tencent cloud

All product documents
APIs
DocumentationAPIsTencent Cloud LighthouseFirewall APIsCreateFirewallRules
CreateFirewallRules
Last updated: 2023-12-04 16:32:01
CreateFirewallRules
Last updated: 2023-12-04 16:32:01

1. API Description

Domain name for API request: lighthouse.tencentcloudapi.com.

This API is used to add a firewall rule on an instance.

  • FirewallVersion is the firewall version number. Every time you update the firewall rule version, it will be automatically increased by 1 to prevent the updated rule from expiring. If it is left empty, conflicts will not be considered.

In the FirewallRules parameter:

  • Valid values of the Protocol field include TCP, UDP, ICMP, and ALL.
  • For the Port field, you can enter only ALL, a single port number, several port numbers separated by commas, or a port range indicated by two port numbers separated by a minus sign. If Port is a range, the port number on the left of the minus sign must be smaller than the one on the right. If Protocol is not TCP or UDP, Port can only be empty or ALL. The length of the Port field cannot exceed 64 characters.
  • For the CidrBlock field, you can enter any string that conforms to the CIDR format standard. Multi-Tenant network isolation rules take precedence over private network rules in the firewall.
  • For the Action field, you can enter only ACCEPT or DROP.
  • The length of the FirewallRuleDescription field cannot exceed 64 characters.

A maximum of 10 requests can be initiated per second for this API.

We recommend you to use API Explorer
Try it
API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

2. Input Parameters

The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

Parameter Name Required Type Description
Action Yes String Common Params. The value used for this API: CreateFirewallRules.
Version Yes String Common Params. The value used for this API: 2020-03-24.
Region No String Common Params. This parameter is not required for this API.
InstanceId Yes String Instance ID.
FirewallRules.N Yes Array of FirewallRule Firewall rule list.
FirewallVersion No Integer Current firewall version number. Every time you update the firewall rule version, it will be automatically increased by 1 to prevent the rule from expiring. If it is left empty, conflicts will not be considered.

3. Output Parameters

Parameter Name Type Description
RequestId String The unique request ID, which is returned for each request. RequestId is required for locating a problem.

4. Example

Example1 Adding firewall rule

Input Example

https://lighthouse.tencentcloudapi.com/?Action=CreateFirewallRules
&InstanceId=lhins-aglzynfg
&FirewallRules.0.Protocol=TCP
&FirewallRules.0.Port=80
&FirewallRules.1.Protocol=UDP
&FirewallRules.1.Port=22,443
&FirewallRules.2.Protocol=TCP
&FirewallRules.2.Port=8000-8080
&<Common request parameters>

Output Example

{
    "Response": {
        "RequestId": "667cc0c1-fa3e-4752-a36b-4bf45ec4bc7d"
    }
}

5. Developer Resources

SDK

TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

Command Line Interface

6. Error Code

The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.

Error Code Description
FailedOperation Operation failed.
FailedOperation.FirewallRulesOperationFailed Failed to manipulate the firewall rule.
FailedOperation.RequestError A request error occurred.
InternalError.RequestError There was an error in the request.
InvalidParameter.FirewallRulesDuplicated Invalid parameter: the firewall rule is duplicated.
InvalidParameter.FirewallRulesExist Invalid parameter: the firewall rule already exists.
InvalidParameterValue.Duplicated Invalid parameter value: duplicate values are not allowed.
InvalidParameterValue.FirewallRuleDescriptionTooLong The length of the firewall rule description exceeds the limit.
InvalidParameterValue.InstanceIdMalformed Invalid parameter value: the instance ID format is invalid.
InvalidParameterValue.LimitExceeded Invalid parametric value: the number of parameter values exceeds the upper limit.
LimitExceeded.FirewallRulesLimitExceeded The firewall rule quota is exceeded.
ResourceNotFound.FirewallNotFound The firewall does not exist.
ResourceNotFound.InstanceIdNotFound The instance ID does not exist.
UnauthorizedOperation.NoPermission No permission
UnsupportedOperation.FirewallBusy The firewall is busy.
UnsupportedOperation.FirewallVersionMismatch The specified firewall version number does not match the current version.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Contact Us
Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

Submit a Ticket
7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon