List Instance rulesets

GET /v1/{crn}/rulesets

List all rulesets at the instance level.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get an instance ruleset

GET /v1/{crn}/rulesets/{ruleset_id}

View a specific instance ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update an instance ruleset

PUT /v1/{crn}/rulesets/{ruleset_id}

Update a specific instance ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rules.update

Request

Request Body

ruleset_update

description

string

Description of the ruleset

kind

string

name

string

Human readable name of the ruleset.

phase

string

The phase of the ruleset.

rules

array

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete an instance ruleset

DELETE /v1/{crn}/rulesets/{ruleset_id}

Delete a specific instance ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

204 - Success

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List version of an instance ruleset

GET /v1/{crn}/rulesets/{ruleset_id}/versions

List all versions of a specific instance ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-versions.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a specific version of an instance ruleset

GET /v1/{crn}/rulesets/{ruleset_id}/versions/{ruleset_version}

View a specific version of a specific instance ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-versions.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

ruleset_version

Required *

string

The version of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a specific version of an instance ruleset

DELETE /v1/{crn}/rulesets/{ruleset_id}/versions/{ruleset_version}

Delete a specific version of a specific instance ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-versions.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

ruleset_version

Required *

string

The version of the ruleset

Query Parameters

Response

204 - Success

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get an instance entrypoint ruleset

GET /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint

Get the instance ruleset for the given phase's entrypoint.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-phases-entrypoint.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_phase

Required *

The phase of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update an instance entrypoint ruleset

PUT /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint

Updates the instance ruleset for the given phase's entry point.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-phases-entrypoint.update

Request

Request Body

ruleset_update

description

string

Description of the ruleset

kind

string

name

string

Human readable name of the ruleset.

phase

string

The phase of the ruleset.

rules

array

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_phase

Required *

The phase of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List an instance entry point ruleset's versions

GET /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint/versions

Lists the instance ruleset versions for the given phase's entry point.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_phase

Required *

The phase of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get an instance entry point ruleset version

GET /v1/{crn}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}

Fetches a specific version of an instance entry point ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-phases-entrypoint-versions.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_phase

Required *

The phase of the ruleset

ruleset_version

Required *

string

The version of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create an instance ruleset rule

POST /v1/{crn}/rulesets/{ruleset_id}/rules

Create an instance ruleset rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-rules.create

Request

Request Body

rule_create

action

Required *

string

What happens when there is a match for the rule expression

action_parameters

action_parameters

id

string

Unique ID of the ruleset

overrides

object

version

string

The version of the ruleset. Use "latest" to get the latest version.

ruleset

string

Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.

rulesets

array

List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.

response

object

description

string

enabled

boolean

expression

Required *

string

The expression defining which traffic will match the rule.

id

string

logging

logging

enabled

Required *

boolean

ref

string

The reference of the rule (the rule ID by default).

position

position

before

string

The rule ID to place this rule before

after

string

The rule ID to place this rule after

index

integer

The index to place this rule at

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

rule_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update an instance ruleset rule

PATCH /v1/{crn}/rulesets/{ruleset_id}/rules/{rule_id}

Update an instance ruleset rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-rules.update

Request

Request Body

rule_update

action

string

What happens when there is a match for the rule expression

action_parameters

action_parameters

id

string

Unique ID of the ruleset

overrides

object

version

string

The version of the ruleset. Use "latest" to get the latest version.

ruleset

string

Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.

rulesets

array

List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.

response

object

description

string

enabled

boolean

expression

string

The expression defining which traffic will match the rule.

id

string

logging

logging

enabled

Required *

boolean

ref

string

The reference of the rule (the rule ID by default).

position

position

before

string

The rule ID to place this rule before

after

string

The rule ID to place this rule after

index

integer

The index to place this rule at

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

rule_id

Required *

string

ID of a specific rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

rule_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete an instance ruleset rule

DELETE /v1/{crn}/rulesets/{ruleset_id}/rules/{rule_id}

Delete an instance ruleset rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-rules.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

rule_id

Required *

string

ID of a specific rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

rule_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List an instance ruleset verion's rules by tag

GET /v1/{crn}/rulesets/{ruleset_id}/versions/{ruleset_version}/by_tag/{rule_tag}

Lists rules by tag for a specific version of an instance ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rulesets-versions-by-tag.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

ruleset_id

Required *

string

ID of a specific ruleset

ruleset_version

Required *

string

The version of the ruleset

rule_tag

Required *

string

A category of the rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List zone rulesets

GET /v1/{crn}/zones/{zone_identifier}/rulesets

List all rulesets at the zone level.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a zone ruleset

GET /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}

View a specific zone ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a zone ruleset

PUT /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}

Update a specific zone ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets.update

Request

Request Body

ruleset_update

description

string

Description of the ruleset

kind

string

name

string

Human readable name of the ruleset.

phase

string

The phase of the ruleset.

rules

array

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a zone ruleset

DELETE /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}

Delete a specific zone ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

204 - Success

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List version of a zone ruleset

GET /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/versions

List all versions of a specific zone ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-versions.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a specific version of a zone ruleset

GET /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/versions/{ruleset_version}

View a specific version of a specific zone ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-versions.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

ruleset_version

Required *

string

The version of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a specific version of a zone ruleset

DELETE /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/versions/{ruleset_version}

Delete a specific version of a specific zone ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-versions.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

ruleset_version

Required *

string

The version of the ruleset

Query Parameters

Response

204 - Success

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a zone entrypoint ruleset

GET /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint

Get the zone ruleset for the given phase's entrypoint.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-phases-entrypoint.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_phase

Required *

The phase of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a zone entrypoint ruleset

PUT /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint

Updates the instance ruleset for the given phase's entry point.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-phases-entrypoint.update

Request

Request Body

ruleset_update

description

string

Description of the ruleset

kind

string

name

string

Human readable name of the ruleset.

phase

string

The phase of the ruleset.

rules

array

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_phase

Required *

The phase of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List a zone entry point ruleset's versions

GET /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint/versions

Lists the zone ruleset versions for the given phase's entry point.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-phases-entrypoint-versions.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_phase

Required *

The phase of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a zone entry point ruleset version

GET /v1/{crn}/zones/{zone_identifier}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}

Fetches a specific version of a zone entry point ruleset.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-phases-entrypoint-versions.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_phase

Required *

The phase of the ruleset

ruleset_version

Required *

string

The version of the ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ruleset_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create a zone ruleset rule

POST /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/rules

Create a zone ruleset rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-rules.create

Request

Request Body

rule_create

action

Required *

string

What happens when there is a match for the rule expression

action_parameters

action_parameters

id

string

Unique ID of the ruleset

overrides

object

version

string

The version of the ruleset. Use "latest" to get the latest version.

ruleset

string

Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.

rulesets

array

List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.

response

object

description

string

enabled

boolean

expression

Required *

string

The expression defining which traffic will match the rule.

id

string

logging

logging

enabled

Required *

boolean

ref

string

The reference of the rule (the rule ID by default).

position

position

before

string

The rule ID to place this rule before

after

string

The rule ID to place this rule after

index

integer

The index to place this rule at

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

rule_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a zone ruleset rule

PATCH /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/rules/{rule_id}

Update a zone ruleset rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-rules.update

Request

Request Body

rule_update

action

string

What happens when there is a match for the rule expression

action_parameters

action_parameters

id

string

Unique ID of the ruleset

overrides

object

version

string

The version of the ruleset. Use "latest" to get the latest version.

ruleset

string

Ruleset ID of the ruleset to apply action to. Use "current" to apply to the current ruleset.

rulesets

array

List of ruleset ids to apply action to. Use "current" to apply to the current ruleset.

response

object

description

string

enabled

boolean

expression

string

The expression defining which traffic will match the rule.

id

string

logging

logging

enabled

Required *

boolean

ref

string

The reference of the rule (the rule ID by default).

position

position

before

string

The rule ID to place this rule before

after

string

The rule ID to place this rule after

index

integer

The index to place this rule at

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

rule_id

Required *

string

ID of a specific rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

rule_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a zone ruleset rule

DELETE /v1/{crn}/zones/{zone_identifier}/rulesets/{ruleset_id}/rules/{rule_id}

Delete an instance ruleset rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone-rulesets-rules.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

ruleset_id

Required *

string

ID of a specific ruleset

rule_id

Required *

string

ID of a specific rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

rule_details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Routing feature smart routing setting

GET /v1/{crn}/zones/{zone_identifier}/routing/smart_routing

Get Routing feature smart routing setting for a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.smart-routing.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update Routing feature smart route setting

PATCH /v1/{crn}/zones/{zone_identifier}/routing/smart_routing

Update Routing feature smart route setting for a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.smart-routing.update

Request

Request Body

smart_routing_setting

Update Routing feature smart routing setting.

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get routing tiered cache setting

GET /v1/{crn}/zones/{zone_identifier}/routing/tiered_caching

Get routing tiered cache setting for a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.tiered-caching.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update routing tiered cache setting

PATCH /v1/{crn}/zones/{zone_identifier}/routing/tiered_caching

Update routing tiered cache setting for a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.tiered-caching.update

Request

Request Body

routing_tiered_caching_setting

Update routing tiered cache setting.

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Routing Latency Analytics

GET /v1/{crn}/zones/{zone_identifier}/routing/latency

Get Routing Latency Analytics for a given zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

bins

integer

The number of bins

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Routing Latency Colos Analytics

GET /v1/{crn}/zones/{zone_identifier}/routing/latency/colos

Get Routing Latency Colos Analytics for a given zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get zone DNSSEC

GET /v1/{crn}/zones/{zone_identifier}/dnssec

Get DNSSEC setting for a given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dnssec.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update zone DNSSEC

PATCH /v1/{crn}/zones/{zone_identifier}/dnssec

Update DNSSEC setting for given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dnssec.update

Request

Request Body

dnssec_input

Update zone DNSSEC setting.

status

Required *

string

Status

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get zone CNAME flattening

GET /v1/{crn}/zones/{zone_identifier}/settings/cname_flattening

Get CNAME flattening setting for a given zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

cname_flattening_response

CNAME Flattening response

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update zone CNAME flattening

PATCH /v1/{crn}/zones/{zone_identifier}/settings/cname_flattening

Update CNAME flattening setting for given zone.

Request

Request Body

cname_flattening_input

Update zone CNAME flattening setting.

value

Required *

string

Valid values are "flatten_at_root", "flatten_all". "flatten_at_root" - Flatten CNAME at root domain. This is the default value. "flatten_all" - Flatten all CNAME records under your domain.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

cname_flattening_response

CNAME Flattening response

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get opportunistic encryption setting

GET /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_encryption

Get opportunistic encryption setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update opportunistic encryption setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_encryption

Update opportunistic encryption setting for a zone.

Request

Request Body

opportunistic_encryption_setting

Update opportunistic encryption setting.

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get opportunistic onion setting

GET /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_onion

Get opportunistic onion setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update opportunistic onion setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/opportunistic_onion

Update opportunistic onion setting for a zone.

Request

Request Body

opportunistic_onion_setting

Update opportunistic encryption setting.

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get challenge TTL setting

GET /v1/{crn}/zones/{zone_identifier}/settings/challenge_ttl

Get challenge TTL setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update challenge TTL setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/challenge_ttl

Update challenge TTL setting for a zone.

Request

Request Body

challenge_ttl_setting

Update challenge TTL setting

value

Required *

integer

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get automatic https rewrites setting

GET /v1/{crn}/zones/{zone_identifier}/settings/automatic_https_rewrites

Get automatic https rewrites setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update automatic https rewrites setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/automatic_https_rewrites

Update automatic https rewrites setting for a zone.

Request

Request Body

automatic_https_rewrites_setting

Update automatic https rewrites setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get true client IP setting

GET /v1/{crn}/zones/{zone_identifier}/settings/true_client_ip_header

Get true client IP setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update true client IP setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/true_client_ip_header

Update true client IP setting for a zone.

Request

Request Body

zone_property_on_off_setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get always use https setting

GET /v1/{crn}/zones/{zone_identifier}/settings/always_use_https

Get always use https setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update always use https setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/always_use_https

Update always use https setting for a zone.

Request

Request Body

zone_property_on_off_setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get image size optimization setting

GET /v1/{crn}/zones/{zone_identifier}/settings/image_size_optimization

Get image size optimization setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update image size optimization setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/image_size_optimization

Update image size optimization setting for a zone.

Request

Request Body

image_size_optimization_setting

Update image size optimization setting

value

Required *

string

Valid values are "lossy", "off", "lossless". "lossy" - The file size of JPEG images is reduced using lossy compression, which might reduce visual quality. "off" - Disable Image Size Optimization. "lossless" - Reduce the size of image files without impacting visual quality.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get script load optimization setting

GET /v1/{crn}/zones/{zone_identifier}/settings/script_load_optimization

Get script load optimization setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update script load optimization setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/script_load_optimization

Update script load optimization setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update script load optimization setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get image load optimization setting

GET /v1/{crn}/zones/{zone_identifier}/settings/image_load_optimization

Get image load optimization setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update image load optimization setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/image_load_optimization

Update image load optimization setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update image load optimization setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get minify setting

GET /v1/{crn}/zones/{zone_identifier}/settings/minify

Get minify setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update minify setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/minify

Update minify setting for a zone.

Request

Request Body

minify_setting

Update minify setting

value

Required *

object

Value

css

Required *

string

Automatically minify all CSS for your website.

html

Required *

string

Automatically minify all HTML for your website.

js

Required *

string

Automatically minify all JavaScript for your website.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get minimum TLS version setting

GET /v1/{crn}/zones/{zone_identifier}/settings/min_tls_version

Get minimum TLS version setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update minimum TLS version setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/min_tls_version

Update minimum TLS version setting for a zone.

Request

Request Body

min_tls_version_setting

Update minimum TLS version setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get IP geolocation setting

GET /v1/{crn}/zones/{zone_identifier}/settings/ip_geolocation

Get IP geolocation setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update IP geolocation setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/ip_geolocation

Update IP geolocation setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update IP geolocation setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get server side exclude setting

GET /v1/{crn}/zones/{zone_identifier}/settings/server_side_exclude

Get server side exclude setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update server side exclude setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/server_side_exclude

Update server side exclude setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update server side exclude setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get HTTP strict transport security setting

GET /v1/{crn}/zones/{zone_identifier}/settings/security_header

Get HTTP strict transport security setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update HTTP strict transport security setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/security_header

Update HTTP strict transport security setting for a zone.

Request

Request Body

security_header_setting

Update HTTP strict transport security setting

value

Required *

object

Value

strict_transport_security

Required *

object

Strict transport security

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get mobile redirect setting

GET /v1/{crn}/zones/{zone_identifier}/settings/mobile_redirect

Get mobile redirect setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update mobile redirect setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/mobile_redirect

Update mobile redirect setting for a zone.

Request

Request Body

mobile_redirec_setting

Update mobile redirect setting

value

Required *

object

Value

status

Required *

string

Whether or not the mobile redirection is enabled

mobile_subdomain

Required *

string

Which subdomain prefix you wish to redirect visitors on mobile devices to

strip_uri

Required *

boolean

Whether to drop the current page path and redirect to the mobile subdomain URL root or to keep the path and redirect to the same page on the mobile subdomain

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get prefetch URLs from header setting

GET /v1/{crn}/zones/{zone_identifier}/settings/prefetch_preload

Get prefetch URLs from header setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update prefetch URLs from header setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/prefetch_preload

Update prefetch URLs from header setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update prefetch URLs from header setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get HTTP/2 setting

GET /v1/{crn}/zones/{zone_identifier}/settings/http2

Get HTTP/2 setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update HTTP/2 setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/http2

Update HTTP/2 setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update HTTP/2 setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get HTTP/3 setting

GET /v1/{crn}/zones/{zone_identifier}/settings/http3

Get HTTP/3 setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update HTTP/3 setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/http3

Update HTTP/3 setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update HTTP/3 setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get IPv6 compatibility setting

GET /v1/{crn}/zones/{zone_identifier}/settings/ipv6

Get IPv6 compatibility setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update IPv6 compatibility setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/ipv6

Update IPv6 compatibility setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update IPv6 compatibility setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get web sockets setting

GET /v1/{crn}/zones/{zone_identifier}/settings/websockets

Get web sockets setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update web sockets setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/websockets

Update web sockets setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update web sockets setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get pseudo IPv4 setting

GET /v1/{crn}/zones/{zone_identifier}/settings/pseudo_ipv4

Get pseudo IPv4 setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update pseudo IPv4 setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/pseudo_ipv4

Update pseudo IPv4 setting for a zone.

Request

Request Body

pseudo_ipv4_setting

Update pseudo IPv4 setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get response buffering setting

GET /v1/{crn}/zones/{zone_identifier}/settings/response_buffering

Get response buffering setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update response buffering setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/response_buffering

Update response buffering setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update response buffering setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get maximum upload size setting

GET /v1/{crn}/zones/{zone_identifier}/settings/max_upload

Get maximum upload size setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update maximum upload size setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/max_upload

Update maximum upload size setting for a zone.

Request

Request Body

max_upload_setting

Update maximum upload size setting

value

Required *

integer

Valid values(in MB) for "max_upload" are 100, 125, 150, 175, 200, 225, 250, 275, 300, 325, 350, 375, 400, 425, 450, 475, 500. Values 225, 250, 275, 300, 325, 350, 375, 400, 425, 450, 475, 500 are only for Enterprise Plan.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get TLS Client Auth setting

GET /v1/{crn}/zones/{zone_identifier}/settings/tls_client_auth

Get TLS Client Auth setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update TLS Client Auth setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/tls_client_auth

Update TLS Client Auth setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update TLS Client Auth setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get brotli setting

GET /v1/{crn}/zones/{zone_identifier}/settings/brotli

Get brotli setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update brotli setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/brotli

Update brotli setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update brotli setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get proxy read timeout setting

GET /v1/{crn}/zones/{zone_identifier}/settings/proxy_read_timeout

Get proxy read timeout setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update proxy read timeout setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/proxy_read_timeout

Update proxy read timeout setting for a zone.

Request

Request Body

proxy_read_timeout_setting

Update proxy read timeout setting

value

Required *

number

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get browser check setting

GET /v1/{crn}/zones/{zone_identifier}/settings/browser_check

Get browser check setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update browser check setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/browser_check

Update browser check setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update browser check setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get enable error pages on setting

GET /v1/{crn}/zones/{zone_identifier}/settings/origin_error_page_pass_thru

Get enable error pages on setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update enable error pages on setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/origin_error_page_pass_thru

Update enable error pages on setting for a zone.

Request

Request Body

zone_property_on_off_setting

Update Enable error pages on setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get web application firewall setting

GET /v1/{crn}/zones/{zone_identifier}/settings/waf

Get web application firewall setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update web application firewall setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/waf

A Web Application Firewall (WAF) blocks requests that contain malicious content.

Request

Request Body

zone_property_on_off_setting

Update web application firewall setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get ciphers setting

GET /v1/{crn}/zones/{zone_identifier}/settings/ciphers

Get ciphers setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update ciphers setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/ciphers

Update ciphers setting for a zone.

Request

Request Body

ciphers_setting

Update ciphers setting

value

Required *

array

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get origin max http version setting

GET /v1/{crn}/zones/{zone_identifier}/settings/origin_max_http_version

Get origin max http version setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update origin max http version setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/origin_max_http_version

Update origin max http version setting for a zone.

Request

Request Body

origin_max_http_version

Update ciphers setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get origin post quantum encryption setting

GET /v1/{crn}/zones/{zone_identifier}/cache/origin_post_quantum_encryption

Get origin post quantum encryption setting for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name (CRN) of resource instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was the get successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update origin post quantum encryption setting

PUT /v1/{crn}/zones/{zone_identifier}/cache/origin_post_quantum_encryption

Update origin post quantum encryption setting for a zone.

Request

Request Body

origin_post_quantum_encryption

Update ciphers setting

value

Required *

string

Instructs CIS to use Post-Quantum (PQ) key agreement algorithms when connecting to your origin.

  • `preferred`: Instructs CIS to opportunistically send a Post-Quantum keyshare in the first message to the origin for fastest connections when the origin supports and prefers PQ.
  • `supported`: The PQ algorithms are advertised but used only when requested by the origin.
  • `off`: The PQ algorithms are not advertised.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name (CRN) of resource instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

success

boolean

Was the get successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get replace insecure Javascript setting

GET /v1/{crn}/zones/{zone_identifier}/settings/replace_insecure_js

Get replace insecure Javascript for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name (CRN) of resource instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

result_info

object

Result information

success

boolean

Was the get successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update replace insecure Javascript setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/replace_insecure_js

Update replace insecure Javascript setting for a zone.

Request

Request Body

replace_insecure_js

Update ciphers setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name (CRN) of resource instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

result_info

object

Result information

success

boolean

Was the get successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Get email address obfuscation setting

GET /v1/{crn}/zones/{zone_identifier}/settings/email_obfuscation

Get email address obfuscation for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name (CRN) of resource instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

result_info

object

Result information

success

boolean

Was the get successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

Update email address obfuscation setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/email_obfuscation

Update email address obfuscation setting for a zone.

Request

Request Body

email_obfuscation

Update email address obfuscation setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name (CRN) of resource instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Container for response information

result_info

object

Result information

success

boolean

Was the get successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

500 - Internal server error

List all IP addresses used by the CIS proxy

GET /v1/ips

List of all IP addresses used by the CIS proxy.

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backend endpoint did not respond on time

List all load balancers

GET /v1/{crn}/zones/{zone_identifier}/load_balancers

List configured load balancers.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancers.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_result

Result

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create load balancer

POST /v1/{crn}/zones/{zone_identifier}/load_balancers

Create a load balancer for a given zone. The zone should be active before placing an order of a load balancer.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancers.create

Request

Request Body

load_balancer_req

Order a load balancer.

name

Required *

string

Name

fallback_pool

Required *

string

Fallback pool

default_pools

Required *

default_pools

Default pools

description

string

Desc

ttl

integer

TTL

region_pools

region_pools

Region pools

pop_pools

pop_pools

Pop pools

proxied

boolean

Proxied

enabled

boolean

Enabled/disabled

session_affinity

string

Session affinity

steering_policy

string

Steering policy

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_pack

Load balancer pack

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Edit load balancer

PUT /v1/{crn}/zones/{zone_identifier}/load_balancers/{load_balancer_identifier}

Edit porperties of an existing load balancer.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancers.update

Request

Request Body

load_balancer_req

Edit properties

name

Required *

string

Name

fallback_pool

Required *

string

Fallback pool

default_pools

Required *

default_pools

Default pools

description

string

Desc

ttl

integer

TTL

region_pools

region_pools

Region pools

pop_pools

pop_pools

Pop pools

proxied

boolean

Proxied

enabled

boolean

Enabled/disabled

session_affinity

string

Session affinity

steering_policy

string

Steering policy

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

load_balancer_identifier

Required *

string

Load balancer identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_pack

Load balancer pack

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete load balancer

DELETE /v1/{crn}/zones/{zone_identifier}/load_balancers/{load_balancer_identifier}

Delete a load balancer.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancers.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

load_balancer_identifier

Required *

string

Load balancer identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get load balancer

GET /v1/{crn}/zones/{zone_identifier}/load_balancers/{load_balancer_identifier}

For a given zone identifier and load balancer ID, get the load balancer settings.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

load_balancer_identifier

Required *

string

Load balancer identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_pack

Load balancer pack

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Export zone file

GET /v1/{crn}/zones/{zone_identifier}/dns_records_bulk

Export zone file

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dns-records-bulk.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Import zone file

POST /v1/{crn}/zones/{zone_identifier}/dns_records_bulk

Import zone file

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dns-records-bulk.create

Request

Request Body

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

DNS record

timing

object

Timing object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all firewall access rules

GET /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules

List all firewall access rules for a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ip-firewall-rules.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

notes

string

Search access rules by note.(Not case sensitive)

mode

string

Search access rules by mode.

configuration.target

string

Search access rules by configuration target

configuration.value

string

Search access rules by configuration value which can be IP, IPrange, or country code

page

integer

Page number of paginated results.

per_page

integer

Maximum number of access rules per page.

order

string

Field by which to order list of access rules.

direction

string

Direction in which to order results [ascending/descending order].

match

string

Whether to match all (all) or atleast one search parameter (any).

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create firewall access rule

POST /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules

Create a new firewall access rule for a given zone under a service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ip-firewall-rules.create

Request

Request Body

zone_access_rule_input

Access rule parameters.

mode

Required *

string

The action to apply to a matched request

notes

Required *

string

A personal note about the rule. Typically used as a reminder or explanation for the rule.

configuration

Required *

object

Configuration object specifying access rule

target

Required *

string

The request property to target

value

Required *

string

Value for the given target. For `ip`, the value is a valid IP address. For `ip_range`, the value specifies an IP range limited to /16 and /24. For `asn`, the value is an AS number. For `country`, the value is a country code for the country.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

zone_access_rule_object

Access rule object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete firewall access rule

DELETE /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules/{accessrule_identifier}

Delete an access rule, given its ID.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ip-firewall-rules.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

accessrule_identifier

Required *

string

Identifier of the access rule to be deleted.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get firewall access rule

GET /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules/{accessrule_identifier}

Get the details of a firewall access rule for a given zone under a given service instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

accessrule_identifier

Required *

string

Identifier of firewall access rule for the given zone.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

zone_access_rule_object

Access rule object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update firewall access rule

PATCH /v1/{crn}/zones/{zone_identifier}/firewall/access_rules/rules/{accessrule_identifier}

Update an existing firewall access rule for a given zone under a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ip-firewall-rules.update

Request

Request Body

zone_access_rule_update_input

mode

Required *

string

The action to apply to a matched request

notes

Required *

string

A personal note about the rule. Typically used as a reminder or explanation for the rule.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

accessrule_identifier

Required *

string

Identifier of firewall access rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

zone_access_rule_object

Access rule object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all user-agent blocking rules

GET /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules

List all user agent blocking rules.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ua-rules.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

page

integer

Page number of paginated results.

per_page

integer

Maximum number of user-agent rules per page.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create user-agent blocking rule

POST /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules

Create a new user-agent blocking rule for a given zone under a service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ua-rules.create

Request

Request Body

useragent_rule_input

User-agent blocking rule parameters.

paused

boolean

Whether this user-agent rule is currently disabled.

description

string

Some useful information about this rule to help identify the purpose of it.

mode

Required *

string

The type of action to perform.

configuration

Required *

object

Target/Value pair to use for this rule. The value is the exact UserAgent to match

target

Required *

string

Properties

value

Required *

string

The exact UserAgent string to match with this rule.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

useragent_rule_object

User agent rule object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete user-agent blocking rule

DELETE /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules/{useragent_rule_identifier}

Delete a user-agent blocking rule for a particular zone, given its ID.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ua-rules.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

useragent_rule_identifier

Required *

string

Identifier of the user-agent rule to be deleted.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get user-agent blocking rule

GET /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules/{useragent_rule_identifier}

For a given service instance, zone ID and user-agent rule ID, get the user-agent blocking rule details.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

useragent_rule_identifier

Required *

string

Identifier of user-agent blocking rule for the given zone.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

useragent_rule_object

User agent rule object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update user-agent blocking rule

PUT /v1/{crn}/zones/{zone_identifier}/firewall/ua_rules/{useragent_rule_identifier}

Update an existing user-agent blocking rule for a given zone under a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.ua-rules.update

Request

Request Body

useragent_rule_input

paused

boolean

Whether this user-agent rule is currently disabled.

description

string

Some useful information about this rule to help identify the purpose of it.

mode

Required *

string

The type of action to perform.

configuration

Required *

object

Target/Value pair to use for this rule. The value is the exact UserAgent to match

target

Required *

string

Properties

value

Required *

string

The exact UserAgent string to match with this rule.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

useragent_rule_identifier

Required *

string

Identifier of user-agent rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

useragent_rule_object

User agent rule object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Firewall event analytics data

GET /v2/{crn}/zones/{zone_id}/analytics/firewall_events

Provides a full log of the mitigations performed by the CIS Firewall features including; Firewall Rules, Rate Limiting, Security Level, Access Rules (IP, IP Range, ASN, and Country), WAF (Web Application Firewall), User Agent Blocking, Zone Lockdown, and Advanced DDoS Protection.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.firewall-events-analytics.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

dataset

string

The dataset of analytics data.

filter

string

The 'datetime' is a filter base on time range. This filter can combine with operators ('gt', 'lt', 'geq', 'leq', 'neq', and 'in') to filter data by specified time range, e.g., `filter=datetime_geq:2020-06-28T00:00:00Z&filter=datetime_leq:2020-06-29T00:00:00Z`.

limit

integer

The number of events to return. (minimum is 1 and maximum is 10000)

orderBy

string

Output order of the events.

Response

200 - Success

data

firewall_event_analytics_data

Data container for response data

400 - Bad input parameter

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all load balancer events

GET /v1/{crn}/load_balancers/events

Get load balancer events for all origins.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancer-events.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

result

array

Result of the operation

result_info

result_info

Result information

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get WAF setting

GET /v1/{crn}/zones/{zone_id}/settings/waf

Get WAF of a specific zone. WAF is moving to the Managed Rules engine for enhanced performance and security. For information about migrating to Managed Rules, see Migration to managed rules. This API is not available post-migration.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Set WAF setting

PATCH /v1/{crn}/zones/{zone_id}/settings/waf

Set WAF (on | off) for a specific zone. WAF is moving to the Managed Rules engine for enhanced performance and security. For information about migrating to Managed Rules, see Migration to managed rules. This API is not available post-migration.

Request

Request Body

waf-body

The valid value is on | off.

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get security-level setting

GET /v1/{crn}/zones/{zone_identifier}/settings/security_level

For a given zone identifier, get security-level setting.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result object

result_info

result_info

Result information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Set security-level setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/security_level

For a given zone identifier, set security-level setting.

Request

Request Body

security_level_setting_req

Set security-level setting.

value

Required *

string

Security level

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result object

result_info

result_info

Result information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all rate limits

GET /v1/{crn}/zones/{zone_identifier}/rate_limits

The details of Rate Limit for a given zone under a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rate-limits.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

page

integer

Page number of paginated results.

per_page

integer

Maximum number of rate limits per page.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create rate limit

POST /v1/{crn}/zones/{zone_identifier}/rate_limits

Create a new rate limit for a given zone under a service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rate-limits.create

Request

Request Body

ratelimit_input

Rate limit parameters.

disabled

boolean

Whether this ratelimit is currently disabled.

description

string

A note that you can use to describe the reason for a rate limit.

bypass

array

Criteria that would allow the rate limit to be bypassed, for example to express that you shouldn't apply a rate limit to a given set of URLs

threshold

Required *

integer

The threshold that triggers the rate limit mitigations, combine with period. i.e. threshold per period

period

Required *

integer

The time in seconds to count matching traffic. If the count exceeds threshold within this period the action will be performed

action

Required *

object

Action

mode

Required *

string

The type of action to perform.

timeout

integer

The time in seconds as an integer to perform the mitigation action. Must be the same or greater than the period. This field is valid only when mode is "simulate" or "ban"

response

object

Custom content-type and body to return, this overrides the custom error for the zone. This field is not required. Omission will result in default HTML error page.This field is valid only when mode is "simulate" or "ban"

correlate

object

Enable NAT based rate limits

by

Required *

string

NAT rate limits by

match

Required *

object

Determines which traffic the rate limit counts towards the threshold. Needs to be one of "request" or "response" objects.

request

object

Request

response

object

Response

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ratelimit_object

Rate limit object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete rate limit

DELETE /v1/{crn}/zones/{zone_identifier}/rate_limits/{rate_limit_identifier}

Delete a rate limit, given its ID.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rate-limits.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

rate_limit_identifier

Required *

string

Identifier of the rate limit to be deleted.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a rate limit

GET /v1/{crn}/zones/{zone_identifier}/rate_limits/{rate_limit_identifier}

Get the details of a rate limit for a given zone under a given service instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

rate_limit_identifier

Required *

string

Identifier of rate limit for the given zone.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ratelimit_object

Rate limit object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update rate limit

PUT /v1/{crn}/zones/{zone_identifier}/rate_limits/{rate_limit_identifier}

Update an existing rate limit for a given zone under a service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rate-limits.update

Request

Request Body

ratelimit_input

disabled

boolean

Whether this ratelimit is currently disabled.

description

string

A note that you can use to describe the reason for a rate limit.

bypass

array

Criteria that would allow the rate limit to be bypassed, for example to express that you shouldn't apply a rate limit to a given set of URLs

threshold

Required *

integer

The threshold that triggers the rate limit mitigations, combine with period. i.e. threshold per period

period

Required *

integer

The time in seconds to count matching traffic. If the count exceeds threshold within this period the action will be performed

action

Required *

object

Action

mode

Required *

string

The type of action to perform.

timeout

integer

The time in seconds as an integer to perform the mitigation action. Must be the same or greater than the period. This field is valid only when mode is "simulate" or "ban"

response

object

Custom content-type and body to return, this overrides the custom error for the zone. This field is not required. Omission will result in default HTML error page.This field is valid only when mode is "simulate" or "ban"

correlate

object

Enable NAT based rate limits

by

Required *

string

NAT rate limits by

match

Required *

object

Determines which traffic the rate limit counts towards the threshold. Needs to be one of "request" or "response" objects.

request

object

Request

response

object

Response

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

rate_limit_identifier

Required *

string

Identifier of rate limit

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ratelimit_object

Rate limit object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get rate limit analytics

GET /v1/{crn}/zones/{zone_identifier}/rate_limit_analytics

Get rate limit analytics for a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.rate-limit-analytics.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

since

Required *

string

The beginning of the requested time frame.

until

Required *

string

The end of the requested time frame.

time_delta

Required *

integer

The time interval (seconds) of each analytic's record.

Response

200 - Success

since

string

The beginning time of analytics.

until

string

The end time of analytics.

time_delta

integer

The time interval of analytics' record.

golden_record

boolean

Whether the analytics' record is golden record.

labels

object

Labels.

timeseries

array

The analytics' records in the time frame.

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all pools

GET /v1/{crn}/load_balancers/pools

List all configured load balancer pools.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancer-pools.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_pool_result

Result

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create pool

POST /v1/{crn}/load_balancers/pools

Create a new load balancer pool

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancer-pools.create

Request

Request Body

load_balancer_pool_req

Order a load balancer pool.

name

Required *

string

Name

check_regions

Required *

array

Regions check

origins

Required *

array

Origins

description

string

Desc

minimum_origins

integer

The minimum number of origins that must be healthy for this pool to serve traffic

enabled

boolean

Enabled/disabled

monitor

string

Monitor

notification_email

string

Notification email

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_pool_pack

Load balancer pool pack

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get pool

GET /v1/{crn}/load_balancers/pools/{pool_identifier}

Get a single configured load balancer pool.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

pool_identifier

Required *

string

Pool identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_pool_pack

Load balancer pool pack

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete pool

DELETE /v1/{crn}/load_balancers/pools/{pool_identifier}

Delete a specific configured load balancer pool.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

pool_identifier

Required *

string

Pool identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Edit pool

PUT /v1/{crn}/load_balancers/pools/{pool_identifier}

Edit a specific configured load balancer pool.

Request

Request Body

load_balancer_pool_req

Edit a load balancer pool.

name

Required *

string

Name

check_regions

Required *

array

Regions check

origins

Required *

array

Origins

description

string

Desc

minimum_origins

integer

The minimum number of origins that must be healthy for this pool to serve traffic

enabled

boolean

Enabled/disabled

monitor

string

Monitor

notification_email

string

Notification email

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

pool_identifier

Required *

string

Pool identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

load_balancer_pool_pack

Load balancer pool pack

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all lockdown rules

GET /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns

List all lockdown rules for a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.domain-lockdown-rules.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

page

integer

Page number of paginated results.

per_page

integer

Maximum number of lockdown rules per page.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create lockdown rule

POST /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns

Create a new lockdown rule for a given zone under a service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.domain-lockdown-rules.create

Request

Request Body

lockdown_input

Lockdown parameters.

id

string

Lockdown rule identifier

paused

boolean

Whether this zone lockdown is currently paused

description

string

A note that you can use to describe the reason for a Lockdown rule.

urls

Required *

array

URLs to be included in this rule definition. Wildcards are permitted. The URL pattern entered here will be escaped before use. This limits the URL to just simple wildcard patterns.

configurations

Required *

array

List of IP addresses or CIDR ranges to use for this rule. This can include any number of `ip` or `ip_range` configurations that can access the provided URLs.

priority

integer

Firewall priority

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

lockdown_object

Lockdown object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete lockdown rule

DELETE /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns/{lockdown_rule_identifier}

Delete a lockdown rule for a particular zone, given its ID.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.domain-lockdown-rules.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

lockdown_rule_identifier

Required *

string

Identifier of the lockdown rule to be deleted.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get lockdown rule

GET /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns/{lockdown_rule_identifier}

For a given service instance, zone ID and lockdown rule ID, get the lockdown rule details.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

lockdown_rule_identifier

Required *

string

Identifier of lockdown rule for the given zone.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

lockdown_object

Lockdown object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update lockdown rule

PUT /v1/{crn}/zones/{zone_identifier}/firewall/lockdowns/{lockdown_rule_identifier}

Update an existing lockdown rule for a given zone under a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.domain-lockdown-rules.update

Request

Request Body

lockdown_input

id

string

Lockdown rule identifier

paused

boolean

Whether this zone lockdown is currently paused

description

string

A note that you can use to describe the reason for a Lockdown rule.

urls

Required *

array

URLs to be included in this rule definition. Wildcards are permitted. The URL pattern entered here will be escaped before use. This limits the URL to just simple wildcard patterns.

configurations

Required *

array

List of IP addresses or CIDR ranges to use for this rule. This can include any number of `ip` or `ip_range` configurations that can access the provided URLs.

priority

integer

Firewall priority

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

lockdown_rule_identifier

Required *

string

Identifier of lockdown rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

lockdown_object

Lockdown object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all WAF rule packages

GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages

Get firewall packages for a zone

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.waf-packages.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

name

string

Name of the firewall package

page

integer

Page number of paginated results

per_page

integer

Number of packages per page

order

string

Field to order packages by

direction

string

Direction to order packages

match

string

Whether to match all search requirements or at least one (any)

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get WAF rule package

GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}

Get information about a single firewall package

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

package_id

Required *

string

Package ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Change WAF rule package package

PATCH /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}

Change the sensitivity and action for an anomaly detection type WAF rule package

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.waf-packages.update

Request

Request Body

Optional body parameters

sensitivity

Required *

string

The sensitivity of the firewall package.

action_mode

Required *

string

The default action that will be taken for rules under the firewall package.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

package_id

Required *

string

Package ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get page rule

GET /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}

Get a page rule details.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

rule_id

Required *

string

Rule ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

page_rule_result

Page rule result

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Change page rule

PATCH /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}

Change a page rule.

Request

Request Body

pageRules-patch-body

Change a page rule.

targets

targets

Targets

actions

actions

Actions

priority

integer

Priority

status

string

Status

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

rule_id

Required *

string

Rule ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

page_rule_result

Page rule result

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Update page rule

PUT /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}

Replace a page rule. The final rule will exactly match the data passed with this request.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.pagerules.update

Request

Request Body

pageRules-body

Replace a page rule. The final rule will exactly match the data passed with this request.

targets

Required *

targets

Targets

actions

Required *

actions

Actions

priority

integer

Priority

status

string

Status

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

rule_id

Required *

string

Rule ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

page_rule_result

Page rule result

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Delete page rule

DELETE /v1/{crn}/zones/{zone_id}/pagerules/{rule_id}

Delete a page rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.pagerules.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

rule_id

Required *

string

Rule ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

List page rules

GET /v1/{crn}/zones/{zone_id}/pagerules

List page rules.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.pagerules.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

status

string

default value: disabled. valid values: active, disabled

order

string

default value: priority. valid values: status, priority

direction

string

default value: desc. valid values: asc, desc

match

string

default value: all. valid values: any, all

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Result

400 - Bad request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Create page rule

POST /v1/{crn}/zones/{zone_id}/pagerules

Create a page rule.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.pagerules.create

Request

Request Body

pageRules-body

Add page rule body data to curl

targets

Required *

targets

Targets

actions

Required *

actions

Actions

priority

integer

Priority

status

string

Status

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

page_rule_result

Page rule result

400 - Bad request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

List all load balancer monitors

GET /v1/{crn}/load_balancers/monitors

List configured load balancer monitors for a user.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancer-monitors.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

monitor_result

Result

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create load balancer monitor

POST /v1/{crn}/load_balancers/monitors

Create a load balancer monitor for a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.load-balancer-monitors.create

Request

Request Body

monitor_req

Create a monitor.

type

string

HTTP type

description

string

Login page monitor

method

string

Method

port

integer

Port number

path

string

Path

timeout

integer

Timeout count

retries

integer

Retry count

interval

integer

Interval

expected_codes

Required *

string

Expected codes

follow_redirects

boolean

Follow redirects

expected_body

string

Expected body

allow_insecure

boolean

Allow insecure

object

Header

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

monitor_pack

Monitor package

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Edit load balancer monitor

PUT /v1/{crn}/load_balancers/monitors/{monitor_identifier}

Edit porperties of an existing load balancer monitor.

Request

Request Body

monitor_req

Edit properties

type

string

HTTP type

description

string

Login page monitor

method

string

Method

port

integer

Port number

path

string

Path

timeout

integer

Timeout count

retries

integer

Retry count

interval

integer

Interval

expected_codes

Required *

string

Expected codes

follow_redirects

boolean

Follow redirects

expected_body

string

Expected body

allow_insecure

boolean

Allow insecure

header

object

Header

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

monitor_identifier

Required *

string

Monitor identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

monitor_pack

Monitor package

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete load balancer monitor

DELETE /v1/{crn}/load_balancers/monitors/{monitor_identifier}

Delete a load balancer monitor.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

monitor_identifier

Required *

string

Monitor identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get load balancer monitor

GET /v1/{crn}/load_balancers/monitors/{monitor_identifier}

For a given service instance and load balancer monitor ID, get the monitor details.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

monitor_identifier

Required *

string

Monitor identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

monitor_pack

Monitor package

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all load balancer regions.

GET /v1/{crn}/load_balancers/regions

List available load balancer regions for a user.

Request

Path Parameters

crn

Required *

string

Full CRN of the service instance.

Query Parameters

Response

200 - Success

result

load_balancer_regions_result

success

boolean

errors

array

messages

array

400 - Bad Request

401 - Unathorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List load balancer region by region id.

GET /v1/{crn}/load_balancers/regions/{region_id}

List available load balancer regions by id for a user.

Request

Path Parameters

crn

Required *

string

Full CRN of the service instance.

region_id

Required *

string

Region identifier.

Query Parameters

Response

200 - Success

result

load_balancer_regions_result

success

boolean

errors

array

messages

array

400 - Bad Request

401 - Unathorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all zones

GET /v1/{crn}/zones

List all zones for a service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zones.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

page

integer

Page number of paginated results.

per_page

integer

Maximum number of zones per page.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

zone_list

zone list

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create zone

POST /v1/{crn}/zones

Add a new zone for a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zones.create

Request

Request Body

zone_input

Create a zone.

name

Required *

string

Name

type

string

A zone implies that DNS is hosted with CIS authoritative nameservers. A partial zone is typically a CNAME setup.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

zone_details

zone details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete zone

DELETE /v1/{crn}/zones/{zone_identifier}

Delete a zone, given its ID.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zones.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get zone

GET /v1/{crn}/zones/{zone_identifier}

Get the details of a zone for a given service instance and given zone ID.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

zone_details

zone details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update zone

PATCH /v1/{crn}/zones/{zone_identifier}

Update the paused field of the zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zones.update

Request

Request Body

zone_update_input

Update a zone's paused field.

paused

Required *

boolean

Paused

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

zone_details

zone details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Check zone

PUT /v1/{crn}/zones/{zone_identifier}/activation_check

Perform activation check on zone for status

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zones-activation-check.update

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List instance level firewall access rules

GET /v1/{crn}/firewall/access_rules/rules

List all instance level firewall access rules.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

notes

string

Search access rules by note.(Not case sensitive)

mode

string

Search access rules by mode.

configuration.target

string

Search access rules by configuration target

configuration.value

string

Search access rules by configuration value which can be IP, IPrange, or country code

page

integer

Page number of paginated results.

per_page

integer

Maximum number of access rules per page.

order

string

Field by which to order list of access rules.

direction

string

Direction in which to order results [ascending/descending order].

match

string

Whether to match all (all) or atleast one search parameter (any).

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

object

Statistics of results

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create instance level firewall access rule

POST /v1/{crn}/firewall/access_rules/rules

Create a new instance level firewall access rule for a given service instance.

Request

Request Body

account_access_rule_input

Access rule parameters.

mode

Required *

string

The action to apply to a matched request

notes

Required *

string

A personal note about the rule. Typically used as a reminder or explanation for the rule.

configuration

Required *

object

Configuration object specifying access rule

target

Required *

string

The request property to target

value

Required *

string

Value for the given target. For `ip`, the value is a valid IP address. For `ip_range`, the value specifies an IP range limited to /16 and /24. For `asn`, the value is an AS number. For `country`, the value is a country code for the country.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

account_access_rule_object

Access rule objects

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete instance level access rule

DELETE /v1/{crn}/firewall/access_rules/rules/{accessrule_identifier}

Delete an instance level access rule, given its ID.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

accessrule_identifier

Required *

string

Identifier of the access rule to be deleted.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get instance level firewall access rule

GET /v1/{crn}/firewall/access_rules/rules/{accessrule_identifier}

Get the details of an instance level firewall access rule for a given service instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

accessrule_identifier

Required *

string

Identifier of firewall access rule for the given zone.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

account_access_rule_object

Access rule objects

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update instance level firewall access rule

PATCH /v1/{crn}/firewall/access_rules/rules/{accessrule_identifier}

Update an existing instance level firewall access rule for a given service instance.

Request

Request Body

account_access_rule_update_input

mode

Required *

string

The action to apply to a matched request

notes

Required *

string

A personal note about the rule. Typically used as a reminder or explanation for the rule.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

accessrule_identifier

Required *

string

Identifier of firewall access rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

account_access_rule_object

Access rule objects

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all WAF rules

GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}/rules

List all Web Application Firewall (WAF) rules.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.waf-rules.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

package_id

Required *

string

Package ID

Query Parameters

mode

string

The Rule Mode

priority

string

The order in which the individual rule is executed within the related group

match

string

Whether to match all search requirements or at least one. default value: all. valid values: any, all

order

string

Field to order rules by. valid values: priority, group_id, description.

group_id

string

WAF group identifier tag. max length: 32; Read-only

description

string

Public description of the rule

direction

string

Direction to order rules. valid values: asc, desc

page

integer

Page number of paginated results. default value: 1; min value:1

per_page

integer

Number of rules per page. default value: 50; min value:5; max value:100

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Array of Rules

result_info

result_info

Result information

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get WAF rule

GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{identifier}

Get individual information about a rule.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

package_id

Required *

string

Package ID

identifier

Required *

string

Rule ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Information about a Rule

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Update WAF rule

PATCH /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{identifier}

Update the action the rule will perform if triggered on the zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.waf-rules.update

Request

Request Body

waf-rule-body

The mode to use when the rule is triggered. Value is restricted based on the allowed_modes of the rule

cis

object

Cis package

mode

Required *

string

Mode to choose from.

owasp

object

Owasp package

mode

Required *

string

mode to choose from. 'owasp' limited modes - on and off

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

package_id

Required *

string

Package ID

identifier

Required *

string

Rule ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Information about a Rule

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Purge all

PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_all

All resources in CDN edge servers' cache should be removed. This can have dramatic affects on your origin server load after performing this action.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.purge-cache-all.update

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Purge object

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backend API endpoint did not respond on time

Purge URLs

PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_by_urls

Granularly remove one or more files from CDN edge servers' cache either by specifying URLs.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.purge-cache-by-urls.update

Request

Request Body

purge_urls_body

An array of URLs that should be removed from cache

files

Required *

array

Purge URL array

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Purge object

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Purge Cache-Tags

PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_by_cache_tags

Granularly remove one or more files from CDN edge servers' cache either by specifying the associated Cache-Tags.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.purge-cache-by-cache-tags.update

Request

Request Body

purge_tags_body

Any assets served with a Cache-Tag header that matches one of the provided values will be purged from the CDN edge servers' cache.

tags

Required *

array

Array of tags

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Purge object

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Purge host names

PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_by_hosts

Granularly remove one or more files from CDN edge servers' cache either by specifying the hostnames.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.purge-cache-by-hosts.update

Request

Request Body

purge_hosts_body

Any assets at URLs with a host that matches one of the provided values will be purged from the CDN edge servers' cache.

hosts

Required *

array

Hosts name

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Purge object

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Purge individual files by prefixes

PUT /v1/{crn}/zones/{zone_id}/purge_cache/purge_by_prefixes

Granularly remove one or more files from CDN edge servers' cache by specifying the prefixes.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.purge-cache-by-prefixes.update

Request

Request Body

purge_prefixes_body

Any assets at URLs that match the prefix will be purged from the CDN edge servers' cache.

prefixes

Required *

array

Prefixes

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Purge object

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get cache level setting

GET /v1/{crn}/zones/{zone_id}/settings/cache_level

Get cache level setting of a specific zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Set cache level setting

PATCH /v1/{crn}/zones/{zone_id}/settings/cache_level

The `basic` setting will cache most static resources (i.e., css, images, and JavaScript). The `simplified` setting will ignore the query string when delivering a cached resource. The `aggressive` setting will cache all static resources, including ones with a query string.

Request

Request Body

cacheLevel-body

The `basic` setting will cache most static resources (i.e., css, images, and JavaScript). The `simplified` setting will ignore the query string when delivering a cached resource. The `aggressive` setting will cache all static resources, including ones with a query string.

value

Required *

string

Cache level

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get browser cache TTL setting

GET /v1/{crn}/zones/{zone_id}/settings/browser_cache_ttl

Browser Cache TTL (in seconds) specifies how long CDN edge servers cached resources will remain on your visitors' computers.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result object

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Change browser cache TTL setting

PATCH /v1/{crn}/zones/{zone_id}/settings/browser_cache_ttl

Browser Cache TTL (in seconds) specifies how long CDN edge servers cached resources will remain on your visitors' computers.

Request

Request Body

browserTTL-body

Default value is 14400. valid values are 0, 30, 60, 300, 1200, 1800, 3600, 7200, 10800, 14400, 18000, 28800, 43200, 57600, 72000, 86400, 172800, 259200, 345600, 432000, 691200, 1382400, 2073600, 2678400, 5356800, 16070400, 31536000. notes! The minimum TTL available depends on the plan level of the zone. Enterprise is 30, Business is 1800, Pro is 1800, Free is 1800, 0 is special value meaning to respect origin header.

value

Required *

integer

TTL value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result object

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get Serve Stale Content setting

GET /v1/{crn}/zones/{zone_id}/settings/always_online

When enabled, Serve Stale Content will serve pages from CDN edge servers' cache if your server is offline.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result object

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Change Serve Stale Content setting

PATCH /v1/{crn}/zones/{zone_id}/settings/always_online

When enabled, Serve Stale Content will serve pages from CDN edge servers' cache if your server is offline.

Request

Request Body

serveStaleContent-body

Default value is `on`, valid values are `on` and `off`.

value

Required *

string

On/off value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result object

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get development mode setting

GET /v1/{crn}/zones/{zone_id}/settings/development_mode

Get development mode setting.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result object

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Change development mode setting

PATCH /v1/{crn}/zones/{zone_id}/settings/development_mode

Change development mode setting.

Request

Request Body

developmentMode-body

Default value is `off`, valid values are `on` and `off`.

value

Required *

string

On/off value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result object

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get Enable Query String Sort setting

GET /v1/{crn}/zones/{zone_id}/settings/sort_query_string_for_cache

Get Enable Query String Sort setting.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result of sort query string

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

Change Enable Query String Sort setting

PATCH /v1/{crn}/zones/{zone_id}/settings/sort_query_string_for_cache

Change Enable Query String Sort setting.

Request

Request Body

enableQueryStringSort-body

Default value is `off`, valid values are `on` and `off`.

value

Required *

string

On/off property value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result of sort query string

400 - Bad request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal server error

504 - Gateway Timeout! Backendendpoint did not respond on time

List all DNS records

GET /v1/{crn}/zones/{zone_identifier}/dns_records

List all DNS records for a given zone of a service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dns-records.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

type

string

Type of DNS records to display.

name

string

Value of name field to filter by.

content

string

Value of content field to filter by.

page

integer

Page number of paginated results.

per_page

integer

Maximum number of DNS records per page.

order

string

Field by which to order list of DNS records.

direction

string

Direction in which to order results [ascending/descending order].

match

string

Whether to match all (all) or atleast one search parameter (any).

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

dnsrecord_list

DNS record list

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create DNS record

POST /v1/{crn}/zones/{zone_identifier}/dns_records

Add a new DNS record for a given zone for a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dns-records.create

Request

Request Body

dnsrecord_input

DNS record parameters.

name

Required *

string

Required for all record types except SRV.

type

Required *

string

DNS record type

ttl

integer

DNS record TTL value

content

Required *

string

DNS record content

priority

integer

For MX records only

proxied

boolean

proxied

data

object

For LOC, SRV, CAA, DS records only

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

dnsrecord_details

DNS record details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete DNS record

DELETE /v1/{crn}/zones/{zone_identifier}/dns_records/{dnsrecord_identifier}

Delete a DNS record, given its ID.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dns-records.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

dnsrecord_identifier

Required *

string

Identifier of DNS record

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get DNS record

GET /v1/{crn}/zones/{zone_identifier}/dns_records/{dnsrecord_identifier}

Get the details of a DNS record for a given zone under a given service instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

dnsrecord_identifier

Required *

string

Identifier of DNS record

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

dnsrecord_details

DNS record details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update DNS record

PUT /v1/{crn}/zones/{zone_identifier}/dns_records/{dnsrecord_identifier}

Update an existing DNS record for a given zone under a given service instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dns-records.update

Request

Request Body

dnsrecord_update_input

name

Required *

string

Required for all record types except SRV.

type

Required *

string

DNS record type

ttl

integer

DNS record TTL value

content

Required *

string

Content of the DNS record

priority

integer

For MX records only

proxied

boolean

Proxied

data

object

For LOC, SRV, CAA, DS records only

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

dnsrecord_identifier

Required *

string

Identifier of DNS record

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

dnsrecord_details

DNS record details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Batch DNS records

POST /v1/{crn}/zones/{zone_identifier}/dns_records/batch

Send a Batch of DNS Record API calls to be executed together. The operations you specify within the /batch request body are always executed in the following order: deletes, patches, puts, posts

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.create

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.dns-records.create

Request

Request Body

batch_dns_records_request

deletes

array

patches

array

posts

array

puts

array

Path Parameters

crn

Required *

string

Full CRN of the service instance

zone_identifier

Required *

string

Zone identifier (zone id)

Query Parameters

Response

200 - Success

success

boolean

success response

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all WAF rule groups

GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{pkg_id}/groups

List all WAF rule groups contained within a package.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.waf-groups.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

pkg_id

Required *

string

Package ID

Query Parameters

name

string

Name of the firewall package

mode

string

Whether or not the rules contained within this group are configurable/usable

rules_count

string

How many rules are contained within this group

page

integer

Page number of paginated results

per_page

integer

Number of packages per page

order

string

Field to order packages by

direction

string

Direction to order packages

match

string

Whether to match all search requirements or at least one (any)

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Get WAF rule group

GET /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{pkg_id}/groups/{group_id}

Get a single WAF rule group.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

pkg_id

Required *

string

Package ID

group_id

Required *

string

Group ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

waf-rule-properties

WAF rule properties

result_info

result_info

Result information

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

Update WAF rule group

PATCH /v1/{crn}/zones/{zone_id}/firewall/waf/packages/{pkg_id}/groups/{group_id}

Update the state of a WAF rule group.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.waf-groups.update

Request

Request Body

waf-groups-request

mode

string

Whether or not the rules contained within this group are configurable/usable

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

pkg_id

Required *

string

Package ID

group_id

Required *

string

Group ID

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

waf-rule-properties

WAF rule properties

result_info

result_info

Result information

400 - Bad Request

403 - Forbidden! User has no privilege to use IBM Cloud Internet Services

404 - Resource not found

500 - Internal Server Error

504 - Gateway Timeout! Backendendpoint did not respond on time

List all custom pages for a given instance

GET /v1/{crn}/custom_pages

List all custom pages for a given instance

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_pages

Custom pages array

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a custom page for a given instance

GET /v1/{crn}/custom_pages/{page_identifier}

Get a specific custom page for a given instance

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

page_identifier

Required *

string

Custom page identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_page_object

Custom page object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a custom page for a given instance

PUT /v1/{crn}/custom_pages/{page_identifier}

Update a specific custom page for a given instance

Request

Request Body

custom_page_request

url

Required *

string

A URL that is associated with the Custom Page

state

Required *

string

The Custom Page state

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

page_identifier

Required *

string

Custom page identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_page_object

Custom page object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all custom pages for a given zone

GET /v1/{crn}/zones/{zone_identifier}/custom_pages

List all custom pages for a given zone

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.custom-pages.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_pages

Custom pages array

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a custom page for a given zone

GET /v1/{crn}/zones/{zone_identifier}/custom_pages/{page_identifier}

Get a specific custom page for a given zone

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

page_identifier

Required *

string

Custom page identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_page_object

Custom page object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a custom page for a given zone

PUT /v1/{crn}/zones/{zone_identifier}/custom_pages/{page_identifier}

Update a specific custom page for a given zone

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.custom-pages.update

Request

Request Body

custom_page_request

url

Required *

string

A URL that is associated with the Custom Page

state

Required *

string

The Custom Page state

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

page_identifier

Required *

string

Custom page identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_page_object

Custom page object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Logs of the mitigations performed by Firewall features

GET /v1/{crn}/zones/{zone_id}/security/events

Provides a full log of the mitigations performed by the CIS Firewall features including; Firewall Rules, Rate Limiting, Security Level, Access Rules (IP, IP Range, ASN, and Country), WAF (Web Application Firewall), User Agent Blocking, Zone Lockdown, and Advanced DDoS Protection. (DEPRECATED: use Firewall Event Analytics API instead)

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.security-events.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

ip_class

string

IP class is a map of client IP to visitor classification.

method

string

The HTTP method of the request.

scheme

string

The scheme of the uri

ip

string

The IPv4 or IPv6 address from which the request originated

host

string

The hostname the request attempted to access

proto

string

The protocol of the request

uri

string

The URI requested from the hostname

ua

string

The client user agent that initiated the request

colo

string

The 3-letter CF PoP code

ray_id

string

Ray ID of the request

kind

string

Kind of events. Now it is only firewall.

action

string

What type of action was taken

cursor

string

Cursor position and direction for requesting next set of records when amount of results was limited by the limit parameter. A valid value for the cursor can be obtained from the cursors object in the result_info structure.

country

string

The 2-digit country code in which the request originated

since

string

Start date and time of requesting data period in the ISO8601 format. Can't go back more than a year.

source

string

Source of the event

limit

integer

The number of events to return

rule_id

string

The ID of the rule that triggered the event, should be considered in the context of source.

until

string

End date and time of requesting data period in the ISO8601 format

Response

200 - Success

result

array

Container for response information

result_info

result_info

Result information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad input parameter

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get all edge functions scripts

GET /v1/{crn}/workers/scripts

Get all edge functions scripts for a given instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.edge-functions-scripts.read

Request

Response

200 - Success

result

edge_functions_actions_resp

An array with items in the list response

success

boolean

Success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Upload or replace an edge functions action

PUT /v1/{crn}/workers/scripts/{script_name}

Upload or replace an exitsing edge functions action for a given instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.edge-functions-scripts.update

Request

Request Body

Upload or replace an edge functions action.

Response

200 - Success

result

edge_functions_action_resp

Edge function script

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Download a edge functions action

GET /v1/{crn}/workers/scripts/{script_name}

Fetch raw script content for your worker. Note this is the original script content, not JSON encoded.

Request

Response

200 - Success

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a edge functions action

DELETE /v1/{crn}/workers/scripts/{script_name}

Delete an edge functions action for a given instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.edge-functions-scripts.delete

Request

Response

200 - Success

result

edge_functions_action_id

Edge function action id

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create an edge functions trigger

POST /v1/{crn}/zones/{zone_identifier}/workers/routes

Create an edge functions trigger on a given zone

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.edge-functions-routes.create

Request

Request Body

edge_functions_trigger_req

Create an edge functions trigger request.

pattern

Required *

string

A string pattern

script

string

Name of the script to apply when the route is matched. The route is skipped when this is blank/missing.

Response

200 - Success

result

edge_functions_trigger_id

Edge function trigger id

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all edge functions triggers

GET /v1/{crn}/zones/{zone_identifier}/workers/routes

List all edge functions triggers on a given zone

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.edge-functions-routes.read

Request

Response

200 - Success

result

edge_functions_triggers_resp

An array with items in the list response

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get an edge functions trigger

GET /v1/{crn}/zones/{zone_identifier}/workers/routes/{route_id}

Get an edge functions trigger on a given zone.

Request

Response

200 - Success

result

edge_functions_trigger_resp

Edge function trigger ID

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update an edge functions trigger

PUT /v1/{crn}/zones/{zone_identifier}/workers/routes/{route_id}

Update an edge functions trigger on a given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.edge-functions-routes.update

Request

Request Body

edge_functions_trigger_req

Update an edge functions trigger request.

pattern

Required *

string

A string pattern

script

string

Name of the script to apply when the route is matched. The route is skipped when this is blank/missing.

Response

200 - Success

result

edge_functions_trigger_resp

Edge function trigger ID

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete an edge functions trigger

DELETE /v1/{crn}/zones/{zone_identifier}/workers/routes/{route_id}

Delete an edge functions trigger on a given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.performance.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.edge-functions-routes.delete

Request

Response

200 - Success

result

edge_functions_trigger_id

Edge function trigger id

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List range applications

GET /v1/{crn}/zones/{zone_identifier}/range/apps

Get a list of currently existing Range Applications inside a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.range-apps.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

page

integer

Page number of paginated results.

per_page

integer

Maximum number of Range applications per page.

order

string

Field by which to order the list of Range applications.

direction

string

Direction in which to order results [ascending/descending order].

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for Range application objects

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create Range Application

POST /v1/{crn}/zones/{zone_identifier}/range/apps

Create a Range Applications inside a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.range-apps.create

Request

Request Body

range_app_req

Create a range app

protocol

Required *

string

Defines the protocol (and optionally port) for this application. The currently supported protocols are `tcp`, `udp`, `ssh`, `rdp`, and `minecraft`.

dns

Required *

object

Name and type of the DNS record for this application

type

string

DNS record type

name

string

DNS record name

origin_direct

array

IP address and port of the origin for this Range application. If configuring a load balancer, use\ \ 'origin_dns' and 'origin_port'. This cannot be combined with 'origin_dns' and 'origin_port'.

origin_dns

object

DNS record pointing to the origin for this Range application. This is used for configuring a load\ \ balancer. When specifying an individual IP address, use 'origin_direct'. This requires 'origin_port' and\ \ cannot be combined with 'origin_direct'.

name

Required *

string

Name of the origin.

origin_port

integer

Port at the origin that listens to traffic from this Range application. Requires 'origin_dns' and\ \ cannot be combined with 'origin_direct'.

ip_firewall

boolean

Enables the IP Firewall for this application. Only available for TCP applications.

proxy_protocol

string

Allows for the true client IP to be passed to the service

edge_ips

object

Configures IP version for the hostname of this application. Default is {"type":"dynamic", "connectivity"\ :"all"}.

type

string

The type of edge IP configuration.

connectivity

string

Specifies the IP version (or all)

traffic_type

string

Configure how traffic is handled at the edge. If set to "direct" traffic is passed through to the service. In the case of "http" or "https" HTTP/s features at the edge are applied ot this traffic.

tls

string

Configure if and how TLS connections are terminated at the edge.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

range_application_object

Range application object

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get range application a zone

GET /v1/{crn}/zones/{zone_identifier}/range/apps/{app_identifier}

Get the application configuration of a specific application inside a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

app_identifier

Required *

string

Application identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

range_application_object

Range application object

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update range application

PUT /v1/{crn}/zones/{zone_identifier}/range/apps/{app_identifier}

Update a Range Application inside a zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.range-apps.update

Request

Request Body

range_app_req

Update a range app

protocol

Required *

string

Defines the protocol (and optionally port) for this application. The currently supported protocols are `tcp`, `udp`, `ssh`, `rdp`, and `minecraft`.

dns

Required *

object

Name and type of the DNS record for this application

type

string

DNS record type

name

string

DNS record name

origin_direct

array

IP address and port of the origin for this Range application. If configuring a load balancer, use\ \ 'origin_dns' and 'origin_port'. This cannot be combined with 'origin_dns' and 'origin_port'.

origin_dns

object

DNS record pointing to the origin for this Range application. This is used for configuring a load\ \ balancer. When specifying an individual IP address, use 'origin_direct'. This requires 'origin_port' and\ \ cannot be combined with 'origin_direct'.

name

Required *

string

Name of the origin.

origin_port

integer

Port at the origin that listens to traffic from this Range application. Requires 'origin_dns' and\ \ cannot be combined with 'origin_direct'.

ip_firewall

boolean

Enables the IP Firewall for this application. Only available for TCP applications.

proxy_protocol

string

Allows for the true client IP to be passed to the service

edge_ips

object

Configures IP version for the hostname of this application. Default is {"type":"dynamic", "connectivity"\ :"all"}.

type

string

The type of edge IP configuration.

connectivity

string

Specifies the IP version (or all)

traffic_type

string

Configure how traffic is handled at the edge. If set to "direct" traffic is passed through to the service. In the case of "http" or "https" HTTP/s features at the edge are applied ot this traffic.

tls

string

Configure if and how TLS connections are terminated at the edge.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

app_identifier

Required *

string

Application identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

range_application_object

Range application object

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete range application

DELETE /v1/{crn}/zones/{zone_identifier}/range/apps/{app_identifier}

Delete a specific application configuration.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.range-apps.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

app_identifier

Required *

string

Application identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

range_application_object

Range application object

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all certificates

GET /v1/{crn}/zones/{zone_identifier}/ssl/certificate_packs

CIS automatically adds an active DNS zone to a universal SSL certificate, shared among multiple customers. Customers can order dedicated certificates for the owning zones. This API lists all certificates for a zone, including shared and dedicated certificates.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.certificate-packs.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

certificate_packs

Certificate packs

result_info

result_info

Result information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Fetch Total TLS configuration

GET /v1/{crn}/zones/{zone_identifier}/acm/total_tls

For a given zone identifier, get the Total TLS configuration.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

result

total_tls

Total TLS

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update Total TLS configuration

POST /v1/{crn}/zones/{zone_identifier}/acm/total_tls

For a given zone identifier, update the Total TLS configuration.

Request

Request Body

total_tls_req

Change Total TLS configuration

enabled

Required *

boolean

Enabled/disabled

certificate_authority

Required *

string

Certificate authority value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

result

total_tls

Total TLS

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get SSL setting

GET /v1/{crn}/zones/{zone_identifier}/settings/ssl

For a given zone identifier, get SSL setting.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

result

ssl_setting

SSL setting

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Change SSL setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/ssl

For a given zone identifier, change SSL setting.

Request

Request Body

ssl_setting_req

Change SSL setting

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

result

ssl_setting

SSL setting

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all custom certificates

GET /v1/{crn}/zones/{zone_identifier}/custom_certificates

For a given zone identifier, list all custom certificates.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.custom-certificates.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

custom_certificate_packs

Custom certificate packs

result_info

result_info

Result information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Upload a custom certificate

POST /v1/{crn}/zones/{zone_identifier}/custom_certificates

For a given zone identifier, upload a custom certificates.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.custom-certificates.create

Request

Request Body

custom_cert_req

Upload a custom certificate.

certificate

Required *

string

Certificates

private_key

Required *

string

Private key

bundle_method

string

Methods shown in UI mapping to API: Compatible(ubiquitous), Modern(optimal), User Defined(force)

geo_restrictions

object

Geo restrictions

label

Required *

string

Properties

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

custom_cert_pack

Custom certificate pack

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get custom certificate

GET /v1/{crn}/zones/{zone_identifier}/custom_certificates/{custom_cert_id}

For a given zone identifier, get a custom certificates.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

custom_cert_id

Required *

string

Custom certificate ID

Query Parameters

Response

200 - Success

result

custom_cert_pack

Custom certificate pack

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update custom certificate

PATCH /v1/{crn}/zones/{zone_identifier}/custom_certificates/{custom_cert_id}

For a given zone identifier, update a custom certificates.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.custom-certificates.update

Request

Request Body

custom_cert_req

Update a custom certificate.

certificate

Required *

string

Certificates

private_key

Required *

string

Private key

bundle_method

string

Methods shown in UI mapping to API: Compatible(ubiquitous), Modern(optimal), User Defined(force)

geo_restrictions

object

Geo restrictions

label

Required *

string

Properties

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

custom_cert_id

Required *

string

Custom certificate ID

Query Parameters

Response

200 - Success

result

custom_cert_pack

Custom certificate pack

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete custom certificate

DELETE /v1/{crn}/zones/{zone_identifier}/custom_certificates/{custom_cert_id}

For a given zone identifier, delete a custom certificates.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.custom-certificates.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

custom_cert_id

Required *

string

Custom certificate ID

Query Parameters

Response

200 - Success

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Set certificate priority

PUT /v1/{crn}/zones/{zone_identifier}/custom_certificates/prioritize

For a given zone identifier, set priority of certificates.

Request

Request Body

cert_priority_req

Set priority of certificates.

certificates

Required *

array

Certificates array

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get details of universal certificate

GET /v1/{crn}/zones/{zone_identifier}/ssl/universal/settings

For a given zone identifier, get universal certificate.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.universal-ssl-setting.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Enable or Disable universal certificate

PATCH /v1/{crn}/zones/{zone_identifier}/ssl/universal/settings

Change universal certificate setting.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.universal-ssl-setting.update

Request

Request Body

universal_cert_toggle_req

Enable or disable universal certificate.

enabled

Required *

boolean

Enabled

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get TLS 1.2 only setting

GET /v1/{crn}/zones/{zone_identifier}/settings/tls_1_2_only

For a given zone identifier, get TLS 1.2 only setting.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Set TLS 1.2 setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/tls_1_2_only

For a given zone identifier, set TLS 1.2 setting

Request

Request Body

tls_1_2_setting_req

Set security-level setting.

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get TLS 1.3 setting

GET /v1/{crn}/zones/{zone_identifier}/settings/tls_1_3

For a given zone identifier, get TLS 1.3 setting.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Set TLS 1.3 setting

PATCH /v1/{crn}/zones/{zone_identifier}/settings/tls_1_3

For a given zone identifier, set TLS 1.3 setting.

Request

Request Body

tls_1_3_setting_req

Set security-level setting.

value

Required *

string

Value

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Order advanced certificate

POST /v2/{crn}/zones/{zone_identifier}/ssl/certificate_packs/order

Order an advanced certificate pack for a given zone. The zone should be active before ordering an advanced certificate pack.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.certificate-packs.create

Request

Request Body

advanced_cert_req

Order an advanced certificate pack.

type

Required *

string

Certificate type

hosts

Required *

hostnames

Host name

validation_method

Required *

string

Validation Method selected for the order.

validity_days

Required *

integer

Validity Days selected for the order.

certificate_authority

Required *

string

Certificate Authority selected for the order. Selecting Let's Encrypt reduces customization of other fields: validation_method must be 'txt', validity_days must be 90, `cloudflare_branding` must be omitted, and hosts must contain only 2 entries, one for the zone name and one for the subdomain wildcard of the zone name (for example, example.com, *.example.com).

cloudflare_branding

boolean

Indicates whether or not to add Cloudflare Branding for the order. This will add sni.cloudflaressl.com as the Common Name if set to `true`.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

object

Result of ordering advanced certificate pack

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Restart validation for an advanced certificate pack

PATCH /v2/{crn}/zones/{zone_identifier}/ssl/certificate_packs/{cert_identifier}

Restart validation for an advanced certificate pack. This is only a validation operation for a Certificate Pack in a validation_timed_out status.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.certificate-packs.update

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

cert_identifier

Required *

string

Certificate identifier

Query Parameters

Response

200 - Success

result

object

Result of ordering advanced certificate pack

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete advanced certificate

DELETE /v2/{crn}/zones/{zone_identifier}/ssl/certificate_packs/{cert_identifier}

Delete an advanced certificate pack.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.certificate-packs.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

cert_identifier

Required *

string

Certificate identifier

Query Parameters

Response

200 - Success

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get SSL Verification Info for a Zone

GET /v2/{crn}/zones/{zone_identifier}/ssl/verification

Get SSL Verification Info for a Zone

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

array

SSL verification result

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all origin certificates

GET /v1/{crn}/zones/{zone_identifier}/origin_certificates

List all existing CIS-issued Certificates for a given domain.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.origin-certificates.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

array

Container for response information

result_info

result_info

Result information

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create a CIS-signed certificate

POST /v1/{crn}/zones/{zone_identifier}/origin_certificates

Create a CIS-signed certificate.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.origin-certificates.create

Request

Request Body

origin_certificate_req

hostnames

Required *

array

Array of hostnames or wildcard names (for example, *.example.com) bound to the certificate

request_type

Required *

string

Signature type desired on certificate

requested_validity

integer

The number of days that the certificate should be valid.

csr

string

The Certificate Signing Request (CSR)

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

origin_certificate

Origin certificate

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Revoke a created origin certificate for a domain

DELETE /v1/{crn}/zones/{zone_identifier}/origin_certificates/{cert_identifier}

Revoke a created origin certificate.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.origin-certificates.delete

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

cert_identifier

Required *

string

Certificate identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get an existing origin certificate

GET /v1/{crn}/zones/{zone_identifier}/origin_certificates/{cert_identifier}

Get an existing origin certificate by its serial number.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.origin-certificates.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

cert_identifier

Required *

string

Certificate identifier

Query Parameters

Response

200 - Success

result

origin_certificate

Origin certificate

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List access certificates

GET /v1/{crn}/zones/{zone_id}/access/certificates

List access certificates

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create access certificate

POST /v1/{crn}/zones/{zone_id}/access/certificates

Create access certificate

Request

Request Body

access_cert_input

name

Required *

string

Access certificate name

certificate

Required *

string

Access certificate

associated_hostnames

associated_hostnames

The hostnames that are prompted for this certificate

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

cert_result

Access certificate details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get access certificate

GET /v1/{crn}/zones/{zone_id}/access/certificates/{cert_id}

Get access certificate

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

cert_result

Access certificate details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update access certificate

PUT /v1/{crn}/zones/{zone_id}/access/certificates/{cert_id}

Update access certificate

Request

Request Body

update_access_cert_input

name

Required *

string

Access certificate name

associated_hostnames

associated_hostnames

The hostnames that are prompted for this certificate

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

cert_result

Access certificate details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete access certificate

DELETE /v1/{crn}/zones/{zone_id}/access/certificates/{cert_id}

Delete access certificate

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List access applications

GET /v1/{crn}/zones/{zone_id}/access/apps

List access applications

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create access application

POST /v1/{crn}/zones/{zone_id}/access/apps

Create access application

Request

Request Body

access_app_input

name

Required *

string

Application name

domain

Required *

string

The domain and path that Access blocks

session_duration

string

The amount of time that the tokens issued for this application are valid.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Access application details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get access application

GET /v1/{crn}/zones/{zone_id}/access/apps/{app_id}

Get access application

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

app_result

Access application details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update access application

PUT /v1/{crn}/zones/{zone_id}/access/apps/{app_id}

Update access application

Request

Request Body

access_app_input

name

Required *

string

Application name

domain

Required *

string

The domain and path that Access blocks

session_duration

string

The amount of time that the tokens issued for this application are valid.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

app_result

Access application details

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete access application

DELETE /v1/{crn}/zones/{zone_id}/access/apps/{app_id}

Delete access application

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List access policies

GET /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies

List access policies

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create access policy

POST /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies

Create access policy

Request

Request Body

access_policy_input

name

Required *

string

Policy name

decision

Required *

string

Defines the action Access takes if the policy matches the user

include

Required *

array

The include policy works like an OR logical operator. The user must satisfy one of the rules in includes.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

policy_result

Access policies information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get access policy

GET /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}

Get access policy

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

policy_result

Access policies information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update access policy

PUT /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}

Update access policy

Request

Request Body

access_policy_input

name

Required *

string

Policy name

decision

Required *

string

Defines the action Access takes if the policy matches the user

include

Required *

array

The include policy works like an OR logical operator. The user must satisfy one of the rules in includes.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

policy_result

Access policies information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete access policy

DELETE /v1/{crn}/zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}

Delete access policy

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get access certificates settings

GET /v1/{crn}/zones/{zone_id}/access/certificates/settings

Get access certificates settings

Request

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update access certificates settings

PUT /v1/{crn}/zones/{zone_id}/access/certificates/settings

Update access certificates settings

Request

Request Body

access_cert_settings_input

hostname

Required *

string

client_certificate_forwarding

Required *

boolean

Whether to forward the client certificate

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all filters for a zone

GET /v1/{crn}/zones/{zone_identifier}/filters

List all filters for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create filters for a zone

POST /v1/{crn}/zones/{zone_identifier}/filters

Create new filters for a zone under a service instance.

Request

Request Body

filters_input

JSON objects which are used to create filters.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update filters

PUT /v1/{crn}/zones/{zone_identifier}/filters

Update existing filters for a zone under a service instance.

Request

Request Body

filters_update_input

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete filters

DELETE /v1/{crn}/zones/{zone_identifier}/filters

Delete filters by filter IDs.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

id

Required *

string

IDs of filters which will be deleted.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a filter

DELETE /v1/{crn}/zones/{zone_identifier}/filters/{filter_identifier}

Delete a filter, given its ID.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

filter_identifier

Required *

string

Identifier of the filter to be deleted.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get filter details by ID

GET /v1/{crn}/zones/{zone_identifier}/filters/{filter_identifier}

Get the details of a filter for a zone under a service instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

filter_identifier

Required *

string

Identifier of filter for the zone.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

filter_object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a filter

PUT /v1/{crn}/zones/{zone_identifier}/filters/{filter_identifier}

Update an existing filter for a zone under a service instance.

Request

Request Body

filter_update_input

id

Required *

string

Identifier of the filter

expression

Required *

string

A filter expression.

description

string

To briefly describe the filter.

paused

boolean

Indicates if the filter is active.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

filter_identifier

Required *

string

Identifier of filter

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

filter_object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List all firewall rules for a zone

GET /v1/{crn}/zones/{zone_identifier}/firewall/rules

List all firewall rules for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

result_info

result_info

Result information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create firewall rules for a zone

POST /v1/{crn}/zones/{zone_identifier}/firewall/rules

Create new firewall rules for a zone under a service instance.

Request

Request Body

firewall_rules_input_with_filter_id

JSON objects which are used to create firewall rules.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update firewall rules

PUT /v1/{crn}/zones/{zone_identifier}/firewall/rules

Update existing firewall rules for a zone under a service instance.

Request

Request Body

firewall_rules_update_input

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete firewall rules

DELETE /v1/{crn}/zones/{zone_identifier}/firewall/rules

Delete firewall rules by filter IDs.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

id

Required *

string

IDs of firewall rules which will be deleted.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a firewall rule

DELETE /v1/{crn}/zones/{zone_identifier}/firewall/rules/{firewall_rule_identifier}

Delete a firewall rule, given its ID.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

firewall_rule_identifier

Required *

string

Identifier of the firewall rule to be deleted.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get firewall rule details by ID

GET /v1/{crn}/zones/{zone_identifier}/firewall/rules/{firewall_rule_identifier}

Get the details of a firewall rule for a zone under a service instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

firewall_rule_identifier

Required *

string

Identifier of firewall rule for the zone.

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

firewall_rule_object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a firewall rule

PUT /v1/{crn}/zones/{zone_identifier}/firewall/rules/{firewall_rule_identifier}

Update an existing firewall rule for a zone under a service instance.

Request

Request Body

firewall_rule_update_input

action

Required *

string

The firewall action to perform, "log" action is only available for enterprise plan instances.

paused

boolean

Indicates if the firewall rule is active.

description

string

To briefly describe the firewall rule, omitted from object if empty.

filter

object

An existing filter

id

Required *

string

Identifier of the filter

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

firewall_rule_identifier

Required *

string

Identifier of firewall rule

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

firewall_rule_object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List alert policies

GET /v1/{crn}/alerting/policies

List configured alert policies for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create an alert policy

POST /v1/{crn}/alerting/policies

Create a new alert policy for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Request

Request Body

create_alert_policy_input

Create alert policy body

name

Required *

string

Policy name

description

string

Policy description

enabled

Required *

boolean

Is the alert policy active

alert_type

Required *

string

Condition for the alert

mechanisms

Required *

object

Delivery mechanisms for the alert

email

array

webhooks

array

filters

object

Optional filters depending for the alert type

conditions

object

Conditions depending on the alert type. HTTP DDOS Attack Alerter does not have any conditions. The Load Balancing Pool Enablement Alerter takes conditions that describe for all pools whether the pool is being enabled, disabled, or both. This field is not required when creating a new alert.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get an alert policy

GET /v1/{crn}/alerting/policies/{policy_id}

Get an alert policy for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

policy_id

Required *

string

Alert policy identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update an alert policy

PUT /v1/{crn}/alerting/policies/{policy_id}

Update an existing alert policy for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Request

Request Body

update_alert_policy_input

Update alert policy body

name

Required *

string

Policy name

description

string

Policy description

enabled

Required *

boolean

Is the alert policy active

alert_type

Required *

string

Condition for the alert. Use 'dos_attack_l7' to set up an HTTP DDOS Attack Alerter, use 'g6_pool_toggle_alert' to set up Load Balancing Pool Enablement Alerter, use 'clickhouse_alert_fw_anomaly' to set up WAF Alerter and 'clickhouse_alert_fw_ent_anomaly' to set up Advanced Security Alerter

mechanisms

Required *

object

Delivery mechanisms for the alert, can include an email, a webhook, or both

email

array

webhooks

array

conditions

Required *

object

Conditions depending on the alert type. HTTP DDOS Attack Alerter does not have any conditions. The Load Balancing Pool Enablement Alerter takes conditions that describe for all pools whether the pool is being enabled, disabled, or both.

filters

object

Optional filters depending for the alert type. HTTP DDOS Attack Alerter does not require any filters. The Load Balancing Pool Enablement Alerter requires a list of IDs for the pools and their corresponding alert trigger (set whether alerts are recieved on disablement, enablement, or both). The basic WAF Alerter requires a list of zones to be monitored. The Advanced Security Alerter requires a list of zones to be monitored as well as a list of services to monitor.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

policy_id

Required *

string

Alert policy identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete an alert policy

DELETE /v1/{crn}/alerting/policies/{policy_id}

Delete an alert policy for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

policy_id

Required *

string

Alert policy identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Test an alert policy

POST /v1/{crn}/alerting/policies/{policy_id}/test

Test an existing alert policy for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Request

Request Body

test_alert_policy_input

Test alert policy body

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

policy_id

Required *

string

Alert policy identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

boolean

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List alert webhooks

GET /v1/{crn}/alerting/destinations/webhooks

List configured alert webhooks for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create an alert webhook

POST /v1/{crn}/alerting/destinations/webhooks

Create a new alert webhook for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Request

Request Body

alert_webhook_input

Create alert webhook body

name

Required *

string

Webhook Name

url

Required *

string

Webhook url

secret

string

The optional secret or API key needed to use the webhook

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get an alert webhook

GET /v1/{crn}/alerting/destinations/webhooks/{webhook_id}

Get an alert webhook for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

webhook_id

Required *

string

Alert webhook identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update an alert webhook

PUT /v1/{crn}/alerting/destinations/webhooks/{webhook_id}

Update an existing alert webhook for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Request

Request Body

alert_webhook_input

Update alert webhook body

name

Required *

string

Webhook Name

url

Required *

string

Webhook url

secret

string

The optional secret or API key needed to use the webhook

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

webhook_id

Required *

string

Alert webhook identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete an alert webhook

DELETE /v1/{crn}/alerting/destinations/webhooks/{webhook_id}

Delete an alert webhook for the CIS instance.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.update

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

webhook_id

Required *

string

Alert webhook identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List logpush jobs

GET /v2/{crn}/zones/{zone_id}/logpush/jobs

List configured logpush jobs for your domain.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

logpush_job_result

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create a logpush job

POST /v2/{crn}/zones/{zone_id}/logpush/jobs

Create a new logpush job for the domain.

Request

Request Body

Create logpush job body

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

logpush_job_pack

Logpush job pack

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a logpush job

GET /v2/{crn}/zones/{zone_id}/logpush/jobs/{job_id}

Get a logpush job for a given zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

job_id

Required *

integer

Logpush job identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

logpush_job_pack

Logpush job pack

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update a logpush job

PUT /v2/{crn}/zones/{zone_id}/logpush/jobs/{job_id}

Update an existing logpush job for a given zone.

Request

Request Body

Update logpush job

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

job_id

Required *

integer

Logpush job identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

logpush_job_pack

Logpush job pack

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a logpush job

DELETE /v2/{crn}/zones/{zone_id}/logpush/jobs/{job_id}

Delete a logpush job for a zone.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

job_id

Required *

integer

Logpush job identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a new ownership challenge sent to your destination

POST /v2/{crn}/zones/{zone_id}/logpush/ownership

Get a new ownership challenge.

Request

Request Body

logpush_ownership_cos_req

Get ownership body

cos

object

Information to identify the COS bucket where the data will be pushed.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

ownership_challenge_result

Ownership Challenge result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Validate ownership challenge of the destination

POST /v2/{crn}/zones/{zone_id}/logpush/ownership/validate

Validate ownership challenge of the destination

Request

Request Body

ownership_validate_cos_req

Get ownership body

cos

object

Information to identify the COS bucket where the data will be pushed.

ownership_challenge

string

Ownership challenge token to prove destination ownership.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

valid

boolean

Valid

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

The list of all fields available for a dataset

GET /v2/{crn}/zones/{zone_id}/logpush/datasets/{dataset}/fields

The list of all fields available for a dataset.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

dataset

Required *

string

The dataset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

Result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List logpush jobs for dataset

GET /v2/{crn}/zones/{zone_id}/logpush/datasets/{dataset}/jobs

List configured logpush jobs for a dataset.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

dataset

Required *

string

The dataset

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

logpush_job_pack

Logpush job pack

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get log retention

GET /v1/{crn}/zones/{zone_id}/logs/retention

Get log retention setting for Logpull/Logpush on your domain.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

The domain ID

Query Parameters

Response

200 - Success

result

object

success

boolean

Success response

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update log retention

POST /v1/{crn}/zones/{zone_id}/logs/retention

Update log retention flag for Logpull/Logpush.

Request

Request Body

log_retention_req

Create logpush job body

flag

Required *

boolean

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

The domain ID

Query Parameters

Response

200 - Success

result

object

success

boolean

Success response

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get logs by RayID

GET /v1/{crn}/zones/{zone_id}/logs/rayids/{ray_id}

Get log events for a specific RayID. RayIDs are unique identifiers for requests that can be used to trace requests through Cloudflare's network.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

The domain ID

ray_id

Required *

string

RayID identifier for the request

Query Parameters

fields

string

Comma-separated list of fields to include in the response. If not specified, all fields are returned.

timestamps

string

Format for timestamps. Options are 'unix', 'unixnano', or 'rfc3339'. Default is 'unix'.

Response

200 - Success

success

boolean

Success response

errors

errors

Errors

messages

messages

Messages

result

array

Array of log events matching the RayID

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Bot Analytics score source

GET /v1/{crn}/zones/{zone_identifier}/bot_analytics/score_source

Get Bot Analytics score source for a given zone. Use this to identify the most common detection engines used to score your traffic.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.bot_score.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

since

Required *

string

UTC datetime for start of query.

until

Required *

string

UTC datetime for end of query.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Bot Analytics timeseries

GET /v1/{crn}/zones/{zone_identifier}/bot_analytics/timeseries

Get Bot Analytics timeseries for a given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.bot_timeseries.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

since

Required *

string

UTC datetime for start of query.

until

Required *

string

UTC datetime for end of query.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Bot Analytics top attributes

GET /v1/{crn}/zones/{zone_identifier}/bot_analytics/top_ns

Get Bot Analytics top attributes for a given zone. Use this to view more detailed information on specific IP addresses and other characteristics.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.bot_topns.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

since

Required *

string

UTC datetime for start of query.

until

Required *

string

UTC datetime for end of query.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Bot management settings

GET /v1/{crn}/zones/{zone_identifier}/bot_management

Get Bot management settings for a given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.bot_management.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

result

bot_mgt_settings

Bot Management settings

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update Bot management settings

PUT /v1/{crn}/zones/{zone_identifier}/bot_management

Update Bot management settings for given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.security.update

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.bot_management.update

Request

Request Body

bot_mgt_settings

Update Bot management setting.

session_score

boolean

Set to disable tracking the max bot score during a session using the Bot Management cookie.

enable_js

boolean

Use JavaScript detections to improve bot detection.

use_latest_model

boolean

Automatically update to the newest bot detection models as they are released.

ai_bots_protection

string

Block scrapers and crawlers known to be feeding AI training data.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

array

Array of errors encountered

messages

array

Array of messages returned

result

bot_mgt_settings

Bot Management settings

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Zone Hold

GET /v1/{crn}/zones/{zone_identifier}/hold

Get zone hold status for a given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone_hold.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Enforce a zone hold

POST /v1/{crn}/zones/{zone_identifier}/hold

Enforce a zone hold for given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone_hold.create

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Stop enforcement of a zone hold on the zone

DELETE /v1/{crn}/zones/{zone_identifier}/hold

Stop enforcement of a zone hold for a given zone.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.reliability.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.zone_hold.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get range analytics summary

GET /v1/{crn}/zones/{zone_identifier}/range/analytics/events/summary

Get summarized analytics data for Range applications.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

metrics

array

One or more metrics to compute.

dimensions

array

Used to break down the data by given attributes.

filters

string

Used to filter rows by one or more dimensions. Filters can be combined using OR and AND boolean logic. AND takes precedence over OR in all the expressions. The OR operator is defined using a comma (,) or OR keyword surrounded by whitespace. The AND operator is defined using a semicolon (;) or AND keyword surrounded by whitespace. Comparison options are:

sort

array

The sort order for the result set; sort fields must be included in metrics or dimensions.

since

string

The start of the time interval to query, which defaults to `until - 6 hours`.

until

string

The end of the time interval to query, which defaults to the current time.

Response

200 - Success

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get range analytics by time

GET /v1/{crn}/zones/{zone_identifier}/range/analytics/events/bytime

Retrieves a list of aggregate metrics grouped by time interval.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_identifier

Required *

string

Zone identifier

Query Parameters

metrics

array

One or more metrics to compute.

dimensions

array

Used to break down the data by given attributes.

filters

string

Used to filter rows by one or more dimensions. Filters can be combined using OR and AND boolean logic. AND takes precedence over OR in all the expressions. The OR operator is defined using a comma (,) or OR keyword surrounded by whitespace. The AND operator is defined using a semicolon (;) or AND keyword surrounded by whitespace. Comparison options are:

sort

array

The sort order for the result set; sort fields must be included in metrics or dimensions.

since

string

The start of the time interval to query, which defaults to `until - 6 hours`.

until

string

The end of the time interval to query, which defaults to the current time.

time_delta

string

Used to select time series resolution.

Response

200 - Success

success

boolean

Was the operation successful?

errors

errors

Errors

messages

messages

Messages

result

analytics_by_time_object

The analytics by time object.

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List instant logs jobs

GET /v1/{crn}/zones/{zone_id}/logpush/edge/jobs

List all currently active instant logs jobs.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.read

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.instant-logs-jobs.read

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create an instant logs job

POST /v1/{crn}/zones/{zone_id}/logpush/edge/jobs

Create an instant logs job.

Authorization

To call this method, you must be assigned one or more IAM access roles that include the following action.

  • internet-svcs.zones.manage

Auditing

Calling this method generates the following auditing event.

  • internet-svcs.instant-logs-jobs.create

Request

Request Body

instant_logs_create

fields

Required *

string

Comma-separated list of fields.

filter

Required *

string

Filters to drill down into specific events.

sample

Required *

integer

The sample parameter is the sample rate of the records set by the client: "sample": 1 is 100% of records "sample": 10 is 10% and so on.

kind

Required *

string

Type of instant logs job

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

zone_id

Required *

string

Zone identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

Container for response information

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List Managed Lists

GET /v1/{crn}/rules/managed_lists

List available managed lists for your instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

managed_lists_result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List Custom Lists

GET /v1/{crn}/rules/lists

List the custom lists for your instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_lists_result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create Custom List

POST /v1/{crn}/rules/lists

Create a custom list for your instance.

Request

Request Body

create_custom_list_req

kind

Required *

string

The type of list. Each type supports specific list items based on plan type (IP addresses, ASNs, or hostnames).

name

Required *

string

An informative name for the list. Use this name in rule expressions.

description

string

An informative summary of the list.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_list_result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Custom List

GET /v1/{crn}/rules/lists/{list_id}

Get a custom list for your instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_list_result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update Custom List

PUT /v1/{crn}/rules/lists/{list_id}

Update the description of a custom list.

Request

Request Body

update_custom_list_req

description

string

An informative summary of the list.

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

custom_list_result

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete Custom List

DELETE /v1/{crn}/rules/lists/{list_id}

Delete a custom list for your instance.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get List Items

GET /v1/{crn}/rules/lists/{list_id}/items

Get the list items for a custom list.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

Query Parameters

cursor

string

The pagination cursor. An opaque string token indicating the position from which to continue when requesting the next/previous set of records. Cursor values are provided under result_info.cursors in the response.

per_page

integer

Amount of results to include in each paginated response. A non-negative 32 bit integer. Minimum 1, maximum 500.

string

A search query to filter returned items. Its meaning depends on the list type: IP addresses must start with the provided string, hostnames and bulk redirects must contain the string, and ASNs must match the string exactly.

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

array

result_info

list_items_result_info

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Create List Items

POST /v1/{crn}/rules/lists/{list_id}/items

Create list items for your custom list. This operation is asynchronous. To get current the operation status, use the get operation status API.

Request

Request Body

create_list_items_req

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete List Items

DELETE /v1/{crn}/rules/lists/{list_id}/items

Remove one or more list items from your custom list. This operation is asynchronous. To get current the operation status, use the get operation status API.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Update All List Items

PUT /v1/{crn}/rules/lists/{list_id}/items

Update all list items for your custom list. This removes existing items from the list. This operation is asynchronous. To get current the operation status, use the get operation status API.

Request

Request Body

create_list_items_req

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get List Item

GET /v1/{crn}/rules/lists/{list_id}/items/{item_id}

Get a specific list item.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

list_id

Required *

string

List identifier

item_id

Required *

string

List item identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

list_item

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get List Operation Status

GET /v1/{crn}/rules/lists/bulk_operations/{operation_id}

Get the operation status for a custom list operation.

Request

Path Parameters

crn

Required *

string

Full URL-encoded cloud resource name of the service instance

operation_id

Required *

string

List operation identifier

Query Parameters

Response

200 - Success

success

boolean

Was operation successful

errors

errors

Errors

messages

messages

Messages

result

object

400 - Bad Request

401 - Unauthorized

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Zone level Authenticated Origin Pull Settings.

GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/settings

Get whether zone-level authenticated origin pulls is enabled or not. It is false by default.

Request

Response

200 - Success

result

object

result

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Set Zone level Authenticated Origin Pull Settings.

PUT /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/settings

Enable or disable zone-level authenticated origin pulls. 'enabled' should be set true either before/after the certificate is uploaded to see the certificate in use.

Request

Request Body

zone_origin_pull_settings_req

enable or disable zone-level authenticated origin pulls.

enabled

Required *

boolean

enabled

Response

200 - Success

result

object

result

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List Zone level Authenticated Origin Pull Certificates.

GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth

List zone-level authenticated origin pulls certificates.

Request

Response

200 - Success

result

origin_pull_certificate_packs

list of origin pull certificate packs

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Upload Zone level Authenticated Origin Pull Certificate.

POST /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth

Upload your own certificate you want Cloudflare to use for edge-to-origin communication to override the shared certificate Please note that it is important to keep only one certificate active. Also, make sure to enable zone-level authenticated origin pulls by making a PUT call to settings endpoint to see the uploaded certificate in use.

Request

Request Body

origin_pull_cert_req

upload a custom certificate.

certificate

Required *

string

the zone's leaf certificate

private_key

Required *

string

the zone's private key

Response

200 - Success

result

origin_pull_certificate_pack

origin pull certificate pack

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a Zone level Authenticated Origin Pull Certificate.

GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/{cert_identifier}

Get a zone-level authenticated origin pulls certificate.

Request

Response

200 - Success

result

origin_pull_certificate_pack

origin pull certificate pack

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a Zone level Authenticated Origin Pull Certificate.

DELETE /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/{cert_identifier}

Delete a zone-level authenticated origin pulls certificate.

Request

Response

200 - Success

result

origin_pull_certificate_pack

origin pull certificate pack

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List Per-hostname Authenticated Origin Pull Settings.

GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames

List all per hostname authenticated origin pull settings.

Request

Response

200 - Success

result

hostnames_settings_resp

array of hostname settings response

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Set Hostname level Authenticated Origin Pull Settings.

PUT /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames

Associate a hostname to a certificate and enable, disable or invalidate the association. If disabled, client certificate will not be sent to the hostname even if activated at the zone level. 100 maximum associations on a single certificate are allowed

Request

Request Body

hostname_origin_pull_settings_req

associate a hostname to a certificate and enable, disable or invalidate the association.

config

Required *

array

An array with items in the settings request

Response

200 - Success

result

hostnames_settings_resp

array of hostname settings response

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get Hostname level Authenticated Origin Pull Settings.

GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/{hostname}

Get hostname-level authenticated origin pulls settings.

Request

Response

200 - Success

result

hostname_settings_resp

hostname level authenticated origin pull settings response

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

List Per-hostname Authenticated Origin Pull certificates.

GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates

List all per hostname authenticated origin pull certificates.

Request

Response

200 - Success

result

hostname_certificates_resp

array of hostname certificates response

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Upload Hostname level Authenticated Origin Pull Certificate.

POST /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates

Upload a certificate to be used for client authentication on a hostname. 10 hostname certificates per zone are allowed.

Request

Request Body

origin_pull_cert_req

upload a custom certificate.

certificate

Required *

string

the zone's leaf certificate

private_key

Required *

string

the zone's private key

Response

200 - Success

result

hostname_certificate_pack

certificate pack

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Get a Hostname level Authenticated Origin Pull Certificate.

GET /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates/{cert_identifier}

Get the certificate by ID to be used for client authentication on a hostname.

Request

Response

200 - Success

result

hostname_certificate_pack

certificate pack

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error

Delete a Hostname level Authenticated Origin Pull Certificate.

DELETE /v1/{crn}/zones/{zone_identifier}/origin_tls_client_auth/hostnames/certificates/{cert_identifier}

Delete the certificate by ID to be used for client authentication on a hostname.

Request

Response

200 - Success

result

hostname_certificate_pack

certificate pack

success

boolean

success

errors

errors

Errors

messages

messages

Messages

400 - Bad Request

403 - Forbidden! User has no privilege

404 - Resource not found

500 - Internal server error