Examples of creating fast_acl_rule

Usecase:

Create fast-acl-rule-black-list-deny to deny traffic from source IPs defined black list by ves-io tenant

Request using vesctl:

vesctl configuration create fast_acl_rule -i fast_acl_rule.yaml

where file fast_acl_rule.yaml has following contents (fast_acl_rule.CreateRequest):

RequestJSON:

{"metadata":{"name":"fast-acl-rule-black-list-deny","namespace":"system"},"spec":{"action":{"simple_action":"DENY"},"ip_prefix_set":{"ref":[{"kind":"ip_prefix_set","tenant":"ves-io","namespace":"shared","name":"ddos-black-list"}]}}} `

vesctl yaml response:

ResponseJSON:

  "metadata": {
    "name": "fast-acl-rule-black-list-deny",
    "namespace": "system",
    "labels": {
    },
    "annotations": {
    },
    "description": "",
    "disable": false
  },
  "system_metadata": {
    "uid": "63ef068b-a4ae-42fa-8049-6d2c094b54ae",
    "creation_timestamp": "2022-07-28T12:10:05.159730023Z",
    "deletion_timestamp": null,
    "modification_timestamp": null,
    "initializers": null,
    "finalizers": [
    ],
    "tenant": "acmecorp",
    "creator_class": "examplesvc",
    "creator_id": "examplesvc",
    "object_index": 0,
    "owner_view": null,
    "labels": {
    }
  },
  "spec": {
    "action": {
      "simple_action": "DENY"
    },
    "port": [
    ],
    "ip_prefix_set": {
      "ref": [
        {
          "kind": "ip_prefix_set",
          "uid": "ffffffff-ffff-ffff-ffff-ffffffffffff",
          "tenant": "ves-io",
          "namespace": "shared",
          "name": "ddos-black-list"
        }
      ]
    }
  }
}```
`

Request using curl:

    

curl -X 'POST' -d '{"metadata":{"name":"fast-acl-rule-black-list-deny","namespace":"system"},"spec":{"action":{"simple_action":"DENY"},"ip_prefix_set":{"ref":[{"kind":"ip_prefix_set","tenant":"ves-io","namespace":"shared","name":"ddos-black-list"}]}}}' -H 'Content-Type: application/json' -H 'X-Volterra-Useragent: v1/pgm=_tmp_go-build1372770011_b001_apidocs.test/host=docker-desktop' 'https://acmecorp.console.ves.volterra.io/api/config/namespaces/system/fast_acl_rules'

curl response:

	

HTTP/1.1 200 OK Content-Length: 966 Content-Type: application/json Date: Thu, 28 Jul 2022 12:10:05 GMT Vary: Accept-Encoding

{ "metadata": { "name": "fast-acl-rule-black-list-deny", "namespace": "system", "labels": { }, "annotations": { }, "description": "", "disable": false }, "system_metadata": { "uid": "63ef068b-a4ae-42fa-8049-6d2c094b54ae", "creation_timestamp": "2022-07-28T12:10:05.159730023Z", "deletion_timestamp": null, "modification_timestamp": null, "initializers": null, "finalizers": [ ], "tenant": "acmecorp", "creator_class": "examplesvc", "creator_id": "examplesvc", "object_index": 0, "owner_view": null, "labels": { } }, "spec": { "action": { "simple_action": "DENY" }, "port": [ ], "ip_prefix_set": { "ref": [ { "kind": "ip_prefix_set", "uid": "ffffffff-ffff-ffff-ffff-ffffffffffff", "tenant": "ves-io", "namespace": "shared", "name": "ddos-black-list" } ] } } }

Usecase:
--------

Create fast-acl-rule-white-list to accept traffic only from tenant created white list
					 

Request using vesctl:

    vesctl configuration create fast_acl_rule -i fast_acl_rule.yaml

where file fast_acl_rule.yaml has following contents (fast_acl_rule.CreateRequest):

	
RequestJSON:

```{"metadata":{"name":"fast-acl-rule-white-list","namespace":"system"},"spec":{"action":{"simple_action":"ALLOW"},"ip_prefix_set":{"ref":[{"kind":"ip_prefix_set","tenant":"acmecorp","namespace":"system","name":"acmecorp-white-list"}]}}}```
`

vesctl yaml response:

	
ResponseJSON:

```{
  "metadata": {
    "name": "fast-acl-rule-white-list",
    "namespace": "system",
    "labels": {
    },
    "annotations": {
    },
    "description": "",
    "disable": false
  },
  "system_metadata": {
    "uid": "05db3bda-97e4-43b5-a600-d62130d81428",
    "creation_timestamp": "2022-07-28T12:10:05.162402428Z",
    "deletion_timestamp": null,
    "modification_timestamp": null,
    "initializers": null,
    "finalizers": [
    ],
    "tenant": "acmecorp",
    "creator_class": "examplesvc",
    "creator_id": "examplesvc",
    "object_index": 0,
    "owner_view": null,
    "labels": {
    }
  },
  "spec": {
    "action": {
      "simple_action": "ALLOW"
    },
    "port": [
    ],
    "ip_prefix_set": {
      "ref": [
        {
          "kind": "ip_prefix_set",
          "uid": "ffffffff-ffff-ffff-ffff-ffffffffffff",
          "tenant": "acmecorp",
          "namespace": "system",
          "name": "acmecorp-white-list"
        }
      ]
    }
  }
}```
`

Request using curl:

    

curl -X 'POST' -d '{"metadata":{"name":"fast-acl-rule-white-list","namespace":"system"},"spec":{"action":{"simple_action":"ALLOW"},"ip_prefix_set":{"ref":[{"kind":"ip_prefix_set","tenant":"acmecorp","namespace":"system","name":"acmecorp-white-list"}]}}}' -H 'Content-Type: application/json' -H 'X-Volterra-Useragent: v1/pgm=_tmp_go-build1372770011_b001_apidocs.test/host=docker-desktop' 'https://acmecorp.console.ves.volterra.io/api/config/namespaces/system/fast_acl_rules'

curl response:

	

HTTP/1.1 200 OK Content-Length: 968 Content-Type: application/json Date: Thu, 28 Jul 2022 12:10:05 GMT Vary: Accept-Encoding

{ "metadata": { "name": "fast-acl-rule-white-list", "namespace": "system", "labels": { }, "annotations": { }, "description": "", "disable": false }, "system_metadata": { "uid": "05db3bda-97e4-43b5-a600-d62130d81428", "creation_timestamp": "2022-07-28T12:10:05.162402428Z", "deletion_timestamp": null, "modification_timestamp": null, "initializers": null, "finalizers": [ ], "tenant": "acmecorp", "creator_class": "examplesvc", "creator_id": "examplesvc", "object_index": 0, "owner_view": null, "labels": { } }, "spec": { "action": { "simple_action": "ALLOW" }, "port": [ ], "ip_prefix_set": { "ref": [ { "kind": "ip_prefix_set", "uid": "ffffffff-ffff-ffff-ffff-ffffffffffff", "tenant": "acmecorp", "namespace": "system", "name": "acmecorp-white-list" } ] } } }