ServiceEngine

Description

API


    PUT /api/serviceengine/<key>
    DELETE /api/serviceengine/<key>
    GET /api/serviceengine
    GET /api/serviceengine/<key>

CLI


    configure serviceengine <key>
    delete serviceengine <key>
    show serviceengine <key>

Data

ServiceEngine

uuid

Type
string
Category
required
Description

name

Type
string
Category
optional
Description
Default
VM name unknown

tenant_ref

Type
Reference to Tenant
Category
optional
Description

cloud_ref

Type
Reference to Cloud
Category
optional,readonly
Description
Default
/api/cloud?name=Default-Cloud

mgmt_vnic

Type
vNIC
Category
optional,readonly
Description

resources

Type
SeResources
Category
optional,readonly
Description

data_vnics

Type
vNIC
Category
repeated,readonly
Description

controller_ip

Type
string
Category
optional,readonly
Description

host_ref

Type
Reference to VIMgrHostRuntime
Category
optional,readonly
Description

default_gws

Type
DefaultGateway
Category
repeated,readonly
Description

controller_created

Type
bool
Category
optional,readonly
Description
Default
False

se_group_ref

Type
Reference to ServiceEngineGroup
Category
optional
Description

container_mode

Type
bool
Category
optional,readonly
Description
Default
False

flavor

Type
string
Category
optional,readonly
Description
Default

hypervisor

Type
enum
Category
optional,readonly
Description
Choices
DEFAULT, VMWARE_VSAN, VMWARE_ESX, KVM

availability_zone

Type
string
Category
optional,readonly
Description

enable_state

Type
enum
Category
optional
Description
inorder to disable SE set this field appropriately
Default
SE_STATE_ENABLED
Choices
SE_STATE_DISABLED, SE_STATE_DISABLED_FOR_PLACEMENT, SE_STATE_ENABLED

vNIC

if_name

Type
string
Category
optional,readonly
Description

mac_address

Type
string
Category
required,readonly
Description

connected

Type
bool
Category
optional,readonly
Description

is_mgmt

Type
bool
Category
optional,readonly
Description
Default
False

network_ref

Type
Reference to Network
Category
optional,readonly
Description

network_name

Type
string
Category
optional,readonly
Description

dhcp_enabled

Type
bool
Category
optional
Description
Default
True

is_avi_internal_network

Type
bool
Category
optional,readonly
Description
Default
False

enabled

Type
bool
Category
optional
Description
Default
True

adapter

Type
string
Category
optional,readonly
Description

vlan_id

Type
int32
Category
optional,readonly
Description
Default
0

pci_id

Type
string
Category
optional,readonly
Description

linux_name

Type
string
Category
optional,readonly
Description
Default

port_uuid

Type
string
Category
optional,readonly
Description

del_pending

Type
bool
Category
optional,readonly
Description
Default
False

mtu

Type
int32
Category
optional,readonly
Description
Default
1500

vnic_networks

Type
vNICNetwork
Category
repeated
Description

can_se_dp_takeover

Type
bool
Category
optional,readonly
Description
Default
True

vrf_ref

Type
Reference to VrfContext
Category
optional
Description

vrf_id

Type
uint32
Category
optional,readonly
Description
Default
0

vlan_interfaces

Type
VlanInterface
Category
repeated
Description

is_portchannel

Type
bool
Category
optional,readonly
Description
Default
False

members

Type
MemberInterface
Category
repeated,readonly
Description

vNICNetwork

ip

Type
IpAddrPrefix
Category
required
Description

ctlr_alloc

Type
bool
Category
optional
Description
Default
False

mode

Type
enum
Category
required
Description
Default
DHCP
Choices
DHCP, VIP, STATIC, DOCKER_HOST

IpAddrPrefix

ip_addr

Type
IpAddr
Category
required
Description

mask

Type
int32
Category
required
Description

IpAddr

addr

Type
string
Category
required
Description
IP address

type

Type
enum
Category
required
Description
Choices
V4, DNS

VlanInterface

if_name

Type
string
Category
required
Description

vlan_id

Type
int32
Category
optional
Description
Default
0

dhcp_enabled

Type
bool
Category
optional
Description
Default
True

vnic_networks

Type
vNICNetwork
Category
repeated
Description

MemberInterface

if_name

Type
string
Category
required
Description

active

Type
bool
Category
optional
Description
Default
False

SeResources

num_vcpus

Type
int32
Category
required
Description

memory

Type
int32
Category
required
Description

disk

Type
int32
Category
required
Description

hyper_threading

Type
bool
Category
optional
Description

sockets

Type
int32
Category
optional
Description

cores_per_socket

Type
int32
Category
optional
Description

DefaultGateway

ip

Type
IpAddr
Category
required
Description

discovered

Type
bool
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/switchover

CLI


    switchover serviceengine <key>

API


    POST /api/serviceengine/<key>/forcedelete

CLI


    forcedelete serviceengine <key>

API


    POST /api/serviceengine/<key>/reboot

CLI


    reboot serviceengine <key>

References

VrfContext ServiceEngineGroup Network Tenant Cloud VIMgrHostRuntime

Sub Objects

DispatcherTableDumpRuntime

API


    GET /api/serviceengine/<key>/flowtable/<key>
	Query Params: FlowtableEntryFilter

CLI


    show serviceengine <key> flowtable filter [src_ip_addr] [src_ip_mask] [src_port] [src_port_hi] [dst_ip_addr] [dst_ip_mask] [dst_port] [dst_port_hi] [intfname] [core_num] [protocol_str]

Data

DispatcherTableDumpRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

vnic_table

Type
DispatcherOneTableRuntime
Category
repeated
Description

flow_entries

Type
DispatcherEntryRuntime
Category
repeated
Description

DispatcherOneTableRuntime

vnic

Type
uint32
Category
required
Description

mac

Type
string
Category
required
Description

flow_entries

Type
DispatcherEntryRuntime
Category
repeated
Description

DispatcherEntryRuntime

src_ip

Type
IpAddr
Category
required
Description

dst_ip

Type
IpAddr
Category
required
Description

src_port

Type
uint32
Category
required
Description

dst_port

Type
uint32
Category
required
Description

action

Type
uint32
Category
required
Description

is_local

Type
uint32
Category
required
Description

dst_core

Type
int32
Category
required
Description

ctx

Type
uint64
Category
required
Description

tcp_state

Type
int32
Category
required
Description

se_mac

Type
string
Category
required
Description

vs_stat_index

Type
int32
Category
required
Description

flow_flags

Type
uint32
Category
required
Description

list_insertion_time

Type
uint32
Category
required
Description

master_vs_table

Type
uint64
Category
required
Description

protocol

Type
uint32
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/flowtable/clear

CLI


    clear serviceengine <key> flowtable

Data

DispatcherTableDumpClear

se_uuid

Type
string
Category
optional
Description

ServiceEngineRuntimeSummary

API


    GET /api/serviceengine/<key>/runtime/<key>

CLI


    show serviceengine <key> summary

Data

ServiceEngineRuntimeSummary

power_state

Type
enum
Category
optional
Description
Choices
SE_POWER_OFF, SE_POWER_ON, SE_SUSPENDED

vinfra_discovered

Type
bool
Category
optional
Description

se_connected

Type
bool
Category
optional
Description

oper_status

Type
OperationalStatus
Category
optional
Description

hb_status

Type
SeHbStatus
Category
optional
Description

online_since

Type
string
Category
optional
Description

vnic_replay_done

Type
bool
Category
optional
Description

gateway_up

Type
bool
Category
optional
Description

OperationalStatus

state

Type
enum
Category
optional
Description
Choices
OPER_PROCESSING, OPER_UPGRADING, OPER_CREATING, OPER_RESOURCES, OPER_SE_PROCESSING, OPER_AWAIT_MANUAL_PLACEMENT, OPER_ERROR_DISABLED, OPER_UNKNOWN, OPER_PARTITIONED, OPER_FAILED, OPER_UP, OPER_DISABLING, OPER_UNUSED, OPER_INITIALIZING, OPER_INACTIVE, OPER_DOWN, OPER_DISABLED

reason

Type
string
Category
repeated
Description

reason_code

Type
uint64
Category
optional
Description

last_changed_time

Type
TimeStamp
Category
optional
Description

reason_code_string

Type
string
Category
optional
Description

TimeStamp

secs

Type
Unknown
Category
required
Description

usecs

Type
Unknown
Category
required
Description

SeHbStatus

num_hb_misses

Type
int32
Category
required
Description

last_hb_req_sent

Type
string
Category
required
Description

last_hb_resp_recv

Type
string
Category
required
Description

SeFaultInjectExhaustMcl

API


CLI


Data

SeFaultInjectExhaustMcl

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

num_objects

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/faultinject/exhaust_mcl/clear

CLI


    faultinject serviceengine <key> exhaust_mcl

Data

SEFaultInjectExhaustParam

num

Type
uint64
Category
required
Description

leak

Type
bool
Category
optional
Description

InterfaceSummaryRuntime

API


    GET /api/serviceengine/<key>/interfacesummary/<key>

CLI


    show serviceengine <key> interface summary

Data

InterfaceSummaryRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

interface_entries

Type
InterfaceSummaryEntry
Category
repeated
Description

InterfaceSummaryEntry

intf_name

Type
string
Category
optional
Description

mac_address

Type
string
Category
optional
Description

ip_info

Type
IpInterface
Category
repeated
Description

intf_state

Type
string
Category
optional
Description

owner_core

Type
int32
Category
optional
Description

linux_intf_name

Type
string
Category
optional
Description

IpInterface

ip_addr

Type
string
Category
required
Description

net_mask

Type
string
Category
required
Description

InterfaceRuntime

API


    GET /api/serviceengine/<key>/interface/<key>
	Query Params: FlowtableIntfFilter

CLI


    show serviceengine <key> interface filter [mac] [intfname] [core_num]

Data

InterfaceRuntime

se_uuid

Type
string
Category
required
Description

proc_id

Type
string
Category
required
Description

vnics

Type
VnicInfo
Category
repeated
Description

VnicInfo

vnic_name

Type
string
Category
required
Description

vnic_id

Type
int32
Category
required
Description

mac_address

Type
string
Category
required
Description

ip_info

Type
IpInterface
Category
repeated
Description

interface_stats

Type
InterfaceStats
Category
required
Description

vnic_parent

Type
int32
Category
required
Description

vnic_weight

Type
int32
Category
required
Description

vlan_id

Type
int32
Category
required
Description

num_vs_delete_drops

Type
uint64
Category
optional
Description

pcap_filter

Type
string
Category
optional
Description

iptable_filter

Type
string
Category
optional
Description

vrf_id

Type
uint32
Category
optional
Description

vrf_uuid

Type
string
Category
optional
Description

vnic_mtu

Type
int32
Category
optional
Description

intferface_up

Type
bool
Category
optional
Description

mbr_intfs

Type
MbrIntf
Category
repeated
Description

interface_disabled

Type
bool
Category
optional
Description

linux_intf_name

Type
string
Category
optional
Description

vnic_owner

Type
int32
Category
optional
Description

InterfaceStats

ipackets

Type
uint64
Category
required
Description

ibytes

Type
uint64
Category
required
Description

ierrors

Type
uint64
Category
required
Description

rx_nombuf

Type
uint64
Category
required
Description

opackets

Type
uint64
Category
required
Description

obytes

Type
uint64
Category
required
Description

oerrors

Type
uint64
Category
required
Description

rx_kni

Type
uint64
Category
required
Description

tx_kni

Type
uint64
Category
required
Description

tx_kni_errs

Type
uint64
Category
required
Description

ip_checksum_drops

Type
uint64
Category
required
Description

l4_checksum_drops

Type
uint64
Category
required
Description

tx_queue_full_retries

Type
uint64
Category
required
Description

rx_pkt_iterations

Type
uint64
Category
required
Description

rx_queue_full

Type
uint64
Category
required
Description

rx_max_single_burst

Type
uint64
Category
required
Description

rx_mim_etype_p2s

Type
uint64
Category
required
Description

tx_mim_etype_p2s

Type
uint64
Category
required
Description

tx_mim_frags_etype_p2s

Type
uint64
Category
required
Description

rx_mim_etype_s2p

Type
uint64
Category
required
Description

tx_mim_etype_s2p

Type
uint64
Category
required
Description

tx_mim_frags_etype_s2p

Type
uint64
Category
required
Description

tx_frags_p2s

Type
uint64
Category
optional
Description

MbrIntf

if_name

Type
string
Category
required
Description

linux_name

Type
string
Category
required
Description

active

Type
bool
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/interface/clear

CLI


    clear serviceengine <key> interface

ArptableRuntime

API


    GET /api/serviceengine/<key>/arptable/<key>
	Query Params: ArpTableFilter	SeParamsFilter

CLI


    show serviceengine <key> arptable filter [ip_address] [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

ArptableRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

arp_entry

Type
ArpEntry
Category
repeated
Description

ArpEntry

vnic_name

Type
string
Category
required
Description

ip_address

Type
string
Category
required
Description

mac_address

Type
string
Category
required
Description

vrf_id

Type
uint32
Category
optional
Description

Actions

API


    POST /api/serviceengine/<key>/arptable/clear

CLI


    clear serviceengine <key> arptable

Data

ArpTableFilter

ip_address

Type
IpAddr
Category
optional
Description
IP address

SeDosStatRuntime

API


    GET /api/serviceengine/<key>/dosstat/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> dosstat filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

SeDosStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

land

Type
uint32
Category
required
Description

smurf

Type
uint32
Category
required
Description

icmp_flood

Type
uint32
Category
required
Description

unknown_protocol

Type
uint32
Category
required
Description

teardrop

Type
uint32
Category
required
Description

ip_frag_overrun

Type
uint32
Category
required
Description

ip_frag_toosmall

Type
uint32
Category
required
Description

ip_frag_full

Type
uint32
Category
required
Description

ip_frag_incomplete

Type
uint32
Category
required
Description

port_scan

Type
uint32
Category
required
Description

dos_rx_bytes

Type
uint64
Category
required
Description

dos_tx_bytes

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/dosstat/clear

CLI


    clear serviceengine <key> dosstat

SeAgentGraphDBRuntime

API


    GET /api/serviceengine/<key>/graphdb/<key>

CLI


    show serviceengine <key> graphdb

Data

SeAgentGraphDBRuntime

se_ref

Type
Reference to ServiceEngine
Category
optional
Description

total_obj

Type
int32
Category
required
Description
Default
0

total_obj_active

Type
int32
Category
optional
Description
Default
0

total_obj_awaiting_dp

Type
int32
Category
optional
Description
Default
0

total_obj_error

Type
int32
Category
optional
Description
Default
0

total_obj_ew_subnet_error

Type
int32
Category
optional
Description
Default
0

virtualservice

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

pool

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

healthmonitor

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

networkprofile

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

applicationprofile

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

httpsecuritypolicy

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

httprequestpolicy

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

httpresponsepolicy

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

ipaddrgroup

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

stringgroup

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

sslprofile

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

sslkeyandcertificate

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

networksecuritypolicy

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

applicationpersistenceprofile

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

analyticsprofile

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

vsdatascriptset

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

tenant

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

serviceenginegroup

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

cloud

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

microservice

Type
SeAgentGraphDBNodeInfo
Category
optional
Description

graph_version

Type
int32
Category
optional
Description
Default
0

SeAgentGraphDBNodeInfo

num_obj

Type
int32
Category
optional
Description
Default
0

num_obj_active

Type
int32
Category
optional
Description
Default
0

num_obj_awaiting_dp

Type
int32
Category
optional
Description
Default
0

num_obj_error

Type
int32
Category
optional
Description
Default
0

num_obj_ew_subnet_error

Type
int32
Category
optional
Description
Default
0

obj

Type
SeAgentGraphDBNodeObject
Category
repeated
Description

SeAgentGraphDBNodeObject

status

Type
enum
Category
required
Description
Choices
SYSERR_RM_NO_DEFAULT_GW_SE_MGMT_NW, SYSERR_DEQUEUE, SYSERR_RM_ALL_SE_IN_SE_GRP_NW_ACC_MAX_VS, SYSERR_RM_VIP_SE_GRP_MISMATCH, SYSERR_VI_MGR_SEVM_NO_AVAILABILITY_ZONE, SYSERR_RM_DEF_GW_INCORRECT, SYSERR_RPC_FAILED, SYSERR_UPGRADE_IN_PROGRESS, SYSERR_FAILURE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_LEASE, SYSERR_RM_PARENT_SE_NW_ACC, SYSERR_VS_MIGRATE_SCALEOUT_ERROR, SYSERR_OS_AGENT_OPENSTACK_ACCESSERR, SYSERR_VI_MGR_SEVM_CREATE_FAIL_POWER_ON, SYSERR_CC_AGENT_METHOD_NOT_IMPLEMENTED, SYSERR_VS_RPC_FAILURE, SYSERR_RPC_SEND_FAILED, SYSERR_DB_CACHE_OBJ_NOT_FOUND, SYSERR_RM_CANNOT_SPAWN_SE, SYSERR_FAULT, SYSERR_RM_VS_SE_VNIC_IP_IN_PROG, SYSERR_CC_NO_FLAVOR, SYSERR_SE_MGR_VNIC_NOT_FOUND, SYSERR_RM_VIP_SE_NW_ACC, SYSERR_AUTOSCALE_REASON_POOL_STATE_CHANGE, SYSERR_VI_MGR_SEVM_VCENTER_CONN_FAIL, SYSERR_DB_QUERY_QUEUED, SYSERR_SVC_COMMON_OBJECT_NOT_IN_CACHED_VIEW, SYSERR_ANOMALYZER_NOT_ENOUGH_SAMPLES, SYSERR_INVAL, SYSERR_METRICS_TOO_MANY_MSG_ACROSS_ENTITIES, SYSERR_RM_RES_NOT_NEEDED, SYSERR_OUT_OF_MEMORY, SYSERR_VS_INVALID_OBJECT, SYSERR_RM_VS_SE_VNIC_ADD_IN_PROG, SYSERR_RM_RES_VIP_REACH_LOST, SYSERR_NO_MULTICAST_RECEIVERS, SYSERR_RM_AWAIT_VM_CREATE, SYSERR_VI_MGR_SEVM_SET_MGMT_IP_FAILED, SYSERR_AUTOSCALEIN_FAILED_LIMIT_EXCEEDED, SYSERR_DB_UPDATE_FAILED, SYSERR_RM_RES_UNAVAIL_NOTIFY, SYSERR_VS_NOT_PRESENT, SYSERR_TIMEOUT, SYSERR_RM_VIP_NO_NETWORK, SYSERR_CC_AGENT_VNIC_NO_IPS_AVAILABLE, SYSERR_DESERIALIZATION, SYSERR_RM_VIP_SE_MAX_VS, SYSERR_SEAGENT_OBJ_GRAPHDB_ERROR, SYSERR_AUTOSCALE_REASON_ALERT, SYSERR_VI_MGR_VCENTER_VERSION_MISMATCH, SYSERR_FLEET_API_ERROR, SYSERR_RM_VS_SE_BOOTUP_IN_PROG, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_CPU, SYSERR_SEAGENT_OBJ_DISABLED_RULE_POOL, SYSERR_VS_MIGRATE_ERROR, SYSERR_CC_SVC_Q_FULL, SYSERR_MESOS_DISCOVERY_DEPLOYMENT_FAIL, SYSERR_RM_CONSUMER_NOT_FOUND, SYSERR_VS_SCALEIN_ERROR, SYSERR_VI_MGR_SEVM_VNIC_FAILURE_QUESTION, SYSERR_RM_REACHABILITY_FAILED, SYSERR_AUTOSCALE_IGNORED_AS_WITHIN_COOLDOWN, SYSERR_RM_ALL_SE_IN_SE_GRP_MAX_VS, SYSERR_SE_MGR_UNKNOWN_SE, SYSERR_OS_AGENT_Q_FULL, SYSERR_AUTOSCALE_REASON_ORCHESTRATION_FAILED, SYSERR_RM_QUERY_HOST_IN_PROGRESS, SYSERR_RM_NETWORK_NOT_FOUND, SYSERR_RM_RES_INFRA_DELETED, SYSERR_CC_AGENT_VNIC_NO_SUBNETWORK, SYSERR_RM_ALL_SE_IN_SE_GRP_USED, SYSERR_SEAGENT_OBJ_DP_ERROR, SYSERR_VI_MGR_SEVM_CREATE_FAIL_DUPLICATE_NAME, SYSERR_AUTOSCALE_REASON_INTELLIGENT_AUTOSCALE, SYSERR_VS_NOT_ENOUGH_RESOURCES, SYSERR_VS_NOT_BOUND, SYSERR_VS_SE_NOT_AVAILABLE, SYSERR_DATASTORE_UNKNOWN_FAILURE, SYSERR_INVALID_HEALTH_MONITOR_TYPE, SYSERR_RPC_TIMED_OUT, SYSERR_RM_VNIC_IP_FAILURE, SYSERR_CC_AGENT_VNIC_FAILURE, SYSERR_RM_PARTIAL_SE_FOUND, SYSERR_CC_SVC_INVALID_DATA, SYSERR_RM_NO_SE_IN_SE_GRP, SYSERR_RM_SE_MGMT_NO_STATIC_IPS_CONFIGURED, SYSERR_VI_MGR_SEVM_CREATE_NO_HOST, SYSERR_RM_NO_SUITABLE_HOST, SYSERR_RPC_CANCELED_BY_TRANSACTION_CLEANUP, SYSERR_CC_AGENT_DECONFIG_FAILURE, SYSERR_RM_NO_SE_IN_SE_GRP_VIP_ACC, SYSERR_AUTOSCALE_ORCHESTRATION_TIMEOUT, SYSERR_DB_QUERY_FAILED, SYSERR_VI_MGR_SEVM_FLAVOR_UNAVAIL, SYSERR_MARATHON_INACCESSIBLE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_MGMT_NW, SYSERR_SE_MGR_UNKNOWN_STATE_TRANSITION, SYSERR_SEAGENT_OBJ_AWAITING_DP_PROGRAMMING, SYSERR_CC_AGENT_ABSENT, SYSERR_RM_INSUFFICIENT_BUFFER_SE, SYSERR_RM_BOOTUP_FAILURE, SYSERR_ENQUEUE, SYSERR_RM_ALL_SE_INSE_GRP_DISABLED, SYSERR_SE_UPGRADE_IN_PROGRESS, SYSERR_OS_AGENT_INVALID_DATA, SYSERR_DATASTORE_REFERENCE_DOES_NOT_EXIST, SYSERR_RM_SRVR_NO_NETWORK, SYSERR_CC_OS_AGENT_NEUTRON_HOST_ACCESSERR, SYSERR_RPC_CANCELED_BY_CLIENT, SYSERR_VI_MGR_SEVM_CREATE_NO_IMAGE, SYSERR_RM_CONSUMER_RESOURCES_SATISFIED, SYSERR_MESOS_SSH_CMD_TIMEOUT, SYSERR_VI_MGR_SEVM_TIMED_OUT, SYSERR_DATASTORE_OBJECT_DOES_NOT_EXIST, SYSERR_RM_RELEASE_SE_UNAVAIL, SYSERR_IO, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_MGMT_NW_PORTS, SYSERR_RM_RES_CONN_LOST, SYSERR_VS_VNIC_FAILURE, SYSERR_DB_CACHE_TBL_NOT_FOUND, SYSERR_SEAGENT_OBJ_INACTIVE, SYSERR_CC_AGENT_GENERIC_FAILURE, SYSERR_MESOS_SSH_FAILURE, SYSERR_OS_AGENT_OPENSTACK_RESOURCEERR, SYSERR_RUM_TOOMANYSAMPLES, SYSERR_NO_ENT, SYSERR_RM_DATA_DHCP_FAILURE, SYSERR_RPC_CONNECT_FAILED, SYSERR_SUCCESS, SYSERR_VS_AWAIT_STATIC_SE, SYSERR_VS_MIGRATE_SCALEIN_ERROR, SYSERR_RM_MULT_SE_CRASH, SYSERR_METRICS_TOO_MANY_MSG, SYSERR_RM_RES_NOT_INUSE, SYSERR_RM_PARENT_SE_MAX_VS, SYSERR_VI_MGR_SEVM_CREATE_FAIL_ABORTED, SYSERR_QUEUE_TRANSPORT_FAILURE, SYSERR_RM_VIP_SE_PENDING_OP, SYSERR_CC_AGENT_RESOURCEERR, SYSERR_SE_MGR_VNIC_ALLOC_FAIL, SYSERR_DATASTORE_LOCK_FAILURE, SYSERR_AUTOSCALE_REASON_TOO_MANY_SERVERS, SYSERR_RM_VS_SE_CREATE_IN_PROG, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_HW_INFO, SYSERR_VS_DELETE_WHILE_STILL_BEING_REFERRED, SYSERR_VS_SERVICE_ENGINE_DOWN, SYSERR_CC_AGENT_ACCESSERR, SYSERR_QUEUE_RETRY_TASK, SYSERR_RM_VS_PROCESSING, SYSERR_VI_MGR_SEVM_CREATE_LIMIT_REACHED, SYSERR_VS_SCALEOUT_ERROR, SYSERR_MESOS_SSH_NOTFOUND, SYSERR_INVALID_METHOD, SYSERR_CONTROLLER_NOT_READY, SYSERR_OS_AGENT_TENANT_ABSENT, SYSERR_RM_UNKNOWN_SE_GROUP, SYSERR_VS_INVALID_METHOD, SYSERR_RM_MULT_MGMT_SUBNET, SYSERR_RM_NO_MGMT_SUBNET, SYSERR_MARATHON_APP_TERMINATED, SYSERR_CC_AGENT_SCALE_IN_FAILED, SYSERR_AUTOSCALE_REASON_NOT_ENOUGH_SERVERS, SYSERR_RM_STATIC_POOL_EXHAUSTED, SYSERR_VS_INVALID_REQUEST, SYSERR_ACCESS, SYSERR_VS_MIN_SE_NOT_ASSIGNED, SYSERR_CC_AGENT_CONFIG_FAILURE, SYSERR_DATASTORE_TBL_NOT_EXIST, SYSERR_VI_MGR_SEVM_VNIC_MAC_ADDR_ERROR, SYSERR_VI_MGR_SEVM_VNIC_NO_PG_PORTS, SYSERR_MESOS_DISCOVERY_TIMEOUT, SYSERR_SEAGENT_OBJ_ACTIVE, SYSERR_VS_INTERNAL_ERROR, SYSERR_VI_MGR_SEVM_VNIC_FAILURE, SYSERR_RM_MAX_SE_CREATE_ATTEMPTS, SYSERR_VI_MGR_SEVM_INVALID_DATA, SYSERR_WARM_START_IN_PROGRESS, SYSERR_RM_RES_USER_REBOOTED, SYSERR_RM_AWAIT_BOOTUP, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_PROGRESS, SYSERR_RM_VIP_MULT_NETWORKS, SYSERR_RM_SE_MGMT_STATIC_IPS_EXHAUSTED, SYSERR_DATASTORE_TRANSPORT_FAILURE, SYSERR_VERSION_MISMATCH, SYSERR_RM_RESOURCE_NOT_FOUND, SYSERR_NOT_SUPPORTED, SYSERR_AUTOSCALE_REASON_CONFIG_UPDATE, SYSERR_CC_AGENT_UNINITIALIZED, SYSERR_CC_AGENT_TENANT_ABSENT, SYSERR_VI_MGR_SEVM_CREATE_FAIL_MULTIPLE_MGMT_NW, SYSERR_OS_AGENT_OPENSTACK_UNINITIALIZED, SYSERR_RM_NO_SE_IN_SE_GRP_SRVR_ACC, SYSERR_VI_MGR_LOGIN_FAIL_USER_CREDENTIALS, SYSERR_MESOS_SSH_ABORTED, SYSERR_SEAGENT_EASTWEST_VS_SUBNET_ERROR, SYSERR_VI_MGR_SEVM_DELETED, SYSERR_VI_MGR_SEVM_CREATE_ACCESS_ERROR, SYSERR_VI_MGR_SEVM_VNIC_NO_VM, SYSERR_VI_MGR_SEVM_VINFRA_UNINITIALIZED, SYSERR_SE_MGR_SE_OFFLINE_HB_FAILURE, SYSERR_RM_MAX_SE_IN_GRP, SYSERR_RM_RES_CRASHED, SYSERR_BAD_REQUEST, SYSERR_RM_ALL_SE_IN_SE_GRP_DOWN, SYSERR_DATASTORE_DB_LOCKED, SYSERR_VI_MGR_SEVM_DELETE_FAILURE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_MEM, SYSERR_SERIALIZATION, SYSERR_CC_AGENT_TENANT_ACCESSERR, SYSERR_RM_RES_UNAVAIL, SYSERR_RM_MGMT_DHCP_FAILURE, SYSERR_VI_MGR_SEVM_NO_SOURCE_CLONE, SYSERR_RM_PENDING_VNIC_OP, SYSERR_RM_MAX_PARALLEL_SE_CREATE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_OVF_ERROR, SYSERR_TEST1, SYSERR_RM_CANNOT_ADD_VNICS, SYSERR_TEST2, SYSERR_RM_STATIC_NO_POOL, SYSERR_VS_SE_ASSIGNMENT_FAILED, SYSERR_RM_SE_GRP_PENDING_OP, SYSERR_SE_NOT_CONNECTED, SYSERR_RM_RES_USER_DELETED, SYSERR_NOT_READY, SYSERR_CC_AGENT_NOT_IMPLEMENTED, SYSERR_RM_NO_SE_FOUND, SYSERR_VI_MGR_LOGIN_FAIL_NO_VCENTER, SYSERR_VI_MGR_SEVM_VINFRA_FAILURE, SYSERR_VS_DISABLED, SYSERR_RM_AWAIT_VNIC_ADD, SYSERR_VI_MGR_SEVM_CREATE_FAILURE, SYSERR_AUTOSCALEOUT_FAILED_LIMIT_EXCEEDED, SYSERR_DB_QUERY_BATCHED, SYSERR_RM_SRVR_MULT_NETWORKS, SYSERR_VI_MGR_SEVM_VNIC_SUCCESS, SYSERR_CC_AGENT_NON_INFRA_SEVM, SYSERR_VI_MGR_SEVM_CREATE_NO_HOST_VM_NETWORK, SYSERR_RM_PARENT_SE_GRP_MISMATCH

reason

Type
string
Category
optional
Description

config

Type
SeAgentGraphDBNodeConfig
Category
optional
Description

stats

Type
SeAgentGraphDBNodeStats
Category
optional
Description

SeAgentGraphDBNodeConfig

virtual_service_se

Type
VirtualServiceSe
Category
optional
Description

pool

Type
Pool
Category
optional
Description

health_monitor

Type
HealthMonitor
Category
optional
Description

network_profile

Type
NetworkProfile
Category
optional
Description

application_profile

Type
ApplicationProfile
Category
optional
Description

http_security_policy

Type
HTTPSecurityPolicy
Category
optional
Description

http_request_policy

Type
HTTPRequestPolicy
Category
optional
Description

http_response_policy

Type
HTTPResponsePolicy
Category
optional
Description

ip_addr_group

Type
IpAddrGroup
Category
optional
Description

string_group

Type
StringGroup
Category
optional
Description

ssl_profile

Type
SSLProfile
Category
optional
Description

ssl_key_and_certificate

Type
SSLKeyAndCertificate
Category
optional
Description

network_security_policy

Type
NetworkSecurityPolicy
Category
optional
Description

application_persistence_profile

Type
ApplicationPersistenceProfile
Category
optional
Description

analytics_profile

Type
AnalyticsProfile
Category
optional
Description

vs_data_script

Type
VSDataScriptSet
Category
optional
Description

tenant

Type
Tenant
Category
optional
Description

serviceenginegroup

Type
ServiceEngineGroup
Category
optional
Description

cloud

Type
Cloud
Category
optional
Description

microservice

Type
MicroService
Category
optional
Description

VirtualServiceSe

uuid

Type
string
Category
required
Description
Default
virtualservice

virtual_service

Type
VirtualService
Category
optional
Description

se_list

Type
SeList
Category
repeated
Description

redis_ip

Type
string
Category
optional
Description

redis_port

Type
int32
Category
optional
Description

redis_db

Type
int32
Category
optional
Description

datapath_debug

Type
DebugVirtualService
Category
optional
Description

tls_ticket_key

Type
TLSTicket
Category
repeated
Description

controller_ip

Type
string
Category
optional
Description

marked_for_delete

Type
bool
Category
optional
Description

prev_controller_ip

Type
string
Category
optional
Description

metrics_mgr_port

Type
enum
Category
optional
Description
Choices
METRICS_MGR_PORT_1, METRICS_MGR_PORT_0, METRICS_MGR_PORT_3, METRICS_MGR_PORT_2

prev_metrics_mgr_port

Type
enum
Category
optional
Description
Choices
METRICS_MGR_PORT_1, METRICS_MGR_PORT_0, METRICS_MGR_PORT_3, METRICS_MGR_PORT_2

first_se_assigned_time

Type
TimeStamp
Category
optional
Description

VirtualService

uuid

Type
string
Category
required
Description
UUID of the VirtualService.

name

Type
string
Category
required
Description
Name for the Virtual Service.

fqdn

Type
string
Category
optional
Description
DNS resolvable, fully qualified domain name of the Virtual Service.

ip_address

Type
IpAddr
Category
optional
Description
IP Address of the Virtual Service.

enabled

Type
bool
Category
optional
Description
Enable or disable the Virtual Service.
Default
True

services

Type
Service
Category
repeated
Description

application_profile_ref

Type
Reference to ApplicationProfile
Category
optional
Description
Enable application layer specific features for the Virtual Service.
Default
/api/applicationprofile?name=System-HTTP

network_profile_ref

Type
Reference to NetworkProfile
Category
optional
Description
Determines network settings such as protocol, TCP or UDP, and related options for the protocol.
Default
/api/networkprofile?name=System-TCP-Proxy

server_network_profile_ref

Type
Reference to NetworkProfile
Category
optional
Description
Determines the network settings profile for the server side of TCP proxied connections. Leave blank to use the same settings as the client to VS side of the connection.

pool_ref

Type
Reference to Pool
Category
optional
Description
The pool is an object that contains destination servers and related attributes such as load-balancing and persistence.

se_group_ref

Type
Reference to ServiceEngineGroup
Category
optional
Description
The Service Engine Group to use for this Virtual Service. Moving to a new SE Group is disruptive to existing connection for this VS.

network_security_policy_ref

Type
Reference to NetworkSecurityPolicy
Category
optional
Description
Network security policies for the Virtual Service.

http_policies

Type
HTTPPolicies
Category
repeated
Description
HTTP Policies applied on the data traffic of the Virtual Service

ssl_key_and_certificate_refs

Type
Reference to SSLKeyAndCertificate
Category
repeated
Description
Select or create one or two certificates, EC and/or RSA, that will be presented to SSL/TLS terminated connections.

ssl_profile_ref

Type
Reference to SSLProfile
Category
optional
Description
Determines the set of SSL versions and ciphers to accept for SSL/TLS terminated connections.

performance_limits

Type
PerformanceLimits
Category
optional
Description

analytics_policy

Type
AnalyticsPolicy
Category
optional
Description

network_ref

Type
Reference to Network
Category
optional
Description
Manually override the network on which the Virtual Service is placed.

vrf_context_ref

Type
Reference to VrfContext
Category
optional
Description
Virtual Routing Context that the Virtual Service is bound to. This is used to provide the isolation of the set of networks the application is attached to.

enable_autogw

Type
bool
Category
optional
Description
Response traffic to clients will be sent back to the source MAC address of the connection, rather than statically sent to a default gateway.
Default
True

port_uuid

Type
string
Category
optional
Description
(internal-use) Network port assigned to the Virtual Service IP address.

subnet_uuid

Type
string
Category
optional
Description
If auto_allocate_ip is True, then the subnet for the Virtual Service IP address allocation.

analytics_profile_ref

Type
Reference to AnalyticsProfile
Category
optional
Description
Specifies settings related to analytics.
Default
/api/analyticsprofile?name=System-Analytics-Profile

discovered_network_ref

Type
Reference to Network
Category
repeated
Description
Discovered networks providing reachability for client facing Virtual Service IP.

discovered_subnet

Type
IpAddrPrefix
Category
repeated
Description
Discovered subnets providing reachability for client facing Virtual Service IP.

host_name_xlate

Type
string
Category
optional
Description
Translate the host name sent to the servers to this value. Translate the host name sent from servers back to the value used by the client.

subnet

Type
IpAddrPrefix
Category
optional
Description
Subnet providing reachability for client facing Virtual Service IP.

discovered_networks

Type
DiscoveredNetwork
Category
repeated
Description
Discovered networks providing reachability for client facing Virtual Service IP.

vs_datascripts

Type
VSDataScripts
Category
repeated
Description
Datascripts applied on the data traffic of the Virtual Service

client_auth

Type
HTTPClientAuthenticationParams
Category
optional
Description
HTTP authentication configuration for protected resources.

weight

Type
uint32
Category
optional
Description
The Quality of Service weight to assign to traffic transmitted from this Virtual Service. A higher weight will prioritize traffic versus other Virtual Services sharing the same Service Engines. (1-2-4-8)
Default
1

delay_fairness

Type
bool
Category
optional
Description
Select the algorithm for QoS fairness. This determines how multiple Virtual Services sharing the same Service Engines will prioritize traffic over a congested network.
Default
False

max_cps_per_client

Type
uint32
Category
optional
Description
Maximum connections per second per client IP.
Default
0

limit_doser

Type
bool
Category
optional
Description
Limit potential DoS attackers who exceed max_cps_per_client significantly to a fraction of max_cps_per_client for a while.
Default
False

type

Type
enum
Category
optional
Description
Specify if this is a normal Virtual Service, or if it is the parent or child of an SNI-enabled virtual hosted Virtual Service.
Default
VS_TYPE_NORMAL
Choices
VS_TYPE_VH_PARENT, VS_TYPE_VH_CHILD, VS_TYPE_NORMAL

vh_parent_vs_ref

Type
Reference to VirtualService
Category
optional
Description
Specifies the Virtual Service acting as Virtual Hosting (SNI) parent.

vh_domain_name

Type
string
Category
repeated
Description
The exact name requested from the client's SNI-enabled TLS hello domain name field. If this is a match, the parent VS will forward the connection to this child VS.

availability_zone

Type
string
Category
optional
Description
Availability-zone to place the Virtual Service.

auto_allocate_ip

Type
bool
Category
optional
Description
Auto-allocate VIP from the provided subnet.
Default
False

floating_ip

Type
IpAddr
Category
optional
Description
Floating IP to associate with this Virtual Service.

auto_allocate_floating_ip

Type
bool
Category
optional
Description
Auto-allocate floating/elastic IP from the Cloud infrastructure.
Default
False

floating_subnet_uuid

Type
string
Category
optional
Description
If auto_allocate_floating_ip is True and more than one floating-ip subnets exist, then the subnet for the floating IP address allocation.

cloud_type

Type
enum
Category
optional
Description
Default
CLOUD_VCENTER
Choices
CLOUD_VCENTER, CLOUD_DOCKER_UCP, CLOUD_APIC, CLOUD_OPENSTACK, CLOUD_MESOS, CLOUD_RANCHER, CLOUD_VCA, CLOUD_LINUXSERVER, CLOUD_AWS, CLOUD_NONE

avi_allocated_vip

Type
bool
Category
optional
Description
(internal-use) VIP allocated by Avi in the Cloud infrastructure.
Default
False

avi_allocated_fip

Type
bool
Category
optional
Description
(internal-use) FIP allocated by Avi in the Cloud infrastructure.
Default
False

connections_rate_limit

Type
RateProfile
Category
optional
Description
Rate limit the incoming connections to this virtual service

requests_rate_limit

Type
RateProfile
Category
optional
Description
Rate limit the incoming requests to this virtual service

use_bridge_ip_as_vip

Type
bool
Category
optional
Description
Use Bridge IP as VIP on each Host in Mesos deployments
Default
False

flow_dist

Type
enum
Category
optional
Description
Criteria for flow distribution among SEs.
Default
LOAD_AWARE
Choices
CONSISTENT_HASH_SOURCE_IP_ADDRESS_AND_PORT, LOAD_AWARE, CONSISTENT_HASH_SOURCE_IP_ADDRESS

ign_pool_net_reach

Type
bool
Category
optional
Description
Ignore Pool servers network reachability constraints for Virtual Service placement.
Default
False

ssl_sess_cache_avg_size

Type
uint32
Category
optional
Description
Expected number of SSL session cache entries (may be exceeded).
Default
1024

remove_listening_port_on_vs_down

Type
bool
Category
optional
Description
Remove listening port if VirtualService is down
Default
False

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

cloud_ref

Type
Reference to Cloud
Category
optional,readonly
Description
Default
/api/cloud?name=Default-Cloud

east_west_placement

Type
bool
Category
optional
Description
Force placement on all SE's in service group (Mesos mode only)
Default
False

scaleout_ecmp

Type
bool
Category
optional
Description
Default
False

microservice_ref

Type
Reference to MicroService
Category
optional
Description
Microservice representing the virtual service

service_pool_select

Type
ServicePoolSelector
Category
repeated
Description
Select pool based on destination port

created_by

Type
string
Category
optional
Description
Creator name

cloud_config_cksum

Type
string
Category
optional
Description
Checksum of cloud configuration for VS. Internally set by cloud connector

enable_rhi

Type
bool
Category
optional
Description
Enable Route Health Injection using the BGP Config in the vrf context

snat_ip

Type
IpAddr
Category
repeated
Description
NAT'ted floating source IP Address(es) for upstream connection to servers

active_standby_se_tag

Type
enum
Category
optional
Description
Default
ACTIVE_STANDBY_SE_1
Choices
ACTIVE_STANDBY_SE_1, ACTIVE_STANDBY_SE_2

Service

port

Type
uint32
Category
required
Description
The Virtual Service's port number.

enable_ssl

Type
bool
Category
optional
Description
Enable SSL termination and offload for traffic from clients.
Default
False

override_network_profile_ref

Type
Reference to NetworkProfile
Category
optional
Description
Override the network profile for this specific service port.

port_range_end

Type
uint32
Category
optional
Description
The end of the Virtual Service's port number range.
Default
0

HTTPPolicies

index

Type
int32
Category
required
Description
Index of the virtual service HTTP policy collection

http_policy_set_ref

Type
Reference to HTTPPolicySet
Category
required
Description
UUID of the virtual service HTTP policy collection

PerformanceLimits

max_concurrent_connections

Type
int32
Category
optional
Description
The maximum number of concurrent client conections allowed to the Virtual Service.

max_throughput

Type
int32
Category
optional
Description
The maximum throughput per second for all clients allowed through the client side of the Virtual Service.

AnalyticsPolicy

full_client_logs

Type
FullClientLogs
Category
optional
Description

client_log_filters

Type
ClientLogFilter
Category
repeated
Description

client_insights

Type
enum
Category
optional
Description
Gain insights from sampled client to server HTTP requests and responses.
Default
ACTIVE
Choices
PASSIVE, ACTIVE, NO_INSIGHTS

metrics_realtime_update

Type
MetricsRealTimeUpdate
Category
optional
Description
Settings to turn on realtime metrics and set duration for realtime updates

analytics_profile_ref

Type
Reference to AnalyticsProfile
Category
optional
Description
Analytics preferences and settings.

client_insights_sampling

Type
ClientInsightsSampling
Category
optional
Description

FullClientLogs

enabled

Type
bool
Category
required
Description
Capture all client logs including connections and requests. When disabled, only errors will be logged.
Default
False

duration

Type
uint32
Category
optional
Description
How long should the system capture all logs, measured in minutes. Set to 0 for infinite.
Default
30

ClientLogFilter

index

Type
uint32
Category
required
Description

name

Type
string
Category
required
Description

client_ip

Type
IpAddrMatch
Category
optional
Description

all_headers

Type
bool
Category
optional
Description
Default
False

uri

Type
StringMatch
Category
optional
Description

enabled

Type
bool
Category
required
Description
Default
False

duration

Type
uint32
Category
optional
Description
Default
30

IpAddrMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for IP address matching the HTTP request
Choices
IS_NOT_IN, IS_IN

addrs

Type
IpAddr
Category
repeated
Description
IP address(es)

ranges

Type
IpAddrRange
Category
repeated
Description
IP address range(s)

prefixes

Type
IpAddrPrefix
Category
repeated
Description
IP address prefix(es)

group_refs

Type
Reference to IpAddrGroup
Category
repeated
Description
UUID of IP address group(s)

IpAddrRange

begin

Type
IpAddr
Category
required
Description
Starting IP address of the range

end

Type
IpAddr
Category
required
Description
Ending IP address of the range

StringMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for string matching the HTTP request
Choices
REGEX_MATCH, DOES_NOT_END_WITH, ENDS_WITH, CONTAINS, EQUALS, DOES_NOT_BEGIN_WITH, DOES_NOT_EQUAL, REGEX_DOES_NOT_MATCH, DOES_NOT_CONTAIN, BEGINS_WITH

match_str

Type
string
Category
repeated
Description
String value(s)

string_group_refs

Type
Reference to StringGroup
Category
repeated
Description
UUID of the string group(s)

MetricsRealTimeUpdate

enabled

Type
bool
Category
required
Description
Enables real time metrics collection. When disabled, 6 hour view is the most granular the system will track.
Default
False

duration

Type
uint32
Category
optional
Description
Real time metrics collection duration in minutes. 0 for infinite.
Default
60

ClientInsightsSampling

skip_uris

Type
StringMatch
Category
optional
Description
URL patterns to avoid when inserting RUM script.

sample_uris

Type
StringMatch
Category
optional
Description
URL patterns to check when inserting RUM script.

client_ip

Type
IpAddrMatch
Category
optional
Description
Client IP addresses to check when inserting RUM script.

DiscoveredNetwork

network_ref

Type
Reference to Network
Category
required
Description
Discovered network for this IP.

subnet

Type
IpAddrPrefix
Category
repeated
Description
Discovered subnet for this IP.

VSDataScripts

index

Type
int32
Category
required
Description
Index of the virtual service datascript collection

vs_datascript_set_ref

Type
Reference to VSDataScriptSet
Category
required
Description
UUID of the virtual service datascript collection

HTTPClientAuthenticationParams

type

Type
enum
Category
optional
Description
type of client authentication
Choices
HTTP_BASIC_AUTH

request_uri_path

Type
StringMatch
Category
optional
Description
Rrequest URI path when the authentication applies

auth_profile_ref

Type
Reference to AuthProfile
Category
optional
Description
Auth Profile to use for validating users

realm

Type
string
Category
optional
Description
Basic authentication realm to present to a user along with the prompt for credentials.

RateProfile

count

Type
int32
Category
optional
Description
Maximum number of connections or requests or packets
Default
0

burst_sz

Type
int32
Category
optional
Description
Maximum number of connections or requests or packets to be let through instantaneously
Default
0

period

Type
int32
Category
optional
Description
Time value in seconds to enforce rate count
Default
1

explicit_tracking

Type
bool
Category
optional
Description
Explicitly tracks an attacker across rate periods
Default
False

fine_grain

Type
bool
Category
optional
Description
Enable fine granularity
Default
False

action

Type
RateLimiterAction
Category
optional
Description
Action to perform upon rate limiting

RateLimiterAction

type

Type
enum
Category
optional
Description
Type of action to be enforced upon hitting the rate limit.
Default
RL_ACTION_NONE
Choices
RL_ACTION_RESET_CONN, RL_ACTION_LOCAL_RSP, RL_ACTION_DROP_CONN, RL_ACTION_CLOSE_CONN, RL_ACTION_NONE, RL_ACTION_REDIRECT

redirect

Type
HTTPRedirectAction
Category
optional
Description
Parameters for HTTP Redirect rate limit action.

status_code

Type
enum
Category
optional
Description
HTTP status code for Local Response rate limit action.
Default
HTTP_LOCAL_RESPONSE_STATUS_CODE_429
Choices
HTTP_LOCAL_RESPONSE_STATUS_CODE_403, HTTP_LOCAL_RESPONSE_STATUS_CODE_429, HTTP_LOCAL_RESPONSE_STATUS_CODE_200, HTTP_LOCAL_RESPONSE_STATUS_CODE_404

file

Type
HTTPLocalFile
Category
optional
Description
File to be used for HTTP Local response rate limit action.

HTTPRedirectAction

protocol

Type
enum
Category
required
Description
Protocol type
Choices
HTTP, HTTPS

host

Type
URIParam
Category
optional
Description
Host config

port

Type
uint32
Category
optional
Description
Port to which redirect the request

path

Type
URIParam
Category
optional
Description
Path config

keep_query

Type
bool
Category
optional
Description
Keep or drop the query of the incoming request URI in the redirected URI
Default
True

status_code

Type
enum
Category
optional
Description
HTTP redirect status code
Default
HTTP_REDIRECT_STATUS_CODE_302
Choices
HTTP_REDIRECT_STATUS_CODE_302, HTTP_REDIRECT_STATUS_CODE_301, HTTP_REDIRECT_STATUS_CODE_307

URIParam

type

Type
enum
Category
required
Description
URI param type
Choices
URI_PARAM_TYPE_TOKENIZED

tokens

Type
URIParamToken
Category
repeated
Description
Token config either for the URI components or a constant string

URIParamToken

type

Type
enum
Category
required
Description
Token type for constructing the URI
Choices
URI_TOKEN_TYPE_PATH, URI_TOKEN_TYPE_REGEX, URI_TOKEN_TYPE_STRING, URI_TOKEN_TYPE_STRING_GROUP, URI_TOKEN_TYPE_HOST

start_index

Type
uint32
Category
optional
Description
Index of the starting token in the incoming URI

end_index

Type
uint32
Category
optional
Description
Index of the ending token in the incoming URI

str_value

Type
string
Category
optional
Description
Constant string to use as a token

HTTPLocalFile

content_type

Type
string
Category
required
Description
Mime-type of the content in the file.

file_content

Type
string
Category
required
Description
File content to used in the local HTTP response body.

ServicePoolSelector

service_port

Type
uint32
Category
required
Description
Pool based destination port

service_pool_ref

Type
Reference to Pool
Category
required
Description

SeList

se_ref

Type
Reference to ServiceEngine
Category
required
Description

is_primary

Type
bool
Category
required
Description

is_standby

Type
bool
Category
optional
Description

is_connected

Type
bool
Category
required
Description

delete_in_progress

Type
bool
Category
required
Description

vcpus

Type
int32
Category
required
Description

memory

Type
int32
Category
required
Description

vip_intf_mac

Type
string
Category
required
Description

vip_subnet_mask

Type
int32
Category
required
Description
Default
32

vnic

Type
VsSeVnic
Category
repeated
Description

pending_download

Type
bool
Category
optional
Description
Default
False

sec_idx

Type
int32
Category
optional
Description
Default
1

download_selist_only

Type
bool
Category
optional
Description
Default
False

vlan_id

Type
int32
Category
optional
Description
Default
0

snat_ip

Type
IpAddr
Category
optional
Description

vip_intf_ip

Type
IpAddr
Category
optional
Description

vip_intf_list

Type
SeVipInterfaceList
Category
repeated
Description

floating_intf_ip

Type
IpAddr
Category
repeated
Description

is_portchannel

Type
bool
Category
optional
Description
Default
False

VsSeVnic

mac

Type
string
Category
required
Description

type

Type
enum
Category
required
Description
Choices
VNIC_TYPE_BE, VNIC_TYPE_INT_PRIMARY, VNIC_TYPE_INT, VNIC_TYPE_FE, VNIC_TYPE_INT_SECONDARY

lif

Type
string
Category
optional
Description

SeVipInterfaceList

vip_intf_mac

Type
string
Category
required
Description

vlan_id

Type
int32
Category
optional
Description
Default
0

vip_intf_ip

Type
IpAddr
Category
optional
Description

is_portchannel

Type
bool
Category
optional
Description
Default
False

DebugVirtualService

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

flags

Type
DebugVsDataplane
Category
repeated
Description

debug_ip

Type
DebugIpAddr
Category
optional
Description

capture

Type
bool
Category
optional
Description

capture_params

Type
DebugVirtualServiceCapture
Category
optional
Description

se_params

Type
DebugVirtualServiceSeParams
Category
optional
Description

debug_hm

Type
enum
Category
optional
Description
Health Monitor debug options.
Default
DEBUG_VS_HM_NONE
Choices
DEBUG_VS_HM_NONE, DEBUG_VS_HM_INCLUDE, DEBUG_VS_HM_ONLY

tenant_ref

Type
Reference to Tenant
Category
optional
Description

DebugVsDataplane

flag

Type
enum
Category
required
Description
Choices
DEBUG_VS_UDP, DEBUG_VS_HTTP_ALL, DEBUG_VS_TCP_REXMT, DEBUG_VS_TCP_CONNECTION, DEBUG_VS_PROXY_CONNECTION, DEBUG_VS_TCP_PKT, DEBUG_VS_TCP_TIMER, DEBUG_VS_EVENTS, DEBUG_VS_HM_EXT, DEBUG_VS_HTTP_RULES, DEBUG_VS_PROXY_ERR, DEBUG_VS_TCP_APP_PKT, DEBUG_VS_HM, DEBUG_VS_CONFIG, DEBUG_VS_TCP_RETRANSMIT, DEBUG_VS_TCP_ALL, DEBUG_VS_TCP_APP, DEBUG_VS_TCP_PKT_ERROR, DEBUG_VS_ALL, DEBUG_VS_HTTP_CORE, DEBUG_VS_HM_ERR, DEBUG_VS_PROXY_PKT, DEBUG_VS_SSL, DEBUG_VS_HM_PKT, DEBUG_VS_ERROR, DEBUG_VS_TCP_CONN_ERROR, DEBUG_VS_NONE, DEBUG_VS_CREDIT, DEBUG_VS_UDP_PKT

DebugIpAddr

addrs

Type
IpAddr
Category
repeated
Description

ranges

Type
IpAddrRange
Category
repeated
Description

prefixes

Type
IpAddrPrefix
Category
repeated
Description

DebugVirtualServiceCapture

pkt_size

Type
uint32
Category
optional
Description
Number of bytes of each packet to capture. Use 0 to capture the entire packet.
Default
128

duration

Type
uint32
Category
optional
Description
Number of minutes to capture packets. Use 0 to capture until manually stopped.
Default
0

num_pkts

Type
uint32
Category
optional
Description
Total number of packets to capture.

DebugVirtualServiceSeParams

se_uuids

Type
string
Category
repeated
Description

TLSTicket

name

Type
string
Category
required
Description

aes_key

Type
Unknown
Category
required
Description

hmac_key

Type
Unknown
Category
required
Description

Pool

uuid

Type
string
Category
required
Description
UUID of the pool

name

Type
string
Category
required
Description
The name of the pool.

default_server_port

Type
int32
Category
optional
Description
Traffic sent to servers will use this destination server port unless overridden by the server's specific port attribute. The SSL checkbox enables Avi to server encryption.
Default
80

graceful_disable_timeout

Type
int32
Category
optional
Description
Used to gracefully disable a server. Virtual service waits for the specified time before terminating the existing connections to the servers that are disabled.
Default
1

connection_ramp_duration

Type
int32
Category
optional
Description
Duration for which new connections will be gradually ramped up to a server recently brought online. Useful for LB algorithms that are least connection based.
Default
10

max_concurrent_connections_per_server

Type
int32
Category
optional
Description
The maximum number of concurrent connections allowed to each server within the pool.
Default
0

health_monitor_refs

Type
Reference to HealthMonitor
Category
repeated
Description
Verify server health by applying one or more health monitors. Active monitors generate synthetic traffic from each Service Engine and mark a server up or down based on the response. The Passive monitor listens to client to server communication and raises or lowers the ratio of traffic destined to a server based on successful responses.

servers

Type
Server
Category
repeated
Description
The pool directs load balanced traffic to this list of destination servers. The servers can be configured by IP address, name, network or via IP Address Group

server_count

Type
int32
Category
optional
Description
Default
0

lb_algorithm

Type
enum
Category
optional
Description
The load balancing algorithm will pick a server within the pool's list of available servers.
Default
LB_ALGORITHM_LEAST_CONNECTIONS
Choices
LB_ALGORITHM_ROUND_ROBIN, LB_ALGORITHM_LEAST_LOAD, LB_ALGORITHM_FEWEST_TASKS, LB_ALGORITHM_RANDOM, LB_ALGORITHM_FEWEST_SERVERS, LB_ALGORITHM_CONSISTENT_HASH, LB_ALGORITHM_FASTEST_RESPONSE, LB_ALGORITHM_LEAST_CONNECTIONS

lb_algorithm_hash

Type
enum
Category
optional
Description
Criteria used as a key for determining the hash between the client and server.
Default
LB_ALGORITHM_CONSISTENT_HASH_SOURCE_IP_ADDRESS
Choices
LB_ALGORITHM_CONSISTENT_HASH_SOURCE_IP_ADDRESS_AND_PORT, LB_ALGORITHM_CONSISTENT_HASH_SOURCE_IP_ADDRESS, LB_ALGORITHM_CONSISTENT_HASH_CUSTOM_HEADER, LB_ALGORITHM_CONSISTENT_HASH_URI

lb_algorithm_consistent_hash_hdr

Type
string
Category
optional
Description
HTTP header name to be used for the hash key.

networks

Type
NetworkFilter
Category
repeated
Description
Networks designated as containing servers for this pool. The servers may be further narrowed down by a filter.

placement_networks

Type
PlacementNetwork
Category
repeated
Description
Manually select the networks and subnets used to provide reachability to the pool's servers. Specify the Subnet using the following syntax: 10.1.1.0/24

application_persistence_profile_ref

Type
Reference to ApplicationPersistenceProfile
Category
optional
Description
Persistence will ensure the same user sticks to the same server for a desired duration of time.

ssl_profile_ref

Type
Reference to SSLProfile
Category
optional
Description
When enabled, Avi re-encrypts traffic to the backend servers. The specific SSL profile defines which ciphers and SSL versions will be supported.

inline_health_monitor

Type
bool
Category
optional
Description
The Passive monitor will monitor client to server connections and requests and adjust traffic load to servers based on successful responses. This may alter the expected behavior of the LB method, such as Round Robin.
Default
True

use_service_port

Type
bool
Category
optional
Description
Do not translate the client's destination port when sending the connection to the server. The pool or servers specified service port will still be used for health monitoring. This feature is only applicable for a Virtual Service configured with the application type set to L4.
Default
False

fail_action

Type
FailAction
Category
optional
Description
Enable an action - Close Connection, HTTP Redirect, Local HTTP Response, or Backup Pool - when a pool failure happens. By default, a connection will be closed, in case the pool experiences a failure.

capacity_estimation

Type
bool
Category
optional
Description
Inline estimation of capacity of servers.
Default
False

capacity_estimation_ttfb_thresh

Type
uint32
Category
optional
Description
The maximum time-to-first-byte of a server.
Default
0

pki_profile_ref

Type
Reference to PKIProfile
Category
optional
Description
Avi will validate the SSL certificate present by a server against the selected PKI Profile.

ssl_key_and_certificate_ref

Type
Reference to SSLKeyAndCertificate
Category
optional
Description
Service Engines will present a client SSL certificate to the server.

server_auto_scale

Type
bool
Category
optional
Description
Server AutoScale. Not used anymore.
Default
False

prst_hdr_name

Type
string
Category
optional
Description
Header name for custom header persistence

apic_epg_name

Type
string
Category
optional
Description
Synchronize Cisco APIC EPG members with pool servers

autoscale_networks

Type
string
Category
repeated
Description
Network Ids for the launch configuration

autoscale_policy_ref

Type
Reference to ServerAutoScalePolicy
Category
optional
Description
Reference to Server Autoscale Policy

autoscale_launch_config_ref

Type
Reference to AutoScaleLaunchConfig
Category
optional
Description
Reference to the Launch Configuration Profile

vrf_ref

Type
Reference to VrfContext
Category
optional,readonly
Description
Virtual Routing Context that the pool is bound to. This is used to provide the isolation of the set of networks the pool is attached to. The pool inherits the Virtual Routing Conext of the Virtual Service, and this field is used only internally, and is set by pb-transform.

ipaddrgroup_ref

Type
Reference to IpAddrGroup
Category
optional
Description
Use list of servers from Ip Address Group

fewest_tasks_feedback_delay

Type
uint32
Category
optional
Description
Periodicity of feedback for fewest tasks server selection algorithm.
Default
10

enabled

Type
bool
Category
optional
Description
Enable or disable the pool. Disabling will terminate all open connections and pause health monitors.
Default
True

max_conn_rate_per_server

Type
RateProfile
Category
optional
Description
Rate Limit connections to each server.

east_west

Type
bool
Category
optional
Description
Inherited config from VirtualService.

created_by

Type
string
Category
optional
Description
Creator name

cloud_config_cksum

Type
string
Category
optional
Description
Checksum of cloud configuration for Pool. Internally set by cloud connector

request_queue_enabled

Type
bool
Category
optional
Description
Enable request queue when pool is full
Default
False

request_queue_depth

Type
uint32
Category
optional
Description
Minimum number of requests to be queued when pool is full.
Default
128

ab_pool

Type
AbPool
Category
optional
Description
A/B pool configuration.

server_reselect

Type
HTTPServerReselect
Category
optional
Description
Server reselect configuration for HTTP requests.

a_pool

Type
string
Category
optional
Description
Name of container cloud application that constitutes A pool in a A-B pool configuration, if different from VS app

ab_priority

Type
uint32
Category
optional
Description
Priority of this pool in a A-B pool pair. Internally used

host_check_enabled

Type
bool
Category
optional
Description
Enable host header name check for server certificate. If enabled and no explicit domain name is specified, Avi will use the incoming host header to do the match.
Default
False

domain_name

Type
string
Category
repeated
Description
Comma separated list of domain names which will be used to verify the common names or subject alternative names presented by server certificates if host header check is enabled.

sni_enabled

Type
bool
Category
optional
Description
Enable TLS SNI for server connections. If disabled, Avi will not send the SNI extension as part of the handshake.
Default
True

server_name

Type
string
Category
optional
Description
Fully qualified DNS hostname which will be used in the TLS SNI extension in server connections if SNI is enabled. If no value is specified, Avi will use the pool name instead.

description

Type
string
Category
optional
Description
A description of the pool.

tenant_ref

Type
Reference to Tenant
Category
optional
Description

cloud_ref

Type
Reference to Cloud
Category
optional,readonly
Description
Default
/api/cloud?name=Default-Cloud

Server

ip

Type
IpAddr
Category
required
Description
IP Address of the server. Required if there is no resolvable host name.

port

Type
int32
Category
optional
Description
Optionally specify the servers port number. This will override the pool's default server port attribute.

hostname

Type
string
Category
optional
Description
DNS resolvable name of the server. May be used in place of the IP address.

enabled

Type
bool
Category
optional
Description
Enable, Disable or Graceful Disable determine if new or existing connections to the server are allowed.
Default
True

ratio

Type
int32
Category
optional
Description
Overrides the default ratio of 1. Reduces the percentage the LB algorithm would pick the server in relation to its peers. Range is 1-20.
Default
1

vm_ref

Type
Reference to VIMgrVMRuntime
Category
optional
Description

nw_ref

Type
Reference to VIMgrNWRuntime
Category
optional
Description

discovered_network_ref

Type
Reference to Network
Category
repeated
Description
Discovered network for this server.

external_uuid

Type
string
Category
optional
Description
UUID identifying VM in OpenStack and other external compute

discovered_subnet

Type
IpAddrPrefix
Category
repeated
Description
Discovered subnet for this server.

verify_network

Type
bool
Category
optional
Description
Verify server belongs to a discovered network or reachable via a discovered network. Verify reachable network isn't the OpenStack management network
Default
False

discovered_networks

Type
DiscoveredNetwork
Category
repeated
Description
Discovered networks providing reachability for server IP.

resolve_server_by_dns

Type
bool
Category
optional
Description
Auto resolve server's IP using DNS name
Default
False

prst_hdr_val

Type
string
Category
optional
Description
Header value for custom header persistence.

mac_address

Type
string
Category
optional
Description
MAC address of server.

static

Type
bool
Category
optional
Description
If statically learned.
Default
False

server_node

Type
string
Category
optional
Description
Hostname of the node where the server VM or container resides

availability_zone

Type
string
Category
optional
Description
Availability-zone of the server VM.

NetworkFilter

network_ref

Type
Reference to VIMgrNWRuntime
Category
required
Description

server_filter

Type
string
Category
optional
Description

PlacementNetwork

network_ref

Type
Reference to Network
Category
required
Description

subnet

Type
IpAddrPrefix
Category
optional
Description

FailAction

type

Type
enum
Category
required
Description
Enables a response to client when pool experiences a failure. By default TCP connection is closed.
Default
FAIL_ACTION_CLOSE_CONN
Choices
FAIL_ACTION_BACKUP_POOL, FAIL_ACTION_CLOSE_CONN, FAIL_ACTION_HTTP_LOCAL_RSP, FAIL_ACTION_HTTP_REDIRECT

redirect

Type
FailActionHTTPRedirect
Category
optional
Description
URL to redirect HTTP requests to when pool experiences a failure

local_rsp

Type
FailActionHTTPLocalResponse
Category
optional
Description
Local response to HTTP requests when pool experiences a failure

backup_pool

Type
FailActionBackupPool
Category
optional
Description
Backup Pool when pool experiences a failure

FailActionHTTPRedirect

protocol

Type
enum
Category
optional
Description
Default
HTTPS
Choices
HTTP, HTTPS

host

Type
string
Category
required
Description

path

Type
string
Category
optional
Description

query

Type
string
Category
optional
Description

status_code

Type
enum
Category
optional
Description
Default
HTTP_REDIRECT_STATUS_CODE_302
Choices
HTTP_REDIRECT_STATUS_CODE_302, HTTP_REDIRECT_STATUS_CODE_301, HTTP_REDIRECT_STATUS_CODE_307

FailActionHTTPLocalResponse

status_code

Type
enum
Category
optional
Description
Default
FAIL_HTTP_STATUS_CODE_503
Choices
FAIL_HTTP_STATUS_CODE_503, FAIL_HTTP_STATUS_CODE_200

file

Type
HTTPLocalFile
Category
optional
Description

FailActionBackupPool

backup_pool_ref

Type
Reference to Pool
Category
required
Description
Specifies the UUID of the Pool acting as backup pool.

AbPool

pool_ref

Type
Reference to Pool
Category
required
Description
Pool configured as B pool for A/B testing

ratio

Type
uint32
Category
optional
Description
Ratio of traffic diverted to the B pool, for A/B testing
Default
0

HTTPServerReselect

enabled

Type
bool
Category
required
Description
Enable HTTP request reselect when server responds with specific response codes.
Default
False

svr_resp_code

Type
HTTPReselectRespCode
Category
optional
Description
Server response codes which will trigger an HTTP request retry.

num_retries

Type
uint32
Category
optional
Description
Number of times to retry an HTTP request when server responds with configured status codes.
Default
4

retry_nonidempotent

Type
bool
Category
optional
Description
Allow retry of non-idempotent HTTP requests.
Default
False

HTTPReselectRespCode

codes

Type
int32
Category
repeated
Description
HTTP response code to be matched.

ranges

Type
HTTPStatusRange
Category
repeated
Description
HTTP response code ranges to match.

resp_code_block

Type
enum
Category
repeated
Description
Block of HTTP response codes to match for server reselect.
Choices
HTTP_RSP_5XX, HTTP_RSP_4XX

HTTPStatusRange

begin

Type
int32
Category
required
Description
Starting HTTP response status code

end

Type
int32
Category
required
Description
Ending HTTP response status code

HealthMonitor

uuid

Type
string
Category
required
Description
UUID of the health monitor.

name

Type
string
Category
required
Description
A user friendly name for this health monitor.

send_interval

Type
int32
Category
optional
Description
Frequency, in seconds, that monitors are sent to a server.
Default
10

receive_timeout

Type
int32
Category
optional
Description
A valid response from the server is expected within the receive timeout window. This timeout must be less than the send interval. If server status is regularly flapping up and down, consider increasing this value.
Default
4

successful_checks

Type
int32
Category
optional
Description
Number of continuous successful health checks before server is marked up.
Default
2

failed_checks

Type
int32
Category
optional
Description
Number of continuous failed health checks before the server is marked down.
Default
2

type

Type
enum
Category
required
Description
Type of the health monitor.
Choices
HEALTH_MONITOR_TCP, HEALTH_MONITOR_HTTPS, HEALTH_MONITOR_EXTERNAL, HEALTH_MONITOR_UDP, HEALTH_MONITOR_DNS, HEALTH_MONITOR_HTTP, HEALTH_MONITOR_PING

tcp_monitor

Type
HealthMonitorTcp
Category
optional
Description

http_monitor

Type
HealthMonitorHttp
Category
optional
Description

https_monitor

Type
HealthMonitorHttp
Category
optional
Description

external_monitor

Type
HealthMonitorExternal
Category
optional
Description

udp_monitor

Type
HealthMonitorUdp
Category
optional
Description

dns_monitor

Type
HealthMonitorDNS
Category
optional
Description

monitor_port

Type
int32
Category
optional
Description
Use this port instead of the port defined for the server in the Pool. If the monitor succeeds to this port, the load balanced traffic will still be sent to the port of the server defined within the Pool.

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

HealthMonitorTcp

tcp_request

Type
string
Category
optional
Description
Request data to send after completing the TCP handshake.

tcp_response

Type
string
Category
optional
Description
Match for the desired keyword in the first 2Kb of the server's TCP response. If this field is left blank, no server response is required.

maintenance_response

Type
string
Category
optional
Description
Match or look for this keyword in the first 2KB of server's response indicating server maintenance. A successful match results in the server being marked down.

tcp_half_open

Type
bool
Category
optional
Description
Configure TCP health monitor to use half-open TCP connections to monitor the health of backend servers thereby avoiding consumption of a full fledged server side connection and the overhead and logs associated with it. This method is light-weight as it makes use of listener in server's kernel layer to measure the health and a child socket or user thread is not created on the server side.
Default
False

HealthMonitorHttp

http_request

Type
string
Category
optional
Description
Send an HTTP request to the server. The default GET / HTTP/1.0 may be extended with additional headers or information. For instance, GET /index.htm HTTP/1.1 Host: www.site.com Connection: Close
Default
GET / HTTP/1.0

http_response_code

Type
enum
Category
repeated
Description
List of HTTP response codes to match as successful. Default is 2xx.
Choices
HTTP_1XX, HTTP_3XX, HTTP_2XX, HTTP_5XX, HTTP_4XX, HTTP_ANY

http_response

Type
string
Category
optional
Description
Match for a keyword in the first 2Kb of the server header and body response.

maintenance_code

Type
uint32
Category
repeated
Description
Match or look for this HTTP response code indicating server maintenance. A successful match results in the server being marked down.

maintenance_response

Type
string
Category
optional
Description
Match or look for this keyword in the first 2KB of server header and body response indicating server maintenance. A successful match results in the server being marked down.

HealthMonitorExternal

command_path

Type
string
Category
optional
Description
Path of external health monitor script.

command_parameters

Type
string
Category
optional
Description
Optional arguments to feed into the script.

command_code

Type
string
Category
required
Description
Command script provided inline.

command_variables

Type
string
Category
optional
Description
Environment variables to be fed into the script.

HealthMonitorUdp

udp_request

Type
string
Category
optional
Description
Send UDP request.

udp_response

Type
string
Category
optional
Description
Match for keyword in the UDP response.

maintenance_response

Type
string
Category
optional
Description
Match or look for this keyword in the first 2KB of server's response indicating server maintenance. A successful match results in the server being marked down.

HealthMonitorDNS

query_name

Type
string
Category
required
Description
The DNS monitor will query the DNS server for the fully qualified name in this field.

qtype

Type
enum
Category
optional
Description
Query_Type: Response has atleast one answer of which the resource record type matches the query type Any_Type: Response should contain atleast one answer AnyThing: An empty answer is enough
Default
DNS_QUERY_TYPE
Choices
DNS_ANY_TYPE, DNS_ANY_THING, DNS_QUERY_TYPE

rcode

Type
enum
Category
optional
Description
When No Error is selected, a DNS query will be marked failed is any error code is returned by the server. With Any selected, the monitor ignores error code in the responses.
Default
RCODE_NO_ERROR
Choices
RCODE_NO_ERROR, RCODE_ANYTHING

response_string

Type
string
Category
optional
Description
The resource record of the queried DNS server's response for the Request Name must include the IP address defined in this field.

NetworkProfile

uuid

Type
string
Category
required
Description
UUID of the network profile.

name

Type
string
Category
required
Description
The name of the network profile.

profile

Type
NetworkProfileUnion
Category
required
Description

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

NetworkProfileUnion

type

Type
enum
Category
required
Description
Configure one of either proxy or fast path profiles.
Default
PROTOCOL_TYPE_TCP_PROXY
Choices
PROTOCOL_TYPE_TCP_FAST_PATH, PROTOCOL_TYPE_TCP_PROXY, PROTOCOL_TYPE_UDP_FAST_PATH

tcp_proxy_profile

Type
TCPProxyProfile
Category
optional
Description

tcp_fast_path_profile

Type
TCPFastPathProfile
Category
optional
Description

udp_fast_path_profile

Type
UDPFastPathProfile
Category
optional
Description

TCPProxyProfile

automatic

Type
bool
Category
optional
Description
Dynamically pick the relevant parameters for connections.
Default
True

idle_connection_type

Type
enum
Category
optional
Description
Controls the behavior of idle connections.
Default
KEEP_ALIVE
Choices
KEEP_ALIVE, CLOSE_IDLE

idle_connection_timeout

Type
int32
Category
optional
Description
The duration for keepalive probes or session idle timeout. Max value is 1800 seconds, min is 60. Set to 0 to allow infinite idle time.
Default
600

ignore_time_wait

Type
bool
Category
optional
Description
A new SYN is accepted from the same 4-tuple even if there is already a connection in TIME_WAIT state. This is equivalent of setting Time Wait Delay to 0
Default
False

time_wait_delay

Type
int32
Category
optional
Description
The time (in millisec) to wait before closing a connection in the TIME_WAIT state.
Default
2000

max_retransmissions

Type
int32
Category
optional
Description
The number of attempts at retransmit before closing the connection.
Default
8

max_syn_retransmissions

Type
int32
Category
optional
Description
The maximum number of attempts at retransmitting a SYN packet before giving up.
Default
8

receive_window

Type
int32
Category
optional
Description
Size of the receive window.
Default
64

use_interface_mtu

Type
bool
Category
optional
Description
Use the interface MTU to calculate the TCP max segment size.
Default
True

max_segment_size

Type
int32
Category
optional
Description
Maximum TCP segment size.

nagles_algorithm

Type
bool
Category
optional
Description
Consolidates small data packets to send clients fewer but larger packets. Adversely affects real time protocols such as telnet or SSH.
Default
False

ip_dscp

Type
int32
Category
optional
Description
Controls the value of the Differentiated Services Code Point field inserted in the IP header. This has two options: Set to a specific value, or Pass Through, which uses the incoming DSCP value.
Default
0

cc_algo

Type
enum
Category
optional
Description
Controls the congestion control algorithm we use.
Default
CC_ALGO_NEW_RENO
Choices
CC_ALGO_NEW_RENO, CC_ALGO_HTCP, CC_ALGO_CUBIC

aggressive_congestion_avoidance

Type
bool
Category
optional
Description
Controls the our congestion window to send, normally it's 1 mss, If this option is turned on, we use 10 msses
Default
False

TCPFastPathProfile

session_idle_timeout

Type
int32
Category
optional
Description
The amount of time (in sec) for which a connection needs to be idle before it is eligible to be deleted.
Default
300

enable_syn_protection

Type
bool
Category
optional
Description
When enabled, Avi will complete the 3-way handshake with the client before forwarding any packets to the server. This will protect the server from SYN flood and half open SYN connections.
Default
False

UDPFastPathProfile

session_idle_timeout

Type
int32
Category
optional
Description
The amount of time (in sec) for which a flow needs to be idle before it is deleted.
Default
10

per_pkt_loadbalance

Type
bool
Category
optional
Description
When enabled, every UDP packet is considered a new transaction and may be load balanced to a different server. When disabled, packets from the same client source IP and port are sent to the same server.
Default
False

snat

Type
bool
Category
optional
Description
When disabled, Source NAT will not be performed for all client UDP packets
Default
True

ApplicationProfile

uuid

Type
string
Category
required
Description
UUID of the application profile.

name

Type
string
Category
required
Description
The name of the application profile.

type

Type
enum
Category
required
Description
Specifies which application layer proxy is enabled for the virtual service.
Choices
APPLICATION_PROFILE_TYPE_SSL, APPLICATION_PROFILE_TYPE_DNS, APPLICATION_PROFILE_TYPE_SYSLOG, APPLICATION_PROFILE_TYPE_HTTP, APPLICATION_PROFILE_TYPE_L4

http_profile

Type
HTTPApplicationProfile
Category
optional
Description
Specifies the HTTP application proxy profile parameters.

dos_rl_profile

Type
DosRateLimitProfile
Category
optional
Description
Specifies various security related controls for virtual service.

tcp_app_profile

Type
TCPApplicationProfile
Category
optional
Description
Specifies the TCP application proxy profile parameters.

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

HTTPApplicationProfile

connection_multiplexing_enabled

Type
bool
Category
optional
Description
Allows HTTP requests, not just TCP connections, to be load balanced across servers. Proxied TCP connections to servers may be reused by multiple clients to improve performance.
Default
True

xff_enabled

Type
bool
Category
optional
Description
The client's original IP address is inserted into an HTTP request header sent to the server. Servers may use this address for logging or other purposes, rather than Avi's source NAT address used in the Avi to server IP connection.
Default
True

xff_alternate_name

Type
string
Category
optional
Description
Provide a custom name for the X-Forwarded-For header sent to the servers.
Default
X-Forwarded-For

ssl_everywhere_enabled

Type
bool
Category
optional
Description
Enable common settings to increase the level of security for virtual services running HTTP and HTTPS. For sites that are HTTP only, these settings will have no effect.
Default
False

hsts_enabled

Type
bool
Category
optional
Description
Inserts HTTP Strict-Transport-Security header in the HTTPS response. HSTS can help mitigate man-in-the-middle attacks by telling browsers that support HSTS that they should only access this site via HTTPS.
Default
False

hsts_max_age

Type
uint64
Category
optional
Description
Number of days for which the client should regard this virtual service as a known HSTS host.
Default
365

secure_cookie_enabled

Type
bool
Category
optional
Description
Mark server cookies with the 'Secure' attribute. Client browsers will not send a cookie marked as secure over an unencrypted connection. If Avi is terminating SSL from clients and passing it as HTTP to the server, the server may return cookies without the secure flag set.
Default
False

httponly_enabled

Type
bool
Category
optional
Description
Mark HTTP cookies as HTTPonly. This helps mitigate cross site scripting attacks as browsers will not allow these cookies to be read by third parties, such as javascript.
Default
False

http_to_https

Type
bool
Category
optional
Description
Client requests received via HTTP will be redirected to HTTPS.
Default
False

server_side_redirect_to_https

Type
bool
Category
optional
Description
When terminating client SSL sessions at Avi, servers may incorrectly send redirect to clients as HTTP. This option will rewrite the server's redirect responses for this virtual service from HTTP to HTTPS.
Default
False

x_forwarded_proto_enabled

Type
bool
Category
optional
Description
Insert an X-Forwarded-Proto header in the request sent to the server. When the client connects via SSL, Avi terminates the SSL, and then forwards the requests to the servers via HTTP, so the servers can determine the original protocol via this header. In this example, the value will be 'https'.
Default
False

compression_profile

Type
CompressionProfile
Category
optional
Description
HTTP Compression settings to use with this HTTP Profile.

spdy_enabled

Type
bool
Category
optional
Description
Enable SPDY proxy for traffic from clients to the virtual service. SPDY requires SSL from the clients to Avi. Avi ADC will proxy the SPDY protocol, and forward requests to servers as HTTP 1.1.
Default
False

spdy_fwd_proxy_mode

Type
bool
Category
optional
Description
Enable fwd proxy mode with SPDY. This makes the Proxy combine the :host and :uri spdy headers to create a fwd-proxy style request URI
Default
False

post_accept_timeout

Type
int32
Category
optional
Description
The max allowed length of time between a client establishing a TCP connection until Avi receives the first byte of the client's HTTP request.
Default
30000

client_header_timeout

Type
int32
Category
optional
Description
The max length of time allowed for a client to transmit the entire request headers. This helps to mitigate various forms of SlowLoris attacks.
Default
10000

client_body_timeout

Type
int32
Category
optional
Description
The max allowed length of time to receive a request body from a client. Default of 0 specifies no timeout. This setting generally impacts the length of time allowed for a client to send a POST.
Default
0

keepalive_timeout

Type
int32
Category
optional
Description
The max idle time allowed between HTTP requests over a Keep-alive connection.
Default
30000

client_max_header_size

Type
int32
Category
optional
Description
Maximum size in Kbytes of a single HTTP header in the client request.
Default
12

client_max_request_size

Type
int32
Category
optional
Description
Maximum size in Kbytes of all the client HTTP request headers.
Default
48

client_max_body_size

Type
Unknown
Category
optional
Description
Maximum size for the client request body. This limits the size of the client data that can be uploaded/posted as part of a single HTTP Request. Default 0 => Unlimited.
Default
0

cache_config

Type
HttpCacheConfig
Category
optional
Description
HTTP Caching config to use with this HTTP Profile.

max_rps_unknown_uri

Type
uint32
Category
optional
Description
Maximum unknown URIs per second.
Default
0

max_rps_cip

Type
uint32
Category
optional
Description
Maximum requests per second per client IP.
Default
0

max_rps_uri

Type
uint32
Category
optional
Description
Maximum requests per second per URI.
Default
0

max_rps_cip_uri

Type
uint32
Category
optional
Description
Maximum requests per second per client IP and URI.
Default
0

ssl_client_certificate_action

Type
SSLClientCertificateAction
Category
optional
Description
Set of match/action rules that govern what happens when the client certificate request is enabled

ssl_client_certificate_mode

Type
enum
Category
optional
Description
Specifies whether the client side verification is set to none, request or require.
Default
SSL_CLIENT_CERTIFICATE_NONE
Choices
SSL_CLIENT_CERTIFICATE_REQUEST, SSL_CLIENT_CERTIFICATE_REQUIRE, SSL_CLIENT_CERTIFICATE_NONE

pki_profile_ref

Type
Reference to PKIProfile
Category
optional
Description
Select the PKI profile to be associated with the Virtual Service. This profile defines the Certificate Authority and Revocation List.

websockets_enabled

Type
bool
Category
optional
Description
Enable Websockets proxy for traffic from clients to the virtual service. Connections to this VS start in HTTP mode. If the client requests an Upgrade to Websockets, and the server responds back with success, then the connection is upgraded to WebSockets mode.
Default
True

max_rps_unknown_cip

Type
uint32
Category
optional
Description
Maximum unknown client IPs per second.
Default
0

max_bad_rps_cip

Type
uint32
Category
optional
Description
Maximum bad requests per second per client IP.
Default
0

max_bad_rps_uri

Type
uint32
Category
optional
Description
Maximum bad requests per second per URI.
Default
0

max_bad_rps_cip_uri

Type
uint32
Category
optional
Description
Maximum bad requests per second per client IP and URI.
Default
0

keepalive_header

Type
bool
Category
optional
Description
Send 'Keep-Alive' header to the client with timeout as specified in the Keep-Alive Timeout.
Default
False

CompressionProfile

compression

Type
bool
Category
required
Description
Compress HTTP response content if it wasn't already compressed.
Default
False

remove_accept_encoding_header

Type
bool
Category
required
Description
Offload compression from the servers to AVI. Saves compute cycles on the servers.
Default
True

compressible_content_ref

Type
Reference to StringGroup
Category
optional
Description
Compress only content types listed in this string group. Content types not present in this list are not compressed.
Default
/api/stringgroup?name=System-Compressible-Content-Types

type

Type
enum
Category
required
Description
Compress content automatically or add custom filters to define compressible content and compression levels.
Default
AUTO_COMPRESSION
Choices
CUSTOM_COMPRESSION, AUTO_COMPRESSION

filter

Type
CompressionFilter
Category
repeated
Description
Custom filters used when auto compression is not selected.

CompressionFilter

name

Type
string
Category
required
Description

index

Type
int32
Category
required
Description

match

Type
enum
Category
optional
Description
Whether to apply Filter when group criteria is matched or not
Default
IS_IN
Choices
IS_NOT_IN, IS_IN

ip_addrs_ref

Type
Reference to IpAddrGroup
Category
optional
Description

ip_addrs

Type
IpAddr
Category
repeated
Description

ip_addr_ranges

Type
IpAddrRange
Category
repeated
Description

ip_addr_prefixes

Type
IpAddrPrefix
Category
repeated
Description

devices_ref

Type
Reference to StringGroup
Category
optional
Description

user_agent

Type
string
Category
repeated
Description

level

Type
enum
Category
required
Description
Default
NORMAL_COMPRESSION
Choices
NORMAL_COMPRESSION, AGGRESSIVE_COMPRESSION, NO_COMPRESSION

HttpCacheConfig

enabled

Type
bool
Category
optional
Description
Enable/disable HTTP object caching.
Default
False

xcache_header

Type
bool
Category
optional
Description
Add an X-Cache header to content served from cache, which indicates to the client that the object was server from an intermediate cache.
Default
True

age_header

Type
bool
Category
optional
Description
Add an Age header to content served from cache, which indicates to the client the number of seconds the object has been in the cache.
Default
True

date_header

Type
bool
Category
optional
Description
If a Date header was not added by the server, add a Date header to the object served from cache. This indicates to the client when the object was originally sent by the server to the cache.
Default
True

min_object_size

Type
uint32
Category
optional
Description
Minimum size of an object to store in the cache.
Default
100

max_object_size

Type
uint32
Category
optional
Description
Maximum size of an object to store in the cache.
Default
4194304

default_expire

Type
uint32
Category
optional
Description
Default expiration time of cache objects received from the server without a Cache-Control expiration header. This value may be overwritten by the Heuristic Expire setting.
Default
600

heuristic_expire

Type
bool
Category
optional
Description
If a response object from the server does not include the Cache-Control header, but does include a Last-Modified header, the system will use this time to calculate the Cache-Control expiration. If unable to solicit an Last-Modified header, then the system will fall back to the Cache Expire Time value.
Default
False

max_cache_size

Type
uint64
Category
optional
Description
Max size, in bytes, of the cache. The default, zero, indicates auto configuration.
Default
0

query_cacheable

Type
bool
Category
optional
Description
Allow caching of objects whose URI included a query argument. When disabled, these objects are not cached. When enabled, the request must match the URI query to be considered a hit.
Default
False

mime_types_list

Type
string
Category
repeated
Description
Whitelist of cacheable mime types. If both Cacheable Mime Types string list and string group are empty, this defaults to */*

mime_types_group_refs

Type
Reference to StringGroup
Category
repeated
Description
Whitelist string group of cacheable mime types. If both Cacheable Mime Types string list and string group are empty, this defaults to */*

aggressive

Type
bool
Category
optional
Description
Enable/disable caching objects without Cache-Control headers
Default
False

mime_types_black_list

Type
string
Category
repeated
Description
Blacklist of non-cacheable mime types

mime_types_black_group_refs

Type
Reference to StringGroup
Category
repeated
Description
Blacklist string group of non-cacheable mime types

SSLClientCertificateAction

headers

Type
SSLClientRequestHeader
Category
repeated
Description

close_connection

Type
bool
Category
optional
Description
Default
False

SSLClientRequestHeader

request_header

Type
string
Category
optional
Description
If this header exists, reset the connection. If the ssl variable is specified, add a header with this value

request_header_value

Type
enum
Category
optional
Description
Set the request header with the value as indicated by this SSL variable. Eg. send the whole certificate in PEM format
Choices
HTTP_POLICY_VAR_SSL_CLIENT_SERIAL, HTTP_POLICY_VAR_SSL_CIPHER, HTTP_POLICY_VAR_SSL_CLIENT_FINGERPRINT, HTTP_POLICY_VAR_USER_NAME, HTTP_POLICY_VAR_HTTP_HDR, HTTP_POLICY_VAR_VS_PORT, HTTP_POLICY_VAR_SSL_CLIENT_SUBJECT, HTTP_POLICY_VAR_SSL_SERVER_NAME, HTTP_POLICY_VAR_CLIENT_IP, HTTP_POLICY_VAR_VS_IP, HTTP_POLICY_VAR_SSL_CLIENT_RAW, HTTP_POLICY_VAR_SSL_CLIENT_ISSUER, HTTP_POLICY_VAR_SSL_PROTOCOL

DosRateLimitProfile

rl_profile

Type
RateLimiterProfile
Category
optional
Description
Profile for Connections/Requests rate limiting.

dos_profile

Type
DosThresholdProfile
Category
optional
Description
Profile for DoS attack detection.

RateLimiterProfile

client_ip_connections_rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit all connections made from any single client IP address to the Virtual Service.

client_ip_requests_rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit all HTTP requests from any single client IP address to all URLs of the Virtual Service.

uri_requests_rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit all HTTP requests from all client IP addresses to any single URL.

client_ip_to_uri_requests_rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit all HTTP requests from any single client IP address to any single URL.

client_ip_failed_requests_rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit all requests from a client for a specified period of time once the count of failed requests from that client crosses a threshold for that period. Clients are tracked based on their IP address. Count and time period are specified through the RateProfile. Requests are deemed failed based on client or server side error status codes, consistent with how Avi Logs and Metrics subsystems mark failed requests.

uri_failed_requests_rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit all requests to a URI for a specified period of time once the count of failed requests to that URI crosses a threshold for that period. Count and time period are specified through the RateProfile. Requests are deemed failed based on client or server side error status codes, consistent with how Avi Logs and Metrics subsystems mark failed requests.

client_ip_to_uri_failed_requests_rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit all requests from a client to a URI for a specified period of time once the count of failed requests from that client to the URI crosses a threshold for that period. Clients are tracked based on their IP address. Count and time period are specified through the RateProfile. Requests are deemed failed based on client or server side error status codes, consistent with how Avi Logs and Metrics subsystems mark failed requests.

client_ip_scanners_requests_rate_limit

Type
RateProfile
Category
optional
Description
Automatically track clients and classify them into 3 groups - Good, Bad, Unknown. Clients are tracked based on their IP Address. Clients are added to the Good group when the Avi Scan Detection system builds history of requests from them that complete successfully. Clients are added to Unknown group when there is insufficient history about them. Requests from such clients are rate limited to the rate specified in the RateProfile. Finally, Clients with history of failed requests are added to Bad group and their requests are rate limited with stricter thresholds than the Unknown Clients group. The Avi Scan Detection system automatically tunes itself so that the Good, Bad, and Unknown client IPs group membership changes dynamically with the changes in traffic patterns through the ADC.

uri_scanners_requests_rate_limit

Type
RateProfile
Category
optional
Description
Automatically track URIs and classify them into 3 groups - Good, Bad, Unknown. URIs are added to the Good group when the Avi Scan Detection system builds history of requests to URIs that complete successfully. URIs are added to Unknown group when there is insufficient history about them. Requests for such URIs are rate limited to the rate specified in the RateProfile. Finally, URIs with history of failed requests are added to Bad group and requests to them are rate limited with stricter thresholds than the Unknown URIs group. The Avi Scan Detection system automatically tunes itself so that the Good, Bad, and Unknown URIs group membership changes dynamically with the changes in traffic patterns through the ADC.

DosThresholdProfile

thresh_period

Type
int32
Category
required
Description
Timer value in seconds to collect DoS attack metrics based on threshold on the Service Engine for this Virtual Service.
Default
5

thresh_info

Type
DosThreshold
Category
repeated
Description
Attack type, min and max values for DoS attack detection.

DosThreshold

attack

Type
enum
Category
required
Description
Attack type.
Choices
DOS_REQ_IP_URI_RL_DROP_BAD, DOS_REQ_CIP_SCAN_BAD_RL_DROP, MALFORMED_FLOOD, POLICY_DROPS, IP_FRAG_INCOMPLETE, DOS_CONN_IP_RL_DROP, FAKE_SESSION, DOS_HTTP_ABORT, SMURF, IP_FRAG_TOOSMALL, ICMP_PING_FLOOD, DOS_REQ_CIP_SCAN_UNKNOWN_RL_DROP, DOS_REQ_IP_URI_RL_DROP, LAND, UNKOWN_PROTOCOL, DOS_REQ_IP_RL_DROP_BAD, TCP_NON_SYN_FLOOD, ZERO_WINDOW_STRESS, IP_FRAG_FULL, DOS_REQ_RL_DROP, SMALL_WINDOW_STRESS, BAD_RST_FLOOD, DOS_APP_ERROR, DOS_SSL_ERROR, IP_FRAG_OVERRUN, PORT_SCAN, DOS_REQ_IP_RL_DROP, DOS_REQ_URI_RL_DROP_BAD, TCP_NON_SYN_FLOOD_OLD, DOS_REQ_URI_SCAN_BAD_RL_DROP, DOS_SLOW_URL, DOS_REQ_URI_RL_DROP, SYN_FLOOD, DOS_HTTP_ERROR, TEARDROP, DOS_REQ_URI_SCAN_UNKNOWN_RL_DROP, DOS_HTTP_TIMEOUT, DOS_CONN_RL_DROP

min_value

Type
int32
Category
required
Description
Minimum number of packets or connections or requests in a given interval of time to be deemed as attack.

max_value

Type
int32
Category
required
Description
Maximum number of packets or connections or requests in a given interval of time to be deemed as attack.

TCPApplicationProfile

proxy_protocol_enabled

Type
bool
Category
optional
Description
Enable/Disable the usage of proxy protocol to convey client connection information to the back-end servers. Valid only for L4 application profiles and TCP proxy.
Default
False

proxy_protocol_version

Type
enum
Category
optional
Description
Version of proxy protocol to be used to convey client connection information to the back-end servers.
Default
PROXY_PROTOCOL_VERSION_1
Choices
PROXY_PROTOCOL_VERSION_2, PROXY_PROTOCOL_VERSION_1

HTTPSecurityPolicy

rules

Type
HTTPSecurityRule
Category
repeated
Description
Add rules to the HTTP security policy

HTTPSecurityRule

name

Type
string
Category
required
Description
Name of the rule

index

Type
int32
Category
required
Description
Index of the rule

enable

Type
bool
Category
required
Description
Enable or disable the rule
Default
True

match

Type
MatchTarget
Category
optional
Description
Add match criteria to the rule

action

Type
HTTPSecurityAction
Category
optional
Description
Action to be performed upon successful matching

log

Type
bool
Category
optional
Description
Log HTTP request upon rule match

MatchTarget

client_ip

Type
IpAddrMatch
Category
optional
Description
Configure client ip addresses

vs_port

Type
PortMatch
Category
optional
Description
Configure virtual service ports

protocol

Type
ProtocolMatch
Category
optional
Description
Configure the type of HTTP protocol

method

Type
MethodMatch
Category
optional
Description
Configure HTTP methods

version

Type
HTTPVersionMatch
Category
optional
Description
Configure versions of the HTTP protocol

path

Type
PathMatch
Category
optional
Description
Configure request paths

query

Type
QueryMatch
Category
optional
Description
Configure request query

hdrs

Type
HdrMatch
Category
repeated
Description
Configure HTTP header(s)

cookie

Type
CookieMatch
Category
optional
Description
Configure HTTP cookie(s)

host_hdr

Type
HostHdrMatch
Category
optional
Description
Configure the host header

PortMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for port matching the HTTP request
Choices
IS_NOT_IN, IS_IN

ports

Type
uint32
Category
repeated
Description
TCP port(s) listening for HTTP/HTTPS

ProtocolMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for protocol matching the HTTP request
Choices
IS_NOT_IN, IS_IN

protocols

Type
enum
Category
required
Description
HTTP or HTTPS protocol
Choices
HTTP, HTTPS

MethodMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for HTTP method matching the method in the HTTP request
Choices
IS_NOT_IN, IS_IN

methods

Type
enum
Category
repeated
Description
Configure HTTP method(s)
Choices
HTTP_METHOD_HEAD, HTTP_METHOD_OPTIONS, HTTP_METHOD_PUT, HTTP_METHOD_DELETE, HTTP_METHOD_POST, HTTP_METHOD_GET, HTTP_METHOD_TRACE

HTTPVersionMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for HTTP version matching the version used in the HTTP request
Choices
IS_NOT_IN, IS_IN

versions

Type
enum
Category
repeated
Description
HTTP protocol version
Choices
ZERO_NINE, ONE_ZERO, ONE_ONE

PathMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for matching the path in the HTTP request URI
Choices
REGEX_MATCH, DOES_NOT_END_WITH, ENDS_WITH, CONTAINS, EQUALS, DOES_NOT_BEGIN_WITH, DOES_NOT_EQUAL, REGEX_DOES_NOT_MATCH, DOES_NOT_CONTAIN, BEGINS_WITH

match_case

Type
enum
Category
optional
Description
Case sensitivity to use for the matching
Default
INSENSITIVE
Choices
SENSITIVE, INSENSITIVE

match_str

Type
string
Category
repeated
Description
String values

string_group_refs

Type
Reference to StringGroup
Category
repeated
Description
UUID of the string group(s)

QueryMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for matching the query in HTTP request URI
Choices
QUERY_MATCH_CONTAINS

match_case

Type
enum
Category
optional
Description
Case sensitivity to use for the match
Default
INSENSITIVE
Choices
SENSITIVE, INSENSITIVE

match_str

Type
string
Category
repeated
Description
String value(s)

string_group_refs

Type
Reference to StringGroup
Category
repeated
Description
UUID of the string group(s)

HdrMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for matching headers in the HTTP request
Choices
HDR_ENDS_WITH, HDR_EQUALS, HDR_DOES_NOT_EXIST, HDR_EXISTS, HDR_DOES_NOT_END_WITH, HDR_DOES_NOT_EQUAL, HDR_DOES_NOT_CONTAIN, HDR_CONTAINS, HDR_BEGINS_WITH, HDR_DOES_NOT_BEGIN_WITH

hdr

Type
string
Category
required
Description
Name of the HTTP header whose value is to be matched

match_case

Type
enum
Category
optional
Description
Case sensitivity to use for the match
Default
INSENSITIVE
Choices
SENSITIVE, INSENSITIVE

value

Type
string
Category
repeated
Description
String values to match in the HTTP header

CookieMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for matching the cookie in the HTTP request
Choices
HDR_ENDS_WITH, HDR_EQUALS, HDR_DOES_NOT_EXIST, HDR_EXISTS, HDR_DOES_NOT_END_WITH, HDR_DOES_NOT_EQUAL, HDR_DOES_NOT_CONTAIN, HDR_CONTAINS, HDR_BEGINS_WITH, HDR_DOES_NOT_BEGIN_WITH

name

Type
string
Category
required
Description
Name of the cookie

match_case

Type
enum
Category
optional
Description
Case sensitivity to use for the match
Default
INSENSITIVE
Choices
SENSITIVE, INSENSITIVE

value

Type
string
Category
optional
Description
String value in the cookie

HostHdrMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for the host header value match
Choices
HDR_ENDS_WITH, HDR_EQUALS, HDR_DOES_NOT_EXIST, HDR_EXISTS, HDR_DOES_NOT_END_WITH, HDR_DOES_NOT_EQUAL, HDR_DOES_NOT_CONTAIN, HDR_CONTAINS, HDR_BEGINS_WITH, HDR_DOES_NOT_BEGIN_WITH

match_case

Type
enum
Category
optional
Description
Case sensitivity to use for the match
Default
INSENSITIVE
Choices
SENSITIVE, INSENSITIVE

value

Type
string
Category
repeated
Description
String value(s) in the host header

HTTPSecurityAction

action

Type
enum
Category
required
Description
Type of the security action to perform
Choices
HTTP_SECURITY_ACTION_SEND_RESPONSE, HTTP_SECURITY_ACTION_REDIRECT_TO_HTTPS, HTTP_SECURITY_ACTION_RATE_LIMIT, HTTP_SECURITY_ACTION_ALLOW, HTTP_SECURITY_ACTION_CLOSE_CONN

status_code

Type
enum
Category
optional
Description
HTTP status code to use for local response
Choices
HTTP_LOCAL_RESPONSE_STATUS_CODE_403, HTTP_LOCAL_RESPONSE_STATUS_CODE_429, HTTP_LOCAL_RESPONSE_STATUS_CODE_200, HTTP_LOCAL_RESPONSE_STATUS_CODE_404

https_port

Type
uint32
Category
optional
Description
Secure SSL/TLS port to redirect the HTTP request to

file

Type
HTTPLocalFile
Category
optional
Description
File to be used for generating HTTP local response

rate_limit

Type
RateProfile
Category
optional
Description
Rate Limit profile to be used to rate-limit the flow

HTTPRequestPolicy

rules

Type
HTTPRequestRule
Category
repeated
Description
Add rules to the HTTP request policy

HTTPRequestRule

name

Type
string
Category
required
Description
Name of the rule

index

Type
int32
Category
required
Description
Index of the rule

enable

Type
bool
Category
required
Description
Enable or disable the rule
Default
True

match

Type
MatchTarget
Category
optional
Description
Add match criteria to the rule

redirect_action

Type
HTTPRedirectAction
Category
optional
Description
HTTP redirect action

hdr_action

Type
HTTPHdrAction
Category
repeated
Description
HTTP header rewrite action

rewrite_url_action

Type
HTTPRewriteURLAction
Category
optional
Description
HTTP request URL rewrite action

switching_action

Type
HTTPSwitchingAction
Category
optional
Description
Content switching action

log

Type
bool
Category
optional
Description
Log HTTP request upon rule match

all_headers

Type
bool
Category
optional
Description
Log all HTTP headers upon rule match

HTTPHdrAction

action

Type
enum
Category
required
Description
ADD: A new header with the new value is added irrespective of the existence of an HTTP header of the given name. REPLACE: A new header with the new value is added if no header of the given name exists, else existing headers with the given name are removed and a new header with the new value is added. REMOVE: All the headers of the given name are removed.
Choices
HTTP_REPLACE_HDR, HTTP_ADD_HDR, HTTP_REMOVE_HDR

hdr

Type
HTTPHdrData
Category
optional
Description
HTTP header information

cookie

Type
HTTPCookieData
Category
optional
Description
Cookie information

HTTPHdrData

name

Type
string
Category
optional
Description
HTTP header name

value

Type
HTTPHdrValue
Category
optional
Description
HTTP header value

HTTPHdrValue

var

Type
enum
Category
optional
Description
Variable
Choices
HTTP_POLICY_VAR_SSL_CLIENT_SERIAL, HTTP_POLICY_VAR_SSL_CIPHER, HTTP_POLICY_VAR_SSL_CLIENT_FINGERPRINT, HTTP_POLICY_VAR_USER_NAME, HTTP_POLICY_VAR_HTTP_HDR, HTTP_POLICY_VAR_VS_PORT, HTTP_POLICY_VAR_SSL_CLIENT_SUBJECT, HTTP_POLICY_VAR_SSL_SERVER_NAME, HTTP_POLICY_VAR_CLIENT_IP, HTTP_POLICY_VAR_VS_IP, HTTP_POLICY_VAR_SSL_CLIENT_RAW, HTTP_POLICY_VAR_SSL_CLIENT_ISSUER, HTTP_POLICY_VAR_SSL_PROTOCOL

val

Type
string
Category
optional
Description
HTTP header value or variable representing an HTTP header

HTTPCookieData

name

Type
string
Category
optional
Description
Cookie name

value

Type
string
Category
optional
Description
Cookie value

HTTPRewriteURLAction

host_hdr

Type
URIParam
Category
optional
Description
Host config

path

Type
URIParam
Category
optional
Description
Path config

query

Type
URIParamQuery
Category
optional
Description
Query config

URIParamQuery

keep_query

Type
bool
Category
optional
Description
Use or drop the query of the incoming request URI in the request URI to the backend server
Default
True

add_string

Type
string
Category
optional
Description
Concatenate a string to the query of the incoming request URI and then use it in the request URI going to the backend server

HTTPSwitchingAction

action

Type
enum
Category
required
Description
Content switching action type
Choices
HTTP_SWITCHING_SELECT_LOCAL, HTTP_SWITCHING_SELECT_POOL

pool_ref

Type
Reference to Pool
Category
optional
Description
UUID of the pool of servers to serve the request

status_code

Type
enum
Category
optional
Description
HTTP status code to use when serving local response
Choices
HTTP_LOCAL_RESPONSE_STATUS_CODE_403, HTTP_LOCAL_RESPONSE_STATUS_CODE_429, HTTP_LOCAL_RESPONSE_STATUS_CODE_200, HTTP_LOCAL_RESPONSE_STATUS_CODE_404

file

Type
HTTPLocalFile
Category
optional
Description
File from which to serve local response to the request

server

Type
PoolServer
Category
optional
Description
Specific pool server to select

PoolServer

ip

Type
IpAddr
Category
required
Description
IP address of the server in the poool

hostname

Type
string
Category
optional
Description
DNS resolvable name of the server. May be used in place of the IP address.

port

Type
uint32
Category
optional
Description
Port of the pool server listening for HTTP/HTTPS. Default value is the default port in the pool.

HTTPResponsePolicy

rules

Type
HTTPResponseRule
Category
repeated
Description
Add rules to the HTTP response policy

HTTPResponseRule

name

Type
string
Category
required
Description
Name of the rule

index

Type
int32
Category
required
Description
Index of the rule

enable

Type
bool
Category
required
Description
Enable or disable the rule
Default
True

match

Type
ResponseMatchTarget
Category
optional
Description
Add match criteria to the rule

hdr_action

Type
HTTPHdrAction
Category
repeated
Description
HTTP header rewrite action

loc_hdr_action

Type
HTTPRewriteLocHdrAction
Category
optional
Description
Location header rewrite action

log

Type
bool
Category
optional
Description
Log HTTP request upon rule match

all_headers

Type
bool
Category
optional
Description
Log all HTTP headers upon rule match

ResponseMatchTarget

client_ip

Type
IpAddrMatch
Category
optional
Description
Configure client ip addresses

vs_port

Type
PortMatch
Category
optional
Description
Configure virtual service ports

protocol

Type
ProtocolMatch
Category
optional
Description
Configure the type of HTTP protocol

method

Type
MethodMatch
Category
optional
Description
Configure HTTP methods

version

Type
HTTPVersionMatch
Category
optional
Description
Configure versions of the HTTP protocol

path

Type
PathMatch
Category
optional
Description
Configure request paths

query

Type
QueryMatch
Category
optional
Description
Configure request query

hdrs

Type
HdrMatch
Category
repeated
Description
Configure HTTP headers

cookie

Type
CookieMatch
Category
optional
Description
Configure HTTP cookie(s)

host_hdr

Type
HostHdrMatch
Category
optional
Description
Configure the host header

loc_hdr

Type
LocationHdrMatch
Category
optional
Description
Configure the location header

status

Type
HTTPStatusMatch
Category
optional
Description
Configure the HTTP status code(s)

rsp_hdrs

Type
HdrMatch
Category
repeated
Description
Configure the HTTP headers in response

LocationHdrMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for matching location header value in the HTTP response
Choices
HDR_ENDS_WITH, HDR_EQUALS, HDR_DOES_NOT_EXIST, HDR_EXISTS, HDR_DOES_NOT_END_WITH, HDR_DOES_NOT_EQUAL, HDR_DOES_NOT_CONTAIN, HDR_CONTAINS, HDR_BEGINS_WITH, HDR_DOES_NOT_BEGIN_WITH

match_case

Type
enum
Category
optional
Description
Case sensitivity to use for the match
Default
INSENSITIVE
Choices
SENSITIVE, INSENSITIVE

value

Type
string
Category
repeated
Description
String value(s) in the location header

HTTPStatusMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for matching the HTTP response status code(s)
Choices
IS_NOT_IN, IS_IN

status_codes

Type
int32
Category
repeated
Description
HTTP response status code(s)

ranges

Type
HTTPStatusRange
Category
repeated
Description
HTTP response status code range(s)

HTTPRewriteLocHdrAction

protocol

Type
enum
Category
required
Description
HTTP protocol type
Choices
HTTP, HTTPS

port

Type
uint32
Category
optional
Description
Port to use in the redirected URI

host

Type
URIParam
Category
optional
Description
Host config

path

Type
URIParam
Category
optional
Description
Path config

keep_query

Type
bool
Category
optional
Description
Keep or drop the query from the server side redirect URI
Default
True

IpAddrGroup

uuid

Type
string
Category
required
Description
UUID of the IP address group

name

Type
string
Category
required
Description
Name of the IP address group

addrs

Type
IpAddr
Category
repeated
Description
Configure IP address(es)

ranges

Type
IpAddrRange
Category
repeated
Description
Configure IP adress range(s)

prefixes

Type
IpAddrPrefix
Category
repeated
Description
Configure IP adress prefix(es)

country_codes

Type
string
Category
repeated
Description
Populate the IP address ranges from the geo database for this country

apic_epg_name

Type
string
Category
optional
Description
Populate IP addresses from members of this Cisco APIC EPG

ip_ports

Type
IpAddrPort
Category
repeated
Description
Configure (IP address, port) tuple(s)

marathon_app_name

Type
string
Category
optional
Description
Populate IP addresses from tasks of this Marathon app

marathon_service_port

Type
uint32
Category
optional
Description
Task port associated with marathon service port. If Marathon app has multiple service ports, this is required. Else, the first task port is used

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

IpAddrPort

ip

Type
IpAddr
Category
optional
Description
IP Address of host. One of IP address or hostname should be set

port

Type
uint32
Category
required
Description
Port number of server

hostname

Type
string
Category
optional
Description
Hostname of server. One of IP address or hostname should be set

name

Type
string
Category
optional
Description

StringGroup

uuid

Type
string
Category
required
Description
UUID of the string group

name

Type
string
Category
required
Description
Name of the string group

kv

Type
KeyValue
Category
repeated
Description
Configure Key:Value in the string group

type

Type
enum
Category
required
Description
Type of StringGroup.
Default
SG_TYPE_STRING
Choices
SG_TYPE_KEYVAL, SG_TYPE_STRING

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

KeyValue

key

Type
string
Category
required
Description
Key

value

Type
string
Category
optional
Description
Value

SSLProfile

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

accepted_versions

Type
SSLVersion
Category
repeated
Description
Set of versions accepted by the server

accepted_ciphers

Type
string
Category
optional
Description
Ciphers suites represented as defined by http://www.openssl.org/docs/apps/ciphers.html
Default
AES:3DES:RC4

cipher_enums

Type
enum
Category
repeated
Description
Choices
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_RC4_128_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

tags

Type
Tag
Category
repeated
Description

ssl_rating

Type
SSLRating
Category
optional
Description

send_close_notify

Type
bool
Category
optional
Description
Send 'close notify' alert message for a clean shutdown of the SSL connection.
Default
True

dhparam

Type
string
Category
optional,readonly
Description
DH Parameters used in SSL. At this time, it is not configurable and is set to 2048 bits.

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

SSLVersion

type

Type
enum
Category
required
Description
Default
SSL_VERSION_TLS1_1
Choices
SSL_VERSION_TLS1_1, SSL_VERSION_TLS1, SSL_VERSION_TLS1_2

Tag

value

Type
string
Category
required
Description

type

Type
enum
Category
optional
Description
Default
USER_DEFINED
Choices
VCENTER_DEFINED, AVI_DEFINED, USER_DEFINED

SSLRating

security_score

Type
string
Category
optional
Description

performance_rating

Type
enum
Category
optional
Description
Choices
SSL_SCORE_GOOD, SSL_SCORE_BAD, SSL_SCORE_EXCELLENT, SSL_SCORE_VERY_BAD, SSL_SCORE_NOT_SECURE, SSL_SCORE_AVERAGE

compatibility_rating

Type
enum
Category
optional
Description
Choices
SSL_SCORE_GOOD, SSL_SCORE_BAD, SSL_SCORE_EXCELLENT, SSL_SCORE_VERY_BAD, SSL_SCORE_NOT_SECURE, SSL_SCORE_AVERAGE

SSLKeyAndCertificate

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

type

Type
enum
Category
optional
Description
Default
SSL_CERTIFICATE_TYPE_VIRTUALSERVICE
Choices
SSL_CERTIFICATE_TYPE_SYSTEM, SSL_CERTIFICATE_TYPE_VIRTUALSERVICE, SSL_CERTIFICATE_TYPE_CA

certificate

Type
SSLCertificate
Category
required
Description

key_params

Type
SSLKeyParams
Category
optional
Description

key

Type
string
Category
optional
Description
Private key

status

Type
enum
Category
optional
Description
Default
SSL_CERTIFICATE_FINISHED
Choices
SSL_CERTIFICATE_FINISHED, SSL_CERTIFICATE_PENDING

ca_certs

Type
CertificateAuthority
Category
repeated
Description
CA certificates in certificate chain

enckey_base64

Type
string
Category
optional
Description
Encrypted private key corresponding to the private key (e.g. those generated by an HSM such as Thales nShield)

enckey_name

Type
string
Category
optional
Description
Name of the encrypted private key (e.g. those generated by an HSM such as Thales nShield)

hardwaresecuritymodulegroup_ref

Type
Reference to HardwareSecurityModuleGroup
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

certificate_management_profile_ref

Type
Reference to CertificateManagementProfile
Category
optional
Description

dynamic_params

Type
CustomParams
Category
repeated
Description
Dynamic parameters needed for certificate management profile

SSLCertificate

version

Type
string
Category
optional
Description

serial_number

Type
string
Category
optional
Description

self_signed

Type
bool
Category
optional
Description

issuer

Type
SSLCertificateDescription
Category
optional
Description

subject

Type
SSLCertificateDescription
Category
optional
Description

key_params

Type
SSLKeyParams
Category
optional
Description

public_key

Type
string
Category
optional
Description

signature_algorithm

Type
string
Category
optional
Description

signature

Type
string
Category
optional
Description

not_before

Type
string
Category
optional
Description

not_after

Type
string
Category
optional
Description

certificate

Type
string
Category
optional
Description

certificate_signing_request

Type
string
Category
optional
Description

text

Type
string
Category
optional
Description

fingerprint

Type
string
Category
optional
Description

expiry_status

Type
enum
Category
optional
Description
Default
SSL_CERTIFICATE_GOOD
Choices
SSL_CERTIFICATE_EXPIRED, SSL_CERTIFICATE_GOOD, SSL_CERTIFICATE_EXPIRY_WARNING

chain_verified

Type
bool
Category
optional
Description

SSLCertificateDescription

common_name

Type
string
Category
optional
Description

email_address

Type
string
Category
optional
Description

organization_unit

Type
string
Category
optional
Description

organization

Type
string
Category
optional
Description

locality

Type
string
Category
optional
Description

state

Type
string
Category
optional
Description

country

Type
string
Category
optional
Description

distinguished_name

Type
string
Category
optional
Description

SSLKeyParams

algorithm

Type
enum
Category
required
Description
Default
SSL_KEY_ALGORITHM_RSA
Choices
SSL_KEY_ALGORITHM_RSA, SSL_KEY_ALGORITHM_EC

rsa_params

Type
SSLKeyRSAParams
Category
optional
Description

ec_params

Type
SSLKeyECParams
Category
optional
Description

SSLKeyRSAParams

key_size

Type
enum
Category
optional
Description
Default
SSL_KEY_2048_BITS
Choices
SSL_KEY_1024_BITS, SSL_KEY_3072_BITS, SSL_KEY_4096_BITS, SSL_KEY_2048_BITS

exponent

Type
uint32
Category
optional
Description
Default
65537

SSLKeyECParams

curve

Type
enum
Category
optional
Description
Default
SSL_KEY_EC_CURVE_SECP256R1
Choices
SSL_KEY_EC_CURVE_SECP521R1, SSL_KEY_EC_CURVE_SECP256R1, SSL_KEY_EC_CURVE_SECP384R1

CertificateAuthority

name

Type
string
Category
optional
Description

ca_ref

Type
Reference to SSLKeyAndCertificate
Category
optional
Description

CustomParams

name

Type
string
Category
required
Description

value

Type
string
Category
optional
Description

is_sensitive

Type
bool
Category
optional
Description
Default
False

is_dynamic

Type
bool
Category
optional
Description
Default
False

NetworkSecurityPolicy

uuid

Type
string
Category
required
Description

name

Type
string
Category
optional
Description

rules

Type
NetworkSecurityRule
Category
repeated
Description

created_by

Type
string
Category
optional
Description
Creator name

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
optional
Description

NetworkSecurityRule

name

Type
string
Category
required
Description

index

Type
uint32
Category
required
Description

enable

Type
bool
Category
required
Description

match

Type
NetworkSecurityMatchTarget
Category
required
Description

action

Type
enum
Category
required
Description
Choices
NETWORK_SECURITY_POLICY_ACTION_TYPE_RATE_LIMIT, NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY, NETWORK_SECURITY_POLICY_ACTION_TYPE_ALLOW

log

Type
bool
Category
optional
Description
Default
False

rl_param

Type
NetworkSecurityPolicyActionRLParam
Category
optional
Description

age

Type
uint32
Category
optional
Description
Time in minutes after which rule will be deleted.
Default
0

NetworkSecurityMatchTarget

client_ip

Type
IpAddrMatch
Category
optional
Description

vs_port

Type
PortMatch
Category
optional
Description

microservice

Type
MicroServiceMatch
Category
optional
Description

MicroServiceMatch

match_criteria

Type
enum
Category
required
Description
Criterion to use for Micro Service matching the HTTP request
Choices
IS_NOT_IN, IS_IN

group_ref

Type
Reference to MicroServiceGroup
Category
optional
Description
UUID of Micro Service group(s)

NetworkSecurityPolicyActionRLParam

max_rate

Type
uint32
Category
required
Description

burst_size

Type
uint32
Category
required
Description
Default
0

ApplicationPersistenceProfile

uuid

Type
string
Category
required
Description
UUID of the persistence profile.

name

Type
string
Category
required
Description
A user-friendly name for the persistence profile.

server_hm_down_recovery

Type
enum
Category
optional
Description
Specifies behavior when a persistent server has been marked down by a health monitor.
Default
HM_DOWN_PICK_NEW_SERVER
Choices
HM_DOWN_CONTINUE_PERSISTENT_SERVER, HM_DOWN_PICK_NEW_SERVER, HM_DOWN_ABORT_CONNECTION

persistence_type

Type
enum
Category
required
Description
Method used to persist clients to the same server for a duration of time or a session.
Default
PERSISTENCE_TYPE_CLIENT_IP_ADDRESS
Choices
PERSISTENCE_TYPE_CUSTOM_HTTP_HEADER, PERSISTENCE_TYPE_CLIENT_IP_ADDRESS, PERSISTENCE_TYPE_HTTP_COOKIE, PERSISTENCE_TYPE_APP_COOKIE, PERSISTENCE_TYPE_CLIENT_IPV6_ADDRESS, PERSISTENCE_TYPE_TLS

ip_persistence_profile

Type
IPPersistenceProfile
Category
optional
Description
Specifies the Client IP Persistence profile parameters.

hdr_persistence_profile

Type
HdrPersistenceProfile
Category
optional
Description
Specifies the custom HTTP Header Persistence profile parameters.

app_cookie_persistence_profile

Type
AppCookiePersistenceProfile
Category
optional
Description
Specifies the Application Cookie Persistence profile parameters.

http_cookie_persistence_profile

Type
HttpCookiePersistenceProfile
Category
optional
Description
Specifies the HTTP Cookie Persistence profile parameters.

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
optional
Description

IPPersistenceProfile

ip_persistent_timeout

Type
int32
Category
optional
Description
The length of time after a client's connections have closed before expiring the client's persistence to a server.
Default
5

HdrPersistenceProfile

prst_hdr_name

Type
string
Category
optional
Description
Header name for custom header persistence

AppCookiePersistenceProfile

prst_hdr_name

Type
string
Category
required
Description
Header or cookie name for application cookie persistence

timeout

Type
int32
Category
optional
Description
The length of time after a client's connections have closed before expiring the client's persistence to a server.
Default
20

encryption_key

Type
string
Category
optional
Description
Key to use for cookie encryption

HttpCookiePersistenceProfile

encryption_key

Type
string
Category
optional
Description
Key name to use for cookie encryption

cookie_name

Type
string
Category
optional
Description
HTTP cookie name for cookie persistence

key

Type
HttpCookiePersistenceKey
Category
repeated
Description

timeout

Type
int32
Category
optional
Description
The length of time after a client's connections have closed before expiring the client's persistence to a server. No value or 'zero' indicates no timeout.

always_send_cookie

Type
bool
Category
optional
Description
If no persistence cookie was received from the client, always send it.
Default
False

HttpCookiePersistenceKey

name

Type
string
Category
optional
Description
name to use for cookie encryption

aes_key

Type
Unknown
Category
optional
Description

hmac_key

Type
Unknown
Category
optional
Description

AnalyticsProfile

uuid

Type
string
Category
required
Description
UUID of the analytics profile.

name

Type
string
Category
required
Description
The name of the analytics profile.

tenant_ref

Type
Reference to Tenant
Category
required
Description

description

Type
string
Category
optional
Description

apdex_response_threshold

Type
uint32
Category
optional
Description
If a client receives an HTTP response in less than the Satisfactory Latency Threshold, the request is considered Satisfied. If the response time is greater than the Satisfactory Latency Threshold but less than the Tolerated Latency Factor multiplied by the Satisfactory Latency Threshold, it is considered Tolerated. Greater than this number and the client's request is considered Frustrated.
Default
500

apdex_response_tolerated_factor

Type
Unknown
Category
optional
Description
Client tolerated response latency factor. Clientmust receive a response within this factor times the satisfactory threshold (apdex_response_threshold) to be considered tolerated
Default
4

apdex_server_response_threshold

Type
uint32
Category
optional
Description
If Avi receives an HTTP response from a server in less than the Satisfactory Latency Threshold, the server response is considered Satisfied. If the response time is greater than the Satisfactory Latency Threshold but less than the Tolerated Latency Factor multiplied by the Satisfactory Latency Threshold, it is considered Tolerated. Greater than this number and the server response is considered Frustrated.
Default
400

apdex_server_response_tolerated_factor

Type
Unknown
Category
optional
Description
Server tolerated response latency factor. Servermust response within this factor times the satisfactory threshold (apdex_server_response_threshold) to be considered tolerated
Default
4

apdex_rtt_threshold

Type
uint32
Category
optional
Description
Satisfactory client to Avi Round Trip Time(RTT).
Default
250

apdex_rtt_tolerated_factor

Type
Unknown
Category
optional
Description
Tolerated client to Avi Round Trip Time(RTT) factor. It is a multiple of apdex_rtt_tolerated_factor.
Default
4

apdex_server_rtt_threshold

Type
uint32
Category
optional
Description
Satisfactory client to Avi Round Trip Time(RTT).
Default
125

apdex_server_rtt_tolerated_factor

Type
Unknown
Category
optional
Description
Tolerated client to Avi Round Trip Time(RTT) factor. It is a multiple of apdex_rtt_tolerated_factor.
Default
4

apdex_rum_threshold

Type
uint32
Category
optional
Description
If a client is able to load a page in less than the Satisfactory Latency Threshold, the PageLoad is considered Satisfied. If the load time is greater than the Satisfied Latency but less than the Tolerated Latency multiplied by Satisifed Latency, it is considered Tolerated. Greater than this number and the client's request is considered Frustrated. A PageLoad includes the time for DNS lookup, download of all HTTP objects, and page render time.
Default
5000

apdex_rum_tolerated_factor

Type
Unknown
Category
optional
Description
Virtual service threshold factor for tolerated Page Load Time (PLT) as multiple of apdex_rum_threshold.
Default
4

conn_lossy_total_rexmt_threshold

Type
uint32
Category
optional
Description
A connection between client and Avi is considered lossy when more than this percentage of packets are retransmitted.
Default
50

conn_lossy_timeo_rexmt_threshold

Type
uint32
Category
optional
Description
A connection between client and Avi is considered lossy when more than this percentage of packets are retransmitted due to timeout.
Default
20

conn_lossy_ooo_threshold

Type
uint32
Category
optional
Description
A connection between client and Avi is considered lossy when more than this percentage of out of order packets are received.
Default
50

conn_lossy_zero_win_size_event_threshold

Type
uint32
Category
optional
Description
A connection between client and Avi is considered lossy when more than this percentage of times a packet could not be trasmitted due to zero window.
Default
2

conn_server_lossy_total_rexmt_threshold

Type
uint32
Category
optional
Description
A connection between Avi and server is considered lossy when more than this percentage of packets are retransmitted.
Default
50

conn_server_lossy_timeo_rexmt_threshold

Type
uint32
Category
optional
Description
A connection between Avi and server is considered lossy when more than this percentage of packets are retransmitted due to timeout.
Default
20

conn_server_lossy_ooo_threshold

Type
uint32
Category
optional
Description
A connection between Avi and server is considered lossy when more than this percentage of out of order packets are received.
Default
50

conn_server_lossy_zero_win_size_event_threshold

Type
uint32
Category
optional
Description
A connection between Avi and server is considered lossy when more than this percentage of times a packet could not be trasmitted due to zero window.
Default
2

exclude_http_error_codes

Type
int32
Category
repeated
Description
List of HTTP status codes to be excluded from being classified as an error. Error connections or responses impacts health score, are included as significant logs, and may be classified as part of a DoS attack.

exclude_client_close_before_request_as_error

Type
bool
Category
optional
Description
Exclude client closed connection before an HTTP request could be completed from being classified as an error.
Default
False

exclude_tcp_reset_as_error

Type
bool
Category
optional
Description
Exclude TCP resets by client from the list of potential errors.
Default
False

exclude_server_tcp_reset_as_error

Type
bool
Category
optional
Description
Exclude server TCP reset from errors. It is common for applications like MS Exchange.
Default
False

exclude_persistence_change_as_error

Type
bool
Category
optional
Description
Exclude persistence server changed while load balancing' from the list of errors.
Default
False

exclude_syn_retransmit_as_error

Type
bool
Category
optional
Description
Exclude 'server unanswered syns' from the list of errors.
Default
False

hs_performance_boost

Type
uint32
Category
optional
Description
Adds free performance score credits to health score. It can be used for compensating health score for known slow applications.
Default
0

hs_max_anomaly_penalty

Type
uint32
Category
optional
Description
Maximum penalty that may be deducted from health score for anomalies.
Default
10

hs_max_resources_penalty

Type
uint32
Category
optional
Description
Maximum penalty that may be deducted from health score for high resource utilization.
Default
25

hs_max_security_penalty

Type
uint32
Category
optional
Description
Maximum penalty that may be deducted from health score based on security assessment.
Default
100

hs_security_nonpfs_penalty

Type
Unknown
Category
optional
Description
Penalty for allowing non-PFS handshakes.
Default
1

hs_security_weak_signature_algo_penalty

Type
Unknown
Category
optional
Description
Penalty for allowing weak signature algorithm(s).
Default
1

hs_security_ssl30_score

Type
Unknown
Category
optional
Description
Score assigned when supporting SSL3.0 encryption protocol
Default
3.5

hs_security_tls10_score

Type
Unknown
Category
optional
Description
Score assigned when supporting TLS1.0 encryption protocol
Default
5

hs_security_tls11_score

Type
Unknown
Category
optional
Description
Score assigned when supporting TLS1.1 encryption protocol
Default
5

hs_security_tls12_score

Type
Unknown
Category
optional
Description
Score assigned when supporting TLS1.2 encryption protocol
Default
5

hs_event_throttle_window

Type
uint32
Category
optional
Description
Time window (in secs) within which only unique health change events should occur
Default
1209600

hs_min_dos_rate

Type
uint32
Category
optional
Description
DoS connection rate below which the DoS security assessment will not kick in.
Default
1000

hs_security_certscore_expired

Type
Unknown
Category
optional
Description
Score assigned when the certificate has expired
Default
0

hs_security_certscore_le07d

Type
Unknown
Category
optional
Description
Score assigned when the certificate expires in less than or equal to 7 days
Default
2

hs_security_certscore_le30d

Type
Unknown
Category
optional
Description
Score assigned when the certificate expires in less than or equal to 30 days
Default
4

hs_security_certscore_gt30d

Type
Unknown
Category
optional
Description
Score assigned when the certificate expires in more than 30 days
Default
5

hs_security_cipherscore_eq000b

Type
Unknown
Category
optional
Description
Score assigned when the minimum cipher strength is 0 bits
Default
0

hs_security_cipherscore_lt128b

Type
Unknown
Category
optional
Description
Score assigned when the minimum cipher strength is less than 128 bits
Default
3.5

hs_security_cipherscore_ge128b

Type
Unknown
Category
optional
Description
Score assigned when the minimum cipher strength is greater than equal to 128 bits
Default
5

hs_security_selfsignedcert_penalty

Type
Unknown
Category
optional
Description
Deprecated
Default
1

hs_security_encalgo_score_rc4

Type
Unknown
Category
optional
Description
Score assigned when RC4 algorithm is used for encryption.
Default
2.5

hs_security_encalgo_score_none

Type
Unknown
Category
optional
Description
Score assigned when no algorithm is used for encryption.
Default
0

hs_security_chain_invalidity_penalty

Type
Unknown
Category
optional
Description
Penalty for allowing certificates with invalid chain.
Default
1

hs_security_hsts_penalty

Type
Unknown
Category
optional
Description
Penalty for not enabling HSTS.
Default
1

disable_server_analytics

Type
bool
Category
optional
Description
Disable analytics on backend servers. This may be desired in container environment when there are large number of ephemeral servers
Default
False

disable_se_analytics

Type
bool
Category
optional
Description
Disable node (service engine) level analytics forvs metrics
Default
False

hs_pscore_traffic_threshold_l4_client

Type
Unknown
Category
optional
Description
Threshold number of connections in 5min, below which apdexr, apdexc, rum_apdex, and other network quality metrics are not computed.
Default
10

hs_pscore_traffic_threshold_l4_server

Type
Unknown
Category
optional
Description
Threshold number of connections in 5min, below which apdexr, apdexc, rum_apdex, and other network quality metrics are not computed.
Default
10

VSDataScriptSet

uuid

Type
string
Category
required
Description
UUID of the virtual service datascript collection

name

Type
string
Category
required
Description
Name for the virtual service datascript collection

datascript

Type
VSDataScript
Category
repeated
Description
DataScripts to execute

pool_refs

Type
Reference to Pool
Category
repeated
Description
UUID of pools that could be referred by VSDataScriptSet objects.

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

VSDataScript

evt

Type
enum
Category
required
Description
Event triggering execution of datascript
Choices
VS_DATASCRIPT_EVT_HTTP_RESP, VS_DATASCRIPT_EVT_HTTP_REQ, VS_DATASCRIPT_EVT_HTTP_LB_FAILED, VS_DATASCRIPT_EVT_HTTP_RESP_DATA, VS_DATASCRIPT_EVT_MAX

script

Type
string
Category
required
Description
Datascript to execute when the event triggers

Tenant

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

local

Type
bool
Category
optional
Description
Default
True

description

Type
string
Category
optional
Description

config_settings

Type
TenantConfiguration
Category
optional
Description

created_by

Type
string
Category
optional
Description
Creator of this tenant

TenantConfiguration

tenant_vrf

Type
bool
Category
optional
Description
When "Per Tenant IP Domain" is selected, each tenant gets its own routing domain that is not shared with any other tenant. When "Share IP Domain across all tenants" is selected, all tenants share the same routing domain.
Default
False

se_in_provider_context

Type
bool
Category
optional
Description
Controls the ownership of ServiceEngines. Service Engines can either be exclusively owned by each tenant or owned by the administrator and shared by all tenants. When ServiceEngines are owned by the administrator, each tenant can have either read access or no access to their Service Engines.
Default
True

tenant_access_to_provider_se

Type
bool
Category
optional
Description
Default
True

ServiceEngineGroup

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
optional
Description

max_vs_per_se

Type
int32
Category
optional
Description
Maximum number of Virtual Services that can be placed on a single Service Engine.
Default
10

min_scaleout_per_vs

Type
int32
Category
optional
Description
Minimum number of active Service Engines for the Virtual Service.
Default
1

max_scaleout_per_vs

Type
int32
Category
optional
Description
Maximum number of active Service Engines for the Virtual Service.
Default
4

max_se

Type
int32
Category
optional
Description
Maximum number of Services Engines in this group.
Default
10

vcpus_per_se

Type
int32
Category
optional
Description
Number of vcpus for each of the Service Engine virtual machines.
Default
2

memory_per_se

Type
int32
Category
optional
Description
Amount of memory for each of the Service Engine virtual machines.
Default
2048

disk_per_se

Type
int32
Category
optional
Description
Amount of disk space for each of the Service Engine virtual machines.
Default
10

max_cpu_usage

Type
int32
Category
optional
Description
When CPU utilization exceeds this maximum threshold, Virtual Services hosted on this Service Engine may be rebalanced to other Service Engines to lighten the load. A new Service Engine may be created as part of this process.
Default
80

min_cpu_usage

Type
int32
Category
optional
Description
When CPU utilization falls below the minimum threshold, Virtual Services hosted on this Service Engine may be consolidated onto other underutilized Service Engines. After consolidation, unused Service Engines may then be eligible for deletion. When CPU utilization exceeds the maximum threshold, Virtual Services hosted on this Service Engine may be migrated to other Service Engines to lighten the load. A new Service Engine may be created as part of this process.
Default
30

se_deprovision_delay

Type
int32
Category
optional
Description
Duration to preserve unused Service Engine virtual machines before deleting them. If traffic to a Virtual Service were to spike up abruptly, this Service Engine would still be available to be utilized again rather than creating a new Service Engine.
Default
120

auto_rebalance

Type
bool
Category
optional
Description
If 'Auto Rebalance' is selected, Virtual Services will be automatically migrated when the load on Service Engines falls below the minimum threshold or goes above the maximum threshold. Otherwise, an Alert is generated instead of automatically performing the migration.
Default
False

se_name_prefix

Type
string
Category
optional
Description
Prefix to use for virtual machine name of Service Engines.
Default
Avi

vs_host_redundancy

Type
bool
Category
optional
Description
Ensure primary and secondary Service Engines are deployed on different physical hosts.
Default
True

vcenter_folder

Type
string
Category
optional
Description
Folder to place all the Service Engine virtual machines in vCenter.
Default
AviSeFolder

vcenter_datastores

Type
VcenterDatastore
Category
repeated
Description

vcenter_datastores_include

Type
bool
Category
optional
Description
Default
False

vcenter_datastore_mode

Type
enum
Category
optional
Description
Default
VCENTER_DATASTORE_ANY
Choices
VCENTER_DATASTORE_ANY, VCENTER_DATASTORE_LOCAL, VCENTER_DATASTORE_SHARED

vcenter_clusters

Type
VcenterClusters
Category
optional
Description

vcenter_hosts

Type
VcenterHosts
Category
optional
Description

openstack_availability_zone

Type
string
Category
optional
Description

cpu_reserve

Type
bool
Category
optional
Description
Default
False

mem_reserve

Type
bool
Category
optional
Description
Default
True

mgmt_network_ref

Type
Reference to Network
Category
optional
Description
Management network to use for Avi Service Engines

mgmt_subnet

Type
IpAddrPrefix
Category
optional
Description
Management subnet to use for Avi Service Engines

ha_mode

Type
enum
Category
optional
Description
High Availability mode for all the Virtual Services using this Service Engine group.
Default
HA_MODE_SHARED
Choices
HA_MODE_SHARED_PAIR, HA_MODE_LEGACY_ACTIVE_STANDBY, HA_MODE_SHARED

algo

Type
enum
Category
optional
Description
If 'compact' placement algorithm is used, Virtual Services are placed on existing Service Engines until they all have the maximum number of Virtual Services. Otherwise, Virtual Services are distributed to as many Service Engines as possible.
Default
PLACEMENT_ALGO_PACKED
Choices
PLACEMENT_ALGO_PACKED, PLACEMENT_ALGO_DISTRIBUTED

buffer_se

Type
int32
Category
optional
Description
Excess Service Engine capacity provisioned for HA failover
Default
1

active_standby

Type
bool
Category
optional
Description
Service Engines in active/standby mode for HA failover
Default
False

placement_mode

Type
enum
Category
optional
Description
If placement mode is 'Auto', Virtual Services are automatically placed on Service Engines. If 'Manual' placement mode is selected, user must specify the Service Engine where the Virtual Service should be placed.
Default
PLACEMENT_MODE_AUTO
Choices
PLACEMENT_MODE_AUTO, PLACEMENT_MODE_MANUAL

openstack_mgmt_network_name

Type
string
Category
optional
Description
Avi Management network name

openstack_mgmt_network_uuid

Type
string
Category
optional
Description
Management network UUID

instance_flavor

Type
string
Category
optional
Description
Instance/Flavor type for SE instance

hypervisor

Type
enum
Category
optional
Description
Override default hypervisor
Choices
DEFAULT, VMWARE_VSAN, VMWARE_ESX, KVM

se_dos_profile

Type
DosThresholdProfile
Category
optional
Description

auto_rebalance_interval

Type
int32
Category
optional
Description
Frequency of rebalance, if 'Auto rebalance' is enabled
Default
300

aggressive_failure_detection

Type
bool
Category
optional
Description
Enable aggressive failover configuration for ha.
Default
False

realtime_se_metrics

Type
MetricsRealTimeUpdate
Category
optional
Description
Enable or disable real time SE metrics

vs_scaleout_timeout

Type
uint32
Category
optional
Description
Time to wait for the scaled out SE to become ready before marking the scaleout done
Default
30

vs_scalein_timeout

Type
uint32
Category
optional
Description
Time to wait for the scaled in SE to drain existing flows before marking the scalein done
Default
30

hardwaresecuritymodulegroup_ref

Type
Reference to HardwareSecurityModuleGroup
Category
optional
Description

connection_memory_percentage

Type
uint32
Category
optional
Description
Percentage of memory for connection state. This will come at the expense of memory used for HTTP in-memory cache.
Default
50

extra_config_multiplier

Type
Unknown
Category
optional
Description
Multiplier for extra config to support large VS/Pool config.
Default
0

vs_scalein_timeout_for_upgrade

Type
uint32
Category
optional
Description
During SE upgrade, Time to wait for the scaled-in SE to drain existing flows before marking the scalein done
Default
30

host_attribute_key

Type
string
Category
optional
Description
Host Attribute key

host_attribute_value

Type
string
Category
optional
Description
Host Attribute value

log_disksz

Type
uint32
Category
optional
Description
Maximum disk capacity (in MB) to be allocated to an SE. This is exclusively used for debug and log data.
Default
10000

os_reserved_memory

Type
uint32
Category
optional
Description
Amount of extra memory to be reserved for use by the Operating System on a Service Engine.
Default
0

floating_intf_ip

Type
IpAddr
Category
repeated
Description
If ServiceEngineGroup is configured for Legacy 1+1 Active Standby HA Mode, Floating IP's will be advertised only by the Active SE in the Pair. Virtual Services in this group must be disabled/enabled for any changes to the Floating IP's to take effect. If manual load distribution among the Active Standby ServiceEngines is enabled, Floating IP's provided here will be advertised only by the Active ServiceEngine hosting all the VirtualServices tagged with Active Standby SE 1 Tag.

hm_on_standby

Type
bool
Category
optional
Description
Enable active health monitoring from the standby SE for all placed virtual services.
Default
True

per_app

Type
bool
Category
optional
Description
Per-App SE mode is designed for deploying dedicated load balancers per App (VS). In this mode, each SE is limited to a max of 2 VSs. vCPUs in Per-App SEs count towards licensing usage at 25% rate.
Default
False

gateway_monitor_interval

Type
uint32
Category
optional
Description
The interval between two ping requests sent by the gateway monitor. If a value is not specified, requests are sent every second (1000 milliseconds).
Default
1000

gateway_monitor_fail_threshold

Type
uint32
Category
optional
Description
The number of consecutive failed gateway health checks before a gateway is marked down.
Default
10

gateway_monitor_success_threshold

Type
uint32
Category
optional
Description
The number of consecutive successful gateway health checks before a gateway that was marked down by the gateway monitor is marked up.
Default
15

distribute_load_active_standby

Type
bool
Category
optional
Description
Use both the active and standby Service Engines for Virtual Service placement in the legacy active standby HA mode.
Default
False

auto_redistribute_active_standby_load

Type
bool
Category
optional
Description
Redistribution of virtual services from the takeover SE to the replacement SE can cause momentary traffic loss. If the auto-redistribute load option is left in its default off state, any desired rebalancing requires calls to REST API.
Default
False

floating_intf_ip_se_2

Type
IpAddr
Category
repeated
Description
This field is applicable only if the ServiceEngineGroup is configured for Legacy 1+1 Active Standby HA Mode, with manual load distribution among the Active Standby ServiceEngines enabled. Floating IP's provided here will be advertised only by the Active ServiceEngine hosting all the VirtualServices tagged with Active Standby SE 2 Tag.

custom_tag

Type
CustomTag
Category
repeated
Description
Custom tag will be used to create the tags for SE instance in AWS. Note this is not the same as the prefix for SE name

cloud_ref

Type
Reference to Cloud
Category
optional,readonly
Description
Default
/api/cloud?name=Default-Cloud

VcenterDatastore

datastore_name

Type
string
Category
required
Description

VcenterClusters

cluster_refs

Type
Reference to VIMgrClusterRuntime
Category
repeated
Description

include

Type
bool
Category
optional
Description
Default
False

VcenterHosts

host_refs

Type
Reference to VIMgrHostRuntime
Category
repeated
Description

include

Type
bool
Category
optional
Description
Default
False

CustomTag

tag_key

Type
string
Category
required
Description

tag_val

Type
string
Category
optional
Description

Cloud

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

vtype

Type
enum
Category
required
Description
Cloud type
Default
CLOUD_NONE
Choices
CLOUD_VCENTER, CLOUD_DOCKER_UCP, CLOUD_APIC, CLOUD_OPENSTACK, CLOUD_MESOS, CLOUD_RANCHER, CLOUD_VCA, CLOUD_LINUXSERVER, CLOUD_AWS, CLOUD_NONE

vcenter_configuration

Type
vCenterConfiguration
Category
optional
Description

openstack_configuration

Type
OpenStackConfiguration
Category
optional
Description

aws_configuration

Type
AwsConfiguration
Category
optional
Description

apic_mode

Type
bool
Category
optional
Description
Default
False

apic_configuration

Type
APICConfiguration
Category
optional
Description

cloudstack_configuration

Type
CloudStackConfiguration
Category
optional
Description

vca_configuration

Type
vCloudAirConfiguration
Category
optional
Description

mesos_configuration

Type
MesosConfiguration
Category
optional
Description

proxy_configuration

Type
ProxyConfiguration
Category
optional
Description

linuxserver_configuration

Type
LinuxServerConfiguration
Category
optional
Description

docker_configuration

Type
DockerConfiguration
Category
optional
Description

rancher_configuration

Type
RancherConfiguration
Category
optional
Description

dhcp_enabled

Type
bool
Category
optional
Description
Select the IP address management scheme
Default
False

mtu

Type
uint32
Category
optional
Description
MTU setting for the cloud
Default
1500

prefer_static_routes

Type
bool
Category
optional
Description
Prefer static routes over interface routes during VirtualService placement.
Default
False

enable_vip_static_routes

Type
bool
Category
optional
Description
Use static routes for VIP side network resolution during VirtualService placement.
Default
False

obj_name_prefix

Type
string
Category
optional
Description
Default prefix for all automatically created objects in this cloud. This prefix can be overridden by the SE-Group template.

license_type

Type
enum
Category
optional
Description
If no license type is specified then default license enforcement for the cloud type is chosen. The default mappings are Container Cloud is Max Ses, OpenStack and VMware is cores and linux it is Sockets.
Choices
LIC_SOCKETS, LIC_CORES, LIC_HOSTS, LIC_BACKEND_SERVERS

ipam_provider_ref

Type
Reference to IpamDnsProviderProfile
Category
optional
Description
Ipam Provider for the cloud

dns_provider_ref

Type
Reference to IpamDnsProviderProfile
Category
optional
Description
DNS Provider for the cloud

east_west_ipam_provider_ref

Type
Reference to IpamDnsProviderProfile
Category
optional
Description
Ipam Profile for East West applications

east_west_dns_provider_ref

Type
Reference to IpamDnsProviderProfile
Category
optional
Description
DNS Profile for East West applications

tenant_ref

Type
Reference to Tenant
Category
required
Description

vCenterConfiguration

username

Type
string
Category
optional
Description
The username Avi Vantage will use when authenticating with vCenter.

password

Type
string
Category
optional
Description
The password Avi Vantage will use when authenticating with vCenter.

vcenter_url

Type
string
Category
optional
Description
vCenter hostname or IP address.

privilege

Type
enum
Category
required
Description
Set the access mode to vCenter as either Read, which allows Avi to discover networks and servers, or Write, which also allows Avi to create Service Engines and configure their network properties.
Default
WRITE_ACCESS
Choices
WRITE_ACCESS, READ_ACCESS, NO_ACCESS

datacenter_uuid

Type
string
Category
optional
Description
Datacenter for virtual infrastructure discovery

management_network

Type
string
Category
optional
Description
Management network to use for Avi Service Engines

management_ip_subnet

Type
IpAddrPrefix
Category
optional
Description
Management subnet to use for Avi Service Engines

vcenter_template_se_location

Type
string
Category
optional
Description
Avi Service Engine Template in Vcenter to be used for creating Service Engines

OpenStackConfiguration

username

Type
string
Category
required
Description
The username Avi Vantage will use when authenticating to Keystone.

password

Type
string
Category
optional
Description
The password Avi Vantage will use when authenticating to Keystone.

admin_tenant

Type
string
Category
required
Description
Openstack admin tenant (or project) information.

keystone_host

Type
string
Category
optional
Description
Keystone's hostname or IP address. (Deprecated) Use auth_url instead.

mgmt_network_name

Type
string
Category
required
Description
Avi Management network name or cidr

privilege

Type
enum
Category
required
Description
Access privilege
Choices
WRITE_ACCESS, READ_ACCESS, NO_ACCESS

use_keystone_auth

Type
bool
Category
optional
Description
Use keystone for user authentication
Default
True

prov_name

Type
string
Category
repeated
Description
LBaaS provider name

mgmt_network_uuid

Type
string
Category
optional
Description
Management network UUID

region

Type
string
Category
optional
Description
Region name

hypervisor

Type
enum
Category
optional
Description
Default hypervisor type
Default
KVM
Choices
DEFAULT, VMWARE_VSAN, VMWARE_ESX, KVM

tenant_se

Type
bool
Category
optional
Description
If true, then SEs will be created in the appropriate tenants, else SEs will be created in the admin_tenant.
Default
True

import_keystone_tenants

Type
bool
Category
optional
Description
Import keystone tenants list into Avi
Default
True

anti_affinity

Type
bool
Category
optional
Description
If true, an anti-affinity policy will be applied to all SEs of a SE-Group, else no such policy will be applied.
Default
True

port_security

Type
bool
Category
optional
Description
If false, port-security extension will not be used.
Default
True

security_groups

Type
bool
Category
optional
Description
If false, security-groups extension will not be used.
Default
True

allowed_address_pairs

Type
bool
Category
optional
Description
If false, allowed-address-pairs extension will not be used.
Default
True

free_floatingips

Type
bool
Category
optional
Description
Free unused floating IPs.
Default
False

img_format

Type
enum
Category
optional
Description
If OS_IMG_FMT_RAW, use RAW images else use QCOW2 or streamOptimized/flat VMDK as appropriate.
Default
OS_IMG_FMT_AUTO
Choices
OS_IMG_FMT_VMDK, OS_IMG_FMT_QCOW2, OS_IMG_FMT_FLAT, OS_IMG_FMT_RAW, OS_IMG_FMT_AUTO

use_admin_url

Type
bool
Category
optional
Description
If admin URLs are either inaccessible or not to be accessed from Avi Controller, then set this to False.
Default
True

role_mapping

Type
OpenStackRoleMapping
Category
repeated
Description
Defines the mapping from openstack role names to avi local role names. For an OpenStack role, this mapping is consulted only if there is no local Avi role with the same name as the OpenStack role. This is an ordered list and only the first matching entry is used. You can use '*' to match all OpenStack role names.

use_internal_endpoints

Type
bool
Category
optional
Description
Use internalURL for OpenStack endpoints instead of the default publicURL endpoints.
Default
False

admin_tenant_uuid

Type
string
Category
optional
Description
admin-tenant's UUID in OpenStack

config_drive

Type
bool
Category
optional
Description
If false, metadata service will be used instead of config-drive functionality to retrieve SE VM metadata.
Default
True

auth_url

Type
string
Category
optional
Description
Auth URL for connecting to keystone. If this is specified, any value provided for keystone_host is ignored.

insecure

Type
bool
Category
optional
Description
Allow self-signed certificates when communicating with https service endpoints.
Default
True

nuage_vsd_host

Type
string
Category
optional
Description
Nuage VSD host name or IP address

nuage_port

Type
uint32
Category
optional
Description
Default
8443

nuage_username

Type
string
Category
optional
Description

nuage_password

Type
string
Category
optional
Description

nuage_organization

Type
string
Category
optional
Description

contrail_plugin

Type
bool
Category
optional
Description
Default
False

se_group_uuid

Type
string
Category
optional
Description
The Service Engine Group to use as template.

OpenStackRoleMapping

os_role

Type
string
Category
required
Description
Role name in OpenStack

avi_role

Type
string
Category
required
Description
Role name in Avi

AwsConfiguration

access_key_id

Type
string
Category
optional
Description
AWS access key ID

secret_access_key

Type
string
Category
optional
Description
AWS secret access key

region

Type
string
Category
optional
Description
AWS region
Default
us-west-1

vpc

Type
string
Category
optional
Description
VPC name

vpc_id

Type
string
Category
required
Description
VPC ID

zones

Type
AwsZoneConfig
Category
repeated
Description

route53_integration

Type
bool
Category
optional
Description
If enabled, create/update DNS entries in Route53 zones
Default
False

free_elasticips

Type
bool
Category
optional
Description
Free unused elastic IP addresses.
Default
True

use_iam_roles

Type
bool
Category
optional
Description
Use IAM roles instead of access and secret key.
Default
False

AwsZoneConfig

availability_zone

Type
string
Category
required
Description
Availability zone

mgmt_network_name

Type
string
Category
required
Description
Name or CIDR of the network in the Availability Zone that will be used as management network.

mgmt_network_uuid

Type
string
Category
optional
Description
UUID of the network in the Availability Zone that will be used as management network.

APICConfiguration

apic_name

Type
string
Category
repeated
Description
The hostname or IP address of the APIC controller.

apic_username

Type
string
Category
optional
Description
The username Avi Vantage will use when authenticating with APIC.

apic_password

Type
string
Category
optional
Description
The password Avi Vantage will use when authenticating with APIC.

apic_admin_tenant

Type
string
Category
optional
Description
Name of the Avi specific tenant created within APIC.
Default
common

apic_vendor

Type
string
Category
optional
Description
Default
Avi

apic_product

Type
string
Category
optional
Description
Default
ASP

deployment

Type
string
Category
optional
Description
Default

apic_domain

Type
string
Category
optional
Description
vCenter's virtual machine manager domain within APIC.

avi_controller_username

Type
string
Category
optional
Description
The username APIC will use when authenticating with Avi Vantage.
Default
admin

avi_controller_password

Type
string
Category
optional
Description
The password APIC will use when authenticating with Avi Vantage.

version

Type
string
Category
optional
Description
AVI Device Package Version
Default
1.0

minor

Type
string
Category
optional
Description
AVI Device Package Minor Version
Default
2

context_aware

Type
enum
Category
optional
Description
Context aware for supporting Service Graphs across VRFs
Default
SINGLE_CONTEXT
Choices
MULTI_CONTEXT, SINGLE_CONTEXT

CloudStackConfiguration

api_url

Type
string
Category
required
Description
CloudStack API URL

access_key_id

Type
string
Category
required
Description
CloudStack API Key

secret_access_key

Type
string
Category
required
Description
CloudStack Secret Key

mgmt_network_name

Type
string
Category
required
Description
Avi Management network name

mgmt_network_uuid

Type
string
Category
optional
Description
Avi Management network name

cntr_public_ip

Type
string
Category
optional
Description
If controller's management IP is in a private network, a publicly accessible IP to reach the controller.

hypervisor

Type
enum
Category
optional
Description
Default hypervisor type
Default
KVM
Choices
DEFAULT, VMWARE_VSAN, VMWARE_ESX, KVM

vCloudAirConfiguration

vca_username

Type
string
Category
required
Description
vCloudAir username

vca_password

Type
string
Category
required
Description
vCloudAir password

vca_host

Type
string
Category
required
Description
vCloudAir host address

privilege

Type
enum
Category
required
Description
vCloudAir access mode
Default
WRITE_ACCESS
Choices
WRITE_ACCESS, READ_ACCESS, NO_ACCESS

vca_instance

Type
string
Category
required
Description
vCloudAir instance ID

vca_orgnization

Type
string
Category
required
Description
vCloudAir orgnization ID

vca_vdc

Type
string
Category
required
Description
vCloudAir virtual data center name

vca_mgmt_network

Type
string
Category
required
Description
vCloudAir management network

MesosConfiguration

marathon_configurations

Type
MarathonConfiguration
Category
repeated
Description
List of Marathon frameworks.

mesos_url

Type
string
Category
optional
Description
Mesos URL of the form http://host:port
Default
http://leader.mesos:5050

vip

Type
IpAddr
Category
optional
Description
VIP to be used by all East-West apps on all Hosts. Preferrably use an address from outside the subnet

use_bridge_ip_as_vip

Type
bool
Category
optional
Description
Use Bridge IP on each Host as VIP
Default
True

container_port_match_http_service

Type
bool
Category
optional
Description
Perform container port matching to create a HTTP Virtualservice instead of a TCP/UDP VirtualService
Default
True

http_container_ports

Type
uint32
Category
repeated
Description
List of container ports that create a HTTP Virtualservice instead of a TCP/UDP VirtualService. Defaults to 80

east_west_placement_subnet

Type
IpAddrPrefix
Category
optional
Description
Match against this prefix when placing east-west VSs on SEs (Mesos mode only)

se_deployment_method

Type
enum
Category
optional
Description
Use Fleet/SSH/Marathon for SE deployment
Default
MESOS_SE_CREATE_FLEET
Choices
MESOS_SE_CREATE_FLEET, MESOS_SE_CREATE_SSH, MESOS_SE_CREATE_MARATHON

use_controller_image

Type
bool
Category
optional
Description
If true, use controller generated SE docker image via fileservice, else use docker repository image as defined by docker_registry_se
Default
False

marathon_se_deployment

Type
MarathonSeDeployment
Category
optional
Description
Options for Marathon SE deployment

fleet_endpoint

Type
string
Category
optional
Description
Optional fleet remote endpoint if fleet is used for SE deployment

docker_registry_se

Type
DockerRegistry
Category
optional
Description
Docker registry for ServiceEngine image

se_spawn_rate

Type
uint32
Category
optional
Description
New SE spawn rate per minute
Default
25

app_sync_frequency

Type
uint32
Category
optional
Description
Sync frequency in seconds with frameworks
Default
60

disable_auto_se_creation

Type
bool
Category
optional
Description
Disable SE creation
Default
False

disable_auto_frontend_service_sync

Type
bool
Category
optional
Description
Disable auto service sync for front end services
Default
False

disable_auto_backend_service_sync

Type
bool
Category
optional
Description
Disable auto service sync for back end services
Default
False

use_container_ip_port

Type
bool
Category
optional
Description
Use container IP address:port for pool instead of host IP address:hostport. This mode is applicable if the container IP is reachable (not a private NATed IP) from other hosts in a routed environment for containers
Default
False

feproxy_route_publish

Type
FeProxyRoutePublishConfig
Category
optional
Description
Publish ECMP route to upstream router for VIP

feproxy_bridge_name

Type
string
Category
optional
Description
Name of second Linux bridge on Host providing connectivity for Front End proxies. This is a disruptive change
Default
cbr1

se_resources

Type
MesosSeResources
Category
repeated
Description
Obsolete - ignored

se_volume

Type
string
Category
optional
Description
Host volume to be used as a disk for Avi SE, This is a disruptive change
Default
/opt/avi

coredump_directory

Type
string
Category
optional
Description
Directory to mount to check for core dumps on Service Engines. This will be mapped read only to /var/crash on any new Service Engines. This is a disruptive change
Default
/var/lib/systemd/coredump

ssh_se_deployment

Type
SSHSeDeployment
Category
optional
Description
Parameters for SSH SE deployment

enable_event_subscription

Type
bool
Category
optional
Description
Enable Marathon event subscriptions
Default
True

nuage_controller

Type
NuageSDNController
Category
optional
Description
Nuage Overlay SDN Controller information

all_vses_are_feproxy

Type
bool
Category
optional
Description
Consider all Virtualservices as Front End Proxies. Front End proxies are placed on specific SEs as opposed to Back End proxies placed on all SEs. Applicable where each service has its own VIP and VIP is reachable from anywhere
Default
False

feproxy_container_port_as_service

Type
bool
Category
optional
Description
For Front End proxies, use container port as service port
Default
True

services_accessible_all_interfaces

Type
bool
Category
optional
Description
Make service ports accessible on all Host interfaces in addition to East/West VIP and/or bridge IP. Usually enabled AWS Mesos clusters to export East-West services on Host interface
Default
False

feproxy_vips_enable_proxy_arp

Type
bool
Category
optional
Description
Enable proxy ARP from Host interface for Front End proxies
Default
True

se_exclude_attributes

Type
MesosAttribute
Category
repeated
Description
Exclude hosts with attributes for SE creation

se_include_attributes

Type
MesosAttribute
Category
repeated
Description
Create SEs just on hosts with include attributes

MarathonConfiguration

marathon_url

Type
string
Category
optional
Description
Marathon API URL of the form http://host:port
Default
http://leader.mesos:8080

marathon_username

Type
string
Category
optional
Description
Username for Marathon authentication

marathon_password

Type
string
Category
optional
Description
Password for Marathon authentication

public_port_range

Type
PortRange
Category
optional
Description
Public port range allocated to this Marathon framework instance

private_port_range

Type
PortRange
Category
optional
Description
Private port range allocated to this Marathon framework instance

framework_tag

Type
string
Category
optional
Description
Framework tag to be used in Virtualservice name. Default is framework name from Mesos. If this tag is altered atruntime, Virtualservices will be deleted and re-created

vs_name_tag_framework

Type
bool
Category
optional
Description
Tag VS name with framework name or framework_tag. Useful in deployments with multiple frameworks
Default
False

use_token_auth

Type
bool
Category
optional
Description
Use Token based authentication instead of basic authentication. Token is refreshed every 5 minutes.
Default
False

tenant

Type
string
Category
optional
Description
Tenant to pin this Marathon instance to. If set, a tenant object will be created in Avi bearing this name and all applications created in this marathon will be associated with this tenant regardless of the label contents in the application description.
Default
admin

PortRange

start

Type
uint32
Category
required
Description
TCP/UDP port range start (inclusive).

end

Type
uint32
Category
required
Description
TCP/UDP port range end (inclusive).

MarathonSeDeployment

host_os

Type
string
Category
optional
Description
Host OS distribution e.g. COREOS, UBUNTU, REDHAT
Default
COREOS

docker_image

Type
string
Category
optional
Description
Docker image to be used for Avi SE installation e.g. fedora, ubuntu
Default
fedora

uris

Type
string
Category
repeated
Description
URIs to be resolved for starting the application

resource_roles

Type
string
Category
repeated
Description
Accepted resource roles for SEs

DockerRegistry

registry

Type
string
Category
optional
Description
Avi ServiceEngine repository name. For private registry, it's registry:port/repository, for public registry, it's registry/repository.
Default
avinetworks/se

private

Type
bool
Category
optional
Description
Set if docker registry is private. Avi controller will not attempt to push SE image to the registry, unless se_repository_push is set
Default
False

username

Type
string
Category
optional
Description
Username for docker registry

password

Type
string
Category
optional
Description
Password for docker registry

se_repository_push

Type
bool
Category
optional
Description
Avi Controller will push ServiceEngine image to docker repository
Default
False

FeProxyRoutePublishConfig

mode

Type
enum
Category
optional
Description
Publish ECMP route to upstream router for VIP
Default
FE_PROXY_ROUTE_PUBLISH_NONE
Choices
FE_PROXY_ROUTE_PUBLISH_NONE, FE_PROXY_ROUTE_PUBLISH_QUAGGA_WEBAPP

token

Type
string
Category
optional
Description
Token for tracking changes

subnet

Type
uint32
Category
optional
Description
Subnet for publisher
Default
32

publisher_port

Type
uint32
Category
optional
Description
Listener port for publisher
Default
80

MesosSeResources

attribute_key

Type
string
Category
required
Description
Attribute (Fleet or Mesos) key of Hosts

attribute_value

Type
string
Category
required
Description
Attribute (Fleet or Mesos) value of Hosts

cpu

Type
float
Category
optional
Description
Obsolete - ignored
Default
2

memory

Type
uint32
Category
optional
Description
Obsolete - ignored
Default
4096

SSHSeDeployment

ssh_user

Type
string
Category
optional
Description
Username for SSH access to hosts

sudo_user

Type
string
Category
optional
Description
Username for sudo

password

Type
string
Category
optional
Description
Password for ssh and/or sudo

host_os

Type
string
Category
optional
Description
Host OS distribution e.g. COREOS, UBUNTU, REDHAT
Default
COREOS

NuageSDNController

nuage_vsd_host

Type
string
Category
optional
Description
Nuage VSD host name or IP address

nuage_port

Type
uint32
Category
optional
Description
Default
8443

nuage_username

Type
string
Category
optional
Description

nuage_password

Type
string
Category
optional
Description

nuage_organization

Type
string
Category
optional
Description

se_domain

Type
string
Category
optional
Description
Domain to be used for SE creation

se_zone

Type
string
Category
optional
Description
Zone to be used for SE creation

se_network

Type
string
Category
optional
Description
Network to be used for SE creation

se_enterprise

Type
string
Category
optional
Description
Enterprise to be used for SE creation

se_user

Type
string
Category
optional
Description
User to be used for SE creation

se_policy_group

Type
string
Category
optional
Description
Policy Group to be used for SE creation

MesosAttribute

attribute

Type
string
Category
required
Description
Attribute to match

value

Type
string
Category
optional
Description
Attribute value. If not set, match any value

ProxyConfiguration

host

Type
string
Category
required
Description
Proxy hostname or IP address

port

Type
uint32
Category
required
Description
Proxy port

username

Type
string
Category
optional
Description
Username for proxy

password

Type
string
Category
optional
Description
Password for proxy

LinuxServerConfiguration

ssh_attr

Type
SSHSeDeployment
Category
required
Description
Parameters for SSH to hosts

docker_registry_se

Type
DockerRegistry
Category
optional
Description
Private docker registry for SE image storage

hosts

Type
LinuxServerHost
Category
repeated
Description

se_sys_disk_path

Type
string
Category
optional
Description
SE System Logs disk path for cloud

se_sys_disk_size_GB

Type
uint32
Category
optional
Description
SE System Logs disk size for cloud
Default
10

se_log_disk_path

Type
string
Category
optional
Description
SE Client Logs disk path for cloud

se_log_disk_size_GB

Type
uint32
Category
optional
Description
SE Client Log disk size for cloud
Default
5

LinuxServerHost

host_ip

Type
IpAddr
Category
required
Description

host_attr

Type
HostAttributes
Category
repeated
Description

HostAttributes

attr_key

Type
string
Category
required
Description

attr_val

Type
string
Category
optional
Description

DockerConfiguration

ucp_nodes

Type
string
Category
repeated
Description
List of Docker UCP nodes; In case of a load balanced UCP cluster, use Virtual IP of the cluster

client_tls_key_and_certificate_ref

Type
Reference to SSLKeyAndCertificate
Category
optional
Description
UUID of the client TLS cert and key

ca_tls_key_and_certificate_ref

Type
Reference to SSLKeyAndCertificate
Category
optional
Description
UUID of the UCP CA TLS cert and key

container_port_match_http_service

Type
bool
Category
optional
Description
Perform container port matching to create a HTTP Virtualservice instead of a TCP/UDP VirtualService
Default
True

http_container_ports

Type
uint32
Category
repeated
Description
List of container ports that create a HTTP Virtualservice instead of a TCP/UDP VirtualService. Defaults to 80

east_west_placement_subnet

Type
IpAddrPrefix
Category
optional
Description
Match against this prefix when placing east-west VSs on SEs

se_deployment_method

Type
enum
Category
optional
Description
Use Fleet/SSH for SE deployment
Default
SE_CREATE_SSH
Choices
SE_CREATE_FLEET, SE_CREATE_SSH

fleet_endpoint

Type
string
Category
optional
Description
Optional fleet remote endpoint if fleet is used for SE deployment

docker_registry_se

Type
DockerRegistry
Category
optional
Description
Docker registry for ServiceEngine image

se_spawn_rate

Type
uint32
Category
optional
Description
New SE spawn rate per minute
Default
25

app_sync_frequency

Type
uint32
Category
optional
Description
Sync frequency in seconds with frameworks
Default
60

disable_auto_se_creation

Type
bool
Category
optional
Description
Disable SE creation
Default
False

disable_auto_frontend_service_sync

Type
bool
Category
optional
Description
Disable auto service sync for front end services
Default
False

disable_auto_backend_service_sync

Type
bool
Category
optional
Description
Disable auto service sync for back end services
Default
False

use_container_ip_port

Type
bool
Category
optional
Description
Use container IP address:port for pool instead of host IP address:hostport. This mode is applicable if the container IP is reachable (not a private NATed IP) from other hosts in a routed environment for containers
Default
False

se_volume

Type
string
Category
optional
Description
Host volume to be used as a disk for Avi SE, This is a disruptive change
Default
/opt/avi

coredump_directory

Type
string
Category
optional
Description
Directory to mount to check for core dumps on Service Engines. This will be mapped read only to /var/crash on any new Service Engines. This is a disruptive change
Default
/var/lib/systemd/coredump

ssh_se_deployment

Type
SSHSeDeployment
Category
optional
Description
Parameters for SSH SE deployment

enable_event_subscription

Type
bool
Category
optional
Description
Enable Docker event subscription
Default
True

feproxy_container_port_as_service

Type
bool
Category
optional
Description
For Front End proxies, use container port as service port
Default
False

services_accessible_all_interfaces

Type
bool
Category
optional
Description
Make service ports accessible on all Host interfaces in addition to East/West VIP and/or bridge IP. Usually enabled AWS clusters to export East-West services on Host interface
Default
False

feproxy_vips_enable_proxy_arp

Type
bool
Category
optional
Description
Enable proxy ARP from Host interface for Front End proxies
Default
True

se_exclude_attributes

Type
MesosAttribute
Category
repeated
Description
Exclude hosts with attributes for SE creation

se_include_attributes

Type
MesosAttribute
Category
repeated
Description
Create SEs just on hosts with include attributes

RancherConfiguration

rancher_servers

Type
string
Category
repeated
Description
List of Rancher servers; In case of a load balanced Rancher multi cluster, use Virtual IP of the cluster

access_key

Type
string
Category
optional
Description
Access key

secret_key

Type
string
Category
optional
Description
Secret key

container_port_match_http_service

Type
bool
Category
optional
Description
Perform container port matching to create a HTTP Virtualservice instead of a TCP/UDP VirtualService
Default
True

http_container_ports

Type
uint32
Category
repeated
Description
List of container ports that create a HTTP Virtualservice instead of a TCP/UDP VirtualService. Defaults to 80

east_west_placement_subnet

Type
IpAddrPrefix
Category
optional
Description
Match against this prefix when placing east-west VSs on SEs

se_deployment_method

Type
enum
Category
optional
Description
Use Fleet/SSH for SE deployment
Default
SE_CREATE_SSH
Choices
SE_CREATE_FLEET, SE_CREATE_SSH

fleet_endpoint

Type
string
Category
optional
Description
Optional fleet remote endpoint if fleet is used for SE deployment

docker_registry_se

Type
DockerRegistry
Category
optional
Description
Docker registry for ServiceEngine image

se_spawn_rate

Type
uint32
Category
optional
Description
New SE spawn rate per minute
Default
25

app_sync_frequency

Type
uint32
Category
optional
Description
Sync frequency in seconds with frameworks
Default
60

disable_auto_se_creation

Type
bool
Category
optional
Description
Disable SE creation
Default
False

disable_auto_frontend_service_sync

Type
bool
Category
optional
Description
Disable auto service sync for front end services
Default
False

disable_auto_backend_service_sync

Type
bool
Category
optional
Description
Disable auto service sync for back end services
Default
False

use_container_ip_port

Type
bool
Category
optional
Description
Use container IP address:port for pool instead of host IP address:hostport. This mode is applicable if the container IP is reachable (not a private NATed IP) from other hosts in a routed environment for containers
Default
False

se_volume

Type
string
Category
optional
Description
Host volume to be used as a disk for Avi SE, This is a disruptive change
Default
/opt/avi

coredump_directory

Type
string
Category
optional
Description
Directory to mount to check for core dumps on Service Engines. This will be mapped read only to /var/crash on any new Service Engines. This is a disruptive change
Default
/var/lib/systemd/coredump

ssh_se_deployment

Type
SSHSeDeployment
Category
optional
Description
Parameters for SSH SE deployment

enable_event_subscription

Type
bool
Category
optional
Description
Enable Docker event subscription
Default
True

feproxy_container_port_as_service

Type
bool
Category
optional
Description
For Front End proxies, use container port as service port
Default
False

services_accessible_all_interfaces

Type
bool
Category
optional
Description
Make service ports accessible on all Host interfaces in addition to East/West VIP and/or bridge IP. Usually enabled AWS clusters to export East-West services on Host interface
Default
False

feproxy_vips_enable_proxy_arp

Type
bool
Category
optional
Description
Enable proxy ARP from Host interface for Front End proxies
Default
True

se_exclude_attributes

Type
MesosAttribute
Category
repeated
Description
Exclude hosts with attributes for SE creation

se_include_attributes

Type
MesosAttribute
Category
repeated
Description
Create SEs just on hosts with include attributes

nuage_controller

Type
NuageSDNController
Category
optional
Description
Nuage Overlay SDN Controller information

MicroService

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

orchestrator_name

Type
string
Category
required
Description

application_name

Type
string
Category
required
Description

ip_list

Type
bool
Category
optional
Description
Flag to indicate if container IP list is provided by cloud connectorThis is applicable for overlay cases.

containers

Type
MicroServiceContainer
Category
repeated
Description
The list of containers for this microservice

created_by

Type
string
Category
optional
Description
Creator name

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
required
Description

MicroServiceContainer

ip

Type
IpAddr
Category
required
Description
IP Address of the container.

port

Type
uint32
Category
optional
Description
Port nunber of the instance

container_id

Type
string
Category
optional
Description
ID of the container.

host

Type
string
Category
optional
Description
ID or name of the host where the container is.

task_id

Type
string
Category
optional
Description
Marathon Task ID of the instance

SeAgentGraphDBNodeStats

num_create

Type
int32
Category
optional
Description

num_update

Type
int32
Category
optional
Description

num_delete

Type
int32
Category
optional
Description

num_read

Type
int32
Category
optional
Description

update_stats

Type
SeAgentGraphDBNodeTxnStats
Category
optional
Description

delete_stats

Type
SeAgentGraphDBNodeTxnStats
Category
optional
Description

read_stats

Type
SeAgentGraphDBNodeTxnStats
Category
optional
Description

SeAgentGraphDBNodeTxnStats

history

Type
SeAgentGraphDBNodeTxnDetail
Category
repeated
Description

longest_txn

Type
SeAgentGraphDBNodeTxnDetail
Category
optional
Description

SeAgentGraphDBNodeTxnDetail

duration

Type
int32
Category
optional
Description

txn_id

Type
string
Category
optional
Description

start_time

Type
string
Category
optional
Description

dp_enq_time

Type
string
Category
optional
Description

dp_deq_time

Type
string
Category
optional
Description

end_time

Type
string
Category
optional
Description

dp_duration

Type
int32
Category
optional
Description

SeRumInsertionStats

API


    GET /api/serviceengine/<key>/seruminsertionstats/<key>

CLI


    show serviceengine <key> seruminsertionstats

Data

SeRumInsertionStats

rum_beacons_received

Type
uint64
Category
required
Description

rum_bad_beacons_received

Type
uint64
Category
required
Description

rum_cached_beacons_received

Type
uint64
Category
required
Description

rum_non_page_beacons_received

Type
uint64
Category
required
Description

rum_nav_and_res_using_js

Type
uint64
Category
required
Description

rum_nav_only_using_js

Type
uint64
Category
required
Description

rum_passive_only

Type
uint64
Category
required
Description

rum_failed_using_js

Type
uint64
Category
required
Description

rum_ignored_sample

Type
uint64
Category
required
Description

rum_ignored_content_type

Type
uint64
Category
required
Description

rum_ignored_skip_uri

Type
uint64
Category
required
Description

rum_ignored_uri_not_in_list

Type
uint64
Category
required
Description

rum_ignored_client_ip

Type
uint64
Category
required
Description

rum_ignored_http_status

Type
uint64
Category
required
Description

rum_ignored_sub_request

Type
uint64
Category
required
Description

rum_failed_internal_error

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/seruminsertionstats/clear

CLI


    clear serviceengine <key> seruminsertionstats

MeminfoRuntime

API


    GET /api/serviceengine/<key>/meminfo/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> meminfo filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

MeminfoRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

memory_config

Type
MemConfig
Category
optional
Description

process_memory_stats

Type
Mallstats
Category
optional
Description

shared_memory_stats

Type
Jestats
Category
optional
Description

protobuf_memory_stats

Type
MemProto
Category
optional
Description

MemConfig

number_of_CPUs

Type
uint32
Category
required
Description

number_of_arenas

Type
uint32
Category
required
Description

pointer_size

Type
uint32
Category
required
Description

quantum_size

Type
uint32
Category
required
Description

page_size

Type
uint32
Category
required
Description

chunk_size

Type
uint32
Category
required
Description

Mallstats

bytes_allocated

Type
uint64
Category
required
Description

bytes_mapped

Type
uint64
Category
required
Description

Jestats

bytes_allocated

Type
uint64
Category
required
Description

bytes_active

Type
uint64
Category
required
Description

bytes_mapped

Type
uint64
Category
required
Description

bytes_allocated_small

Type
uint64
Category
required
Description

bytes_allocated_large

Type
uint64
Category
required
Description

bytes_allocated_huge

Type
uint64
Category
required
Description

small

Type
AllocInfo
Category
optional
Description

large

Type
AllocInfo
Category
optional
Description

total

Type
AllocInfo
Category
optional
Description

page_stats

Type
PageStats
Category
optional
Description

AllocInfo

bytes_allocated

Type
uint64
Category
required
Description

number_of_mallocs

Type
uint64
Category
required
Description

number_of_dallocs

Type
uint64
Category
required
Description

number_of_requests

Type
uint64
Category
required
Description

PageStats

page_active

Type
uint64
Category
required
Description

page_dirty

Type
uint64
Category
required
Description

sweep

Type
uint64
Category
required
Description

madvise

Type
uint64
Category
required
Description

purged

Type
uint64
Category
required
Description

MemProto

current_usage

Type
uint32
Category
required
Description

max_mem_usage

Type
uint32
Category
required
Description

memory_mapped

Type
uint32
Category
required
Description

SeLogStatsRuntime

API


    GET /api/serviceengine/<key>/selogstats/<key>

CLI


    show serviceengine <key> selogstats

Data

SeLogStatsRuntime

count

Type
uint32
Category
required
Description
Default
0

conn_nf_hit

Type
uint32
Category
required
Description
Default
0

conn_nf_miss

Type
uint32
Category
required
Description
Default
0

conn_nf_limit

Type
uint32
Category
required
Description
Default
0

conn_udf_hit

Type
uint32
Category
required
Description
Default
0

conn_udf_miss

Type
uint32
Category
required
Description
Default
0

conn_udf_limit

Type
uint32
Category
required
Description
Default
0

conn_adf_hit

Type
uint32
Category
required
Description
Default
0

conn_adf_miss

Type
uint32
Category
required
Description
Default
0

conn_adf_limit

Type
uint32
Category
required
Description
Default
0

appl_nf_hit

Type
uint32
Category
required
Description
Default
0

appl_nf_miss

Type
uint32
Category
required
Description
Default
0

appl_nf_limit

Type
uint32
Category
required
Description
Default
0

appl_udf_hit

Type
uint32
Category
required
Description
Default
0

appl_udf_miss

Type
uint32
Category
required
Description
Default
0

appl_udf_limit

Type
uint32
Category
required
Description
Default
0

appl_adf_hit

Type
uint32
Category
required
Description
Default
0

appl_adf_miss

Type
uint32
Category
required
Description
Default
0

appl_adf_limit

Type
uint32
Category
required
Description
Default
0

event_hit

Type
uint32
Category
required
Description
Default
0

event_miss

Type
uint32
Category
required
Description
Default
0

Actions

API


    POST /api/serviceengine/<key>/selogstats/clear

CLI


    clear serviceengine <key> selogstats

SeFaultInjectExhaustConn

API


CLI


Data

SeFaultInjectExhaustConn

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

num_objects

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/faultinject/exhaust_conn/clear

CLI


    faultinject serviceengine <key> exhaust_conn

Data

TcpConnRuntime

API


    GET /api/serviceengine/<key>/tcp-flows/<key>
	Query Params: ConnectionFilter	ListeningsockFilter	CorenumFilter

CLI


    show serviceengine <key> tcp-flows filter [conn_type] [ip_addr] [port] [ip_mask] [listening_ports] [core_num]

Data

TcpConnRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

connection

Type
SimpleconnEntry
Category
repeated
Description

SimpleconnEntry

l_ip

Type
string
Category
optional
Description

f_ip

Type
string
Category
optional
Description

l_port

Type
uint32
Category
optional
Description

f_port

Type
uint32
Category
optional
Description

tcp_state

Type
uint32
Category
optional
Description

tcp_state_name

Type
string
Category
optional
Description

l_port_end

Type
uint32
Category
optional
Description

vrf_id

Type
uint32
Category
optional
Description

IpStatRuntime

API


    GET /api/serviceengine/<key>/ipstat/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> ipstat filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

IpStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

ips_total

Type
uint64
Category
required
Description

ips_badsum

Type
uint64
Category
required
Description

ips_ipsum_large

Type
uint64
Category
required
Description

ips_badtcpsum

Type
uint64
Category
required
Description

ips_tcpsum_large

Type
uint64
Category
required
Description

ips_tooshort

Type
uint64
Category
required
Description

ips_toosmall

Type
uint64
Category
required
Description

ips_badhlen

Type
uint64
Category
required
Description

ips_badlen

Type
uint64
Category
required
Description

ips_fragments

Type
uint64
Category
required
Description

ips_fragdropped

Type
uint64
Category
required
Description

ips_fragtimeout

Type
uint64
Category
required
Description

ips_forward

Type
uint64
Category
required
Description

ips_fastforward

Type
uint64
Category
required
Description

ips_cantforward

Type
uint64
Category
required
Description

ips_redirectsent

Type
uint64
Category
required
Description

ips_noproto

Type
uint64
Category
required
Description

ips_delivered

Type
uint64
Category
required
Description

ips_localout

Type
uint64
Category
required
Description

ips_odropped

Type
uint64
Category
required
Description

ips_reassembled

Type
uint64
Category
required
Description

ips_fragmented

Type
uint64
Category
required
Description

ips_ofragments

Type
uint64
Category
required
Description

ips_cantfrag

Type
uint64
Category
required
Description

ips_badoptions

Type
uint64
Category
required
Description

ips_noroute

Type
uint64
Category
required
Description

ips_badvers

Type
uint64
Category
required
Description

ips_rawout

Type
uint64
Category
required
Description

ips_toolong

Type
uint64
Category
required
Description

ips_notmember

Type
uint64
Category
required
Description

ips_nogif

Type
uint64
Category
required
Description

ips_badaddr

Type
uint64
Category
required
Description

ips_badudpsum

Type
uint64
Category
required
Description

ips_udpsum_large

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/ipstat/clear

CLI


    clear serviceengine <key> ipstat

ShMallocStatRuntime

API


    GET /api/serviceengine/<key>/shmallocstats/<key>

CLI


    show serviceengine <key> shmallocstats

Data

ShMallocStatRuntime

se_uuid

Type
string
Category
optional
Description

sh_mallocstat_entry

Type
ShMallocStatEntry
Category
repeated
Description

ShMallocStatEntry

sh_malloc_type_name

Type
string
Category
required
Description

sh_malloc_type_cnt

Type
int32
Category
required
Description

sh_malloc_type_size

Type
uint64
Category
required
Description

sh_malloc_type_fail

Type
int32
Category
required
Description

SeAuthStatsRuntime

API


    GET /api/serviceengine/<key>/seauthstats/<key>

CLI


    show serviceengine <key> seauthstats

Data

SeAuthStatsRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

auth_counter

Type
uint64
Category
optional
Description

auth_ignored_config

Type
uint64
Category
optional
Description

auth_unauthorized

Type
uint64
Category
optional
Description

auth_timed_out

Type
uint64
Category
optional
Description

auth_cached_allow

Type
uint64
Category
optional
Description

auth_cached_deny

Type
uint64
Category
optional
Description

auth_search_failed

Type
uint64
Category
optional
Description

auth_search_success

Type
uint64
Category
optional
Description

auth_group_failed

Type
uint64
Category
optional
Description

auth_group_success

Type
uint64
Category
optional
Description

auth_login_failed

Type
uint64
Category
optional
Description

auth_login_success

Type
uint64
Category
optional
Description

auth_internal_error

Type
uint64
Category
optional
Description

auth_waiting

Type
uint64
Category
optional
Description

Actions

API


    POST /api/serviceengine/<key>/seauthstats/clear

CLI


    clear serviceengine <key> seauthstats

ArpStatRuntime

API


    GET /api/serviceengine/<key>/arpstat/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> arpstat filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

ArpStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

txrequests

Type
uint64
Category
required
Description

txreplies

Type
uint64
Category
required
Description

rxrequests

Type
uint64
Category
required
Description

rxreplies

Type
uint64
Category
required
Description

received

Type
uint64
Category
required
Description

dropped

Type
uint64
Category
required
Description

timeouts

Type
uint64
Category
required
Description

dupips

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/arpstat/clear

CLI


    clear serviceengine <key> arpstat

SeMicroService

API


    GET /api/serviceengine/<key>/microservice/<key>
	Query Params: SeMicroServiceFilter

CLI


    show serviceengine <key> microservice filter [microservice_uuid] [container_key]

Data

SeMicroService

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

services

Type
MicroServiceInternal
Category
repeated
Description

containers

Type
ContainerInternal
Category
repeated
Description

MicroServiceInternal

uuid

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

app_name

Type
string
Category
optional
Description

orchestrator_name

Type
string
Category
optional
Description

containers

Type
ContainerInternal
Category
repeated
Description

se_uuid

Type
string
Category
optional
Description

ip_list

Type
bool
Category
optional
Description

ContainerInternal

id

Type
string
Category
optional
Description

task_id

Type
string
Category
optional
Description

ip_addr

Type
string
Category
optional
Description

host

Type
string
Category
optional
Description

ports

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

nat_ip_addr

Type
string
Category
optional
Description

MetricsRuntimeDetail

API


    GET /api/serviceengine/<key>/metrics/detail/<key>
	Query Params: SeMetricsFilter	VsMetricsFilter

CLI


    show serviceengine <key> metrics detail filter [se_uuid] [vs_uuid] [obj_id]

Data

MetricsRuntimeDetail

uuid

Type
string
Category
optional
Description

type

Type
enum
Category
optional
Description
Choices
APPLICATION_METRICS_ENTITY, SE_METRICS_ENTITY, VM_METRICS_ENTITY, CONTROLLER_METRICS_ENTITY, TENANT_METRICS_ENTITY, VSERVER_METRICS_ENTITY

se_stats

Type
SeStats
Category
optional
Description

base_vs_stats

Type
VsStats
Category
optional
Description

curr_vs_stats

Type
VsStats
Category
optional
Description

SeStats

node_obj_id

Type
string
Category
required
Description

cpu_usage

Type
uint64
Category
optional
Description
cpu usage

mem_usage

Type
uint64
Category
optional
Description
physical memory usage

total_memory

Type
uint64
Category
optional
Description
actual physical memory in MB

packet_buffer_usage

Type
uint64
Category
optional
Description
total packet buffer usage

packet_buffer_size

Type
uint64
Category
optional
Description
total packet buffer memory in MB

packet_buffer_large_usage

Type
uint64
Category
optional
Description
large packet buffer usage

packet_buffer_small_usage

Type
uint64
Category
optional
Description
small packet buffer usage

packet_buffer_header_usage

Type
uint64
Category
optional
Description
packet buffer header usage

connection_table_size

Type
uint64
Category
optional
Description
Connection/flow table entries

synseen_entries_size

Type
uint64
Category
optional
Description
Synseen/flow table entries

persistent_table_size

Type
uint64
Category
optional
Description
session persistent table entries

persistent_table_usage

Type
uint64
Category
optional
Description
session persistent table entries percent

connection_dropped_persistence_table_limit

Type
uint64
Category
optional
Description
Number of times persistence table limit is reached

ssl_session_cache

Type
uint64
Category
optional
Description
ssl session cache

ssl_session_cache_usage

Type
uint64
Category
optional
Description
ssl session cache usage percent

num_vs

Type
uint64
Category
optional
Description
number of vs-s

syn_cache_usage

Type
uint64
Category
optional
Description
SYN cache usage. Higher usage indicates too many connection attempts and open at service engine.

rx_bytes_dropped

Type
uint64
Category
optional
Description
Total number of bytes of received packets dropped It includes packets across all VS and non VS

rx_pkts_dropped

Type
uint64
Category
optional
Description
Total number of rx_pkts dropped at SE. It includes packets across all VS and non VS

connection_policy_drops

Type
uint64
Category
optional
Description
Total number of rx_pkts dropped at SE due to policies configured in VS eg. security policy, rate limits connection limit, bandwidth limit etc.

connections

Type
uint64
Category
optional
Description
Total number of connections including the dropped connections and ones due to policy drops. This would be same as number of SYNS seen by SE on any VS

connections_dropped

Type
uint64
Category
optional
Description
Total number of connections dropped excluding the dropped connections and ones due to policy drops. This would be same as number of SYNS seen by SE on any VS. It include both connections that failed to establish

dos_rx_bytes

Type
uint64
Category
optional
Description
Received dos attack bytes

dos_tx_bytes

Type
uint64
Category
optional
Description
Transmitted dos attack bytes

eth0_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth0_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth0_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth0_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth0_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 0

eth0_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 0

eth0_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 0

eth0_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 0

eth0_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth0_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth0_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth0_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth0_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 0

eth1_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth1_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth1_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth1_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth1_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 1

eth1_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 1

eth1_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 1

eth1_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 1

eth1_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth1_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth1_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth1_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth1_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 1

eth2_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth2_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth2_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth2_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth2_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 2

eth2_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 2

eth2_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 2

eth2_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 2

eth2_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth2_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth2_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth2_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth2_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 2

eth3_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth3_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth3_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth3_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth3_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 3

eth3_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 3

eth3_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 3

eth3_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 3

eth3_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth3_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth3_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth3_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth3_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 3

eth4_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth4_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth4_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth4_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth4_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 4

eth4_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 4

eth4_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 4

eth4_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 4

eth4_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth4_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth4_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth4_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth4_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 4

eth5_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth5_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth5_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth5_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth5_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 5

eth5_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 5

eth5_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 5

eth5_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 5

eth5_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth5_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth5_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth5_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth5_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 5

eth6_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth6_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth6_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth6_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth6_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 6

eth6_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 6

eth6_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 6

eth6_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 6

eth6_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth6_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth6_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth6_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth6_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 6

eth7_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth7_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth7_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth7_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth7_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 7

eth7_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 7

eth7_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 7

eth7_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 7

eth7_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth7_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth7_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth7_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth7_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 7

eth8_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth8_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth8_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth8_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth8_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 8

eth8_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 8

eth8_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 8

eth8_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 8

eth8_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth8_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth8_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth8_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth8_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 8

eth9_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth9_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth9_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth9_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth9_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 9

eth9_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 9

eth9_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 9

eth9_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 9

eth9_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth9_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth9_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth9_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth9_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 9

eth10_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth10_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth10_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth10_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth10_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 0

eth10_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 0

eth10_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 0

eth10_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 0

eth10_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth10_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth10_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth10_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth10_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 0

eth11_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth11_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth11_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth11_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth11_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 1

eth11_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 1

eth11_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 1

eth11_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 1

eth11_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth11_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth11_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth11_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth11_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 1

eth12_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth12_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth12_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth12_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth12_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 2

eth12_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 2

eth12_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 2

eth12_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 2

eth12_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth12_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth12_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth12_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth12_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 2

eth13_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth13_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth13_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth13_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth13_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 3

eth13_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 3

eth13_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 3

eth13_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 3

eth13_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth13_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth13_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth13_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth13_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 3

eth14_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth14_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth14_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth14_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth14_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 4

eth14_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 4

eth14_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 4

eth14_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 4

eth14_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth14_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth14_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth14_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth14_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 4

eth15_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth15_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth15_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth15_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth15_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 5

eth15_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 5

eth15_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 5

eth15_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 5

eth15_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth15_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth15_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth15_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth15_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 5

eth16_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth16_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth16_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth16_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth16_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 6

eth16_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 6

eth16_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 6

eth16_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 6

eth16_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth16_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth16_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth16_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth16_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 6

eth17_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth17_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth17_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth17_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth17_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 7

eth17_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 7

eth17_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 7

eth17_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 7

eth17_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth17_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth17_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth17_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth17_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 7

eth18_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth18_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth18_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth18_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth18_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 8

eth18_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 8

eth18_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 8

eth18_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 8

eth18_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth18_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth18_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth18_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth18_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 8

eth19_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth19_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth19_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth19_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth19_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 9

eth19_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 9

eth19_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 9

eth19_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 9

eth19_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth19_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth19_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth19_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth19_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 9

eth20_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth20_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth20_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth20_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth20_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 0

eth20_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 0

eth20_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 0

eth20_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 0

eth20_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth20_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth20_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth20_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth20_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 0

eth21_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth21_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth21_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth21_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth21_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 1

eth21_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 1

eth21_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 1

eth21_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 1

eth21_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth21_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth21_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth21_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth21_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 1

eth22_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth22_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth22_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth22_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth22_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 2

eth22_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 2

eth22_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 2

eth22_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 2

eth22_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth22_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth22_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth22_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth22_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 2

eth23_rx_pkts_dropped_non_vs

Type
uint64
Category
optional
Description
Received packets dropped

eth23_rx_bytes_dropped_non_vs

Type
uint64
Category
optional
Description
Received bytes dropped

eth23_rx_pkts

Type
uint64
Category
optional
Description
Average received packets per second

eth23_tx_pkts

Type
uint64
Category
optional
Description
Average transmit packets per second

eth23_rx_bytes

Type
uint64
Category
optional
Description
Received bytes from service engine interface 3

eth23_tx_bytes

Type
uint64
Category
optional
Description
Transmitted bytes to service engine interface 3

eth23_rx_bytes_absolute

Type
uint64
Category
optional
Description
Received bytes(absolute) from service engine interface 3

eth23_tx_bytes_absolute

Type
uint64
Category
optional
Description
Transmitted bytes(absolute) to service engine interface 3

eth23_connection_table_usage

Type
uint64
Category
optional
Description
connection table usage. If it is full/high then it is experiencing DoS

eth23_syn_seen_entries_usage

Type
uint64
Category
optional
Description
Percentage of syn seen entries currently used. If it is high then it is experiencing DoS

eth23_connection_dropped_table_limit

Type
uint64
Category
optional
Description
Number of times flowtable entries limit is reached

eth23_connection_dropped_syn_seen_limit

Type
uint64
Category
optional
Description
Number of times flowtable syn seen entry limit is reached

eth23_max_bw

Type
uint64
Category
optional
Description
Maximum bandwidth seen on service engine interface 3

disk1_usage

Type
uint64
Category
optional
Description
Disk usage percent

connection_mem_usage

Type
uint64
Category
optional
Description
Percentage of connection memory used

connection_mem_total

Type
uint64
Category
optional
Description
Max connection memory in MB

packet_dropped_packet_buffer_stressed

Type
uint64
Category
optional
Description
Packet is dropped because our packet buffers are under stress

connection_dropped_packet_buffer_stressed

Type
uint64
Category
optional
Description
Connection is dropped because our packet buffer are under stress

packet_buffer_allocation_failure

Type
uint64
Category
optional
Description
Packet buffer allocation failed.

connection_dropped_memory_limit

Type
uint64
Category
optional
Description
Connection is dropped because memory allocation failed is reached

cache_object_allocation_failure

Type
uint64
Category
optional
Description
Number of times cacheable objects were dropped due to memory allocation failure

dos_land

Type
uint64
Category
optional
Description
DoS attack: Land

dos_smurf

Type
uint64
Category
optional
Description
DoS attack: Smurf

dos_icmp_flood

Type
uint64
Category
optional
Description
DoS attack: Icmp Ping Flood

dos_unknown_protocol

Type
uint64
Category
optional
Description
DoS attack: Unknown Protocol

dos_teardrop

Type
uint64
Category
optional
Description
DoS attack: Teardrop

dos_ip_frag_overrun

Type
uint64
Category
optional
Description
DoS attack: Ip Fragmentation Overrun

dos_ip_frag_toosmall

Type
uint64
Category
optional
Description
DoS attack: Ip Fragmentation Too Small

dos_ip_frag_full

Type
uint64
Category
optional
Description
DoS attack: Ip Fragmentation Full

dos_ip_frag_incomplete

Type
uint64
Category
optional
Description
DoS attack: Ip Fragmentation Incomplete

dos_port_scan

Type
uint64
Category
optional
Description
DoS attack: Port Scan

dos_tcp_non_syn_flood

Type
uint64
Category
optional
Description
DoS attack: Non Syn Flood

VsStats

bel4stats

Type
ServerL4Stats
Category
repeated
Description

fel4stats

Type
VserverL4Stats
Category
repeated
Description

bel7stats

Type
ServerL7Stats
Category
repeated
Description

fel7stats

Type
VserverL7Stats
Category
repeated
Description

ServerL4Stats

node_obj_id

Type
string
Category
required
Description

conn_duration

Type
uint64
Category
required
Description

dup_ack_retransmits

Type
uint64
Category
required
Description

sack_retransmits

Type
uint64
Category
required
Description

timeout_retransmits

Type
uint64
Category
required
Description

out_of_orders

Type
uint64
Category
required
Description

syns_sent

Type
uint64
Category
required
Description

new_established_conns

Type
uint64
Category
required
Description

complete_conns

Type
uint64
Category
required
Description

finished_conns

Type
uint64
Category
required
Description

open_conns

Type
uint64
Category
required
Description

connections_dropped

Type
uint64
Category
required
Description

lossy_connections

Type
uint64
Category
required
Description

errored_connections

Type
uint64
Category
required
Description

rx_pkts

Type
uint64
Category
required
Description

rx_bytes

Type
uint64
Category
required
Description

tx_pkts

Type
uint64
Category
required
Description

tx_bytes

Type
uint64
Category
required
Description

tx_goodput

Type
uint64
Category
required
Description

rx_goodput

Type
uint64
Category
required
Description

rx_pkts_absolute

Type
uint64
Category
required
Description

rx_bytes_absolute

Type
uint64
Category
required
Description

tx_pkts_absolute

Type
uint64
Category
required
Description

tx_bytes_absolute

Type
uint64
Category
required
Description

rx_zero_window_size_events

Type
uint64
Category
required
Description

rx_tcp_resets

Type
uint64
Category
required
Description

connection_setup_time

Type
uint64
Category
required
Description

rtt

Type
uint64
Category
required
Description

rtt_valid_connections

Type
uint64
Category
required
Description

server_uptime

Type
uint64
Category
required
Description

num_state_changes

Type
uint64
Category
required
Description

health_check_failures

Type
uint64
Category
required
Description
Default
0

health_status

Type
uint64
Category
required
Description
Default
0

conn_dropped_before_syn_sent

Type
uint64
Category
required
Description

conn_dropped_before_est

Type
uint64
Category
required
Description

conn_dropped_after_est

Type
uint64
Category
required
Description

lb_fail_count

Type
uint64
Category
required
Description
Number of times load balancing failed

server_count

Type
uint64
Category
required
Description

lossy_req

Type
uint64
Category
optional
Description

tx_zero_window_size_events

Type
uint64
Category
optional
Description

capacity

Type
uint64
Category
optional
Description
This reflects capacity of the servers as measured from SE as C_i.

available_capacity

Type
uint64
Category
optional
Description
This reflects available capacity of the servers as measured from SE as C_i - L_i.

est_capacity

Type
uint64
Category
optional
Description
This reflects capacity of the servers as measured from SE as C_i.

VserverL4Stats

node_obj_id

Type
string
Category
required
Description

dup_ack_retransmits

Type
uint64
Category
required
Description

sack_retransmits

Type
uint64
Category
required
Description

timeout_retransmits

Type
uint64
Category
required
Description

out_of_orders

Type
uint64
Category
required
Description

syns

Type
uint64
Category
required
Description

new_established_conns

Type
uint64
Category
required
Description

complete_conns

Type
uint64
Category
required
Description

finished_conns

Type
uint64
Category
required
Description

open_conns

Type
uint64
Category
required
Description

connections_dropped

Type
uint64
Category
required
Description

lossy_connections

Type
uint64
Category
required
Description

errored_connections

Type
uint64
Category
required
Description

policy_drops

Type
uint64
Category
optional
Description
Rate of total connections dropped due to VS policy per second. It includes drops due to rate limits, security policy drops, connection limits etc.

rx_pkts

Type
uint64
Category
required
Description

rx_bytes

Type
uint64
Category
required
Description

tx_pkts

Type
uint64
Category
required
Description

tx_bytes

Type
uint64
Category
required
Description

rx_pkts_absolute

Type
uint64
Category
required
Description

rx_bytes_absolute

Type
uint64
Category
required
Description

tx_pkts_absolute

Type
uint64
Category
required
Description

tx_bytes_absolute

Type
uint64
Category
required
Description

end_to_end_rtt

Type
uint64
Category
required
Description

end_to_end_rtt_bucket1

Type
uint64
Category
required
Description

end_to_end_rtt_bucket2

Type
uint64
Category
required
Description

conn_duration

Type
uint64
Category
required
Description

zero_window_size_events

Type
uint64
Category
required
Description

server_flow_control

Type
uint64
Category
required
Description

rtt_valid_connections

Type
uint64
Category
required
Description

conn_dropped_before_est

Type
uint64
Category
required
Description

conn_dropped_after_est

Type
uint64
Category
required
Description

connection_dropped_user_limit

Type
uint64
Category
required
Description
Number of times connection limit is reached

packet_dropped_user_bandwidth_limit

Type
uint64
Category
required
Description
Number of times bandwidth limit is reached

dos_syn_flood

Type
uint64
Category
required
Description
DoS attack: Syn Flood

dos_bad_rst_flood

Type
uint64
Category
required
Description
DoS attack: Bad Rst Flood

dos_malformed_flood

Type
uint64
Category
required
Description
DoS attack: Malformed Packet Flood

dos_fake_session

Type
uint64
Category
required
Description
DoS attack: Fake Session

dos_zero_window_stress

Type
uint64
Category
required
Description
DoS attack: Zero Window Stress

dos_small_window_stress

Type
uint64
Category
required
Description
DoS attack: Small Window Stress

dos_http_timeout

Type
uint64
Category
required
Description
DoS attack: HTTP Timeout

dos_http_error

Type
uint64
Category
required
Description
DoS attack: HTTP Error

dos_http_abort

Type
uint64
Category
required
Description
DoS attack: HTTP Abort

dos_ssl_error

Type
uint64
Category
required
Description
DoS attack: HTTP SSL Error

dos_app_error

Type
uint64
Category
required
Description
DoS attack: HTTP App Error

dos_rx_bytes

Type
uint64
Category
optional
Description
DoS attack: RX bandwidth

dos_tx_bytes

Type
uint64
Category
optional
Description
DoS attack: TX bandwidth

dos_total_req

Type
uint64
Category
optional
Description
Total request used for l7 dos normalization

dos_req

Type
uint64
Category
optional
Description
Requests considered as DoS

dos_conn

Type
uint64
Category
optional
Description
Connecitons considered as DoS

dos_non_syn_flood

Type
uint64
Category
optional
Description
DoS attack: Non SYN packet flood

dos_slow_uri

Type
uint64
Category
optional
Description
DoS attack: Slow Uri

dos_conn_rl_drop

Type
uint64
Category
optional
Description
Connections dropped due to VS rate limit

dos_req_rl_drop

Type
uint64
Category
optional
Description
Requests dropped due to VS rate limit

dos_conn_ip_rl_drop

Type
uint64
Category
optional
Description
Connections dropped due to IP rate limit

dos_req_ip_rl_drop

Type
uint64
Category
optional
Description
Requests dropped due to source IP rate limit

dos_req_uri_rl_drop

Type
uint64
Category
optional
Description
Requests dropped due to URI rate limit

dos_req_ip_uri_rl_drop

Type
uint64
Category
optional
Description
Requeats dropped due to IP&URI rate limit

dos_req_ip_rl_drop_bad

Type
uint64
Category
optional
Description
Requests dropped due to source IP rate limit for bad requests

dos_req_uri_rl_drop_bad

Type
uint64
Category
optional
Description
Requests dropped due to URI rate limit for bad requests

dos_req_ip_uri_rl_drop_bad

Type
uint64
Category
optional
Description
Requeats dropped due to IP&URI rate limit for bad requests

dos_req_ip_scan_bad_rl_drop

Type
uint64
Category
optional
Description
Requests dropped due to bad IP rate limit

dos_req_ip_scan_unknown_rl_drop

Type
uint64
Category
optional
Description
Requests dropped due to unknown IP rate limit

dos_req_uri_scan_bad_rl_drop

Type
uint64
Category
optional
Description
Requests dropped due to bad URI rate limit

dos_req_uri_scan_unknown_rl_drop

Type
uint64
Category
optional
Description
Requests dropped due to unknown URI rate limit

lossy_req

Type
uint64
Category
optional
Description
Total request used for l7 dos normalization

rx_pkts_dropped

Type
uint64
Category
optional
Description
Number of packets dropped by virtual service. Include policy drops

rx_bytes_dropped

Type
uint64
Category
optional
Description
Number of bytes dropped by virtual service due to policy

pkts_policy_drops

Type
uint64
Category
optional
Description
Number of pkts dropped by virtual service due to policy like l4 security connection limits, rate limits

bytes_policy_drops

Type
uint64
Category
optional
Description
Number of bytes dropped by virtual service due to policy like l4 security connection limits, rate limits

num_active_se

Type
uint64
Category
optional
Description
Number of active SEs

ServerL7Stats

node_obj_id

Type
string
Category
required
Description

get_reqs

Type
uint64
Category
required
Description

post_reqs

Type
uint64
Category
required
Description

other_reqs

Type
uint64
Category
required
Description

finished_sessions

Type
uint64
Category
required
Description

reqs_finished_sessions

Type
uint64
Category
required
Description

concurrent_sessions

Type
uint64
Category
required
Description

resp_1xx

Type
uint64
Category
required
Description

resp_2xx

Type
uint64
Category
required
Description

resp_3xx

Type
uint64
Category
required
Description

resp_4xx

Type
uint64
Category
required
Description

resp_4xx_errors

Type
uint64
Category
required
Description

resp_5xx

Type
uint64
Category
required
Description

resp_5xx_errors

Type
uint64
Category
required
Description

get_resp_latency_bucket1

Type
uint64
Category
required
Description

get_resp_latency_bucket2

Type
uint64
Category
required
Description

post_resp_latency_bucket1

Type
uint64
Category
required
Description

post_resp_latency_bucket2

Type
uint64
Category
required
Description

other_resp_latency_bucket1

Type
uint64
Category
required
Description

other_resp_latency_bucket2

Type
uint64
Category
required
Description

get_resp_latency

Type
uint64
Category
required
Description

post_resp_latency

Type
uint64
Category
required
Description

other_resp_latency

Type
uint64
Category
required
Description

timeouts

Type
uint64
Category
required
Description

total_requests

Type
uint64
Category
required
Description

complete_responses

Type
uint64
Category
required
Description

total_responses

Type
uint64
Category
required
Description

application_response_time

Type
uint64
Category
required
Description

error_responses

Type
uint64
Category
required
Description

lb_fail_count

Type
uint64
Category
required
Description
Number of times load balancing failed

server_count

Type
uint64
Category
required
Description

VserverL7Stats

node_obj_id

Type
string
Category
required
Description

get_reqs

Type
uint64
Category
required
Description

post_reqs

Type
uint64
Category
required
Description

other_reqs

Type
uint64
Category
required
Description

finished_sessions

Type
uint64
Category
required
Description

reqs_finished_sessions

Type
uint64
Category
required
Description

concurrent_sessions

Type
uint64
Category
required
Description

resp_1xx

Type
uint64
Category
required
Description

resp_2xx

Type
uint64
Category
required
Description

resp_3xx

Type
uint64
Category
required
Description

resp_4xx

Type
uint64
Category
required
Description

resp_4xx_avi_errors

Type
uint64
Category
required
Description

resp_5xx

Type
uint64
Category
required
Description

resp_5xx_avi_errors

Type
uint64
Category
required
Description

get_client_txn_latency_bucket1

Type
uint64
Category
required
Description

get_client_txn_latency_bucket2

Type
uint64
Category
required
Description

post_client_txn_latency_bucket1

Type
uint64
Category
required
Description

post_client_txn_latency_bucket2

Type
uint64
Category
required
Description

other_client_txn_latency_bucket1

Type
uint64
Category
required
Description

other_client_txn_latency_bucket2

Type
uint64
Category
required
Description

total_requests

Type
uint64
Category
required
Description

complete_responses

Type
uint64
Category
required
Description

total_responses

Type
uint64
Category
required
Description

error_responses

Type
uint64
Category
required
Description

get_client_txn_latency

Type
uint64
Category
required
Description

post_client_txn_latency

Type
uint64
Category
required
Description

other_client_txn_latency

Type
uint64
Category
required
Description

client_data_transfer_time

Type
uint64
Category
required
Description

cache_hits

Type
uint64
Category
required
Description

cache_bytes

Type
uint64
Category
required
Description

cacheable_hits

Type
uint64
Category
required
Description

cacheable_bytes

Type
uint64
Category
required
Description

pre_compression_bytes

Type
uint64
Category
required
Description

post_compression_bytes

Type
uint64
Category
required
Description

saved_compression_bytes

Type
uint64
Category
required
Description

compressed_reqs

Type
uint64
Category
required
Description

compressed_at_origin_reqs

Type
uint64
Category
required
Description

compressible_reqs

Type
uint64
Category
required
Description

compression_skipped_reqs

Type
uint64
Category
required
Description

rum_active_sampled_reqs

Type
uint64
Category
required
Description

rum_passive_sampled_reqs

Type
uint64
Category
required
Description

rum_not_sampled_reqs

Type
uint64
Category
required
Description

rum_failed_sampled_reqs

Type
uint64
Category
required
Description

ssl_handshakes_new

Type
uint64
Category
required
Description

ssl_handshakes_reused

Type
uint64
Category
required
Description

ssl_handshake_protocol_errors

Type
uint64
Category
required
Description

ssl_handshake_network_errors

Type
uint64
Category
required
Description

ssl_handshakes_timedout

Type
uint64
Category
required
Description

ssl_ver_ssl30

Type
uint64
Category
required
Description

ssl_ver_tls10

Type
uint64
Category
required
Description

ssl_ver_tls11

Type
uint64
Category
required
Description

ssl_ver_tls12

Type
uint64
Category
required
Description

ssl_auth_rsa

Type
uint64
Category
required
Description

ssl_auth_ecdsa

Type
uint64
Category
required
Description

ssl_auth_dsa

Type
uint64
Category
required
Description

ssl_kx_rsa

Type
uint64
Category
required
Description

ssl_kx_dh

Type
uint64
Category
required
Description

ssl_kx_ecdh

Type
uint64
Category
required
Description

ssl_enc_rc4

Type
uint64
Category
required
Description

ssl_enc_3des

Type
uint64
Category
required
Description

ssl_enc_aes128

Type
uint64
Category
required
Description

ssl_enc_aes256

Type
uint64
Category
required
Description

ssl_mac_md5

Type
uint64
Category
required
Description

ssl_mac_sha1

Type
uint64
Category
required
Description

ssl_mac_sha256

Type
uint64
Category
required
Description

ssl_mac_sha384

Type
uint64
Category
required
Description

ssl_mac_aead

Type
uint64
Category
required
Description

client_close_error

Type
uint64
Category
optional
Description

application_error

Type
uint64
Category
optional
Description

timeout_error

Type
uint64
Category
optional
Description

no_available_pool_error

Type
uint64
Category
optional
Description

conn_accept_error

Type
uint64
Category
optional
Description

server_timeout_error

Type
uint64
Category
optional
Description

persist_change

Type
uint64
Category
optional
Description

lb_failure_error

Type
uint64
Category
optional
Description

server_connect_error

Type
uint64
Category
optional
Description

internal_error

Type
uint64
Category
optional
Description

ssl_handshakes_pfs

Type
uint64
Category
optional
Description

ssl_rsa_pfs

Type
uint64
Category
optional
Description

ssl_ecdsa_pfs

Type
uint64
Category
optional
Description

ssl_open_sessions

Type
uint64
Category
optional
Description

SeAgentVnicDBRuntime

API


    GET /api/serviceengine/<key>/vnicdb/<key>

CLI


    show serviceengine <key> vnicdb

Data

SeAgentVnicDBRuntime

se_uuid

Type
string
Category
optional
Description

num_vnics

Type
int32
Category
optional
Description

initial_vnic_discovery_done

Type
bool
Category
optional
Description

initial_sync_with_dataplane_done

Type
bool
Category
optional
Description

dp_replay_pending

Type
bool
Category
optional
Description

vnic

Type
SeAgentVnicRuntime
Category
repeated
Description

vrf

Type
SeAgentVrfRuntime
Category
repeated
Description

SeAgentVnicRuntime

if_name

Type
string
Category
required
Description

linux_name

Type
string
Category
required
Description

mac_address

Type
string
Category
required
Description

pci_id

Type
string
Category
required
Description

mtu

Type
int32
Category
optional
Description

dhcp_enabled

Type
bool
Category
required
Description

enabled

Type
bool
Category
required
Description

connected

Type
bool
Category
required
Description

network_uuid

Type
string
Category
optional
Description

nw

Type
SeAgentVnicNwRuntime
Category
repeated
Description

is_mgmt

Type
bool
Category
optional
Description

is_complete

Type
bool
Category
optional
Description

avi_internal_network

Type
bool
Category
optional
Description

enabled_flag

Type
bool
Category
optional
Description

running_flag

Type
bool
Category
optional
Description

pushed_to_dataplane

Type
bool
Category
optional
Description

consumed_by_dataplane

Type
bool
Category
optional
Description

pushed_to_controller

Type
bool
Category
optional
Description

can_se_dp_takeover

Type
bool
Category
optional
Description

vrf_ref

Type
Reference to VrfContext
Category
optional
Description

vrf_id

Type
uint32
Category
optional
Description

SeAgentVnicNwRuntime

ip

Type
IpAddrPrefix
Category
required
Description

mode

Type
enum
Category
required
Description
Choices
DHCP, VIP, STATIC, DOCKER_HOST

ref_cnt

Type
int32
Category
optional
Description

SeAgentVrfRuntime

vrf_context

Type
VrfContext
Category
required
Description

vrf_id

Type
int32
Category
required
Description

ns_created

Type
bool
Category
required
Description

ns

Type
string
Category
required
Description

vnic

Type
SeAgentVnicRuntime
Category
repeated
Description

route

Type
SeAgentRoute
Category
repeated
Description

default_gw

Type
string
Category
optional
Description

previous_default_gw

Type
string
Category
optional
Description

VrfContext

uuid

Type
string
Category
required
Description

name

Type
string
Category
required
Description

static_routes

Type
StaticRoute
Category
repeated
Description

bgp_profile

Type
BgpProfile
Category
optional
Description
Bgp Local and Peer Info

system_default

Type
bool
Category
optional,readonly
Description
Default
False

gateway_mon

Type
GatewayMonitor
Category
repeated
Description
Enable ping based heartbeat check to gateway on the Service Engines for this Virtual Routing Context

description

Type
string
Category
optional
Description

tenant_ref

Type
Reference to Tenant
Category
optional
Description

cloud_ref

Type
Reference to Cloud
Category
optional
Description
Default
/api/cloud?name=Default-Cloud

StaticRoute

prefix

Type
IpAddrPrefix
Category
required
Description

next_hop

Type
IpAddr
Category
required
Description

if_name

Type
string
Category
optional
Description

route_id

Type
string
Category
required
Description

BgpProfile

local_as

Type
uint32
Category
required
Description
Local Autonomous System ID

ibgp

Type
bool
Category
required
Description
BGP peer type
Default
True

peers

Type
BgpPeer
Category
repeated
Description
BGP Peers

BgpPeer

remote_as

Type
uint32
Category
optional
Description
Peer Autonomous System ID
Default
1

peer_ip

Type
IpAddr
Category
required
Description
IP Address of the BGP Peer

subnet

Type
IpAddrPrefix
Category
required
Description
Subnet providing reachability for Peer

md5_secret

Type
string
Category
optional
Description
Peer Autonomous System Md5 Digest Secret Key

bfd

Type
bool
Category
optional
Description
Enable Bi-Directional Forward Detection. Only async mode supported.
Default
True

network_uuid

Type
string
Category
optional
Description
Network providing reachability for Peer
Default

GatewayMonitor

gateway_ip

Type
IpAddr
Category
required
Description
IP address of next hop gateway to be monitored

SeAgentRoute

dst_ip

Type
IpAddr
Category
required
Description

mask

Type
int32
Category
required
Description

gateway

Type
IpAddr
Category
required
Description

if_name

Type
string
Category
optional
Description

delete_route

Type
bool
Category
optional
Description

origin

Type
enum
Category
optional
Description
Choices
RT_NETLINK, RT_CONTROLLER

default_gw

Type
bool
Category
optional
Description

vrf_ref

Type
Reference to VrfContext
Category
optional
Description

vrf_id

Type
uint32
Category
optional
Description

metric

Type
uint32
Category
optional
Description

SeReservedVs

API


    GET /api/serviceengine/<key>/reservedvs/<key>

CLI


    show serviceengine <key> reservedvs

Data

SeReservedVs

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

internal

Type
VirtualServiceInternal
Category
optional
Description

detail

Type
VirtualServiceRuntimeDetail
Category
optional
Description

tcpstat

Type
TcpStatRuntime
Category
repeated
Description

udpstat

Type
UdpStatRuntime
Category
repeated
Description

VirtualServiceInternal

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

oper_status

Type
OperationalStatus
Category
optional
Description

virtualservice_config

Type
VirtualService
Category
optional
Description

virtualservice_runtime

Type
VirtualServiceRuntime
Category
optional
Description

vserver_rtm_flags_l4

Type
int32
Category
optional
Description

vs_stat_index_l4

Type
int32
Category
optional
Description

vs_master_stat_index_l4

Type
int32
Category
optional
Description

vs_max_outstanding_conns_l4

Type
int32
Category
optional
Description

vs_curr_outstanding_conns_l4

Type
int32
Category
optional
Description

vs_conn_limit_drop_l4

Type
int32
Category
optional
Description

vs_max_bps_l4

Type
Unknown
Category
optional
Description

vs_curr_bps_l4

Type
Unknown
Category
optional
Description

vs_bps_limit_drop_l4

Type
Unknown
Category
optional
Description

vs_all_se_bps_l4

Type
Unknown
Category
optional
Description

sestatuslist

Type
SestatusInternal
Category
repeated
Description

refcnts

Type
VirtualServiceRefCnt
Category
optional
Description

listening_sockets

Type
ListeningSocket
Category
repeated
Description

vs_master_autogw

Type
int32
Category
optional
Description

vs_table_entry_type

Type
string
Category
optional
Description

vs_conn_pool_type

Type
string
Category
optional
Description

vs_is_standby

Type
int32
Category
optional
Description

ssl

Type
SSLStatsInternal
Category
optional
Description

vip_masklen

Type
int32
Category
optional
Description

l7_has_redirect

Type
bool
Category
optional
Description

vcpus

Type
uint32
Category
optional
Description

num_pools

Type
uint32
Category
optional
Description

num_pools_up

Type
int32
Category
optional
Description

fq_weight

Type
uint32
Category
optional
Description

fq_stored

Type
uint32
Category
optional
Description

fq_overflows

Type
uint64
Category
optional
Description

fq_recovered

Type
uint64
Category
optional
Description

fq_credit

Type
uint32
Category
optional
Description

fq_delay_fairness

Type
bool
Category
optional
Description

fq_deadline

Type
uint32
Category
optional
Description

fq_weight_change_drops

Type
uint64
Category
optional
Description

num_active_ses

Type
uint32
Category
optional
Description

child_vs

Type
string
Category
repeated
Description

selbentry_ro

Type
SeLbEntry
Category
repeated
Description

selbentry

Type
SeLbEntry
Category
repeated
Description

corelbentry_ro

Type
CoreLbEntry
Category
repeated
Description

corelbentry

Type
CoreLbEntry
Category
repeated
Description

max_rps_unknown_cip

Type
uint32
Category
optional
Description

max_bad_rps_cip

Type
uint32
Category
optional
Description

max_bad_rps_uri

Type
uint32
Category
optional
Description

max_bad_rps_cip_uri

Type
uint32
Category
optional
Description

vrf_id

Type
uint32
Category
optional
Description

selbchentry

Type
SeLbChEntry
Category
repeated
Description

max_num_pools_up_se_uuid

Type
string
Category
optional
Description

max_state_se_uuid

Type
string
Category
optional
Description

VirtualServiceRuntime

uuid

Type
string
Category
required
Description

fsm_state_name

Type
string
Category
optional
Description
Default
VsFsmMap::Inactive

fsm_state_id

Type
string
Category
optional
Description
Default
0

last_req_type

Type
enum
Category
optional
Description
Default
OTHER
Choices
SE_DISCONNECT, SE_RECONNECT, MIGRATE_SCALEIN, READ, CREATE, ROTATE_KEYS, SCALE_IN, UPDATE, REFRESH, SE_REMOVED, UPDATE_LOGMGR_MAP, OTHER, INITIAL_PLACEMENT, RESTART, WARM_RESTART, MIGRATE_SCALEOUT, SCALE_OUT, COLD_RESTART, DELETE

last_req_rc

Type
Unknown
Category
optional
Description
Default
0

datapath_debug

Type
DebugVirtualService
Category
optional
Description

scaleout_in_progress

Type
bool
Category
optional
Description
Default
False

scalein_in_progress

Type
bool
Category
optional
Description
Default
False

servers_configured

Type
bool
Category
optional
Description
Default
True

rules_configured

Type
bool
Category
optional
Description
Default
True

one_plus_one_ha

Type
bool
Category
optional
Description
Default
False

apic_extension

Type
VsApicExtension
Category
optional
Description

last_changed_time

Type
TimeStamp
Category
optional
Description

controller_ip

Type
string
Category
optional
Description

prev_controller_ip

Type
string
Category
optional
Description

migrate_in_progress

Type
bool
Category
optional
Description
Default
False

marked_for_delete

Type
bool
Category
optional
Description
Default
False

migrate_request

Type
VsMigrateParams
Category
optional
Description

user_scaleout_pending

Type
bool
Category
optional
Description
Default
False

scale_status

Type
ScaleStatus
Category
optional
Description

progress_percent

Type
int32
Category
optional
Description
Default
0

scale_history

Type
ScaleStatus
Category
repeated
Description

metrics_mgr_port

Type
enum
Category
optional
Description
Choices
METRICS_MGR_PORT_1, METRICS_MGR_PORT_0, METRICS_MGR_PORT_3, METRICS_MGR_PORT_2

prev_metrics_mgr_port

Type
enum
Category
optional
Description
Choices
METRICS_MGR_PORT_1, METRICS_MGR_PORT_0, METRICS_MGR_PORT_3, METRICS_MGR_PORT_2

manual_placement

Type
bool
Category
optional
Description
Default
False

se_create_in_progress

Type
bool
Category
optional
Description
Default
False

initial_placement_in_progress

Type
bool
Category
optional
Description
Default
False

scalein_request

Type
VsScaleinParams
Category
optional
Description

upgrade_in_progress

Type
bool
Category
optional
Description
Default
False

first_time_placement

Type
bool
Category
optional
Description
Default
False

migrate_scaleout_pending

Type
bool
Category
optional
Description
Default
False

migrate_scalein_pending

Type
bool
Category
optional
Description
Default
False

initial_placement_request

Type
VsInitialPlacementParams
Category
optional
Description

initial_placement_se_params_index

Type
int32
Category
optional
Description

assigned_static_se_ref

Type
Reference to ServiceEngine
Category
repeated
Description

requested_static_se_ref

Type
Reference to ServiceEngine
Category
repeated
Description

vh_child_vs_ref

Type
Reference to VirtualService
Category
repeated
Description

se_list

Type
SeList
Category
repeated
Description

requested_resource

Type
VirtualServiceResource
Category
optional
Description

redis_ip

Type
string
Category
optional
Description

redis_port

Type
int32
Category
optional
Description

redis_db

Type
int32
Category
optional
Description

tls_ticket_key

Type
TLSTicket
Category
repeated
Description

lif

Type
string
Category
repeated
Description

type

Type
enum
Category
optional
Description
Default
VS_TYPE_NORMAL
Choices
VS_TYPE_VH_PARENT, VS_TYPE_VH_CHILD, VS_TYPE_NORMAL

supp_runtime_status

Type
OperationalStatus
Category
optional
Description

first_se_assigned_time

Type
TimeStamp
Category
optional
Description

east_west

Type
bool
Category
optional
Description
Default
False

num_additional_se

Type
int32
Category
optional
Description
Default
0

VsApicExtension

txn_uuid

Type
string
Category
required
Description

se_uuid

Type
string
Category
optional
Description

vnic

Type
VsSeVnic
Category
repeated
Description

VsMigrateParams

from_se_ref

Type
Reference to ServiceEngine
Category
optional
Description

to_se_ref

Type
Reference to ServiceEngine
Category
optional
Description

to_new_se

Type
bool
Category
optional
Description
Default
False

to_host_ref

Type
Reference to VIMgrHostRuntime
Category
optional
Description

new_vcpus

Type
uint32
Category
optional
Description

ScaleStatus

state

Type
enum
Category
optional
Description
Choices
SCALEOUT_SUCCESS, MIGRATE_SUCCESS, MIGRATE_SCALEOUT_ROLLBACK, SCALEIN_ERROR, SCALEOUT_ERROR, SCALEIN_SUCCESS, SCALEOUT_AWAITING_SE_ASSIGNMENT, MIGRATE_SCALEOUT_SUCCESS, SCALEOUT_PROCESSING, MIGRATE_SCALEOUT_RESOURCES, MIGRATE_SCALEOUT_ERROR, SCALEOUT_CREATING_SE, MIGRATE_ERROR, MIGRATE_SCALEIN_AWAITING_SE_PROGRAMMING, SCALEIN_WAIT_FOR_SE_READY, SCALEIN_AWAITING_SE_PROGRAMMING, SCALEOUT_ERROR_DISABLED, MIGRATE_SCALEOUT_AWAITING_SE_PROGRAMMING, MIGRATE_SCALEIN_SUCCESS, MIGRATE_SCALEIN_WAIT_FOR_SE_READY, MIGRATE_SCALEOUT_AWAITING_SE_ASSIGNMENT, MIGRATE_SCALEOUT_CREATING_SE, SCALEOUT_ROLLBACK, SCALEOUT_RESOURCES, SCALEOUT_AWAITING_SE_PROGRAMMING, MIGRATE_SCALEIN_AWAITING_SE_RELEASE, MIGRATE_SCALEOUT_WAIT_FOR_SE_READY, SCALEIN_AWAITING_SE_PRE_RELEASE, SCALEOUT_WAIT_FOR_SE_READY, SCALEIN_AWAITING_SE_RELEASE, MIGRATE_SCALEIN_AWAITING_SE_PRE_RELEASE, MIGRATE_SCALEIN_ERROR

reason

Type
string
Category
repeated
Description

reason_code

Type
uint64
Category
optional
Description

start_time

Type
TimeStamp
Category
optional
Description

end_time

Type
TimeStamp
Category
optional
Description

scale_se

Type
string
Category
optional
Description

num_se_requested

Type
uint32
Category
optional
Description

num_se_assigned

Type
uint32
Category
optional
Description

reason_code_string

Type
string
Category
optional
Description

vs_placement_resolution_info

Type
VsPlacementResolutionInfo
Category
optional
Description

VsPlacementResolutionInfo

ip

Type
IpAddr
Category
optional
Description

pool_uuid

Type
string
Category
optional
Description

networks

Type
DiscoveredNetwork
Category
repeated
Description

VsScaleinParams

from_se_ref

Type
Reference to ServiceEngine
Category
optional
Description

scalein_primary

Type
bool
Category
optional
Description

admin_down

Type
bool
Category
optional
Description
Default
False

VsInitialPlacementParams

se_placement_params

Type
VsSeInitialPlacementParams
Category
repeated
Description

VsSeInitialPlacementParams

to_new_se

Type
bool
Category
optional
Description
Default
False

to_se_ref

Type
Reference to ServiceEngine
Category
optional
Description

to_host_ref

Type
Reference to VIMgrHostRuntime
Category
optional
Description

VirtualServiceResource

num_vcpus

Type
uint32
Category
optional
Description

memory

Type
uint32
Category
optional
Description

is_exclusive

Type
bool
Category
optional
Description

scalein_primary

Type
bool
Category
optional
Description

num_se

Type
int32
Category
optional
Description

scalein_se_uuid

Type
string
Category
optional
Description

num_standby_se

Type
int32
Category
optional
Description

SestatusInternal

outside_mac

Type
string
Category
optional
Description

se_uuid

Type
string
Category
optional
Description

is_primary

Type
int32
Category
optional
Description

admin_down

Type
int32
Category
optional
Description

is_local

Type
int32
Category
optional
Description

is_up

Type
int32
Category
optional
Description

is_flow_dispatchable

Type
int32
Category
optional
Description

se_hm_rsp_loss

Type
int32
Category
optional
Description

se_hm_rqs_loss

Type
int32
Category
optional
Description

se_hm_rsps_sent

Type
int32
Category
optional
Description

se_hm_rqs_sent

Type
int32
Category
optional
Description

se_hm_rsps_rcvd

Type
int32
Category
optional
Description

se_hm_rqs_rcvd

Type
int32
Category
optional
Description

se_hm_err_rsps

Type
int32
Category
optional
Description

vs_bps

Type
Unknown
Category
optional
Description

se_load

Type
Unknown
Category
optional
Description

vs_stat_index

Type
int32
Category
optional
Description

internal_mac

Type
string
Category
optional
Description

deprecated1

Type
string
Category
optional
Description

outside_vnic

Type
int32
Category
optional
Description

internal_vnic

Type
int32
Category
optional
Description

deprecated2

Type
int32
Category
optional
Description

notified_controller

Type
int32
Category
optional
Description

num_pools_up

Type
int32
Category
optional
Description

pool_obj_count

Type
int32
Category
optional
Description

state

Type
bool
Category
optional
Description

sent_scaleout_ready

Type
int32
Category
optional
Description

se_hm_fe_apic_delay

Type
int32
Category
optional
Description

num_hb_recvd

Type
uint32
Category
optional
Description

is_in_vsc

Type
uint32
Category
optional
Description

VirtualServiceRefCnt

uuid

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

refcnt

Type
int32
Category
optional
Description

default_pool_refcount

Type
int32
Category
optional
Description

service_refcnt

Type
ServiceRefCnt
Category
repeated
Description

fe_np_refcnt

Type
NetworkProfileRefCnt
Category
optional
Description

be_np_refcnt

Type
NetworkProfileRefCnt
Category
optional
Description

app_profile_refcnt

Type
ApplicationProfileRefCnt
Category
optional
Description

http_policy_set_refcnt

Type
HTTPPolicySetRefCnt
Category
repeated
Description

comp_profile_refcnt

Type
int32
Category
optional
Description

ServiceRefCnt

port

Type
int32
Category
optional
Description

enable_ssl

Type
int32
Category
optional
Description

rtm_refcnt

Type
int32
Category
optional
Description

protocol_type

Type
string
Category
optional
Description

NetworkProfileRefCnt

uuid

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

refcnt

Type
int32
Category
optional
Description

ApplicationProfileRefCnt

uuid

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

cfg_refcnt

Type
int32
Category
optional
Description

rtm_refcnt

Type
int32
Category
optional
Description

HTTPPolicySetRefCnt

uuid

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

pool_refcnt

Type
HTTPRequestPolicyPoolRefCnt
Category
repeated
Description

policy_refcnt

Type
int32
Category
required
Description

HTTPRequestPolicyPoolRefCnt

pool_name

Type
string
Category
optional
Description

pool_uuid

Type
string
Category
optional
Description

refcnt

Type
int32
Category
optional
Description

ListeningSocket

port

Type
uint32
Category
optional
Description

refcount

Type
uint32
Category
optional
Description

SSLStatsInternal

ssl_sessions_created

Type
uint64
Category
required
Description

ssl_sessions_deleted

Type
uint64
Category
required
Description

ssl_sessions_hits

Type
uint64
Category
required
Description

ssl_sessions_misses

Type
uint64
Category
required
Description

ssl_sessions_corrupt

Type
uint64
Category
optional
Description

tls_tickets_issued

Type
uint64
Category
required
Description

tls_tickets_received

Type
uint64
Category
required
Description

tls_tickets_missing

Type
uint64
Category
optional
Description

tls_tickets_renewed

Type
uint64
Category
optional
Description

SeLbEntry

se_tokens

Type
uint32
Category
optional
Description

se_uuid

Type
string
Category
optional
Description

CoreLbEntry

core_tokens

Type
uint32
Category
optional
Description

core

Type
uint32
Category
optional
Description

SeLbChEntry

key

Type
int32
Category
optional
Description

hits

Type
uint32
Category
optional
Description

se_uuid

Type
string
Category
optional
Description

VirtualServiceRuntimeDetail

oper_status

Type
OperationalStatus
Category
optional
Description

one_plus_one_ha

Type
bool
Category
optional
Description
Default
False

service_engine

Type
VsSeAssigned
Category
repeated
Description

config_status

Type
ConfigurationStatus
Category
optional
Description

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

l7_virtual_service_stats_runtime

Type
L7VirtualServiceStatsRuntime
Category
repeated
Description

fel4stats

Type
VserverL4Stats
Category
repeated
Description

fel7stats

Type
VserverL7Stats
Category
repeated
Description

vs_type

Type
string
Category
optional
Description

migrate_in_progress

Type
bool
Category
optional
Description
Default
False

scalein_in_progress

Type
bool
Category
optional
Description
Default
False

scaleout_in_progress

Type
bool
Category
optional
Description
Default
False

user_scaleout_pending

Type
bool
Category
optional
Description
Default
False

scale_status

Type
ScaleStatus
Category
optional
Description

progress_percent

Type
int32
Category
optional
Description
Default
0

last_scale_status

Type
ScaleStatus
Category
optional
Description

vs_placement_resolution_info

Type
VsPlacementResolutionInfo
Category
optional
Description

num_se_requested

Type
uint32
Category
optional
Description

num_se_assigned

Type
uint32
Category
optional
Description

manual_placement

Type
bool
Category
optional
Description
Default
False

se_create_in_progress

Type
bool
Category
optional
Description
Default
False

num_static_se_pending

Type
int32
Category
optional
Description
Default
0

initial_placement_in_progress

Type
bool
Category
optional
Description
Default
False

upgrade_in_progress

Type
bool
Category
optional
Description
Default
False

migrate_scaleout_pending

Type
bool
Category
optional
Description
Default
False

migrate_scalein_pending

Type
bool
Category
optional
Description
Default
False

assigned_static_se_ref

Type
Reference to ServiceEngine
Category
repeated
Description

requested_static_se_ref

Type
Reference to ServiceEngine
Category
repeated
Description

vh_child_vs_ref

Type
Reference to VirtualService
Category
repeated
Description

type

Type
enum
Category
optional
Description
Default
VS_TYPE_NORMAL
Choices
VS_TYPE_VH_PARENT, VS_TYPE_VH_CHILD, VS_TYPE_NORMAL

virtual_service_auth_stats

Type
VirtualServiceAuthStats
Category
repeated
Description

first_se_assigned_time

Type
TimeStamp
Category
optional
Description

east_west

Type
bool
Category
optional
Description
Default
False

microservice_uuid

Type
string
Category
optional
Description
Microservice representing the virtual service

VsSeAssigned

ref

Type
Reference to ServiceEngine
Category
optional
Description

name

Type
string
Category
optional
Description

primary

Type
bool
Category
optional
Description

standby

Type
bool
Category
optional
Description

connected

Type
bool
Category
required
Description

scalein_in_progress

Type
bool
Category
optional
Description
Default
False

oper_status

Type
OperationalStatus
Category
optional
Description

snat_ip

Type
IpAddr
Category
optional
Description

ConfigurationStatus

state

Type
enum
Category
required
Description
Default
CONFIG_UP
Choices
CONFIG_SE_PROCESSING, CONFIG_PROCESSING, CONFIG_ERROR_DISABLED, CONFIG_UP, CONFIG_RESOURCES, CONFIG_DISABLED, CONFIG_PARTITIONED, CONFIG_INACTIVE, CONFIG_CREATING, CONFIG_UPGRADING, CONFIG_UNUSED, CONFIG_AWAIT_MANUAL_PLACEMENT, CONFIG_INITIALIZING, CONFIG_DOWN, CONFIG_UNKNOWN

reason

Type
string
Category
repeated
Description

reason_code

Type
uint64
Category
optional
Description

last_changed_time

Type
TimeStamp
Category
optional
Description

pvt_data

Type
Unknown
Category
optional
Description

pvt_data_2

Type
Unknown
Category
optional
Description

reason_code_string

Type
string
Category
optional
Description

L7VirtualServiceStatsRuntime

connections_handled

Type
uint64
Category
required
Description

requests_handled

Type
uint64
Category
required
Description

response_2xx

Type
uint64
Category
required
Description

response_3xx

Type
uint64
Category
required
Description

response_4xx

Type
uint64
Category
required
Description

response_5xx

Type
uint64
Category
required
Description

cache_hits

Type
uint64
Category
required
Description

cache_bytes

Type
uint64
Category
required
Description

rl_unknown_uri_drop

Type
uint64
Category
optional
Description

rl_bad_uri_drop

Type
uint64
Category
optional
Description

rl_cip_drop

Type
uint64
Category
optional
Description

rl_uri_drop

Type
uint64
Category
optional
Description

rl_cip_uri_drop

Type
uint64
Category
optional
Description

rl_unknown_cip_drop

Type
uint64
Category
optional
Description

rl_bad_cip_drop

Type
uint64
Category
optional
Description

rl_cip_drop_bad

Type
uint64
Category
optional
Description

rl_uri_drop_bad

Type
uint64
Category
optional
Description

rl_cip_uri_drop_bad

Type
uint64
Category
optional
Description

VirtualServiceAuthStats

auth_counter

Type
uint64
Category
optional
Description

auth_ignored_config

Type
uint64
Category
optional
Description

auth_prompt_unauthorized

Type
uint64
Category
optional
Description

auth_credentials_unauthorized

Type
uint64
Category
optional
Description

auth_timed_out

Type
uint64
Category
optional
Description

auth_internal_error

Type
uint64
Category
optional
Description

server_stats

Type
VirtualServiceAuthServerStats
Category
repeated
Description

VirtualServiceAuthServerStats

alias

Type
string
Category
optional
Description

auth_cached_allow

Type
uint64
Category
optional
Description

auth_cached_deny

Type
uint64
Category
optional
Description

auth_user_search_failed

Type
uint64
Category
optional
Description

auth_user_search_success

Type
uint64
Category
optional
Description

auth_group_search_failed

Type
uint64
Category
optional
Description

auth_group_search_success

Type
uint64
Category
optional
Description

auth_login_failed

Type
uint64
Category
optional
Description

auth_login_success

Type
uint64
Category
optional
Description

auth_server_skipped

Type
uint64
Category
optional
Description

auth_internal_error

Type
uint64
Category
optional
Description

auth_waiting

Type
uint64
Category
optional
Description

TcpStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

connection_stats

Type
ConnectionStats
Category
optional
Description

rx_stats

Type
RxStats
Category
optional
Description

tx_stats

Type
TxStats
Category
optional
Description

retransmit_stats

Type
RetransmitStats
Category
optional
Description

syncache_stats

Type
SyncacheStats
Category
optional
Description

connections_dropped

Type
ConnectionDropStats
Category
optional
Description

packets_dropped

Type
PacketDropStats
Category
optional
Description

timeout

Type
TimeoutStats
Category
optional
Description

sack_stats

Type
SackStats
Category
optional
Description

ecn_stats

Type
EcnStats
Category
optional
Description

misc_stats

Type
MiscStats
Category
optional
Description

ConnectionStats

connections_initiated

Type
uint64
Category
required
Description

connections_accepted

Type
uint64
Category
required
Description

connections_established

Type
uint64
Category
required
Description

connections_closed

Type
uint64
Category
required
Description

RxStats

total_packets_received

Type
uint64
Category
required
Description

packets_received_in_sequence

Type
uint64
Category
required
Description

bytes_received_in_sequence

Type
uint64
Category
required
Description

ack_packets_received

Type
uint64
Category
required
Description

ack_byte_received

Type
uint64
Category
required
Description

ack_too_much_packets_received

Type
uint64
Category
required
Description

window_update_packet_received

Type
uint64
Category
required
Description

window_probe_packets_received

Type
uint64
Category
required
Description

after_window_data_packets_received

Type
uint64
Category
required
Description

after_window_data_bytes_received

Type
uint64
Category
required
Description

ignored_rst_packet_in_window

Type
uint64
Category
required
Description

TxStats

total_packets_sent

Type
uint64
Category
required
Description

data_packets_sent

Type
uint64
Category
required
Description

data_bytes_sent

Type
uint64
Category
required
Description

ack_only_packet

Type
uint64
Category
required
Description

urg_only_packets_sent

Type
uint64
Category
required
Description

delayed_acks_sent

Type
uint64
Category
required
Description

keepalive_probes_sent

Type
uint64
Category
required
Description

window_probes_sent

Type
uint64
Category
required
Description

window_update_only_packets_sent

Type
uint64
Category
required
Description

data_packets_retransmitted

Type
uint64
Category
required
Description

data_bytes_retransmitted

Type
uint64
Category
required
Description

unnecessary_packet_retransmit

Type
uint64
Category
required
Description

RetransmitStats

dup_ack_packets_received

Type
uint64
Category
required
Description

complete_duplicate_packets_received

Type
uint64
Category
required
Description

complete_duplicate_bytes_received

Type
uint64
Category
required
Description

partial_duplicate_packets_received

Type
uint64
Category
required
Description

partial_duplicate_bytes_received

Type
uint64
Category
required
Description

out_of_order_packets_received

Type
uint64
Category
required
Description

out_of_order_bytes_received

Type
uint64
Category
required
Description

SyncacheStats

entry_added_to_syncache

Type
uint64
Category
required
Description

entry_completed

Type
uint64
Category
required
Description

entry_aborted

Type
uint64
Category
required
Description

entry_staled

Type
uint64
Category
required
Description

entry_retransmitted

Type
uint64
Category
required
Description

entry_removed_by_badack

Type
uint64
Category
required
Description

entry_removed_by_reset

Type
uint64
Category
required
Description

entry_dropped_reply_failed

Type
uint64
Category
required
Description

zone_failures

Type
uint64
Category
required
Description

duplicate_syn_packet

Type
uint64
Category
required
Description

icmp_unreachable_received

Type
uint64
Category
required
Description

syn_cookie_sent

Type
uint64
Category
required
Description

syn_cookie_received

Type
uint64
Category
required
Description

bucket_overflow

Type
uint64
Category
required
Description

cache_overflow

Type
uint64
Category
required
Description

ConnectionDropStats

connections_dropped_before_established

Type
uint64
Category
required
Description

connections_dropped_after_established

Type
uint64
Category
required
Description

listen_queue_overflow_drops

Type
uint64
Category
required
Description

retransmit_timeout_drops

Type
uint64
Category
required
Description

persist_timeout_drops

Type
uint64
Category
required
Description

keepalive_timeout_drops

Type
uint64
Category
required
Description

fin_wait_2_timeout_drops

Type
uint64
Category
required
Description

num_resets_received

Type
uint64
Category
required
Description

num_resets_sent

Type
uint64
Category
required
Description

PacketDropStats

bad_syn

Type
uint64
Category
required
Description

bad_offset

Type
uint64
Category
required
Description

bad_checksum

Type
uint64
Category
required
Description

paws

Type
uint64
Category
required
Description

too_short

Type
uint64
Category
required
Description

lack_of_memory

Type
uint64
Category
required
Description

received_after_close

Type
uint64
Category
required
Description

bad_packets

Type
uint64
Category
required
Description

TimeoutStats

retransmit_timeout

Type
uint64
Category
required
Description

persist_timeout

Type
uint64
Category
required
Description

keepalive_timeout

Type
uint64
Category
required
Description

SackStats

sack_recovery_episodes

Type
uint64
Category
required
Description

sack_retransmit_segments

Type
uint64
Category
required
Description

sack_retransmit_bytes

Type
uint64
Category
required
Description

sack_blocks_received

Type
uint64
Category
required
Description

sack_blocks_sent

Type
uint64
Category
required
Description

scoreboard_overflows

Type
uint64
Category
required
Description

EcnStats

ecn_congestion_experienced

Type
uint64
Category
required
Description

ecn_capable_transport_0

Type
uint64
Category
required
Description

ecn_capable_transport_1

Type
uint64
Category
required
Description

ecn_successful_handshakes

Type
uint64
Category
required
Description

times_ecn_reduced_cwnd

Type
uint64
Category
required
Description

MiscStats

rtt_attempts

Type
uint64
Category
required
Description

rtt_updated

Type
uint64
Category
required
Description

times_rtt_initialized_from_route

Type
uint64
Category
required
Description

times_rttvar_initialized_from_route

Type
uint64
Category
required
Description

times_ssthresh_initialized_from_route

Type
uint64
Category
required
Description

times_hdr_predict_ok_for_acks

Type
uint64
Category
required
Description

times_hdr_predict_ok_for_data_pkts

Type
uint64
Category
required
Description

resends_due_to_mtu_discovery

Type
uint64
Category
required
Description

total_matching_signature_received

Type
uint64
Category
required
Description

total_bad_signature_received

Type
uint64
Category
required
Description

mismatching_signature_received

Type
uint64
Category
required
Description

no_signature_expected_by_socket

Type
uint64
Category
required
Description

no_signature_expected_by_segment

Type
uint64
Category
required
Description

times_cached_rtt_in_route_updated

Type
uint64
Category
required
Description

times_cached_rttvar_in_route_updated

Type
uint64
Category
required
Description

times_cached_ssthresh_updated

Type
uint64
Category
required
Description

tcps_pcbcachemiss

Type
uint64
Category
required
Description

entry_added_to_hostcache

Type
uint64
Category
required
Description

hostcache_bucket_overflow

Type
uint64
Category
required
Description

avg_minmss_too_low_drops

Type
uint64
Category
required
Description

mbuf_failures

Type
uint64
Category
required
Description

connections_using_auto_gateway

Type
uint64
Category
required
Description

UdpStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

udps_ipackets

Type
uint64
Category
required
Description

udps_hdrops

Type
uint64
Category
required
Description

udps_badsum

Type
uint64
Category
required
Description

udps_nosum

Type
uint64
Category
required
Description

udps_badlen

Type
uint64
Category
required
Description

udps_noport

Type
uint64
Category
required
Description

udps_noportbcast

Type
uint64
Category
required
Description

udps_fullsock

Type
uint64
Category
required
Description

udpps_pcbcachemiss

Type
uint64
Category
required
Description

udpps_pcbhashmiss

Type
uint64
Category
required
Description

udps_opackets

Type
uint64
Category
required
Description

udps_fastout

Type
uint64
Category
required
Description

udps_noportmcast

Type
uint64
Category
required
Description

udps_filtermcast

Type
uint64
Category
required
Description

udps_pktsfrag

Type
uint64
Category
required
Description

udps_badpkts

Type
uint64
Category
required
Description

udps_errored_conns

Type
uint64
Category
required
Description

udps_timedout_conns

Type
uint64
Category
required
Description

udps_finished_conns

Type
uint64
Category
required
Description

udps_rxpkts

Type
uint64
Category
required
Description

udps_rxbytes

Type
uint64
Category
required
Description

udps_txpkts

Type
uint64
Category
required
Description

udps_txbytes

Type
uint64
Category
required
Description

udps_port_unreach_pkts

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/reservedvs/clear

CLI


    clear serviceengine <key> reservedvs

CpuStatRuntime

API


    GET /api/serviceengine/<key>/cpu/<key>

CLI


    show serviceengine <key> cpu

Data

CpuStatRuntime

se_uuid

Type
string
Category
optional
Description

total_linux_cpu_utilization

Type
Unknown
Category
optional
Description

total_cpu_utilization

Type
Unknown
Category
optional
Description

total_memory

Type
uint32
Category
optional
Description

free_memory

Type
uint32
Category
optional
Description

idle_cpu

Type
Unknown
Category
optional
Description

process_cpu_utilization

Type
ProcCpuStat
Category
repeated
Description

ProcCpuStat

process_name

Type
string
Category
optional
Description

process_cpu_usage

Type
Unknown
Category
optional
Description

process_memory_usage

Type
Unknown
Category
optional
Description

process_cpu_ewma

Type
Unknown
Category
optional
Description

VshashshowRuntime

API


    GET /api/serviceengine/<key>/vshash/<key>

CLI


    show serviceengine <key> vshash

Data

VshashshowRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

vshashone

Type
VshashoneRuntime
Category
repeated
Description

VshashoneRuntime

vsuuid

Type
string
Category
required
Description

ip

Type
string
Category
required
Description

port

Type
uint32
Category
required
Description

vs_stat_index

Type
int32
Category
required
Description

port_end

Type
uint32
Category
optional
Description

core

Type
uint32
Category
required
Description

vnic_id

Type
uint32
Category
required
Description

ServiceEngineInternal

API


    GET /api/serviceengine/<key>/connected/<key>

CLI


    show serviceengine <key> connected

Data

ServiceEngineInternal

uuid

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

tenant_uuid

Type
string
Category
optional
Description

mgmt_vnic

Type
vNIC
Category
optional
Description

resources

Type
SeResources
Category
optional
Description

data_vnics

Type
vNIC
Category
repeated
Description

controller_ip

Type
string
Category
optional
Description

host_ref

Type
Reference to VIMgrHostRuntime
Category
optional
Description

default_gws

Type
DefaultGateway
Category
repeated
Description

controller_created

Type
bool
Category
optional
Description

se_group_uuid

Type
string
Category
optional
Description

cloud_uuid

Type
string
Category
optional
Description

gateway_up

Type
bool
Category
optional
Description

DispatcherRemoteTimerListDumpRuntime

API


    GET /api/serviceengine/<key>/flowtable_remote/<key>

CLI


    show serviceengine <key> flowtable_remote

Data

DispatcherRemoteTimerListDumpRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

vnic_table

Type
DispatcherRemoteTimerListRuntime
Category
repeated
Description

DispatcherRemoteTimerListRuntime

vnic

Type
uint32
Category
optional
Description

mac

Type
string
Category
optional
Description

syn

Type
DispatcherOneTableRuntime
Category
optional
Description

est

Type
DispatcherOneTableRuntime
Category
optional
Description

halfclose

Type
DispatcherOneTableRuntime
Category
optional
Description

close

Type
DispatcherOneTableRuntime
Category
optional
Description

unknown

Type
DispatcherOneTableRuntime
Category
optional
Description

RouteTableRuntime

API


    GET /api/serviceengine/<key>/route/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> route filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

RouteTableRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

route_entry

Type
RouteEntry
Category
repeated
Description

RouteEntry

destination

Type
string
Category
optional
Description

gateway

Type
string
Category
optional
Description

netmask

Type
string
Category
optional
Description

interface

Type
string
Category
optional
Description

rt_refcnt

Type
uint32
Category
optional
Description

rt_flags

Type
uint32
Category
optional
Description

ifa_ip

Type
string
Category
optional
Description

vrf_id

Type
uint32
Category
optional
Description

BgpRuntime

API


    GET /api/serviceengine/<key>/bgp/<key>

CLI


    show serviceengine <key> bgp

Data

BgpRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

name

Type
string
Category
optional
Description

local_as

Type
uint32
Category
optional
Description

vrf

Type
int32
Category
optional
Description

active

Type
int32
Category
optional
Description

peer_bmp

Type
uint64
Category
optional
Description

peers

Type
BgpPeerRuntime
Category
repeated
Description

bgp_state

Type
string
Category
optional
Description

BgpPeerRuntime

remote_as

Type
uint32
Category
optional
Description

peer_ip

Type
string
Category
optional
Description

peer_id

Type
int32
Category
optional
Description

active

Type
int32
Category
optional
Description

vs_names

Type
string
Category
repeated
Description

routes

Type
string
Category
repeated
Description

md5_secret

Type
string
Category
optional
Description

bfd

Type
bool
Category
optional
Description

nexthop_ip

Type
string
Category
optional
Description

TcpConnRuntimeDetail

API


    GET /api/serviceengine/<key>/tcp-flows/detail/<key>
	Query Params: ConnectionFilter	ListeningsockFilter	CorenumFilter

CLI


    show serviceengine <key> tcp-flows detail filter [conn_type] [ip_addr] [port] [ip_mask] [listening_ports] [core_num]

Data

TcpConnRuntimeDetail

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

conn_detail

Type
DetailedConnEntry
Category
repeated
Description

DetailedConnEntry

l_ip

Type
string
Category
optional
Description

f_ip

Type
string
Category
optional
Description

l_port

Type
uint32
Category
optional
Description

f_port

Type
uint32
Category
optional
Description

socket_info

Type
SocketInfo
Category
optional
Description

inpcb_info

Type
InpcbInfo
Category
optional
Description

inpcb_proxy_info

Type
InpcbProxyInfo
Category
optional
Description

inpcb_fast_info

Type
InpcbFastInfo
Category
optional
Description

tcpcb_info

Type
TcpcbInfo
Category
optional
Description

tcptw_info

Type
TcptwInfo
Category
optional
Description

SocketInfo

so_ref_count

Type
uint32
Category
optional
Description

so_type

Type
uint32
Category
optional
Description

so_options

Type
uint32
Category
optional
Description

so_state

Type
uint32
Category
optional
Description

so_qstate

Type
uint32
Category
optional
Description

so_pcb

Type
uint64
Category
optional
Description

so_proto

Type
uint64
Category
optional
Description

so_qlen

Type
uint32
Category
optional
Description

so_incqlen

Type
uint32
Category
optional
Description

so_qlimit

Type
uint32
Category
optional
Description

so_error

Type
uint32
Category
optional
Description

so_oobmark

Type
uint32
Category
optional
Description

so_rcv

Type
SocketBufferInfo
Category
optional
Description

so_snd

Type
SocketBufferInfo
Category
optional
Description

so_gencnt

Type
uint64
Category
optional
Description

so_fibnum

Type
uint32
Category
optional
Description

so_linger

Type
uint32
Category
optional
Description

so_usr_flags

Type
uint32
Category
optional
Description

so_usr_l7_handle

Type
uint64
Category
optional
Description

so_usr_vserver

Type
string
Category
optional
Description

so_usr_service_port

Type
uint32
Category
optional
Description

so_usr_proxy

Type
enum
Category
optional
Description
Choices
L4_RTMON, HM_UDP, L4_DNS, HM_TCP, L7_PROXY, HM_ICMP, L4_PROXY

so_usr_dbg_flags

Type
uint64
Category
optional
Description

so_starttime

Type
TimeStamp
Category
optional
Description

so_vnet

Type
uint64
Category
optional
Description

SocketBufferInfo

sb_state

Type
uint32
Category
optional
Description

sb_flags

Type
uint32
Category
optional
Description

sb_sndptroff

Type
uint32
Category
optional
Description

sb_mcnt

Type
uint32
Category
optional
Description

sb_cc

Type
uint32
Category
optional
Description

sb_hiwat

Type
uint32
Category
optional
Description

sb_lowat

Type
uint32
Category
optional
Description

sb_credit

Type
uint32
Category
optional
Description

InpcbInfo

inp_proxy_type

Type
uint32
Category
optional
Description

inp_vflag

Type
uint32
Category
optional
Description

inp_size

Type
uint32
Category
optional
Description

inp_flags

Type
uint32
Category
optional
Description

inp_hash_next

Type
uint64
Category
optional
Description

inp_hash_pre_addr

Type
uint64
Category
optional
Description

inp_list_next

Type
uint64
Category
optional
Description

inp_list_pre_addr

Type
uint64
Category
optional
Description

inp_pcbinfo

Type
uint64
Category
optional
Description

inp_refcount

Type
uint32
Category
optional
Description

inp_gencount

Type
uint64
Category
optional
Description

inp_inc_flags

Type
uint32
Category
optional
Description

inp_portlist_next

Type
uint64
Category
optional
Description

inp_portlist_pre_addr

Type
uint64
Category
optional
Description

inp_phd

Type
uint64
Category
optional
Description

inp_lle

Type
uint64
Category
optional
Description

inp_rt

Type
uint64
Category
optional
Description

rx_vnic_hdl

Type
uint32
Category
optional
Description

inp_flow_flags

Type
uint32
Category
optional
Description

client_mac

Type
string
Category
optional
Description

client_mim

Type
EtherHeader
Category
optional
Description

inp_server

Type
uint64
Category
optional
Description

port_channel_hash

Type
uint32
Category
optional
Description

EtherHeader

ether_dhost

Type
string
Category
optional
Description

ether_shost

Type
string
Category
optional
Description

ether_type

Type
uint32
Category
optional
Description

InpcbProxyInfo

inp_proxy_ip_ttl

Type
uint32
Category
optional
Description

inp_proxy_ip_p

Type
uint32
Category
optional
Description

inp_proxy_ip_minttl

Type
uint32
Category
optional
Description

inp_proxy_ip_tos

Type
uint32
Category
optional
Description

InpcbFastInfo

inp_fast_state

Type
uint32
Category
optional
Description

inp_starttime

Type
TimeStamp
Category
optional
Description

inp_last_pkt_tick

Type
uint32
Category
optional
Description

debug_flags

Type
uint64
Category
optional
Description

inp_seq_delta

Type
Unknown
Category
optional
Description

inp_ack_delta

Type
Unknown
Category
optional
Description

inp_next_seq

Type
uint32
Category
optional
Description

inp_snat_faddr

Type
string
Category
optional
Description

inp_snat_laddr

Type
string
Category
optional
Description

inp_snat_fport

Type
uint32
Category
optional
Description

inp_snat_lport

Type
uint32
Category
optional
Description

inp_tsecr

Type
uint32
Category
optional
Description

inp_ts_offset

Type
uint32
Category
optional
Description

inp_idle_timeout

Type
uint32
Category
optional
Description

inp_fast_flags

Type
uint32
Category
optional
Description

inp_timer_shift

Type
uint32
Category
optional
Description

inp_syns_sent

Type
uint32
Category
optional
Description

tx_vnic_hdl

Type
uint32
Category
optional
Description

TcpcbInfo

tcp_state_name

Type
string
Category
optional
Description

t_segqlen

Type
int32
Category
optional
Description

t_dupacks

Type
int32
Category
optional
Description

tcp_state

Type
uint32
Category
optional
Description

t_flags

Type
uint32
Category
optional
Description

snd_una

Type
uint32
Category
optional
Description

snd_max

Type
uint32
Category
optional
Description

snd_nxt

Type
uint32
Category
optional
Description

snd_urg_pointer

Type
uint32
Category
optional
Description

snd_wl1

Type
uint32
Category
optional
Description

snd_wl2

Type
uint32
Category
optional
Description

iss

Type
uint32
Category
optional
Description

irs

Type
uint32
Category
optional
Description

rcv_nxt

Type
uint32
Category
optional
Description

rcv_adv

Type
uint32
Category
optional
Description

rcv_window

Type
uint64
Category
optional
Description

rcv_urg_pointer

Type
uint32
Category
optional
Description

snd_window

Type
uint64
Category
optional
Description

snd_conj_window

Type
uint64
Category
optional
Description

snd_ssthresh

Type
uint64
Category
optional
Description

snd_recover

Type
uint32
Category
optional
Description

t_maxopd

Type
uint32
Category
optional
Description

t_rcvtime_tick

Type
uint32
Category
optional
Description

t_starttime_tick

Type
uint32
Category
optional
Description

t_rtttime_tick

Type
uint32
Category
optional
Description

t_rtseq

Type
uint32
Category
optional
Description

t_rxtcur_tick

Type
uint32
Category
optional
Description

t_maxseg

Type
uint32
Category
optional
Description

t_smoothed_rtt

Type
int32
Category
optional
Description

t_rtt_variance

Type
int32
Category
optional
Description

t_rtt_avi

Type
int32
Category
optional
Description

np_auto_enabled

Type
uint32
Category
optional
Description

t_max_rxtshift

Type
uint32
Category
optional
Description

t_max_syn_rxtshift

Type
uint32
Category
optional
Description

t_rxtshift

Type
uint32
Category
optional
Description

t_rttmin

Type
uint32
Category
optional
Description

t_rttbest

Type
uint32
Category
optional
Description

t_rttupdated

Type
uint64
Category
optional
Description

max_snd_window

Type
uint64
Category
optional
Description

t_softerror

Type
int32
Category
optional
Description

t_oobflags

Type
uint32
Category
optional
Description

t_iobc

Type
uint32
Category
optional
Description

snd_scale

Type
uint32
Category
optional
Description

rcv_scale

Type
uint32
Category
optional
Description

request_r_scale

Type
uint32
Category
optional
Description

ts_recent

Type
uint32
Category
optional
Description

ts_recent_age

Type
uint32
Category
optional
Description

ts_offset

Type
uint32
Category
optional
Description

last_ack_sent

Type
uint32
Category
optional
Description

snd_cwnd_prev

Type
uint64
Category
optional
Description

snd_ssthresh_prev

Type
uint64
Category
optional
Description

snd_recover_prev

Type
uint32
Category
optional
Description

t_sndzerowin

Type
int32
Category
optional
Description

t_badrxtwin

Type
uint32
Category
optional
Description

snd_limited

Type
uint32
Category
optional
Description

t_quickacks

Type
uint32
Category
optional
Description

snd_numholes

Type
int32
Category
optional
Description

snd_fack

Type
uint32
Category
optional
Description

rcv_numsacks

Type
int32
Category
optional
Description

sackblks

Type
SackBlk
Category
repeated
Description

sack_newdata

Type
uint32
Category
optional
Description

sackhint

Type
SackHint
Category
optional
Description

t_rttlow

Type
int32
Category
optional
Description

rfbuf_ts

Type
uint32
Category
optional
Description

rfbuf_cnt

Type
int32
Category
optional
Description

t_sndrexmitpack

Type
int32
Category
optional
Description

t_sndtimeorexmit

Type
int32
Category
optional
Description

t_rcvoopack

Type
int32
Category
optional
Description

t_bytes_acked

Type
int32
Category
optional
Description

cc_info

Type
CcInfo
Category
optional
Description

t_keepinit

Type
uint32
Category
optional
Description

t_keepidle

Type
uint32
Category
optional
Description

t_keepintvl

Type
uint32
Category
optional
Description

t_keepcnt

Type
uint32
Category
optional
Description

t_maxidle

Type
uint32
Category
optional
Description

t_finwait2

Type
uint32
Category
optional
Description

t_timewait

Type
uint32
Category
optional
Description

t_2msl

Type
uint32
Category
optional
Description

t_sendprobe

Type
bool
Category
optional
Description

t_usr_flags

Type
uint32
Category
optional
Description

t_conn_type

Type
int32
Category
optional
Description

t_rcvzerowin

Type
int32
Category
optional
Description

SackBlk

start_seq

Type
uint32
Category
optional
Description

end_seq

Type
uint32
Category
optional
Description

SackHint

sack_bytes_rexmit

Type
int32
Category
optional
Description

last_sack_ack

Type
uint32
Category
optional
Description

CcInfo

cc_algo_name

Type
string
Category
optional
Description

bytes_this_ack

Type
int32
Category
optional
Description

curack

Type
uint32
Category
optional
Description

flags

Type
uint32
Category
optional
Description

type

Type
int32
Category
optional
Description

TcptwInfo

tw_dbg_flags

Type
uint64
Category
optional
Description

snd_nxt

Type
uint32
Category
optional
Description

rcv_nxt

Type
uint32
Category
optional
Description

iss

Type
uint32
Category
optional
Description

irs

Type
uint32
Category
optional
Description

last_win

Type
uint32
Category
optional
Description

tw_so_options

Type
uint32
Category
optional
Description

t_recent

Type
uint32
Category
optional
Description

ts_offset

Type
uint32
Category
optional
Description

t_starttime_tick

Type
uint32
Category
optional
Description

tw_time

Type
int32
Category
optional
Description

t_2msl

Type
int32
Category
optional
Description

L7GlobalStatsRuntime

API


    GET /api/serviceengine/<key>/httpstats/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> httpstats filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

L7GlobalStatsRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

connections_handled

Type
uint64
Category
required
Description

connections_active

Type
uint64
Category
required
Description

connections_reading

Type
uint64
Category
required
Description

connections_writing

Type
uint64
Category
required
Description

connections_waiting

Type
uint64
Category
required
Description

requests_handled

Type
uint64
Category
required
Description

cp_gstats

Type
ConnpoolGlobalStats
Category
repeated
Description

hc_gstats

Type
CacheGlobalStats
Category
optional
Description

hc_lstats

Type
CacheLocalStats
Category
repeated
Description

ConnpoolGlobalStats

num_no_server

Type
uint64
Category
required
Description

num_requested

Type
uint64
Category
required
Description

num_adds

Type
uint64
Category
required
Description

num_dels

Type
uint64
Category
required
Description

num_reused

Type
uint64
Category
required
Description

num_full_evicts

Type
uint64
Category
required
Description

num_full_uncached

Type
uint64
Category
required
Description

num_thresh_breach

Type
uint64
Category
required
Description

num_drains

Type
uint64
Category
required
Description

CacheGlobalStats

curr_size

Type
uint64
Category
required
Description

max_size

Type
uint64
Category
required
Description

CacheLocalStats

num_evicts

Type
uint32
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/httpstats/clear

CLI


    clear serviceengine <key> httpstats

SeFaultInjectExhaustMclSmall

API


CLI


Data

SeFaultInjectExhaustMclSmall

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

num_objects

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/faultinject/exhaust_mcl_small/clear

CLI


    faultinject serviceengine <key> exhaust_mcl_small

Data

InterfaceLacpRuntime

API


    GET /api/serviceengine/<key>/interface/lacp/<key>
	Query Params: FlowtableIntfFilter

CLI


    show serviceengine <key> interface lacp filter [mac] [intfname] [core_num]

Data

InterfaceLacpRuntime

interface_lacp_entry

Type
InterfaceLacpEntry
Category
repeated
Description

InterfaceLacpEntry

intf_name

Type
string
Category
required
Description

status

Type
string
Category
optional
Description

SeAgentStateRuntime

API


    GET /api/serviceengine/<key>/seagent/<key>

CLI


    show serviceengine <key> seagent

Data

SeAgentStateRuntime

se_uuid

Type
string
Category
optional
Description

mgmt_ip

Type
string
Category
optional
Description

num_cpu

Type
int32
Category
optional
Description

mem_mb

Type
int32
Category
optional
Description

num_vnic

Type
int32
Category
optional
Description

num_dataplane_registrations

Type
int32
Category
optional
Description

controller_ip

Type
string
Category
optional
Description

controller_port

Type
int32
Category
optional
Description

registered_with_controller

Type
bool
Category
optional
Description

num_heartbeat

Type
Unknown
Category
optional
Description

fsm_state

Type
string
Category
optional
Description

headless_mode

Type
bool
Category
optional
Description

debug_mode

Type
bool
Category
optional
Description

num_config_objects

Type
int32
Category
optional
Description

ctrl_reg_timeout_sec

Type
int32
Category
optional
Description

heartbeat_timeout_sec

Type
int32
Category
optional
Description

headless_timeout_sec

Type
int32
Category
optional
Description

batch_enqueue_timeout_ms

Type
int32
Category
optional
Description

batch_dequeue_timeout_ms

Type
int32
Category
optional
Description

dp_response_timeout_sec

Type
int32
Category
optional
Description

dp_batch_size

Type
int32
Category
optional
Description

heartbeat_miss_limit

Type
int32
Category
optional
Description

cpustats_interval_sec

Type
int32
Category
optional
Description

ctrl_rpc_timeout_sec

Type
int32
Category
optional
Description

ctrl_rpc_timeout_on_dp_hb_failed_msec

Type
int32
Category
optional
Description

num_dp_heartbeat_miss

Type
int32
Category
optional
Description

vs_redis_map

Type
VsRedisMap
Category
repeated
Description

sdb_stats

Type
SeAgentSharedDBStats
Category
repeated
Description

se_registration_count

Type
int32
Category
optional
Description

se_registration_fail_count

Type
int32
Category
optional
Description

last_register_time

Type
TimeStamp
Category
optional
Description

last_register_success_time

Type
TimeStamp
Category
optional
Description

last_register_failed_time

Type
TimeStamp
Category
optional
Description

se_heartbeat_miss_count

Type
int32
Category
optional
Description

last_heartbeat_recv_time

Type
TimeStamp
Category
optional
Description

last_heartbeat_miss_time

Type
TimeStamp
Category
optional
Description

se_headless_count

Type
int32
Category
optional
Description

last_se_headless_time

Type
TimeStamp
Category
optional
Description

last_se_online_time

Type
TimeStamp
Category
optional
Description

se_ready_count

Type
int32
Category
optional
Description

last_se_ready_sent_time

Type
TimeStamp
Category
optional
Description

num_graphdb_dangling_errors

Type
int32
Category
optional
Description

num_vs_deleted_on_sync

Type
int32
Category
optional
Description

last_vs_deleted_on_sync_time

Type
TimeStamp
Category
optional
Description

gw_monitor_status_up

Type
bool
Category
optional
Description

VsRedisMap

vs_uuid

Type
string
Category
required
Description

redis_ip

Type
string
Category
required
Description

redis_port

Type
int32
Category
required
Description

redis_db

Type
int32
Category
required
Description

SeAgentSharedDBStats

vs_ref

Type
Reference to VirtualService
Category
optional
Description

obj_uuid

Type
string
Category
optional
Description

dp_to_redis_set_exnx

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_set_exnx_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_set_exnx_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_set_exnx_err

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_set_ex

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_set_ex_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_set_ex_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_set_ex_err

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_del

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_del_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_del_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_del_err

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_get

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_get_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_get_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_get_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_all_keys

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_all_keys_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_all_keys_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_all_keys_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_all_keys_get_val

Type
Unknown
Category
optional
Description
Default
0

to_redis_all_keys_get_val_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_all_keys_get_val_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_all_keys_get_val_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_val

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_val_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_val_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_get_val_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_get_port

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_get_port_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_get_port_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_get_port_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_select_db

Type
Unknown
Category
optional
Description
Default
0

to_redis_select_db_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_select_db_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_select_db_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_set_kea

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_set_kea_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_set_kea_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_config_set_kea_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_flushdb

Type
Unknown
Category
optional
Description
Default
0

to_redis_flushdb_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_flushdb_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_flushdb_err

Type
Unknown
Category
optional
Description
Default
0

from_redis_update

Type
Unknown
Category
optional
Description
Default
0

from_redis_delete

Type
Unknown
Category
optional
Description
Default
0

from_redis_expired_delete

Type
Unknown
Category
optional
Description
Default
0

from_redis_full_sync

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan_mget_val

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan_mget_val_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan_mget_val_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_scan_mget_val_err

Type
Unknown
Category
optional
Description
Default
0

to_redis_pipeline_size

Type
Unknown
Category
optional
Description
Default
100

to_redis_scan_batch_size

Type
Unknown
Category
optional
Description
Default
1000

to_redis_pipeline_flush

Type
Unknown
Category
optional
Description
Default
0

to_redis_pipeline_flush_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

to_redis_pipeline_flush_err

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_sync

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_sync_err_not_conn

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_sync_err_not_ok

Type
Unknown
Category
optional
Description
Default
0

dp_to_redis_sync_err

Type
Unknown
Category
optional
Description
Default
0

MetricsRuntimeSummary

API


    GET /api/serviceengine/<key>/metrics/<key>
	Query Params: SeMetricsFilter	VsMetricsFilter

CLI


    show serviceengine <key> metrics filter [se_uuid] [vs_uuid] [obj_id]

Data

MetricsRuntimeSummary

total_entities

Type
uint32
Category
optional
Description
Total number of metrics objects

metrics_objs

Type
MetricsObj
Category
repeated
Description

MetricsObj

uuid

Type
string
Category
optional
Description

rt_metrics

Type
bool
Category
optional
Description

last_cleared_timestamp

Type
uint32
Category
optional
Description

timer_interval

Type
uint32
Category
optional
Description
in seconds

type

Type
enum
Category
optional
Description
Choices
APPLICATION_METRICS_ENTITY, SE_METRICS_ENTITY, VM_METRICS_ENTITY, CONTROLLER_METRICS_ENTITY, TENANT_METRICS_ENTITY, VSERVER_METRICS_ENTITY

controller_ip

Type
string
Category
optional
Description

metrics_mgr_port

Type
string
Category
optional
Description

connected

Type
bool
Category
optional
Description

connect_in_progress

Type
bool
Category
optional
Description

effective_controller_ip

Type
string
Category
optional
Description

eastwest

Type
bool
Category
optional
Description

MallocStatRuntime

API


    GET /api/serviceengine/<key>/mallocstats/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> mallocstats filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

MallocStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

mallocstat_entry

Type
MallocStatEntry
Category
repeated
Description

MallocStatEntry

malloc_type_name

Type
string
Category
required
Description

malloc_type_cnt

Type
int32
Category
required
Description

malloc_type_fail

Type
int32
Category
required
Description

malloc_type_size

Type
uint64
Category
required
Description

malloc_type_freelist

Type
uint64
Category
required
Description

malloc_type_freelist_size

Type
uint64
Category
required
Description

MbStatRuntime

API


    GET /api/serviceengine/<key>/mbufstats/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> mbufstats filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

MbStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

pktbuf_total

Type
uint64
Category
required
Description

pktbuf_available

Type
uint64
Category
required
Description

pktbuf_allocations

Type
uint64
Category
required
Description

pktbuf_frees

Type
uint64
Category
required
Description

pktbuf_allocation_failures

Type
uint64
Category
required
Description

pktbuf_cached_allocations

Type
uint64
Category
required
Description

pktbuf_cached_frees

Type
uint64
Category
required
Description

pktbuf_cache_empty

Type
uint64
Category
required
Description

pktbuf_cache_max

Type
uint64
Category
required
Description

small_pktbuf_total

Type
uint64
Category
required
Description

small_pktbuf_available

Type
uint64
Category
required
Description

small_pktbuf_allocations

Type
uint64
Category
required
Description

small_pktbuf_frees

Type
uint64
Category
required
Description

small_pktbuf_allocation_failures

Type
uint64
Category
required
Description

small_pktbuf_cached_allocations

Type
uint64
Category
required
Description

small_pktbuf_cached_frees

Type
uint64
Category
required
Description

small_pktbuf_cache_empty

Type
uint64
Category
required
Description

small_pktbuf_cache_max

Type
uint64
Category
required
Description

mbuf_total

Type
uint64
Category
required
Description

mbuf_available

Type
uint64
Category
required
Description

mbuf_allocations

Type
uint64
Category
required
Description

mbuf_frees

Type
uint64
Category
required
Description

mbuf_allocation_failures

Type
uint64
Category
required
Description

mbuf_cached_allocations

Type
uint64
Category
required
Description

mbuf_cached_frees

Type
uint64
Category
required
Description

mbuf_cache_empty

Type
uint64
Category
required
Description

mbuf_cache_max

Type
uint64
Category
required
Description

mcopy_fail

Type
uint64
Category
required
Description

mpullup_fail

Type
uint64
Category
required
Description

mpullup_slow

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/mbufstats/clear

CLI


    clear serviceengine <key> mbufstats

SeMemDistRuntime

API


    GET /api/serviceengine/<key>/memdist/<key>

CLI


    show serviceengine <key> memdist

Data

SeMemDistRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

huge_pages

Type
uint32
Category
required
Description

clusters

Type
uint64
Category
required
Description

shm_memory_mb

Type
uint32
Category
required
Description

conn_memory_mb

Type
uint32
Category
required
Description

conn_memory_mb_per_core

Type
uint32
Category
required
Description

num_queues

Type
uint32
Category
required
Description

num_rxd

Type
uint32
Category
required
Description

num_txd

Type
uint32
Category
required
Description

hypervisor_type

Type
uint32
Category
required
Description

shm_conn_memory_mb

Type
uint32
Category
required
Description

os_reserved_memory_mb

Type
uint32
Category
required
Description

DispatcherStatRuntime

API


    GET /api/serviceengine/<key>/flowtablestat/<key>
	Query Params: FlowtableIntfFilter

CLI


    show serviceengine <key> flowtablestat filter [mac] [intfname] [core_num]

Data

DispatcherStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

dispatch

Type
IndivdispatcherRuntime
Category
repeated
Description

IndivdispatcherRuntime

intf_name

Type
string
Category
optional
Description

mac

Type
string
Category
required
Description

vnic_id

Type
uint32
Category
required
Description

flow_parse_errors

Type
uint32
Category
required
Description

flow_parse_tcp

Type
uint32
Category
required
Description

flow_parse_tcp_frag

Type
uint32
Category
required
Description

flow_parse_icmp_req

Type
uint32
Category
required
Description

flow_parse_icmp_reply

Type
uint32
Category
required
Description

flow_parse_arp_req

Type
uint32
Category
required
Description

flow_parse_unknown

Type
uint32
Category
required
Description

flow_parse_arp_reply

Type
uint32
Category
required
Description

flow_rx_create

Type
uint32
Category
required
Description

flow_rx_lookup_hit

Type
uint32
Category
required
Description

flow_rx_lookup_miss

Type
uint32
Category
required
Description

flow_rx_lookup_miss_drop

Type
uint32
Category
required
Description

flow_rx_lookup_rst_miss_drop

Type
uint32
Category
required
Description

flow_inband_delete

Type
uint32
Category
required
Description

flow_inband_add

Type
uint32
Category
required
Description

flow_inband_update

Type
uint32
Category
required
Description

flow_aged_delete

Type
uint32
Category
required
Description

flow_act_drop

Type
uint32
Category
required
Description

flow_table_num_entries

Type
uint32
Category
required
Description

flow_inband_update_ignored

Type
uint32
Category
required
Description

flow_pkts_throttled

Type
uint32
Category
required
Description

flow_conn_throttled

Type
uint32
Category
required
Description

flow_conn_throttled_mem

Type
uint32
Category
required
Description

flow_conn_throttled_num_flows

Type
uint32
Category
required
Description

flow_conn_throttled_num_syn

Type
uint32
Category
required
Description

fault_injection_tcp_drops

Type
uint32
Category
required
Description

icmp_current_rate

Type
uint32
Category
required
Description

icmp_rsp_current_rate

Type
uint32
Category
required
Description

arp_current_rate

Type
uint32
Category
required
Description

flow_parse_udp

Type
uint32
Category
required
Description

rst_sent

Type
uint32
Category
required
Description

flow_table_remote_entries

Type
uint32
Category
required
Description

icmp_rx_rl_cfg_pps

Type
uint32
Category
required
Description

icmp_rx_rl_confirming

Type
uint32
Category
required
Description

icmp_rx_rl_drops

Type
uint32
Category
required
Description

arp_rx_rl_cfg_pps

Type
uint32
Category
required
Description

arp_rx_rl_confirming

Type
uint32
Category
required
Description

arp_rx_rl_drops

Type
uint32
Category
required
Description

tcp_rst_tx_rl_cfg_pps

Type
uint32
Category
required
Description

tcp_rst_tx_rl_confirming

Type
uint32
Category
required
Description

tcp_rst_tx_rl_drops

Type
uint32
Category
required
Description

flowprobe_tx_rl_cfg_pps

Type
uint32
Category
required
Description

flowprobe_tx_rl_confirming

Type
uint32
Category
required
Description

flowprobe_tx_rl_drops

Type
uint32
Category
required
Description

flow_mac_errors

Type
uint32
Category
required
Description

syn_dropped_delete_pending

Type
uint32
Category
required
Description

invalid_vlan

Type
uint32
Category
required
Description

flow_parse_tcp_kni

Type
uint32
Category
required
Description

flow_table_num_tcp_entries

Type
uint32
Category
required
Description

flow_table_num_udp_entries

Type
uint32
Category
required
Description

flow_probes_req_sent

Type
uint32
Category
required
Description

flow_probes_req_received

Type
uint32
Category
required
Description

flow_probes_rsp_sent

Type
uint32
Category
required
Description

flow_probes_rsp_received

Type
uint32
Category
required
Description

flow_probes_req_discarded_miss

Type
uint32
Category
required
Description

flow_probes_req_discarded_nonlocal

Type
uint32
Category
required
Description

flow_act_rl_drop

Type
uint64
Category
optional
Description

max_cps_per_client_drop

Type
uint64
Category
optional
Description

doser_drop

Type
uint64
Category
optional
Description

doser_oom

Type
uint64
Category
optional
Description

delay_fairness

Type
bool
Category
optional
Description

flow_del_req_sent

Type
uint64
Category
optional
Description

flow_del_req_received

Type
uint64
Category
optional
Description

flow_syn_seen_from_syn_seen

Type
uint32
Category
optional
Description

flow_syn_seen_from_half_closed

Type
uint32
Category
optional
Description

flow_syn_seen_from_closed

Type
uint32
Category
optional
Description

flow_syn_seen_from_unknown

Type
uint32
Category
optional
Description

flow_num_syns

Type
uint32
Category
optional
Description

flow_num_syns_mim

Type
uint32
Category
optional
Description

flow_syn_seen_aged

Type
uint32
Category
optional
Description

flow_est_aged

Type
uint32
Category
optional
Description

flow_half_closed_aged

Type
uint32
Category
optional
Description

flow_closed_aged

Type
uint32
Category
optional
Description

flow_unknown_aged

Type
uint32
Category
optional
Description

flow_del_req_received_for_local

Type
uint32
Category
optional
Description

flow_del_req_received_not_found

Type
uint32
Category
optional
Description

flow_remote_entry_on_secondary

Type
uint32
Category
optional
Description

flow_loop_detected

Type
uint32
Category
optional
Description

flow_dropped_vs_down

Type
uint32
Category
optional
Description

flow_parse_lacp_kni

Type
uint32
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/flowtablestat/clear

CLI


    clear serviceengine <key> flowtablestat

DispatcherSehmprobetempdisableRuntime

API


    GET /api/serviceengine/<key>/sehmprobedisable/<key>

CLI


    show serviceengine <key> sehmprobedisable

Data

DispatcherSehmprobetempdisableRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

Actions

API


    POST /api/serviceengine/<key>/sehmprobedisable/clear

CLI


    clear serviceengine <key> sehmprobedisable

RteringStatRuntime

API


    GET /api/serviceengine/<key>/rteringstat/<key>

CLI


    show serviceengine <key> rteringstat

Data

RteringStatRuntime

msg

Type
string
Category
repeated
Description

ServiceEngineRuntimeDetail

API


    GET /api/serviceengine/<key>/runtime/detail/<key>

CLI


    show serviceengine <key> detail

Data

ServiceEngineRuntimeDetail

name

Type
string
Category
optional
Description

power_state

Type
enum
Category
optional
Description
Choices
SE_POWER_OFF, SE_POWER_ON, SE_SUSPENDED

resources

Type
SeResources
Category
optional
Description

vnic

Type
VnicRuntime
Category
repeated
Description

oper_status

Type
OperationalStatus
Category
optional
Description

hb_status

Type
SeHbStatus
Category
optional
Description

vinfra_discovered

Type
bool
Category
optional
Description

se_connected

Type
bool
Category
optional
Description

online_since

Type
string
Category
optional
Description

counters

Type
ServiceEngineCounters
Category
optional
Description

vnic_replay_done

Type
bool
Category
optional
Description

gateway_up

Type
bool
Category
optional
Description

VnicRuntime

mac_addr

Type
string
Category
required
Description

if_name

Type
string
Category
optional
Description

virtual_network_id

Type
string
Category
optional
Description

mtu

Type
int32
Category
optional
Description
Default
1500

vnic_networks

Type
vNICNetwork
Category
repeated
Description

is_mgmt

Type
bool
Category
optional
Description
Default
False

is_avi_internal_network

Type
bool
Category
optional
Description
Default
False

state

Type
enum
Category
optional
Description
Default
VNIC_STATE_UNKNOWN
Choices
VNIC_STATE_UP, VNIC_STATE_DOWN, VNIC_STATE_UNKNOWN

present_in_vinfra

Type
bool
Category
optional
Description
Default
False

present_in_se

Type
bool
Category
optional
Description
Default
False

is_portchannel

Type
bool
Category
optional
Description
Default
False

ServiceEngineCounters

reg_fail_cnt

Type
int32
Category
optional
Description
Default
0

se_up_cnt

Type
int32
Category
optional
Description
Default
0

se_down_cnt

Type
int32
Category
optional
Description
Default
0

reg_cnt

Type
int32
Category
optional
Description
Default
0

SeFaultInjectExhaustM

API


CLI


Data

SeFaultInjectExhaustM

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

num_objects

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/faultinject/exhaust_mbuf/clear

CLI


    faultinject serviceengine <key> exhaust_mbuf

Data

IcmpStatRuntime

API


    GET /api/serviceengine/<key>/icmpstat/<key>
	Query Params: SeParamsFilter

CLI


    show serviceengine <key> icmpstat filter [primary_only] [disable_aggregate] [se_uuid] [all_se]

Data

IcmpStatRuntime

se_uuid

Type
string
Category
optional
Description

proc_id

Type
string
Category
optional
Description

icps_inhist

Type
IcmpHist
Category
optional
Description

icps_outhist

Type
IcmpHist
Category
optional
Description

more_stats

Type
IcmpStat
Category
optional
Description

IcmpHist

ICMP_ECHOREQ

Type
uint64
Category
required
Description

ICMP_ECHOREPLY

Type
uint64
Category
required
Description

ICMP_UNREACH

Type
uint64
Category
required
Description

ICMP_SOURCEQUENCH

Type
uint64
Category
required
Description

ICMP_REDIRECT

Type
uint64
Category
required
Description

ICMP_ALTHOSTADDR

Type
uint64
Category
required
Description

ICMP_ROUTERADVERT

Type
uint64
Category
required
Description

ICMP_ROUTERSOLICIT

Type
uint64
Category
required
Description

ICMP_TIMXCEED

Type
uint64
Category
required
Description

ICMP_PARAMPROB

Type
uint64
Category
required
Description

ICMP_TSTAMP

Type
uint64
Category
required
Description

ICMP_TSTAMPREPLY

Type
uint64
Category
required
Description

ICMP_IREQ

Type
uint64
Category
required
Description

ICMP_IREQREPLY

Type
uint64
Category
required
Description

ICMP_MASKREQ

Type
uint64
Category
required
Description

ICMP_MASKREPLY

Type
uint64
Category
required
Description

IcmpStat

icps_error

Type
uint64
Category
required
Description

icps_oldshort

Type
uint64
Category
required
Description

icps_oldicmp

Type
uint64
Category
required
Description

icps_badcode

Type
uint64
Category
required
Description

icps_tooshort

Type
uint64
Category
required
Description

icps_checksum

Type
uint64
Category
required
Description

icps_badlen

Type
uint64
Category
required
Description

icps_reflect

Type
uint64
Category
required
Description

icps_bmcastecho

Type
uint64
Category
required
Description

icps_bmcasttstamp

Type
uint64
Category
required
Description

icps_badaddr

Type
uint64
Category
required
Description

icps_noroute

Type
uint64
Category
required
Description

Actions

API


    POST /api/serviceengine/<key>/icmpstat/clear

CLI


    clear serviceengine <key> icmpstat

SeResourceProto

API


    GET /api/serviceengine/<key>/placement/<key>

CLI


    show serviceengine <key> placement

Data

SeResourceProto

ref

Type
Reference to ServiceEngine
Category
required
Description

name

Type
string
Category
optional
Description

vcpus

Type
int32
Category
required
Description

vcpus_inuse

Type
int32
Category
required
Description

vcpus_free

Type
int32
Category
required
Description

memory

Type
int32
Category
required
Description

memory_inuse

Type
int32
Category
required
Description

memory_free

Type
int32
Category
required
Description

ips

Type
IpAddr
Category
repeated
Description

ip_masks

Type
int32
Category
repeated
Description

vnics

Type
SeResourceVnic
Category
repeated
Description

unused_since

Type
uint64
Category
optional
Description

online

Type
bool
Category
optional
Description
Default
False

disconnected

Type
bool
Category
optional
Description
Default
False

in_use

Type
bool
Category
optional
Description
Default
False

controller_created

Type
bool
Category
optional
Description
Default
False

created_at

Type
uint64
Category
optional
Description

came_online_at

Type
uint64
Category
optional
Description

went_headless_at

Type
uint64
Category
optional
Description

went_offline_at

Type
uint64
Category
optional
Description

reason_code

Type
enum
Category
optional
Description
Default
SE_DEREG_POWERED_OFF
Choices
SE_DEREG_FATAL_ERROR, SE_DEREG_PURGE, SE_DEREG_SUSPENDED, SE_DEREG_VINFRA_POWERED_OFF, SE_DEREG_UPGRADING, SE_DEREG_POWERED_OFF, SE_DEREG_UPGRADING_DONE, SE_DEREG_UNREACHABLE, SE_DEREG_VM_DELETED, SE_DEREG_HEALTH_CHECK, SE_DEREG_HB_FAILURE, SE_DEREG_REBOOTED

ip_mac_addr

Type
string
Category
repeated
Description

next_vnic_op_ticks

Type
uint64
Category
optional
Description

vnic_replay_done

Type
bool
Category
optional
Description
Default
False

vnic_op

Type
SeVnicOpProto
Category
optional
Description

vnic_op_consumers

Type
string
Category
repeated
Description

bootup_consumers

Type
string
Category
repeated
Description

mgmt_net_uuid

Type
string
Category
optional
Description

static_ip

Type
IpAddr
Category
optional
Description

reboot_attempts

Type
int32
Category
optional
Description
Default
0

vnic_ip_consumers

Type
string
Category
repeated
Description

host_uuid

Type
string
Category
optional
Description

del_pending

Type
bool
Category
optional
Description
Default
False

del_start_ticks

Type
int32
Category
optional
Description
Default
0

create_cookie

Type
string
Category
optional
Description
Default

bootup_failed

Type
bool
Category
optional
Description
Default
False

vinfra_discovered

Type
bool
Category
optional
Description
Default
False

resources_consumed

Type
SeResourceConsumedProto
Category
repeated
Description

se_group_ref

Type
Reference to ServiceEngineGroup
Category
optional
Description

flavor

Type
string
Category
optional
Description
Default

hypervisor

Type
enum
Category
optional
Description
Choices
DEFAULT, VMWARE_VSAN, VMWARE_ESX, KVM

max_vnics

Type
uint32
Category
optional
Description

max_ips_per_vnic

Type
uint32
Category
optional
Description

last_reboot_ticks

Type
uint64
Category
optional
Description

disk_gb

Type
uint32
Category
required
Description

az

Type
string
Category
optional
Description

enable_state

Type
enum
Category
optional
Description
Default
SE_STATE_ENABLED
Choices
SE_STATE_DISABLED, SE_STATE_DISABLED_FOR_PLACEMENT, SE_STATE_ENABLED

gateway_up

Type
bool
Category
optional
Description
Indicates if SE is able to connect to gateway
Default
True

SeResourceVnic

mac_addr

Type
string
Category
required
Description

virtual_network_id

Type
string
Category
optional
Description

is_avi_internal_network

Type
bool
Category
required
Description

last_vnic_op_ticks

Type
Unknown
Category
optional
Description
Default
0

marked_for_del

Type
bool
Category
optional
Description
Default
False

port_uuid

Type
string
Category
optional
Description

del_retries

Type
int32
Category
optional
Description
Default
0

connected

Type
bool
Category
optional
Description
Default
True

enabled

Type
bool
Category
optional
Description
Default
True

vnic_type

Type
enum
Category
optional
Description
Default
RM_VNIC_FRONTEND
Choices
RM_VNIC_BACKEND, RM_VNIC_FRONTEND

subnet

Type
IpAddrPrefix
Category
optional
Description

in_use

Type
bool
Category
optional
Description

lif

Type
string
Category
optional
Description

vrf_uuid

Type
string
Category
optional
Description

vips

Type
string
Category
repeated
Description

linux_name

Type
string
Category
optional
Description
Default

SeVnicOpProto

se_uuid

Type
string
Category
required
Description

se_vm_name

Type
string
Category
optional
Description

vnic_op_type

Type
enum
Category
required
Description
Choices
SE_VNIC_OP_ADD, SE_VNIC_OP_DEL

virtual_network_ids

Type
string
Category
repeated
Description

oper_start_time

Type
string
Category
optional
Description

cookie

Type
string
Category
optional
Description

macs

Type
string
Category
repeated
Description

vnic_op_infra

Type
enum
Category
optional
Description
Choices
VNIC_OP_VCENTER, VNIC_OP_OPENSTACK

oper_start_ticks

Type
uint64
Category
optional
Description

vrf_uuids

Type
string
Category
repeated
Description

SeResourceConsumedProto

res_ref

Type
Reference to ServiceEngine
Category
required
Description

consumer_ref

Type
Reference to VirtualService
Category
required
Description

res_name

Type
string
Category
optional
Description

consumer_name

Type
string
Category
optional
Description

vcpus

Type
int32
Category
optional
Description

memory

Type
int32
Category
optional
Description

static_se_binding

Type
bool
Category
required
Description
Default
False

vip

Type
IpAddr
Category
optional
Description

is_primary

Type
bool
Category
required
Description

is_stby

Type
bool
Category
required
Description

vnics

Type
SeResourceVnic
Category
repeated
Description

marked_for_scalein

Type
bool
Category
optional
Description
Default
False

sec_idx

Type
int32
Category
optional
Description
Default
1

vip_intf_mac

Type
string
Category
repeated
Description

attach_ip_cookie

Type
string
Category
optional
Description

attach_ip_in_progress

Type
bool
Category
optional
Description
Default
False

last_attach_ip_start_ticks

Type
uint32
Category
optional
Description

attach_ip_success

Type
bool
Category
optional
Description
Default
True

attach_ip_fail_cnt

Type
int32
Category
optional
Description
Default
0

attach_ip_fail_str

Type
string
Category
optional
Description

attach_ip_fail_syserr

Type
enum
Category
optional
Description
Choices
SYSERR_RM_NO_DEFAULT_GW_SE_MGMT_NW, SYSERR_DEQUEUE, SYSERR_RM_ALL_SE_IN_SE_GRP_NW_ACC_MAX_VS, SYSERR_RM_VIP_SE_GRP_MISMATCH, SYSERR_VI_MGR_SEVM_NO_AVAILABILITY_ZONE, SYSERR_RM_DEF_GW_INCORRECT, SYSERR_RPC_FAILED, SYSERR_UPGRADE_IN_PROGRESS, SYSERR_FAILURE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_LEASE, SYSERR_RM_PARENT_SE_NW_ACC, SYSERR_VS_MIGRATE_SCALEOUT_ERROR, SYSERR_OS_AGENT_OPENSTACK_ACCESSERR, SYSERR_VI_MGR_SEVM_CREATE_FAIL_POWER_ON, SYSERR_CC_AGENT_METHOD_NOT_IMPLEMENTED, SYSERR_VS_RPC_FAILURE, SYSERR_RPC_SEND_FAILED, SYSERR_DB_CACHE_OBJ_NOT_FOUND, SYSERR_RM_CANNOT_SPAWN_SE, SYSERR_FAULT, SYSERR_RM_VS_SE_VNIC_IP_IN_PROG, SYSERR_CC_NO_FLAVOR, SYSERR_SE_MGR_VNIC_NOT_FOUND, SYSERR_RM_VIP_SE_NW_ACC, SYSERR_AUTOSCALE_REASON_POOL_STATE_CHANGE, SYSERR_VI_MGR_SEVM_VCENTER_CONN_FAIL, SYSERR_DB_QUERY_QUEUED, SYSERR_SVC_COMMON_OBJECT_NOT_IN_CACHED_VIEW, SYSERR_ANOMALYZER_NOT_ENOUGH_SAMPLES, SYSERR_INVAL, SYSERR_METRICS_TOO_MANY_MSG_ACROSS_ENTITIES, SYSERR_RM_RES_NOT_NEEDED, SYSERR_OUT_OF_MEMORY, SYSERR_VS_INVALID_OBJECT, SYSERR_RM_VS_SE_VNIC_ADD_IN_PROG, SYSERR_RM_RES_VIP_REACH_LOST, SYSERR_NO_MULTICAST_RECEIVERS, SYSERR_RM_AWAIT_VM_CREATE, SYSERR_VI_MGR_SEVM_SET_MGMT_IP_FAILED, SYSERR_AUTOSCALEIN_FAILED_LIMIT_EXCEEDED, SYSERR_DB_UPDATE_FAILED, SYSERR_RM_RES_UNAVAIL_NOTIFY, SYSERR_VS_NOT_PRESENT, SYSERR_TIMEOUT, SYSERR_RM_VIP_NO_NETWORK, SYSERR_CC_AGENT_VNIC_NO_IPS_AVAILABLE, SYSERR_DESERIALIZATION, SYSERR_RM_VIP_SE_MAX_VS, SYSERR_SEAGENT_OBJ_GRAPHDB_ERROR, SYSERR_AUTOSCALE_REASON_ALERT, SYSERR_VI_MGR_VCENTER_VERSION_MISMATCH, SYSERR_FLEET_API_ERROR, SYSERR_RM_VS_SE_BOOTUP_IN_PROG, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_CPU, SYSERR_SEAGENT_OBJ_DISABLED_RULE_POOL, SYSERR_VS_MIGRATE_ERROR, SYSERR_CC_SVC_Q_FULL, SYSERR_MESOS_DISCOVERY_DEPLOYMENT_FAIL, SYSERR_RM_CONSUMER_NOT_FOUND, SYSERR_VS_SCALEIN_ERROR, SYSERR_VI_MGR_SEVM_VNIC_FAILURE_QUESTION, SYSERR_RM_REACHABILITY_FAILED, SYSERR_AUTOSCALE_IGNORED_AS_WITHIN_COOLDOWN, SYSERR_RM_ALL_SE_IN_SE_GRP_MAX_VS, SYSERR_SE_MGR_UNKNOWN_SE, SYSERR_OS_AGENT_Q_FULL, SYSERR_AUTOSCALE_REASON_ORCHESTRATION_FAILED, SYSERR_RM_QUERY_HOST_IN_PROGRESS, SYSERR_RM_NETWORK_NOT_FOUND, SYSERR_RM_RES_INFRA_DELETED, SYSERR_CC_AGENT_VNIC_NO_SUBNETWORK, SYSERR_RM_ALL_SE_IN_SE_GRP_USED, SYSERR_SEAGENT_OBJ_DP_ERROR, SYSERR_VI_MGR_SEVM_CREATE_FAIL_DUPLICATE_NAME, SYSERR_AUTOSCALE_REASON_INTELLIGENT_AUTOSCALE, SYSERR_VS_NOT_ENOUGH_RESOURCES, SYSERR_VS_NOT_BOUND, SYSERR_VS_SE_NOT_AVAILABLE, SYSERR_DATASTORE_UNKNOWN_FAILURE, SYSERR_INVALID_HEALTH_MONITOR_TYPE, SYSERR_RPC_TIMED_OUT, SYSERR_RM_VNIC_IP_FAILURE, SYSERR_CC_AGENT_VNIC_FAILURE, SYSERR_RM_PARTIAL_SE_FOUND, SYSERR_CC_SVC_INVALID_DATA, SYSERR_RM_NO_SE_IN_SE_GRP, SYSERR_RM_SE_MGMT_NO_STATIC_IPS_CONFIGURED, SYSERR_VI_MGR_SEVM_CREATE_NO_HOST, SYSERR_RM_NO_SUITABLE_HOST, SYSERR_RPC_CANCELED_BY_TRANSACTION_CLEANUP, SYSERR_CC_AGENT_DECONFIG_FAILURE, SYSERR_RM_NO_SE_IN_SE_GRP_VIP_ACC, SYSERR_AUTOSCALE_ORCHESTRATION_TIMEOUT, SYSERR_DB_QUERY_FAILED, SYSERR_VI_MGR_SEVM_FLAVOR_UNAVAIL, SYSERR_MARATHON_INACCESSIBLE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_MGMT_NW, SYSERR_SE_MGR_UNKNOWN_STATE_TRANSITION, SYSERR_SEAGENT_OBJ_AWAITING_DP_PROGRAMMING, SYSERR_CC_AGENT_ABSENT, SYSERR_RM_INSUFFICIENT_BUFFER_SE, SYSERR_RM_BOOTUP_FAILURE, SYSERR_ENQUEUE, SYSERR_RM_ALL_SE_INSE_GRP_DISABLED, SYSERR_SE_UPGRADE_IN_PROGRESS, SYSERR_OS_AGENT_INVALID_DATA, SYSERR_DATASTORE_REFERENCE_DOES_NOT_EXIST, SYSERR_RM_SRVR_NO_NETWORK, SYSERR_CC_OS_AGENT_NEUTRON_HOST_ACCESSERR, SYSERR_RPC_CANCELED_BY_CLIENT, SYSERR_VI_MGR_SEVM_CREATE_NO_IMAGE, SYSERR_RM_CONSUMER_RESOURCES_SATISFIED, SYSERR_MESOS_SSH_CMD_TIMEOUT, SYSERR_VI_MGR_SEVM_TIMED_OUT, SYSERR_DATASTORE_OBJECT_DOES_NOT_EXIST, SYSERR_RM_RELEASE_SE_UNAVAIL, SYSERR_IO, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_MGMT_NW_PORTS, SYSERR_RM_RES_CONN_LOST, SYSERR_VS_VNIC_FAILURE, SYSERR_DB_CACHE_TBL_NOT_FOUND, SYSERR_SEAGENT_OBJ_INACTIVE, SYSERR_CC_AGENT_GENERIC_FAILURE, SYSERR_MESOS_SSH_FAILURE, SYSERR_OS_AGENT_OPENSTACK_RESOURCEERR, SYSERR_RUM_TOOMANYSAMPLES, SYSERR_NO_ENT, SYSERR_RM_DATA_DHCP_FAILURE, SYSERR_RPC_CONNECT_FAILED, SYSERR_SUCCESS, SYSERR_VS_AWAIT_STATIC_SE, SYSERR_VS_MIGRATE_SCALEIN_ERROR, SYSERR_RM_MULT_SE_CRASH, SYSERR_METRICS_TOO_MANY_MSG, SYSERR_RM_RES_NOT_INUSE, SYSERR_RM_PARENT_SE_MAX_VS, SYSERR_VI_MGR_SEVM_CREATE_FAIL_ABORTED, SYSERR_QUEUE_TRANSPORT_FAILURE, SYSERR_RM_VIP_SE_PENDING_OP, SYSERR_CC_AGENT_RESOURCEERR, SYSERR_SE_MGR_VNIC_ALLOC_FAIL, SYSERR_DATASTORE_LOCK_FAILURE, SYSERR_AUTOSCALE_REASON_TOO_MANY_SERVERS, SYSERR_RM_VS_SE_CREATE_IN_PROG, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_HW_INFO, SYSERR_VS_DELETE_WHILE_STILL_BEING_REFERRED, SYSERR_VS_SERVICE_ENGINE_DOWN, SYSERR_CC_AGENT_ACCESSERR, SYSERR_QUEUE_RETRY_TASK, SYSERR_RM_VS_PROCESSING, SYSERR_VI_MGR_SEVM_CREATE_LIMIT_REACHED, SYSERR_VS_SCALEOUT_ERROR, SYSERR_MESOS_SSH_NOTFOUND, SYSERR_INVALID_METHOD, SYSERR_CONTROLLER_NOT_READY, SYSERR_OS_AGENT_TENANT_ABSENT, SYSERR_RM_UNKNOWN_SE_GROUP, SYSERR_VS_INVALID_METHOD, SYSERR_RM_MULT_MGMT_SUBNET, SYSERR_RM_NO_MGMT_SUBNET, SYSERR_MARATHON_APP_TERMINATED, SYSERR_CC_AGENT_SCALE_IN_FAILED, SYSERR_AUTOSCALE_REASON_NOT_ENOUGH_SERVERS, SYSERR_RM_STATIC_POOL_EXHAUSTED, SYSERR_VS_INVALID_REQUEST, SYSERR_ACCESS, SYSERR_VS_MIN_SE_NOT_ASSIGNED, SYSERR_CC_AGENT_CONFIG_FAILURE, SYSERR_DATASTORE_TBL_NOT_EXIST, SYSERR_VI_MGR_SEVM_VNIC_MAC_ADDR_ERROR, SYSERR_VI_MGR_SEVM_VNIC_NO_PG_PORTS, SYSERR_MESOS_DISCOVERY_TIMEOUT, SYSERR_SEAGENT_OBJ_ACTIVE, SYSERR_VS_INTERNAL_ERROR, SYSERR_VI_MGR_SEVM_VNIC_FAILURE, SYSERR_RM_MAX_SE_CREATE_ATTEMPTS, SYSERR_VI_MGR_SEVM_INVALID_DATA, SYSERR_WARM_START_IN_PROGRESS, SYSERR_RM_RES_USER_REBOOTED, SYSERR_RM_AWAIT_BOOTUP, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_PROGRESS, SYSERR_RM_VIP_MULT_NETWORKS, SYSERR_RM_SE_MGMT_STATIC_IPS_EXHAUSTED, SYSERR_DATASTORE_TRANSPORT_FAILURE, SYSERR_VERSION_MISMATCH, SYSERR_RM_RESOURCE_NOT_FOUND, SYSERR_NOT_SUPPORTED, SYSERR_AUTOSCALE_REASON_CONFIG_UPDATE, SYSERR_CC_AGENT_UNINITIALIZED, SYSERR_CC_AGENT_TENANT_ABSENT, SYSERR_VI_MGR_SEVM_CREATE_FAIL_MULTIPLE_MGMT_NW, SYSERR_OS_AGENT_OPENSTACK_UNINITIALIZED, SYSERR_RM_NO_SE_IN_SE_GRP_SRVR_ACC, SYSERR_VI_MGR_LOGIN_FAIL_USER_CREDENTIALS, SYSERR_MESOS_SSH_ABORTED, SYSERR_SEAGENT_EASTWEST_VS_SUBNET_ERROR, SYSERR_VI_MGR_SEVM_DELETED, SYSERR_VI_MGR_SEVM_CREATE_ACCESS_ERROR, SYSERR_VI_MGR_SEVM_VNIC_NO_VM, SYSERR_VI_MGR_SEVM_VINFRA_UNINITIALIZED, SYSERR_SE_MGR_SE_OFFLINE_HB_FAILURE, SYSERR_RM_MAX_SE_IN_GRP, SYSERR_RM_RES_CRASHED, SYSERR_BAD_REQUEST, SYSERR_RM_ALL_SE_IN_SE_GRP_DOWN, SYSERR_DATASTORE_DB_LOCKED, SYSERR_VI_MGR_SEVM_DELETE_FAILURE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_NO_MEM, SYSERR_SERIALIZATION, SYSERR_CC_AGENT_TENANT_ACCESSERR, SYSERR_RM_RES_UNAVAIL, SYSERR_RM_MGMT_DHCP_FAILURE, SYSERR_VI_MGR_SEVM_NO_SOURCE_CLONE, SYSERR_RM_PENDING_VNIC_OP, SYSERR_RM_MAX_PARALLEL_SE_CREATE, SYSERR_VI_MGR_SEVM_CREATE_FAIL_OVF_ERROR, SYSERR_TEST1, SYSERR_RM_CANNOT_ADD_VNICS, SYSERR_TEST2, SYSERR_RM_STATIC_NO_POOL, SYSERR_VS_SE_ASSIGNMENT_FAILED, SYSERR_RM_SE_GRP_PENDING_OP, SYSERR_SE_NOT_CONNECTED, SYSERR_RM_RES_USER_DELETED, SYSERR_NOT_READY, SYSERR_CC_AGENT_NOT_IMPLEMENTED, SYSERR_RM_NO_SE_FOUND, SYSERR_VI_MGR_LOGIN_FAIL_NO_VCENTER, SYSERR_VI_MGR_SEVM_VINFRA_FAILURE, SYSERR_VS_DISABLED, SYSERR_RM_AWAIT_VNIC_ADD, SYSERR_VI_MGR_SEVM_CREATE_FAILURE, SYSERR_AUTOSCALEOUT_FAILED_LIMIT_EXCEEDED, SYSERR_DB_QUERY_BATCHED, SYSERR_RM_SRVR_MULT_NETWORKS, SYSERR_VI_MGR_SEVM_VNIC_SUCCESS, SYSERR_CC_AGENT_NON_INFRA_SEVM, SYSERR_VI_MGR_SEVM_CREATE_NO_HOST_VM_NETWORK, SYSERR_RM_PARENT_SE_GRP_MISMATCH

last_attach_ip_fail_ticks

Type
uint32
Category
optional
Description

floating_intf_ip

Type
IpAddr
Category
repeated
Description

Filters

ConnectionFilter

conn_type

Type
enum
Category
optional
Description
frontend, backend, or both
Choices
BOTH, FRONTEND, BACKEND

ip_addr

Type
string
Category
optional
Description
Ip address of either src or dst in dotted decimal

port

Type
uint32
Category
optional
Description
Src port or Dst Port

ip_mask

Type
string
Category
optional
Description
Ip mask in dotted decimal

ListeningsockFilter

listening_ports

Type
bool
Category
optional
Description
Listening sockets only

CorenumFilter

core_num

Type
string
Category
optional
Description
Core number

FlowtableIntfFilter

mac

Type
string
Category
optional
Description
Mac address

intfname

Type
string
Category
optional
Description
Interface name

core_num

Type
string
Category
optional
Description
Core num

SeParamsFilter

primary_only

Type
bool
Category
optional
Description
Only from primary se

disable_aggregate

Type
enum
Category
optional
Description
Do not aggregate at SE or CORE level
Choices
CORE, SE

se_uuid

Type
string
Category
optional
Description
Only from this se

all_se

Type
bool
Category
optional
Description
Report from all SEs overriding disable_aggregate field. If there are more than max scale out SEs, then this filter pops an error message to use a specific SE
Default
False

SeMicroServiceFilter

microservice_uuid

Type
string
Category
optional
Description
Filter based on micro service

container_key

Type
ContainerTaskIdFilterKey
Category
repeated
Description

ContainerTaskIdFilterKey

task_id

Type
string
Category
optional
Description
Task Id

microservice_ref

Type
Reference to MicroService
Category
optional
Description
Micro Service

SeMetricsFilter

se_uuid

Type
string
Category
required
Description
Filter based on service engine

VsMetricsFilter

vs_uuid

Type
string
Category
required
Description
Filter based on virtual service

obj_id

Type
string
Category
optional
Description
Filter based on VIP:port or pool_uuid:ip:port

FlowtableEntryFilter

src_ip_addr

Type
IpAddr
Category
optional
Description
Source IP address

src_ip_mask

Type
IpAddr
Category
optional
Description
Source IP address mask

src_port

Type
int32
Category
optional
Description
Source port range 1

src_port_hi

Type
int32
Category
optional
Description
source port range 2

dst_ip_addr

Type
IpAddr
Category
optional
Description
Destination IP address

dst_ip_mask

Type
IpAddr
Category
optional
Description
Destination IP address mask

dst_port

Type
int32
Category
optional
Description
Dst port range 1

dst_port_hi

Type
int32
Category
optional
Description
Dst port range 2

intfname

Type
string
Category
optional
Description
Interface name

core_num

Type
string
Category
optional
Description
Core num

protocol_str

Type
string
Category
optional
Description
Protocol type (tcp | udp)