'fwaccel dos rate' and 'fwaccel6 dos rate'

Description

Shows and installs the Rate Limiting policy in SecureXL.

Important:

• On VSX Gateway, first go to the context of an applicable Virtual System.

  In Gaia Clish, run: set virtual-system <VSID>

  In Expert mode, run: vsenv <VSID>

• In Cluster, you must configure the SecureXL in the same way on all the Cluster Members.

Syntax for IPv4

fwaccel [-i <SecureXL ID>] dos rate get '<Rule UID>' install

Syntax for IPv6

fwaccel6 dos rate get '<Rule UID>' install

Parameters

Parameter	Description
-i <SecureXL ID>	Specifies the SecureXL instance ID (for IPv4 only).
No Parameters	Shows the applicable built-in usage.
get '<Rule UID>'	Shows information about the rule specified by its Rule UID or its zero-based rule index. The quote marks and angle brackets ('<...>') are mandatory.
install	Installs a new rate limiting policy. Important - This command requires input from the stdin. To use this command, run: fw sam_policy get -l -k req_type -t in -v quota | fwaccel dos rate install For more information about the fw sam_policy command, see the R80.20 Performance Tuning Administration Guide - Section Rate Limiting for DoS Mitigation - Section 'fw sam_policy' and 'fw6 sam_policy'.

Notes

• If you install a new rate limiting policy with more than one rule, it automatically enables the rate limiting feature.

  To manually disable the rate limiting feature after this command, run:

  fwaccel dos config set --disable-rate-limit

• To delete the current rate limiting policy, install a new policy with zero rules.