rate_limit_analytics
Get rate limit analytics for a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.rate-limit-analytics.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
since
Required *
string
The beginning of the requested time frame.
until
Required *
string
The end of the requested time frame.
time_delta
Required *
integer
The time interval (seconds) of each analytic's record.
Response
200 - Success
since
string
The beginning time of analytics.
until
string
The end time of analytics.
time_delta
integer
The time interval of analytics' record.
golden_record
boolean
Whether the analytics' record is golden record.
labels
object
Labels.
timeseries
array
The analytics' records in the time frame.
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all pools
GET /v1/{crn}/load_balancers/pools
List all configured load balancer pools.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancer-pools.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_pool_result
Result
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create pool
POST /v1/{crn}/load_balancers/pools
Create a new load balancer pool
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancer-pools.create
Request
Request Body
load_balancer_pool_req
Order a load balancer pool.
name
Required *
string
Name
check_regions
Required *
array
Regions check
origins
Required *
array
Origins
description
string
Desc
minimum_origins
integer
The minimum number of origins that must be healthy for this pool to serve traffic
enabled
boolean
Enabled/disabled
monitor
string
Monitor
notification_email
string
Notification email
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_pool_pack
Load balancer pool pack
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get pool
GET /v1/{crn}/load_balancers/pools/{pool_identifier}
Get a single configured load balancer pool.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
pool_identifier
Required *
string
Pool identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_pool_pack
Load balancer pool pack
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete pool
DELETE /v1/{crn}/load_balancers/pools/{pool_identifier}
Delete a specific configured load balancer pool.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
pool_identifier
Required *
string
Pool identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Edit pool
PUT /v1/{crn}/load_balancers/pools/{pool_identifier}
Edit a specific configured load balancer pool.
Request
Request Body
load_balancer_pool_req
Edit a load balancer pool.
name
Required *
string
Name
check_regions
Required *
array
Regions check
origins
Required *
array
Origins
description
string
Desc
minimum_origins
integer
The minimum number of origins that must be healthy for this pool to serve traffic
enabled
boolean
Enabled/disabled
monitor
string
Monitor
notification_email
string
Notification email
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
pool_identifier
Required *
string
Pool identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
load_balancer_pool_pack
Load balancer pool pack
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all lockdown rules
GET /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns
List all lockdown rules for a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.domain-lockdown-rules.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
page
integer
Page number of paginated results.
per_page
integer
Maximum number of lockdown rules per page.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create lockdown rule
POST /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns
Create a new lockdown rule for a given zone under a service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.domain-lockdown-rules.create
Request
Request Body
lockdown_input
Lockdown parameters.
id
string
Lockdown rule identifier
paused
boolean
Whether this zone lockdown is currently paused
description
string
A note that you can use to describe the reason for a Lockdown rule.
urls
Required *
array
URLs to be included in this rule definition. Wildcards are permitted. The URL pattern entered here will be escaped before use. This limits the URL to just simple wildcard patterns.
configurations
Required *
array
List of IP addresses or CIDR ranges to use for this rule. This can include any number of `ip` or `ip_range` configurations that can access the provided URLs.
priority
integer
Firewall priority
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
lockdown_object
Lockdown object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete lockdown rule
DELETE /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns/{lockdown_rule_identifier}
Delete a lockdown rule for a particular zone, given its ID.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.domain-lockdown-rules.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
lockdown_rule_identifier
Required *
string
Identifier of the lockdown rule to be deleted.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get lockdown rule
GET /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns/{lockdown_rule_identifier}
For a given service instance, zone ID and lockdown rule ID, get the lockdown rule details.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
lockdown_rule_identifier
Required *
string
Identifier of lockdown rule for the given zone.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
lockdown_object
Lockdown object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update lockdown rule
PUT /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns/{lockdown_rule_identifier}
Update an existing lockdown rule for a given zone under a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.domain-lockdown-rules.update
Request
Request Body
lockdown_input
id
string
Lockdown rule identifier
paused
boolean
Whether this zone lockdown is currently paused
description
string
A note that you can use to describe the reason for a Lockdown rule.
urls
Required *
array
URLs to be included in this rule definition. Wildcards are permitted. The URL pattern entered here will be escaped before use. This limits the URL to just simple wildcard patterns.
configurations
Required *
array
List of IP addresses or CIDR ranges to use for this rule. This can include any number of `ip` or `ip_range` configurations that can access the provided URLs.
priority
integer
Firewall priority
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
lockdown_rule_identifier
Required *
string
Identifier of lockdown rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
lockdown_object
Lockdown object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all WAF rule packages
GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages
Get firewall packages for a zone
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.waf-packages.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
name
string
Name of the firewall package
page
integer
Page number of paginated results
per_page
integer
Number of packages per page
order
string
Field to order packages by
direction
string
Direction to order packages
match
string
Whether to match all search requirements or at least one (any)
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get WAF rule package
GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}
Get information about a single firewall package
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
package_id
Required *
string
Package ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Change WAF rule package package
PATCH /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}
Change the sensitivity and action for an anomaly detection type WAF rule package
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.waf-packages.update
Request
Request Body
Optional body parameters
sensitivity
Required *
string
The sensitivity of the firewall package.
action_mode
Required *
string
The default action that will be taken for rules under the firewall package.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
package_id
Required *
string
Package ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get page rule
GET /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}
Get a page rule details.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
rule_id
Required *
string
Rule ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
page_rule_result
Page rule result
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Change page rule
PATCH /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}
Change a page rule.
Request
Request Body
pageRules-patch-body
Change a page rule.
targets
targets
Targets
actions
actions
Actions
priority
integer
Priority
status
string
Status
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
rule_id
Required *
string
Rule ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
page_rule_result
Page rule result
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Update page rule
PUT /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}
Replace a page rule. The final rule will exactly match the data passed with this request.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.pagerules.update
Request
Request Body
pageRules-body
Replace a page rule. The final rule will exactly match the data passed with this request.
targets
Required *
targets
Targets
actions
Required *
actions
Actions
priority
integer
Priority
status
string
Status
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
rule_id
Required *
string
Rule ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
page_rule_result
Page rule result
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Delete page rule
DELETE /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}
Delete a page rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.pagerules.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
rule_id
Required *
string
Rule ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
List page rules
GET /v1/{crn}/zones/{zone_id}/pagerules
List page rules.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.pagerules.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
status
string
default value: disabled. valid values: active, disabled
order
string
default value: priority. valid values: status, priority
direction
string
default value: desc. valid values: asc, desc
match
string
default value: all. valid values: any, all
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Result
400 - Bad request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Create page rule
POST /v1/{crn}/zones/{zone_id}/pagerules
Create a page rule.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.pagerules.create
Request
Request Body
pageRules-body
Add page rule body data to curl
targets
Required *
targets
Targets
actions
Required *
actions
Actions
priority
integer
Priority
status
string
Status
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
page_rule_result
Page rule result
400 - Bad request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
List all load balancer monitors
GET /v1/{crn}/load_balancers/monitors
List configured load balancer monitors for a user.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancer-monitors.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
monitor_result
Result
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create load balancer monitor
POST /v1/{crn}/load_balancers/monitors
Create a load balancer monitor for a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.load-balancer-monitors.create
Request
Request Body
monitor_req
Create a monitor.
type
string
HTTP type
description
string
Login page monitor
method
string
Method
port
integer
Port number
path
string
Path
timeout
integer
Timeout count
retries
integer
Retry count
interval
integer
Interval
expected_codes
Required *
string
Expected codes
follow_redirects
boolean
Follow redirects
expected_body
string
Expected body
allow_insecure
boolean
Allow insecure
header
object
Header
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
monitor_pack
Monitor package
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Edit load balancer monitor
PUT /v1/{crn}/load_balancers/monitors/{monitor_identifier}
Edit porperties of an existing load balancer monitor.
Request
Request Body
monitor_req
Edit properties
type
string
HTTP type
description
string
Login page monitor
method
string
Method
port
integer
Port number
path
string
Path
timeout
integer
Timeout count
retries
integer
Retry count
interval
integer
Interval
expected_codes
Required *
string
Expected codes
follow_redirects
boolean
Follow redirects
expected_body
string
Expected body
allow_insecure
boolean
Allow insecure
header
object
Header
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
monitor_identifier
Required *
string
Monitor identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
monitor_pack
Monitor package
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete load balancer monitor
DELETE /v1/{crn}/load_balancers/monitors/{monitor_identifier}
Delete a load balancer monitor.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
monitor_identifier
Required *
string
Monitor identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get load balancer monitor
GET /v1/{crn}/load_balancers/monitors/{monitor_identifier}
For a given service instance and load balancer monitor ID, get the monitor details.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
monitor_identifier
Required *
string
Monitor identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
monitor_pack
Monitor package
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all load balancer regions.
GET /v1/{crn}/load_balancers/regions
List available load balancer regions for a user.
Request
Path Parameters
crn
Required *
string
Full CRN of the service instance.
Query Parameters
Response
200 - Success
result
load_balancer_regions_result
success
boolean
errors
array
messages
array
400 - Bad Request
401 - Unathorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List load balancer region by region id.
GET /v1/{crn}/load_balancers/regions/{region_id}
List available load balancer regions by id for a user.
Request
Path Parameters
crn
Required *
string
Full CRN of the service instance.
region_id
Required *
string
Region identifier.
Query Parameters
Response
200 - Success
result
load_balancer_regions_result
success
boolean
errors
array
messages
array
400 - Bad Request
401 - Unathorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all zones
GET /v1/{crn}/zones
List all zones for a service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zones.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
page
integer
Page number of paginated results.
per_page
integer
Maximum number of zones per page.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
zone_list
zone list
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create zone
POST /v1/{crn}/zones
Add a new zone for a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zones.create
Request
Request Body
zone_input
Create a zone.
name
Required *
string
Name
type
string
A zone implies that DNS is hosted with CIS authoritative nameservers. A partial zone is typically a CNAME setup.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
zone_details
zone details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete zone
DELETE /v1/{crn}/zones/{zone_identifier}
Delete a zone, given its ID.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zones.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get zone
GET /v1/{crn}/zones/{zone_identifier}
Get the details of a zone for a given service instance and given zone ID.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
zone_details
zone details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update zone
PATCH /v1/{crn}/zones/{zone_identifier}
Update the paused field of the zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.zones.update
Request
Request Body
zone_update_input
Update a zone's paused field.
paused
Required *
boolean
Paused
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
zone_details
zone details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Check zone
PUT /v1/{crn}/zones/{zone_identifier}/activation_check
Perform activation check on zone for status
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.zones-activation-check.update
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List instance level firewall access rules
GET /v1/{crn}/firewall/access_rules/rules
List all instance level firewall access rules.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
notes
string
Search access rules by note.(Not case sensitive)
mode
string
Search access rules by mode.
configuration.target
string
Search access rules by configuration target
configuration.value
string
Search access rules by configuration value which can be IP, IPrange, or country code
page
integer
Page number of paginated results.
per_page
integer
Maximum number of access rules per page.
order
string
Field by which to order list of access rules.
direction
string
Direction in which to order results [ascending/descending order].
match
string
Whether to match all (all) or atleast one search parameter (any).
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
object
Statistics of results
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create instance level firewall access rule
POST /v1/{crn}/firewall/access_rules/rules
Create a new instance level firewall access rule for a given service instance.
Request
Request Body
account_access_rule_input
Access rule parameters.
mode
Required *
string
The action to apply to a matched request
notes
Required *
string
A personal note about the rule. Typically used as a reminder or explanation for the rule.
configuration
Required *
object
Configuration object specifying access rule
target
Required *
string
The request property to target
value
Required *
string
Value for the given target. For `ip`, the value is a valid IP address. For `ip_range`, the value specifies an IP range limited to /16 and /24. For `asn`, the value is an AS number. For `country`, the value is a country code for the country.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
account_access_rule_object
Access rule objects
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete instance level access rule
DELETE /v1/{crn}/firewall/access_rules/rules/{accessrule_identifier}
Delete an instance level access rule, given its ID.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
accessrule_identifier
Required *
string
Identifier of the access rule to be deleted.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get instance level firewall access rule
GET /v1/{crn}/firewall/access_rules/rules/{accessrule_identifier}
Get the details of an instance level firewall access rule for a given service instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
accessrule_identifier
Required *
string
Identifier of firewall access rule for the given zone.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
account_access_rule_object
Access rule objects
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update instance level firewall access rule
PATCH /v1/{crn}/firewall/access_rules/rules/{accessrule_identifier}
Update an existing instance level firewall access rule for a given service instance.
Request
Request Body
account_access_rule_update_input
mode
Required *
string
The action to apply to a matched request
notes
Required *
string
A personal note about the rule. Typically used as a reminder or explanation for the rule.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
accessrule_identifier
Required *
string
Identifier of firewall access rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
account_access_rule_object
Access rule objects
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all WAF rules
GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}/rules
List all Web Application Firewall (WAF) rules.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.waf-rules.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
package_id
Required *
string
Package ID
Query Parameters
mode
string
The Rule Mode
priority
string
The order in which the individual rule is executed within the related group
match
string
Whether to match all search requirements or at least one. default value: all. valid values: any, all
order
string
Field to order rules by. valid values: priority, group_id, description.
group_id
string
WAF group identifier tag. max length: 32; Read-only
description
string
Public description of the rule
direction
string
Direction to order rules. valid values: asc, desc
page
integer
Page number of paginated results. default value: 1; min value:1
per_page
integer
Number of rules per page. default value: 50; min value:5; max value:100
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Array of Rules
result_info
result_info
Result information
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get WAF rule
GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{identifier}
Get individual information about a rule.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
package_id
Required *
string
Package ID
identifier
Required *
string
Rule ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Information about a Rule
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Update WAF rule
PATCH /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{identifier}
Update the action the rule will perform if triggered on the zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.waf-rules.update
Request
Request Body
waf-rule-body
The mode to use when the rule is triggered. Value is restricted based on the allowed_modes of the rule
cis
object
Cis package
mode
Required *
string
Mode to choose from.
owasp
object
Owasp package
mode
Required *
string
mode to choose from. 'owasp' limited modes - on and off
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
package_id
Required *
string
Package ID
identifier
Required *
string
Rule ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Information about a Rule
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Purge all
PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_all
All resources in CDN edge servers' cache should be removed. This can have dramatic affects on your origin server load after performing this action.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.purge-cache-all.update
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Purge object
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backend API endpoint did not respond on time
Purge URLs
PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_by_urls
Granularly remove one or more files from CDN edge servers' cache either by specifying URLs.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.purge-cache-by-urls.update
Request
Request Body
purge_urls_body
An array of URLs that should be removed from cache
files
Required *
array
Purge URL array
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Purge object
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Purge host names
PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_by_hosts
Granularly remove one or more files from CDN edge servers' cache either by specifying the hostnames.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.purge-cache-by-hosts.update
Request
Request Body
purge_hosts_body
Any assets at URLs with a host that matches one of the provided values will be purged from the CDN edge servers' cache.
hosts
Required *
array
Hosts name
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Purge object
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Purge individual files by prefixes
PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_by_prefixes
Granularly remove one or more files from CDN edge servers' cache by specifying the prefixes.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.purge-cache-by-prefixes.update
Request
Request Body
purge_prefixes_body
Any assets at URLs that match the prefix will be purged from the CDN edge servers' cache.
prefixes
Required *
array
Prefixes
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Purge object
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get cache level setting
GET /v1/{crn}/zones/{zone_id}/settings/cache_level
Get cache level setting of a specific zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Set cache level setting
PATCH /v1/{crn}/zones/{zone_id}/settings/cache_level
The `basic` setting will cache most static resources (i.e., css, images, and JavaScript). The `simplified` setting will ignore the query string when delivering a cached resource. The `aggressive` setting will cache all static resources, including ones with a query string.
Request
Request Body
cacheLevel-body
The `basic` setting will cache most static resources (i.e., css, images, and JavaScript). The `simplified` setting will ignore the query string when delivering a cached resource. The `aggressive` setting will cache all static resources, including ones with a query string.
value
Required *
string
Cache level
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get browser cache TTL setting
GET /v1/{crn}/zones/{zone_id}/settings/browser_cache_ttl
Browser Cache TTL (in seconds) specifies how long CDN edge servers cached resources will remain on your visitors' computers.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result object
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Change browser cache TTL setting
PATCH /v1/{crn}/zones/{zone_id}/settings/browser_cache_ttl
Browser Cache TTL (in seconds) specifies how long CDN edge servers cached resources will remain on your visitors' computers.
Request
Request Body
browserTTL-body
Default value is 14400. valid values are 0, 30, 60, 300, 1200, 1800, 3600, 7200, 10800, 14400, 18000, 28800, 43200, 57600, 72000, 86400, 172800, 259200, 345600, 432000, 691200, 1382400, 2073600, 2678400, 5356800, 16070400, 31536000. notes! The minimum TTL available depends on the plan level of the zone. Enterprise is 30, Business is 1800, Pro is 1800, Free is 1800, 0 is special value meaning to respect origin header.
value
Required *
integer
TTL value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result object
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get Serve Stale Content setting
GET /v1/{crn}/zones/{zone_id}/settings/always_online
When enabled, Serve Stale Content will serve pages from CDN edge servers' cache if your server is offline.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result object
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Change Serve Stale Content setting
PATCH /v1/{crn}/zones/{zone_id}/settings/always_online
When enabled, Serve Stale Content will serve pages from CDN edge servers' cache if your server is offline.
Request
Request Body
serveStaleContent-body
Default value is `on`, valid values are `on` and `off`.
value
Required *
string
On/off value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result object
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get development mode setting
GET /v1/{crn}/zones/{zone_id}/settings/development_mode
Get development mode setting.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result object
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Change development mode setting
PATCH /v1/{crn}/zones/{zone_id}/settings/development_mode
Change development mode setting.
Request
Request Body
developmentMode-body
Default value is `off`, valid values are `on` and `off`.
value
Required *
string
On/off value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result object
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get Enable Query String Sort setting
GET /v1/{crn}/zones/{zone_id}/settings/sort_query_string_for_cache
Get Enable Query String Sort setting.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result of sort query string
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
Change Enable Query String Sort setting
PATCH /v1/{crn}/zones/{zone_id}/settings/sort_query_string_for_cache
Change Enable Query String Sort setting.
Request
Request Body
enableQueryStringSort-body
Default value is `off`, valid values are `on` and `off`.
value
Required *
string
On/off property value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result of sort query string
400 - Bad request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal server error
504 - Gateway Timeout! Backendendpoint did not respond on time
List all DNS records
GET /v1/{crn}/zones/{zone_identifier}/dns_records
List all DNS records for a given zone of a service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.dns-records.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
type
string
Type of DNS records to display.
name
string
Value of name field to filter by.
content
string
Value of content field to filter by.
page
integer
Page number of paginated results.
per_page
integer
Maximum number of DNS records per page.
order
string
Field by which to order list of DNS records.
direction
string
Direction in which to order results [ascending/descending order].
match
string
Whether to match all (all) or atleast one search parameter (any).
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
dnsrecord_list
DNS record list
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create DNS record
POST /v1/{crn}/zones/{zone_identifier}/dns_records
Add a new DNS record for a given zone for a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.dns-records.create
Request
Request Body
dnsrecord_input
DNS record parameters.
name
Required *
string
Required for all record types except SRV.
type
Required *
string
DNS record type
ttl
integer
DNS record TTL value
content
Required *
string
DNS record content
priority
integer
For MX records only
proxied
boolean
proxied
data
object
For LOC, SRV, CAA, DS records only
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
dnsrecord_details
DNS record details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete DNS record
DELETE /v1/{crn}/zones/{zone_identifier}/dns_records/{dnsrecord_identifier}
Delete a DNS record, given its ID.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.dns-records.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
dnsrecord_identifier
Required *
string
Identifier of DNS record
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get DNS record
GET /v1/{crn}/zones/{zone_identifier}/dns_records/{dnsrecord_identifier}
Get the details of a DNS record for a given zone under a given service instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
dnsrecord_identifier
Required *
string
Identifier of DNS record
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
dnsrecord_details
DNS record details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update DNS record
PUT /v1/{crn}/zones/{zone_identifier}/dns_records/{dnsrecord_identifier}
Update an existing DNS record for a given zone under a given service instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.dns-records.update
Request
Request Body
dnsrecord_update_input
name
Required *
string
Required for all record types except SRV.
type
Required *
string
DNS record type
ttl
integer
DNS record TTL value
content
Required *
string
Content of the DNS record
priority
integer
For MX records only
proxied
boolean
Proxied
data
object
For LOC, SRV, CAA, DS records only
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
dnsrecord_identifier
Required *
string
Identifier of DNS record
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
dnsrecord_details
DNS record details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Batch DNS records
POST /v1/{crn}/zones/{zone_identifier}/dns_records/batch
Send a Batch of DNS Record API calls to be executed together. The operations you specify within the /batch request body are always executed in the following order: deletes, patches, puts, posts
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.create
Auditing
Calling this method generates the following auditing event.
internet-svcs.dns-records.create
Request
Request Body
batch_dns_records_request
deletes
array
patches
array
posts
array
puts
array
Path Parameters
crn
Required *
string
Full CRN of the service instance
zone_identifier
Required *
string
Zone identifier (zone id)
Query Parameters
Response
200 - Success
success
boolean
success response
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all WAF rule groups
GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{pkg_id}/groups
List all WAF rule groups contained within a package.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.waf-groups.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
pkg_id
Required *
string
Package ID
Query Parameters
name
string
Name of the firewall package
mode
string
Whether or not the rules contained within this group are configurable/usable
rules_count
string
How many rules are contained within this group
page
integer
Page number of paginated results
per_page
integer
Number of packages per page
order
string
Field to order packages by
direction
string
Direction to order packages
match
string
Whether to match all search requirements or at least one (any)
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Get WAF rule group
GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{pkg_id}/groups/{group_id}
Get a single WAF rule group.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
pkg_id
Required *
string
Package ID
group_id
Required *
string
Group ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
waf-rule-properties
WAF rule properties
result_info
result_info
Result information
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
Update WAF rule group
PATCH /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{pkg_id}/groups/{group_id}
Update the state of a WAF rule group.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.waf-groups.update
Request
Request Body
waf-groups-request
mode
string
Whether or not the rules contained within this group are configurable/usable
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
pkg_id
Required *
string
Package ID
group_id
Required *
string
Group ID
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
waf-rule-properties
WAF rule properties
result_info
result_info
Result information
400 - Bad Request
403 - Forbidden! User has no privilege to use IBM Cloud Internet Services
404 - Resource not found
500 - Internal Server Error
504 - Gateway Timeout! Backendendpoint did not respond on time
List all custom pages for a given instance
GET /v1/{crn}/custom_pages
List all custom pages for a given instance
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_pages
Custom pages array
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a custom page for a given instance
GET /v1/{crn}/custom_pages/{page_identifier}
Get a specific custom page for a given instance
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
page_identifier
Required *
string
Custom page identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_page_object
Custom page object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a custom page for a given instance
PUT /v1/{crn}/custom_pages/{page_identifier}
Update a specific custom page for a given instance
Request
Request Body
custom_page_request
url
Required *
string
A URL that is associated with the Custom Page
state
Required *
string
The Custom Page state
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
page_identifier
Required *
string
Custom page identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_page_object
Custom page object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all custom pages for a given zone
GET /v1/{crn}/zones/{zone_identifier}/custom_pages
List all custom pages for a given zone
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.custom-pages.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_pages
Custom pages array
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a custom page for a given zone
GET /v1/{crn}/zones/{zone_identifier}/custom_pages/{page_identifier}
Get a specific custom page for a given zone
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
page_identifier
Required *
string
Custom page identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_page_object
Custom page object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a custom page for a given zone
PUT /v1/{crn}/zones/{zone_identifier}/custom_pages/{page_identifier}
Update a specific custom page for a given zone
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.custom-pages.update
Request
Request Body
custom_page_request
url
Required *
string
A URL that is associated with the Custom Page
state
Required *
string
The Custom Page state
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
page_identifier
Required *
string
Custom page identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_page_object
Custom page object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Logs of the mitigations performed by Firewall features
GET /v1/{crn}/zones/{zone_id}/security/events
Provides a full log of the mitigations performed by the CIS Firewall features including; Firewall Rules, Rate Limiting, Security Level, Access Rules (IP, IP Range, ASN, and Country), WAF (Web Application Firewall), User Agent Blocking, Zone Lockdown, and Advanced DDoS Protection. (DEPRECATED: use Firewall Event Analytics API instead)
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.security-events.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
ip_class
string
IP class is a map of client IP to visitor classification.
method
string
The HTTP method of the request.
scheme
string
The scheme of the uri
ip
string
The IPv4 or IPv6 address from which the request originated
host
string
The hostname the request attempted to access
proto
string
The protocol of the request
uri
string
The URI requested from the hostname
ua
string
The client user agent that initiated the request
colo
string
The 3-letter CF PoP code
ray_id
string
Ray ID of the request
kind
string
Kind of events. Now it is only firewall.
action
string
What type of action was taken
cursor
string
Cursor position and direction for requesting next set of records when amount of results was limited by the limit parameter. A valid value for the cursor can be obtained from the cursors object in the result_info structure.
country
string
The 2-digit country code in which the request originated
since
string
Start date and time of requesting data period in the ISO8601 format. Can't go back more than a year.
source
string
Source of the event
limit
integer
The number of events to return
rule_id
string
The ID of the rule that triggered the event, should be considered in the context of source.
until
string
End date and time of requesting data period in the ISO8601 format
Response
200 - Success
result
array
Container for response information
result_info
result_info
Result information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad input parameter
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get all edge functions scripts
GET /v1/{crn}/workers/scripts
Get all edge functions scripts for a given instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.edge-functions-scripts.read
Request
Response
200 - Success
result
edge_functions_actions_resp
An array with items in the list response
success
boolean
Success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Upload or replace an edge functions action
PUT /v1/{crn}/workers/scripts/{script_name}
Upload or replace an exitsing edge functions action for a given instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.edge-functions-scripts.update
Request
Request Body
Upload or replace an edge functions action.
Response
200 - Success
result
edge_functions_action_resp
Edge function script
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Download a edge functions action
GET /v1/{crn}/workers/scripts/{script_name}
Fetch raw script content for your worker. Note this is the original script content, not JSON encoded.
Request
Response
200 - Success
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a edge functions action
DELETE /v1/{crn}/workers/scripts/{script_name}
Delete an edge functions action for a given instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.edge-functions-scripts.delete
Request
Response
200 - Success
result
edge_functions_action_id
Edge function action id
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create an edge functions trigger
POST /v1/{crn}/zones/{zone_identifier}/workers/routes
Create an edge functions trigger on a given zone
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.edge-functions-routes.create
Request
Request Body
edge_functions_trigger_req
Create an edge functions trigger request.
pattern
Required *
string
A string pattern
script
string
Name of the script to apply when the route is matched. The route is skipped when this is blank/missing.
Response
200 - Success
result
edge_functions_trigger_id
Edge function trigger id
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all edge functions triggers
GET /v1/{crn}/zones/{zone_identifier}/workers/routes
List all edge functions triggers on a given zone
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.edge-functions-routes.read
Request
Response
200 - Success
result
edge_functions_triggers_resp
An array with items in the list response
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get an edge functions trigger
GET /v1/{crn}/zones/{zone_identifier}/workers/routes/{route_id}
Get an edge functions trigger on a given zone.
Request
Response
200 - Success
result
edge_functions_trigger_resp
Edge function trigger ID
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update an edge functions trigger
PUT /v1/{crn}/zones/{zone_identifier}/workers/routes/{route_id}
Update an edge functions trigger on a given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.edge-functions-routes.update
Request
Request Body
edge_functions_trigger_req
Update an edge functions trigger request.
pattern
Required *
string
A string pattern
script
string
Name of the script to apply when the route is matched. The route is skipped when this is blank/missing.
Response
200 - Success
result
edge_functions_trigger_resp
Edge function trigger ID
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete an edge functions trigger
DELETE /v1/{crn}/zones/{zone_identifier}/workers/routes/{route_id}
Delete an edge functions trigger on a given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.performance.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.edge-functions-routes.delete
Request
Response
200 - Success
result
edge_functions_trigger_id
Edge function trigger id
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List range applications
GET /v1/{crn}/zones/{zone_identifier}/range/apps
Get a list of currently existing Range Applications inside a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.range-apps.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
page
integer
Page number of paginated results.
per_page
integer
Maximum number of Range applications per page.
order
string
Field by which to order the list of Range applications.
direction
string
Direction in which to order results [ascending/descending order].
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for Range application objects
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create Range Application
POST /v1/{crn}/zones/{zone_identifier}/range/apps
Create a Range Applications inside a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.range-apps.create
Request
Request Body
range_app_req
Create a range app
protocol
Required *
string
Defines the protocol (and optionally port) for this application. The currently supported protocols are `tcp`, `udp`, `ssh`, `rdp`, and `minecraft`.
dns
Required *
object
Name and type of the DNS record for this application
type
string
DNS record type
name
string
DNS record name
origin_direct
array
IP address and port of the origin for this Range application. If configuring a load balancer, use\ \ 'origin_dns' and 'origin_port'. This cannot be combined with 'origin_dns' and 'origin_port'.
origin_dns
object
DNS record pointing to the origin for this Range application. This is used for configuring a load\ \ balancer. When specifying an individual IP address, use 'origin_direct'. This requires 'origin_port' and\ \ cannot be combined with 'origin_direct'.
name
Required *
string
Name of the origin.
origin_port
integer
Port at the origin that listens to traffic from this Range application. Requires 'origin_dns' and\ \ cannot be combined with 'origin_direct'.
ip_firewall
boolean
Enables the IP Firewall for this application. Only available for TCP applications.
proxy_protocol
string
Allows for the true client IP to be passed to the service
edge_ips
object
Configures IP version for the hostname of this application. Default is {"type":"dynamic", "connectivity"\ :"all"}.
type
string
The type of edge IP configuration.
connectivity
string
Specifies the IP version (or all)
traffic_type
string
Configure how traffic is handled at the edge. If set to "direct" traffic is passed through to the service. In the case of "http" or "https" HTTP/s features at the edge are applied ot this traffic.
tls
string
Configure if and how TLS connections are terminated at the edge.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
range_application_object
Range application object
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get range application a zone
GET /v1/{crn}/zones/{zone_identifier}/range/apps/{app_identifier}
Get the application configuration of a specific application inside a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
app_identifier
Required *
string
Application identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
range_application_object
Range application object
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update range application
PUT /v1/{crn}/zones/{zone_identifier}/range/apps/{app_identifier}
Update a Range Application inside a zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.range-apps.update
Request
Request Body
range_app_req
Update a range app
protocol
Required *
string
Defines the protocol (and optionally port) for this application. The currently supported protocols are `tcp`, `udp`, `ssh`, `rdp`, and `minecraft`.
dns
Required *
object
Name and type of the DNS record for this application
type
string
DNS record type
name
string
DNS record name
origin_direct
array
IP address and port of the origin for this Range application. If configuring a load balancer, use\ \ 'origin_dns' and 'origin_port'. This cannot be combined with 'origin_dns' and 'origin_port'.
origin_dns
object
DNS record pointing to the origin for this Range application. This is used for configuring a load\ \ balancer. When specifying an individual IP address, use 'origin_direct'. This requires 'origin_port' and\ \ cannot be combined with 'origin_direct'.
name
Required *
string
Name of the origin.
origin_port
integer
Port at the origin that listens to traffic from this Range application. Requires 'origin_dns' and\ \ cannot be combined with 'origin_direct'.
ip_firewall
boolean
Enables the IP Firewall for this application. Only available for TCP applications.
proxy_protocol
string
Allows for the true client IP to be passed to the service
edge_ips
object
Configures IP version for the hostname of this application. Default is {"type":"dynamic", "connectivity"\ :"all"}.
type
string
The type of edge IP configuration.
connectivity
string
Specifies the IP version (or all)
traffic_type
string
Configure how traffic is handled at the edge. If set to "direct" traffic is passed through to the service. In the case of "http" or "https" HTTP/s features at the edge are applied ot this traffic.
tls
string
Configure if and how TLS connections are terminated at the edge.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
app_identifier
Required *
string
Application identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
range_application_object
Range application object
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete range application
DELETE /v1/{crn}/zones/{zone_identifier}/range/apps/{app_identifier}
Delete a specific application configuration.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.range-apps.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
app_identifier
Required *
string
Application identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
range_application_object
Range application object
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all certificates
GET /v1/{crn}/zones/{zone_identifier}/ssl/certificate_packs
CIS automatically adds an active DNS zone to a universal SSL certificate, shared among multiple customers. Customers can order dedicated certificates for the owning zones. This API lists all certificates for a zone, including shared and dedicated certificates.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.certificate-packs.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
certificate_packs
Certificate packs
result_info
result_info
Result information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Fetch Total TLS configuration
GET /v1/{crn}/zones/{zone_identifier}/acm/total_tls
For a given zone identifier, get the Total TLS configuration.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
result
total_tls
Total TLS
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update Total TLS configuration
POST /v1/{crn}/zones/{zone_identifier}/acm/total_tls
For a given zone identifier, update the Total TLS configuration.
Request
Request Body
total_tls_req
Change Total TLS configuration
enabled
Required *
boolean
Enabled/disabled
certificate_authority
Required *
string
Certificate authority value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
result
total_tls
Total TLS
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get SSL setting
GET /v1/{crn}/zones/{zone_identifier}/settings/ssl
For a given zone identifier, get SSL setting.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
result
ssl_setting
SSL setting
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Change SSL setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/ssl
For a given zone identifier, change SSL setting.
Request
Request Body
ssl_setting_req
Change SSL setting
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
result
ssl_setting
SSL setting
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all custom certificates
GET /v1/{crn}/zones/{zone_identifier}/custom_certificates
For a given zone identifier, list all custom certificates.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.custom-certificates.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
custom_certificate_packs
Custom certificate packs
result_info
result_info
Result information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Upload a custom certificate
POST /v1/{crn}/zones/{zone_identifier}/custom_certificates
For a given zone identifier, upload a custom certificates.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.custom-certificates.create
Request
Request Body
custom_cert_req
Upload a custom certificate.
certificate
Required *
string
Certificates
private_key
Required *
string
Private key
bundle_method
string
Methods shown in UI mapping to API: Compatible(ubiquitous), Modern(optimal), User Defined(force)
geo_restrictions
object
Geo restrictions
label
Required *
string
Properties
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
custom_cert_pack
Custom certificate pack
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get custom certificate
GET /v1/{crn}/zones/{zone_identifier}/custom_certificates/{custom_cert_id}
For a given zone identifier, get a custom certificates.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
custom_cert_id
Required *
string
Custom certificate ID
Query Parameters
Response
200 - Success
result
custom_cert_pack
Custom certificate pack
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update custom certificate
PATCH /v1/{crn}/zones/{zone_identifier}/custom_certificates/{custom_cert_id}
For a given zone identifier, update a custom certificates.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.custom-certificates.update
Request
Request Body
custom_cert_req
Update a custom certificate.
certificate
Required *
string
Certificates
private_key
Required *
string
Private key
bundle_method
string
Methods shown in UI mapping to API: Compatible(ubiquitous), Modern(optimal), User Defined(force)
geo_restrictions
object
Geo restrictions
label
Required *
string
Properties
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
custom_cert_id
Required *
string
Custom certificate ID
Query Parameters
Response
200 - Success
result
custom_cert_pack
Custom certificate pack
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete custom certificate
DELETE /v1/{crn}/zones/{zone_identifier}/custom_certificates/{custom_cert_id}
For a given zone identifier, delete a custom certificates.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.custom-certificates.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
custom_cert_id
Required *
string
Custom certificate ID
Query Parameters
Response
200 - Success
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Set certificate priority
PUT /v1/{crn}/zones/{zone_identifier}/custom_certificates/prioritize
For a given zone identifier, set priority of certificates.
Request
Request Body
cert_priority_req
Set priority of certificates.
certificates
Required *
array
Certificates array
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get details of universal certificate
GET /v1/{crn}/zones/{zone_identifier}/ssl/universal/settings
For a given zone identifier, get universal certificate.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.universal-ssl-setting.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Enable or Disable universal certificate
PATCH /v1/{crn}/zones/{zone_identifier}/ssl/universal/settings
Change universal certificate setting.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.universal-ssl-setting.update
Request
Request Body
universal_cert_toggle_req
Enable or disable universal certificate.
enabled
Required *
boolean
Enabled
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get TLS 1.2 only setting
GET /v1/{crn}/zones/{zone_identifier}/settings/tls_1_2_only
For a given zone identifier, get TLS 1.2 only setting.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Set TLS 1.2 setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/tls_1_2_only
For a given zone identifier, set TLS 1.2 setting
Request
Request Body
tls_1_2_setting_req
Set security-level setting.
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get TLS 1.3 setting
GET /v1/{crn}/zones/{zone_identifier}/settings/tls_1_3
For a given zone identifier, get TLS 1.3 setting.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Set TLS 1.3 setting
PATCH /v1/{crn}/zones/{zone_identifier}/settings/tls_1_3
For a given zone identifier, set TLS 1.3 setting.
Request
Request Body
tls_1_3_setting_req
Set security-level setting.
value
Required *
string
Value
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Order advanced certificate
POST /v2/{crn}/zones/{zone_identifier}/ssl/certificate_packs/order
Order an advanced certificate pack for a given zone. The zone should be active before ordering an advanced certificate pack.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.certificate-packs.create
Request
Request Body
advanced_cert_req
Order an advanced certificate pack.
type
Required *
string
Certificate type
hosts
Required *
hostnames
Host name
validation_method
Required *
string
Validation Method selected for the order.
validity_days
Required *
integer
Validity Days selected for the order.
certificate_authority
Required *
string
Certificate Authority selected for the order. Selecting Let's Encrypt reduces customization of other fields: validation_method must be 'txt', validity_days must be 90, `cloudflare_branding` must be omitted, and hosts must contain only 2 entries, one for the zone name and one for the subdomain wildcard of the zone name (for example, example.com, *.example.com).
cloudflare_branding
boolean
Indicates whether or not to add Cloudflare Branding for the order. This will add sni.cloudflaressl.com as the Common Name if set to `true`.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
object
Result of ordering advanced certificate pack
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Restart validation for an advanced certificate pack
PATCH /v2/{crn}/zones/{zone_identifier}/ssl/certificate_packs/{cert_identifier}
Restart validation for an advanced certificate pack. This is only a validation operation for a Certificate Pack in a validation_timed_out status.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.certificate-packs.update
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
cert_identifier
Required *
string
Certificate identifier
Query Parameters
Response
200 - Success
result
object
Result of ordering advanced certificate pack
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete advanced certificate
DELETE /v2/{crn}/zones/{zone_identifier}/ssl/certificate_packs/{cert_identifier}
Delete an advanced certificate pack.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.certificate-packs.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
cert_identifier
Required *
string
Certificate identifier
Query Parameters
Response
200 - Success
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get SSL Verification Info for a Zone
GET /v2/{crn}/zones/{zone_identifier}/ssl/verification
Get SSL Verification Info for a Zone
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
array
SSL verification result
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all origin certificates
GET /v1/{crn}/zones/{zone_identifier}/origin_certificates
List all existing CIS-issued Certificates for a given domain.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.origin-certificates.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
array
Container for response information
result_info
result_info
Result information
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create a CIS-signed certificate
POST /v1/{crn}/zones/{zone_identifier}/origin_certificates
Create a CIS-signed certificate.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.origin-certificates.create
Request
Request Body
origin_certificate_req
hostnames
Required *
array
Array of hostnames or wildcard names (for example, *.example.com) bound to the certificate
request_type
Required *
string
Signature type desired on certificate
requested_validity
integer
The number of days that the certificate should be valid.
csr
string
The Certificate Signing Request (CSR)
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
origin_certificate
Origin certificate
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Revoke a created origin certificate for a domain
DELETE /v1/{crn}/zones/{zone_identifier}/origin_certificates/{cert_identifier}
Revoke a created origin certificate.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.origin-certificates.delete
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
cert_identifier
Required *
string
Certificate identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get an existing origin certificate
GET /v1/{crn}/zones/{zone_identifier}/origin_certificates/{cert_identifier}
Get an existing origin certificate by its serial number.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.origin-certificates.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
cert_identifier
Required *
string
Certificate identifier
Query Parameters
Response
200 - Success
result
origin_certificate
Origin certificate
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List access certificates
GET /v1/{crn}/zones/{zone_id}/access/certificates
List access certificates
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create access certificate
POST /v1/{crn}/zones/{zone_id}/access/certificates
Create access certificate
Request
Request Body
access_cert_input
name
Required *
string
Access certificate name
certificate
Required *
string
Access certificate
associated_hostnames
associated_hostnames
The hostnames that are prompted for this certificate
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
cert_result
Access certificate details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get access certificate
GET /v1/{crn}/zones/{zone_id}/access/certificates/{cert_id}
Get access certificate
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
cert_result
Access certificate details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update access certificate
PUT /v1/{crn}/zones/{zone_id}/access/certificates/{cert_id}
Update access certificate
Request
Request Body
update_access_cert_input
name
Required *
string
Access certificate name
associated_hostnames
associated_hostnames
The hostnames that are prompted for this certificate
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
cert_result
Access certificate details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete access certificate
DELETE /v1/{crn}/zones/{zone_id}/access/certificates/{cert_id}
Delete access certificate
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List access applications
GET /v1/{crn}/zones/{zone_id}/access/apps
List access applications
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create access application
POST /v1/{crn}/zones/{zone_id}/access/apps
Create access application
Request
Request Body
access_app_input
name
Required *
string
Application name
domain
Required *
string
The domain and path that Access blocks
session_duration
string
The amount of time that the tokens issued for this application are valid.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Access application details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get access application
GET /v1/{crn}/zones/{zone_id}/access/apps/{app_id}
Get access application
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
app_result
Access application details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update access application
PUT /v1/{crn}/zones/{zone_id}/access/apps/{app_id}
Update access application
Request
Request Body
access_app_input
name
Required *
string
Application name
domain
Required *
string
The domain and path that Access blocks
session_duration
string
The amount of time that the tokens issued for this application are valid.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
app_result
Access application details
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete access application
DELETE /v1/{crn}/zones/{zone_id}/access/apps/{app_id}
Delete access application
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List access policies
GET /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies
List access policies
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create access policy
POST /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies
Create access policy
Request
Request Body
access_policy_input
name
Required *
string
Policy name
decision
Required *
string
Defines the action Access takes if the policy matches the user
include
Required *
array
The include policy works like an OR logical operator. The user must satisfy one of the rules in includes.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
policy_result
Access policies information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get access policy
GET /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}
Get access policy
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
policy_result
Access policies information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update access policy
PUT /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}
Update access policy
Request
Request Body
access_policy_input
name
Required *
string
Policy name
decision
Required *
string
Defines the action Access takes if the policy matches the user
include
Required *
array
The include policy works like an OR logical operator. The user must satisfy one of the rules in includes.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
policy_result
Access policies information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete access policy
DELETE /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}
Delete access policy
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get access certificates settings
GET /v1/{crn}/zones/{zone_id}/access/certificates/settings
Get access certificates settings
Request
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update access certificates settings
PUT /v1/{crn}/zones/{zone_id}/access/certificates/settings
Update access certificates settings
Request
Request Body
access_cert_settings_input
hostname
Required *
string
client_certificate_forwarding
Required *
boolean
Whether to forward the client certificate
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all filters for a zone
GET /v1/{crn}/zones/{zone_identifier}/filters
List all filters for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create filters for a zone
POST /v1/{crn}/zones/{zone_identifier}/filters
Create new filters for a zone under a service instance.
Request
Request Body
filters_input
JSON objects which are used to create filters.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update filters
PUT /v1/{crn}/zones/{zone_identifier}/filters
Update existing filters for a zone under a service instance.
Request
Request Body
filters_update_input
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete filters
DELETE /v1/{crn}/zones/{zone_identifier}/filters
Delete filters by filter IDs.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
id
Required *
string
IDs of filters which will be deleted.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a filter
DELETE /v1/{crn}/zones/{zone_identifier}/filters/{filter_identifier}
Delete a filter, given its ID.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
filter_identifier
Required *
string
Identifier of the filter to be deleted.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get filter details by ID
GET /v1/{crn}/zones/{zone_identifier}/filters/{filter_identifier}
Get the details of a filter for a zone under a service instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
filter_identifier
Required *
string
Identifier of filter for the zone.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
filter_object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a filter
PUT /v1/{crn}/zones/{zone_identifier}/filters/{filter_identifier}
Update an existing filter for a zone under a service instance.
Request
Request Body
filter_update_input
id
Required *
string
Identifier of the filter
expression
Required *
string
A filter expression.
description
string
To briefly describe the filter.
paused
boolean
Indicates if the filter is active.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
filter_identifier
Required *
string
Identifier of filter
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
filter_object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List all firewall rules for a zone
GET /v1/{crn}/zones/{zone_identifier}/firewall/rules
List all firewall rules for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
result_info
result_info
Result information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create firewall rules for a zone
POST /v1/{crn}/zones/{zone_identifier}/firewall/rules
Create new firewall rules for a zone under a service instance.
Request
Request Body
firewall_rules_input_with_filter_id
JSON objects which are used to create firewall rules.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update firewall rules
PUT /v1/{crn}/zones/{zone_identifier}/firewall/rules
Update existing firewall rules for a zone under a service instance.
Request
Request Body
firewall_rules_update_input
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete firewall rules
DELETE /v1/{crn}/zones/{zone_identifier}/firewall/rules
Delete firewall rules by filter IDs.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
id
Required *
string
IDs of firewall rules which will be deleted.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a firewall rule
DELETE /v1/{crn}/zones/{zone_identifier}/firewall/rules/{firewall_rule_identifier}
Delete a firewall rule, given its ID.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
firewall_rule_identifier
Required *
string
Identifier of the firewall rule to be deleted.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get firewall rule details by ID
GET /v1/{crn}/zones/{zone_identifier}/firewall/rules/{firewall_rule_identifier}
Get the details of a firewall rule for a zone under a service instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
firewall_rule_identifier
Required *
string
Identifier of firewall rule for the zone.
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
firewall_rule_object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a firewall rule
PUT /v1/{crn}/zones/{zone_identifier}/firewall/rules/{firewall_rule_identifier}
Update an existing firewall rule for a zone under a service instance.
Request
Request Body
firewall_rule_update_input
action
Required *
string
The firewall action to perform, "log" action is only available for enterprise plan instances.
paused
boolean
Indicates if the firewall rule is active.
description
string
To briefly describe the firewall rule, omitted from object if empty.
filter
object
An existing filter
id
Required *
string
Identifier of the filter
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
firewall_rule_identifier
Required *
string
Identifier of firewall rule
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
firewall_rule_object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List alert policies
GET /v1/{crn}/alerting/policies
List configured alert policies for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create an alert policy
POST /v1/{crn}/alerting/policies
Create a new alert policy for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Request
Request Body
create_alert_policy_input
Create alert policy body
name
Required *
string
Policy name
description
string
Policy description
enabled
Required *
boolean
Is the alert policy active
alert_type
Required *
string
Condition for the alert
mechanisms
Required *
object
Delivery mechanisms for the alert
array
webhooks
array
filters
object
Optional filters depending for the alert type
conditions
object
Conditions depending on the alert type. HTTP DDOS Attack Alerter does not have any conditions. The Load Balancing Pool Enablement Alerter takes conditions that describe for all pools whether the pool is being enabled, disabled, or both. This field is not required when creating a new alert.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get an alert policy
GET /v1/{crn}/alerting/policies/{policy_id}
Get an alert policy for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
policy_id
Required *
string
Alert policy identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update an alert policy
PUT /v1/{crn}/alerting/policies/{policy_id}
Update an existing alert policy for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Request
Request Body
update_alert_policy_input
Update alert policy body
name
Required *
string
Policy name
description
string
Policy description
enabled
Required *
boolean
Is the alert policy active
alert_type
Required *
string
Condition for the alert. Use 'dos_attack_l7' to set up an HTTP DDOS Attack Alerter, use 'g6_pool_toggle_alert' to set up Load Balancing Pool Enablement Alerter, use 'clickhouse_alert_fw_anomaly' to set up WAF Alerter and 'clickhouse_alert_fw_ent_anomaly' to set up Advanced Security Alerter
mechanisms
Required *
object
Delivery mechanisms for the alert, can include an email, a webhook, or both
array
webhooks
array
conditions
Required *
object
Conditions depending on the alert type. HTTP DDOS Attack Alerter does not have any conditions. The Load Balancing Pool Enablement Alerter takes conditions that describe for all pools whether the pool is being enabled, disabled, or both.
filters
object
Optional filters depending for the alert type. HTTP DDOS Attack Alerter does not require any filters. The Load Balancing Pool Enablement Alerter requires a list of IDs for the pools and their corresponding alert trigger (set whether alerts are recieved on disablement, enablement, or both). The basic WAF Alerter requires a list of zones to be monitored. The Advanced Security Alerter requires a list of zones to be monitored as well as a list of services to monitor.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
policy_id
Required *
string
Alert policy identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete an alert policy
DELETE /v1/{crn}/alerting/policies/{policy_id}
Delete an alert policy for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
policy_id
Required *
string
Alert policy identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Test an alert policy
POST /v1/{crn}/alerting/policies/{policy_id}/test
Test an existing alert policy for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Request
Request Body
test_alert_policy_input
Test alert policy body
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
policy_id
Required *
string
Alert policy identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
boolean
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List alert webhooks
GET /v1/{crn}/alerting/destinations/webhooks
List configured alert webhooks for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create an alert webhook
POST /v1/{crn}/alerting/destinations/webhooks
Create a new alert webhook for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Request
Request Body
alert_webhook_input
Create alert webhook body
name
Required *
string
Webhook Name
url
Required *
string
Webhook url
secret
string
The optional secret or API key needed to use the webhook
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get an alert webhook
GET /v1/{crn}/alerting/destinations/webhooks/{webhook_id}
Get an alert webhook for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
webhook_id
Required *
string
Alert webhook identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update an alert webhook
PUT /v1/{crn}/alerting/destinations/webhooks/{webhook_id}
Update an existing alert webhook for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Request
Request Body
alert_webhook_input
Update alert webhook body
name
Required *
string
Webhook Name
url
Required *
string
Webhook url
secret
string
The optional secret or API key needed to use the webhook
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
webhook_id
Required *
string
Alert webhook identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete an alert webhook
DELETE /v1/{crn}/alerting/destinations/webhooks/{webhook_id}
Delete an alert webhook for the CIS instance.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.update
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
webhook_id
Required *
string
Alert webhook identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List logpush jobs
GET /v2/{crn}/zones/{zone_id}/logpush/jobs
List configured logpush jobs for your domain.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
logpush_job_result
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create a logpush job
POST /v2/{crn}/zones/{zone_id}/logpush/jobs
Create a new logpush job for the domain.
Request
Request Body
Create logpush job body
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
logpush_job_pack
Logpush job pack
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a logpush job
GET /v2/{crn}/zones/{zone_id}/logpush/jobs/{job_id}
Get a logpush job for a given zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
job_id
Required *
integer
Logpush job identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
logpush_job_pack
Logpush job pack
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update a logpush job
PUT /v2/{crn}/zones/{zone_id}/logpush/jobs/{job_id}
Update an existing logpush job for a given zone.
Request
Request Body
Update logpush job
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
job_id
Required *
integer
Logpush job identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
logpush_job_pack
Logpush job pack
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a logpush job
DELETE /v2/{crn}/zones/{zone_id}/logpush/jobs/{job_id}
Delete a logpush job for a zone.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
job_id
Required *
integer
Logpush job identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a new ownership challenge sent to your destination
POST /v2/{crn}/zones/{zone_id}/logpush/ownership
Get a new ownership challenge.
Request
Request Body
logpush_ownership_cos_req
Get ownership body
cos
object
Information to identify the COS bucket where the data will be pushed.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
ownership_challenge_result
Ownership Challenge result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Validate ownership challenge of the destination
POST /v2/{crn}/zones/{zone_id}/logpush/ownership/validate
Validate ownership challenge of the destination
Request
Request Body
ownership_validate_cos_req
Get ownership body
cos
object
Information to identify the COS bucket where the data will be pushed.
ownership_challenge
string
Ownership challenge token to prove destination ownership.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
valid
boolean
Valid
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
The list of all fields available for a dataset
GET /v2/{crn}/zones/{zone_id}/logpush/datasets/{dataset}/fields
The list of all fields available for a dataset.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
dataset
Required *
string
The dataset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
Result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List logpush jobs for dataset
GET /v2/{crn}/zones/{zone_id}/logpush/datasets/{dataset}/jobs
List configured logpush jobs for a dataset.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
dataset
Required *
string
The dataset
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
logpush_job_pack
Logpush job pack
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get log retention
GET /v1/{crn}/zones/{zone_id}/logs/retention
Get log retention setting for Logpull/Logpush on your domain.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
The domain ID
Query Parameters
Response
200 - Success
result
object
success
boolean
Success response
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update log retention
POST /v1/{crn}/zones/{zone_id}/logs/retention
Update log retention flag for Logpull/Logpush.
Request
Request Body
log_retention_req
Create logpush job body
flag
Required *
boolean
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
The domain ID
Query Parameters
Response
200 - Success
result
object
success
boolean
Success response
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get logs by RayID
GET /v1/{crn}/zones/{zone_id}/logs/rayids/{ray_id}
Get log events for a specific RayID. RayIDs are unique identifiers for requests that can be used to trace requests through Cloudflare's network.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
The domain ID
ray_id
Required *
string
RayID identifier for the request
Query Parameters
fields
string
Comma-separated list of fields to include in the response. If not specified, all fields are returned.
timestamps
string
Format for timestamps. Options are 'unix', 'unixnano', or 'rfc3339'. Default is 'unix'.
Response
200 - Success
success
boolean
Success response
errors
errors
Errors
messages
messages
Messages
result
array
Array of log events matching the RayID
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Bot Analytics score source
GET /v1/{crn}/zones/{zone_identifier}/bot_analytics/score_source
Get Bot Analytics score source for a given zone. Use this to identify the most common detection engines used to score your traffic.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.bot_score.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
since
Required *
string
UTC datetime for start of query.
until
Required *
string
UTC datetime for end of query.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Bot Analytics timeseries
GET /v1/{crn}/zones/{zone_identifier}/bot_analytics/timeseries
Get Bot Analytics timeseries for a given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.bot_timeseries.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
since
Required *
string
UTC datetime for start of query.
until
Required *
string
UTC datetime for end of query.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Bot Analytics top attributes
GET /v1/{crn}/zones/{zone_identifier}/bot_analytics/top_ns
Get Bot Analytics top attributes for a given zone. Use this to view more detailed information on specific IP addresses and other characteristics.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.bot_topns.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
since
Required *
string
UTC datetime for start of query.
until
Required *
string
UTC datetime for end of query.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Bot management settings
GET /v1/{crn}/zones/{zone_identifier}/bot_management
Get Bot management settings for a given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.bot_management.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
result
bot_mgt_settings
Bot Management settings
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update Bot management settings
PUT /v1/{crn}/zones/{zone_identifier}/bot_management
Update Bot management settings for given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.security.update
Auditing
Calling this method generates the following auditing event.
internet-svcs.bot_management.update
Request
Request Body
bot_mgt_settings
Update Bot management setting.
session_score
boolean
Set to disable tracking the max bot score during a session using the Bot Management cookie.
enable_js
boolean
Use JavaScript detections to improve bot detection.
use_latest_model
boolean
Automatically update to the newest bot detection models as they are released.
ai_bots_protection
string
Block scrapers and crawlers known to be feeding AI training data.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
array
Array of errors encountered
messages
array
Array of messages returned
result
bot_mgt_settings
Bot Management settings
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Zone Hold
GET /v1/{crn}/zones/{zone_identifier}/hold
Get zone hold status for a given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone_hold.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Enforce a zone hold
POST /v1/{crn}/zones/{zone_identifier}/hold
Enforce a zone hold for given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone_hold.create
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Stop enforcement of a zone hold on the zone
DELETE /v1/{crn}/zones/{zone_identifier}/hold
Stop enforcement of a zone hold for a given zone.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.reliability.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.zone_hold.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get range analytics summary
GET /v1/{crn}/zones/{zone_identifier}/range/analytics/events/summary
Get summarized analytics data for Range applications.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
metrics
array
One or more metrics to compute.
dimensions
array
Used to break down the data by given attributes.
filters
string
Used to filter rows by one or more dimensions. Filters can be combined using OR and AND boolean logic. AND takes precedence over OR in all the expressions. The OR operator is defined using a comma (,) or OR keyword surrounded by whitespace. The AND operator is defined using a semicolon (;) or AND keyword surrounded by whitespace. Comparison options are:
sort
array
The sort order for the result set; sort fields must be included in metrics or dimensions.
since
string
The start of the time interval to query, which defaults to `until - 6 hours`.
until
string
The end of the time interval to query, which defaults to the current time.
Response
200 - Success
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get range analytics by time
GET /v1/{crn}/zones/{zone_identifier}/range/analytics/events/bytime
Retrieves a list of aggregate metrics grouped by time interval.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_identifier
Required *
string
Zone identifier
Query Parameters
metrics
array
One or more metrics to compute.
dimensions
array
Used to break down the data by given attributes.
filters
string
Used to filter rows by one or more dimensions. Filters can be combined using OR and AND boolean logic. AND takes precedence over OR in all the expressions. The OR operator is defined using a comma (,) or OR keyword surrounded by whitespace. The AND operator is defined using a semicolon (;) or AND keyword surrounded by whitespace. Comparison options are:
sort
array
The sort order for the result set; sort fields must be included in metrics or dimensions.
since
string
The start of the time interval to query, which defaults to `until - 6 hours`.
until
string
The end of the time interval to query, which defaults to the current time.
time_delta
string
Used to select time series resolution.
Response
200 - Success
success
boolean
Was the operation successful?
errors
errors
Errors
messages
messages
Messages
result
analytics_by_time_object
The analytics by time object.
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List instant logs jobs
GET /v1/{crn}/zones/{zone_id}/logpush/edge/jobs
List all currently active instant logs jobs.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.read
Auditing
Calling this method generates the following auditing event.
internet-svcs.instant-logs-jobs.read
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create an instant logs job
POST /v1/{crn}/zones/{zone_id}/logpush/edge/jobs
Create an instant logs job.
Authorization
To call this method, you must be assigned one or more IAM access roles that include the following action.
internet-svcs.zones.manage
Auditing
Calling this method generates the following auditing event.
internet-svcs.instant-logs-jobs.create
Request
Request Body
instant_logs_create
fields
Required *
string
Comma-separated list of fields.
filter
Required *
string
Filters to drill down into specific events.
sample
Required *
integer
The sample parameter is the sample rate of the records set by the client: "sample": 1 is 100% of records "sample": 10 is 10% and so on.
kind
Required *
string
Type of instant logs job
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
zone_id
Required *
string
Zone identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
Container for response information
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List Managed Lists
GET /v1/{crn}/rules/managed_lists
List available managed lists for your instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
managed_lists_result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List Custom Lists
GET /v1/{crn}/rules/lists
List the custom lists for your instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_lists_result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create Custom List
POST /v1/{crn}/rules/lists
Create a custom list for your instance.
Request
Request Body
create_custom_list_req
kind
Required *
string
The type of list. Each type supports specific list items based on plan type (IP addresses, ASNs, or hostnames).
name
Required *
string
An informative name for the list. Use this name in rule expressions.
description
string
An informative summary of the list.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_list_result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Custom List
GET /v1/{crn}/rules/lists/{list_id}
Get a custom list for your instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_list_result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update Custom List
PUT /v1/{crn}/rules/lists/{list_id}
Update the description of a custom list.
Request
Request Body
update_custom_list_req
description
string
An informative summary of the list.
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
custom_list_result
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete Custom List
DELETE /v1/{crn}/rules/lists/{list_id}
Delete a custom list for your instance.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get List Items
GET /v1/{crn}/rules/lists/{list_id}/items
Get the list items for a custom list.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
Query Parameters
cursor
string
The pagination cursor. An opaque string token indicating the position from which to continue when requesting the next/previous set of records. Cursor values are provided under result_info.cursors in the response.
per_page
integer
Amount of results to include in each paginated response. A non-negative 32 bit integer. Minimum 1, maximum 500.
search
string
A search query to filter returned items. Its meaning depends on the list type: IP addresses must start with the provided string, hostnames and bulk redirects must contain the string, and ASNs must match the string exactly.
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
array
result_info
list_items_result_info
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Create List Items
POST /v1/{crn}/rules/lists/{list_id}/items
Create list items for your custom list. This operation is asynchronous. To get current the operation status, use the get operation status API.
Request
Request Body
create_list_items_req
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete List Items
DELETE /v1/{crn}/rules/lists/{list_id}/items
Remove one or more list items from your custom list. This operation is asynchronous. To get current the operation status, use the get operation status API.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Update All List Items
PUT /v1/{crn}/rules/lists/{list_id}/items
Update all list items for your custom list. This removes existing items from the list. This operation is asynchronous. To get current the operation status, use the get operation status API.
Request
Request Body
create_list_items_req
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get List Item
GET /v1/{crn}/rules/lists/{list_id}/items/{item_id}
Get a specific list item.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
list_id
Required *
string
List identifier
item_id
Required *
string
List item identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
list_item
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get List Operation Status
GET /v1/{crn}/rules/lists/bulk_operations/{operation_id}
Get the operation status for a custom list operation.
Request
Path Parameters
crn
Required *
string
Full URL-encoded cloud resource name of the service instance
operation_id
Required *
string
List operation identifier
Query Parameters
Response
200 - Success
success
boolean
Was operation successful
errors
errors
Errors
messages
messages
Messages
result
object
400 - Bad Request
401 - Unauthorized
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Zone level Authenticated Origin Pull Settings.
GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/settings
Get whether zone-level authenticated origin pulls is enabled or not. It is false by default.
Request
Response
200 - Success
result
object
result
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Set Zone level Authenticated Origin Pull Settings.
PUT /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/settings
Enable or disable zone-level authenticated origin pulls. 'enabled' should be set true either before/after the certificate is uploaded to see the certificate in use.
Request
Request Body
zone_origin_pull_settings_req
enable or disable zone-level authenticated origin pulls.
enabled
Required *
boolean
enabled
Response
200 - Success
result
object
result
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List Zone level Authenticated Origin Pull Certificates.
GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth
List zone-level authenticated origin pulls certificates.
Request
Response
200 - Success
result
origin_pull_certificate_packs
list of origin pull certificate packs
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Upload Zone level Authenticated Origin Pull Certificate.
POST /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth
Upload your own certificate you want Cloudflare to use for edge-to-origin communication to override the shared certificate Please note that it is important to keep only one certificate active. Also, make sure to enable zone-level authenticated origin pulls by making a PUT call to settings endpoint to see the uploaded certificate in use.
Request
Request Body
origin_pull_cert_req
upload a custom certificate.
certificate
Required *
string
the zone's leaf certificate
private_key
Required *
string
the zone's private key
Response
200 - Success
result
origin_pull_certificate_pack
origin pull certificate pack
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a Zone level Authenticated Origin Pull Certificate.
GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/{cert_identifier}
Get a zone-level authenticated origin pulls certificate.
Request
Response
200 - Success
result
origin_pull_certificate_pack
origin pull certificate pack
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a Zone level Authenticated Origin Pull Certificate.
DELETE /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/{cert_identifier}
Delete a zone-level authenticated origin pulls certificate.
Request
Response
200 - Success
result
origin_pull_certificate_pack
origin pull certificate pack
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List Per-hostname Authenticated Origin Pull Settings.
GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames
List all per hostname authenticated origin pull settings.
Request
Response
200 - Success
result
hostnames_settings_resp
array of hostname settings response
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Set Hostname level Authenticated Origin Pull Settings.
PUT /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames
Associate a hostname to a certificate and enable, disable or invalidate the association. If disabled, client certificate will not be sent to the hostname even if activated at the zone level. 100 maximum associations on a single certificate are allowed
Request
Request Body
hostname_origin_pull_settings_req
associate a hostname to a certificate and enable, disable or invalidate the association.
config
Required *
array
An array with items in the settings request
Response
200 - Success
result
hostnames_settings_resp
array of hostname settings response
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get Hostname level Authenticated Origin Pull Settings.
GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/{hostname}
Get hostname-level authenticated origin pulls settings.
Request
Response
200 - Success
result
hostname_settings_resp
hostname level authenticated origin pull settings response
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
List Per-hostname Authenticated Origin Pull certificates.
GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates
List all per hostname authenticated origin pull certificates.
Request
Response
200 - Success
result
hostname_certificates_resp
array of hostname certificates response
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Upload Hostname level Authenticated Origin Pull Certificate.
POST /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates
Upload a certificate to be used for client authentication on a hostname. 10 hostname certificates per zone are allowed.
Request
Request Body
origin_pull_cert_req
upload a custom certificate.
certificate
Required *
string
the zone's leaf certificate
private_key
Required *
string
the zone's private key
Response
200 - Success
result
hostname_certificate_pack
certificate pack
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Get a Hostname level Authenticated Origin Pull Certificate.
GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates/{cert_identifier}
Get the certificate by ID to be used for client authentication on a hostname.
Request
Response
200 - Success
result
hostname_certificate_pack
certificate pack
success
boolean
success
errors
errors
Errors
messages
messages
Messages
400 - Bad Request
403 - Forbidden! User has no privilege
404 - Resource not found
500 - Internal server error
Delete a Hostname level Authenticated Origin Pull Certificate.
DELETE /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates/{cert_identifier}
Delete the certificate by ID to be used for client authentication on a hostname.
Request
Response
200 - Success
result
hostname_certificate_pack
certificate pack
success
boolean
success
errors
errors
Errors
messages
messages
Messages