tencent cloud

Feedback

CreateFirewallRules

Last updated: 2023-12-04 16:32:01

    1. API Description

    Domain name for API request: lighthouse.tencentcloudapi.com.

    This API is used to add a firewall rule on an instance.

    • FirewallVersion is the firewall version number. Every time you update the firewall rule version, it will be automatically increased by 1 to prevent the updated rule from expiring. If it is left empty, conflicts will not be considered.

    In the FirewallRules parameter:

    • Valid values of the Protocol field include TCP, UDP, ICMP, and ALL.
    • For the Port field, you can enter only ALL, a single port number, several port numbers separated by commas, or a port range indicated by two port numbers separated by a minus sign. If Port is a range, the port number on the left of the minus sign must be smaller than the one on the right. If Protocol is not TCP or UDP, Port can only be empty or ALL. The length of the Port field cannot exceed 64 characters.
    • For the CidrBlock field, you can enter any string that conforms to the CIDR format standard. Multi-Tenant network isolation rules take precedence over private network rules in the firewall.
    • For the Action field, you can enter only ACCEPT or DROP.
    • The length of the FirewallRuleDescription field cannot exceed 64 characters.

    A maximum of 10 requests can be initiated per second for this API.

    We recommend you to use API Explorer
    Try it
    API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

    2. Input Parameters

    The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

    Parameter Name Required Type Description
    Action Yes String Common Params. The value used for this API: CreateFirewallRules.
    Version Yes String Common Params. The value used for this API: 2020-03-24.
    Region No String Common Params. This parameter is not required for this API.
    InstanceId Yes String Instance ID.
    FirewallRules.N Yes Array of FirewallRule Firewall rule list.
    FirewallVersion No Integer Current firewall version number. Every time you update the firewall rule version, it will be automatically increased by 1 to prevent the rule from expiring. If it is left empty, conflicts will not be considered.

    3. Output Parameters

    Parameter Name Type Description
    RequestId String The unique request ID, which is returned for each request. RequestId is required for locating a problem.

    4. Example

    Example1 Adding firewall rule

    Input Example

    https://lighthouse.tencentcloudapi.com/?Action=CreateFirewallRules
    &InstanceId=lhins-aglzynfg
    &FirewallRules.0.Protocol=TCP
    &FirewallRules.0.Port=80
    &FirewallRules.1.Protocol=UDP
    &FirewallRules.1.Port=22,443
    &FirewallRules.2.Protocol=TCP
    &FirewallRules.2.Port=8000-8080
    &<Common request parameters>
    

    Output Example

    {
        "Response": {
            "RequestId": "667cc0c1-fa3e-4752-a36b-4bf45ec4bc7d"
        }
    }
    

    5. Developer Resources

    SDK

    TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

    Command Line Interface

    6. Error Code

    The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.

    Error Code Description
    FailedOperation Operation failed.
    FailedOperation.FirewallRulesOperationFailed Failed to manipulate the firewall rule.
    FailedOperation.RequestError A request error occurred.
    InternalError.RequestError There was an error in the request.
    InvalidParameter.FirewallRulesDuplicated Invalid parameter: the firewall rule is duplicated.
    InvalidParameter.FirewallRulesExist Invalid parameter: the firewall rule already exists.
    InvalidParameterValue.Duplicated Invalid parameter value: duplicate values are not allowed.
    InvalidParameterValue.FirewallRuleDescriptionTooLong The length of the firewall rule description exceeds the limit.
    InvalidParameterValue.InstanceIdMalformed Invalid parameter value: the instance ID format is invalid.
    InvalidParameterValue.LimitExceeded Invalid parametric value: the number of parameter values exceeds the upper limit.
    LimitExceeded.FirewallRulesLimitExceeded The firewall rule quota is exceeded.
    ResourceNotFound.FirewallNotFound The firewall does not exist.
    ResourceNotFound.InstanceIdNotFound The instance ID does not exist.
    UnauthorizedOperation.NoPermission No permission
    UnsupportedOperation.FirewallBusy The firewall is busy.
    UnsupportedOperation.FirewallVersionMismatch The specified firewall version number does not match the current version.