tencent cloud

PrevNext

피드백

키워드를 검색하세요

Recent Pages

문서
Cloud Access Management
    문서
    Download PDF

    Cloud Load Balancer

    마지막 업데이트 시간:2024-11-26 09:52:20
    PDF 다운로드

      Fundamental information

      Product Abbreviation in CAM Console Authorization by Tag Authorization Granularity IP Restriction
      Cloud Loader Balance clb Supported Supported Resource level Partially supported

      Note：

      The authorization granularity of cloud products is divided into three levels: service level, operation level, and resource level, based on the degree of granularity.

      • Service level: It defines whether a user has the permission to access the service as a whole. A user can have either full access or no access to the service. For the authorization granularity of cloud products at service level, the authorization of specific APIs are not supported.
      • Operation level: It defines whether a user has the permission to call a specific API of the service. For example, granting an account read-only access to the CVM service is an authorization at the operation level.
      • Resource level: It is the finest authorization granularity which defines whether a user has the permission to access specific resources. For example, granting an account read/write access to a specific CVM instance is an authorization at the resource level.

      API authorization granularity

      Two authorization granularity levels of API are supported: resource level, and operation level.

      • Resource level: It supports the authorization of a specific resource.
      • Operation level: It does not support the authorization of a specific resource. If the policy syntax restricts a specific resource during authorization, CAM will determine that this API is not within the scope of authorization, and deem it as unauthorized.

      Write operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      AddCustomizedConfig Add customized configuration Operation level * Supported
      AddGatewayAclRule Add GatewayAclRule Operation level * Supported
      AssociateCustomizedConfig Association configuration to server or location Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerId Supported
      AssociateGatewayAclGroup Associate GatewayAclGroup Resource level qcs::clb:${region}:uin/${uin}:gwlb/${loadbalanceid} Supported
      AutoRewrite auto rewrite Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerId Supported
      BatchDeregisterTargets BatchDeregisterTargets Operation level * Supported
      BatchModifyTargetTag Batch modify weight of targets Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid
      qcs::clb:${region}:uin/${uin}:instance/$cvminstanceid
      qcs::clb:${region}:uin/${uin}:eni/$eniid      		 Supported
      BatchModifyTargetWeight Batch modify weight of targets Resource level qcs::clb:$region::clb/$loadbalancerid
      qcs::cvm:$region::instance/$cvminstanceid
      qcs::vpc:$region::eni/$eniid      		 Supported
      BatchRegisterTargets Bind real servers in batches Operation level * Supported
      CloneLoadBalancer CloneLoadBalancer Resource level qcs::clb::uin/${uin}:clb/$loadbalancerid Supported
      CreateClsLogSet Create CLB proprietary log set Operation level * Supported
      CreateDashBoard Create dashboard Operation level * Supported
      CreateForwardLBFourthLayerListeners Operation level * not supported
      CreateForwardLBListenerRules Operation level * not supported
      CreateForwardLBSeventhLayerListeners Operation level * not supported
      CreateGatewayAclGroup Create GatewayAclGroup Operation level * Supported
      CreateGatewayLoadBalancer Create Gateway LoadBalancer Instance Resource level qcs::clb:${region}:uin/${uin}:gwlb/${loadbalanceid} Supported
      CreateListener CreateListener Resource level qcs::clb:${Region}:uin/${uin}:clb/$loadbalancerid Supported
      CreateListenerRules CreateListenerRules Resource level qcs::clb:$region::clb/$loadbalancerid
      qcs::clb:$region::listener/$listenerid
      qcs::cvm:$region::instance/$cvminstanceid
      qcs::clb:$region::targetgroup/$targetgroup
      qcs::vpc:$region::eni/$eniid      		 Supported
      CreateLoadBalancerListeners Create load balancer listeners. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      CreateLoadBalancerSnatIps add SnatIp Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      CreateLoadBalancerTask Create loadBalancer asynchronous task Operation level * Supported
      CreateRule Create rule. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      CreateTargetGroup CreateTargetGroup Operation level * Supported
      CreateTopic CreateTopic Operation level * Supported
      DeleteCustomizedConfig Remove customized configuration Operation level * Supported
      DeleteForwardLBListener Operation level * not supported
      DeleteForwardLBListenerRules Operation level * not supported
      DeleteForwardLBSeventhListeners Operation level * not supported
      DeleteGatewayAclGroup Delete GatewayAclGroup Operation level * Supported
      DeleteGatewayAclRule Delete GatewayAclRule Operation level * Supported
      DeleteGatewayLoadBalancer delete gateway loadBalance Resource level qcs::clb:${region}:uin/${uin}:gwlb/${loadbalanceid} Supported
      DeleteLBService Operation level * not supported
      DeleteListener This API is used to delete a CLB listener. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      DeleteLoadBalancer Operation level * not supported
      DeleteLoadBalancerListeners Delete load balancer listeners. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      DeleteLoadBalancerSnatIps delete SnatIp Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      DeleteLoadBalancers Operation level * not supported
      DeleteRewrite Delete rewrite. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DeleteRule Delete rule. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      DeleteTargetGroups Delete target group Operation level * Supported
      DeregisterInstancesFromForwardLB Operation level * not supported
      DeregisterInstancesFromForwardLBFourthListener Operation level * not supported
      DeregisterInstancesFromLoadBalancer Operation level * not supported
      DeregisterTargetGroupInstances Remove instances from the target group Operation level * Supported
      DeregisterTargets This API is used to unbind one or more real servers from a CLB listener or forwarding rule Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid
      qcs::vpc:${region}:uin/${uin}:eni/$eniId
      qcs::cvm:${region}:uin/${uin}:instance/$instanceId      		 Supported
      DeregisterTargetsFromClassicalLB This API is used to unbind a CLB real server Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DisassociateCustomizedConfig Unbinding customized configuration Operation level * Supported
      DisassociateGatewayAclGroup Disassociate GatewayAclGroup Resource level qcs::clb:${region}:uin/${uin}:gwlb/${loadbalanceid} Supported
      DisassociateTargetGroups Disassociate regulated target groups Operation level * Supported
      ManualRewrite Manually configure the redirect address. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      MeasureLcuPrice Measure Lcu price Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      MigrateAppIdVIP Migration of loadbalancer VIP among different developers Operation level * Supported
      MigrateClassicalLoadBalancers Migrate classical loadbalancer to loadbalancer Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      ModifyBlockIPList Modify the blacklist of IP blocking for loadbalancer Operation level * not supported
      ModifyCustomizedConfig Modify customized configuration Operation level * Supported
      ModifyDnat ModifyDnat Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      ModifyDomain This API (ModifyDomain) is used to modify a domain name under a layer-7 CLB listener. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      ModifyDomainAttributes ModifyDomainAttributes Resource level * Supported
      ModifyExclusiveClustersAttributes Modifies exclusive cluster attribute Resource level qcs::clb::uin/${uin}:cluster/${clusterId} Supported
      ModifyForwardFourthBackendsPort Operation level * not supported
      ModifyForwardFourthBackendsWeight Operation level * not supported
      ModifyForwardLBFourthListener Operation level * not supported
      ModifyForwardLBName Operation level * not supported
      ModifyForwardLBRulesDomain Operation level * not supported
      ModifyForwardLBSeventhListener Operation level * not supported
      ModifyForwardSeventhBackends Operation level * not supported
      ModifyForwardSeventhBackendsPort Operation level * not supported
      ModifyGatewayAclGroup Modify GatewayAclGroup Operation level * Supported
      ModifyGatewayLoadBalancerAttribute Modify GatewayLoadBalancer Attribute Resource level qcs::clb:${region}:uin/${uin}:gwlb/${loadbalanceid} Supported
      ModifyLBHealth Modify the load balancing health check threshold Operation level * not supported
      ModifyLBNetwork Modify the bandwidth of the load balancer Operation level * not supported
      ModifyLBOperateProtect Modify LoadBalancer operate protect Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      ModifyLBProjectId Modify project ID Operation level * not supported
      ModifyLBWeight Operation level * not supported
      ModifyListener ModifyListener Resource level qcs::clb:${Region}:uin/${uin}:clb/$loadbalancerid Supported
      ModifyLoadBalancerBackends Operation level * not supported
      ModifyLoadBalancerListener Operation level * not supported
      ModifyLoadBalancerMixIpTarget ModifyLoadBalancerMixIpTarget Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      ModifyLoadBalancerRulesProbe Operation level * not supported
      ModifyLoadBalancerSla Modify the load balancing configuration of performance guarantee type Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      ModifyQuota ModifyQuota Operation level * Supported
      ModifyRule ModifyRule Operation level * not supported
      ModifyTargetGroupAttribute Modify target group attributes Operation level * Supported
      ModifyTargetGroupInstancesPort Modify instance port in target group Operation level * Supported
      ModifyTargetGroupInstancesWeight Modify the instance weight in the target group Operation level * Supported
      ModifyTargetPort Modify target port. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      ModifyTargetWeight Modify target weight . Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      RefundLcuPackage Refund LCU Package Resource level qcs::clb::uin/${uin}:lcu/$lcupackageId not supported
      RegisterInstancesWithForwardLBFourthListener Operation level * not supported
      RegisterInstancesWithForwardLBSeventhListener Operation level * not supported
      RegisterInstancesWithLoadBalancer Operation level * not supported
      RegisterTargets Register targets. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid
      qcs::vpc:${region}:uin/${uin}:eni/$eniId
      qcs::cvm:${region}:uin/${uin}:instance/$instanceId      		 Supported
      RegisterTargetsWithClassicalLB Register targets with classical LoadBalance. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      ReplaceCert Replace old certificate with new one Operation level * not supported
      ReplaceCertForLoadBalancers Replace certificate Operation level * Supported
      SetAutomaticRewrite auto rewrite Operation level * not supported
      SetCustomizedConfigForLoadBalancer SetCustomizedConfigForLoadBalancer Operation level * Supported
      SetListenerReschedule SetListenerReschedule Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      SetLoadBalancerClsLog Add, delete, and update load balancing log service (CLS) topics Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      SetLoadBalancerCrossRegion Operation level * not supported
      SetLoadBalancerLog Set CLB Log. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      SetLoadBalancerSecurityGroups SetLoadBalancerSecurityGroups Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      SetLoadBalancerStartStatus SetLoadBalancerStartStatus Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      SetManualRewrite Manually configure the redirect address. Resource level qcs::clb:${Region}:uin/${uin}:clb/$loadbalancerid not supported
      SetSecurityGroupForLoadbalancers SetSecurityGroupForLoadbalancers Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      SetSecurityGroupToLoadBalancers Set security group for load balancer Operation level * not supported
      SetSecurityGroups Operation level * not supported
      SetSeventhListenerDomainAttributes Operation level * not supported
      UnbindTrigger unbind scf from layer 7 listener Operation level * Supported
      UpgradeDomain Upgrade CLB to domain CLB. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      UpgradeTargets UpgradeTargets Resource level qcs::clb::uin/${uin}:clb/$loadbalancerid Supported

      Read operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      AssociateTargetGroups Operation level * Supported
      CheckCustomizedConfig Verify customized configuration Operation level * Supported
      CheckLcuUpgrade Check the load balancing configuration of performance guarantee type Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      CreateLoadBalancer Create LoadBalancer Operation level * not supported
      DescribeAllLBBackends Operation level * not supported
      DescribeBlockIPList Query a list of IP blocked by loadbalancer. Resource level qcs::clb:$region::clb/$loadbalancerid not supported
      DescribeBlockIPTask Query the execution status of asynchronous tasks blocking IP Operation level * not supported
      DescribeCLBWhiteList Describe LoadBalancer whitelist Operation level * Supported
      DescribeClassicalLBByInstanceId Find traditional loadbalancers through back end target Operation level * Supported
      DescribeClassicalLBHealthStatus Describe classical LoadBalance targets. Resource level qcs::clb::uin/${uin}:clb/$loadbalancerid Supported
      DescribeClassicalLBListeners DescribeClassicalLBListeners Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerId Supported
      DescribeClassicalLBTargets Describe classical LoadBalance targets. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeClsLogSet Gets the CLB specific log set of the user Operation level * Supported
      DescribeClusterResources Query the list of resources in the exclusive cluster. Operation level * Supported
      DescribeCrossTargets Query information of cross targets Operation level * Supported
      DescribeCustomizedConfig Query customized configuration Operation level * not supported
      DescribeCustomizedConfigContent Query the content of customized configuration Operation level * Supported
      DescribeCustomizedConfigLBAssociateList Query the customized configuration list of CLB binding Operation level * Supported
      DescribeCustomizedConfigList Query customized configuration list Operation level * Supported
      DescribeExclusiveClusters Query cluster information list Resource level qcs::clb::uin/${uin}:cluster/${clusterId} not supported
      DescribeForwardLBBackends Operation level * not supported
      DescribeForwardLBHealthStatus Operation level * not supported
      DescribeForwardLBListeners Operation level * not supported
      DescribeIdleLoadBalancers Describe Idle LoadBalancers Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeLBActionLimit Query the quota of CLB related operations Operation level * Supported
      DescribeLBConfLimit DescribeLBConfLimit Operation level * Supported
      DescribeLBFlowLimit DescribeLBFlowLimit Operation level * Supported
      DescribeLBHealth Query the LB health check threshold Operation level * not supported
      DescribeLBHealthStatus Operation level * not supported
      DescribeLBHealthStatusMc Operation level * not supported
      DescribeLBListeners DescribeLBListeners Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeLBOperateProtect Describe LoadBalancer operate protect info Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeLcuPackageDeduction Describe LCU Package Deduction Operation level * not supported
      DescribeLcuPackages Describe LcuPackages Operation level * not supported
      DescribeLcuPriceResult Query asynchronous task results Operation level * Supported
      DescribeListeners DescribeListeners Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      DescribeLoadBalancerBackends Operation level * not supported
      DescribeLoadBalancerClsLog Query application layer CLS log of loadbalancer Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      DescribeLoadBalancerErrLog Query loadbalancer error log Operation level * Supported
      DescribeLoadBalancerListByCertId Query loadbalancers through certificate ID Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeLoadBalancerListeners Operation level * not supported
      DescribeLoadBalancerLog Operation level * not supported
      DescribeLoadBalancerLogByCursor Query the full application level logs of load balancing through cursors Operation level * not supported
      DescribeLoadBalancerTraffic Query high traffic loadbalancers Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeLoadBalancerWafErrLog Query load balancing error log for WAF Operation level * Supported
      DescribeLoadBalancers DescribeLoadBalancers Resource level qcs::clb::uin/${uin}:clb/$loadbalancerid not supported
      DescribeLoadBalancersCount Query the number of load balancers by Region Operation level * not supported
      DescribeLoadBalancersFeature Get the functions supported by the load balancing instance Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerId Supported
      DescribeLoadBalancersForVpc Query loadbalancer instance (basic information) Resource level qcs::clb::uin/${uin}:clb/$loadbalancerId Supported
      DescribeMasterZones Query master zones of a region Operation level * Supported
      DescribeQuota Query the quotas in the current region. Operation level * not supported
      DescribeRegions Query user supported region list Operation level * Supported
      DescribeResources Query the list of zones and resources supported by users in the current region Operation level * Supported
      DescribeRewrite Describe rewrite. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      DescribeSetByVip Query the exclusive cluster information of loadbalancer Operation level * Supported
      DescribeSetCapacity Query exclusive cluster capacity information Operation level * Supported
      DescribeSetVip Query the information of all load balancers in the exclusive cluster Operation level * Supported
      DescribeSets Query exclusive cluster list Operation level * Supported
      DescribeSingleIsp DescribeSingleIsp Operation level * Supported
      DescribeSlaCapacity Query specification parameters of performance guarantee type load balancing Operation level * Supported
      DescribeTargetGroupInstanceStatus Describe TargetGroupInstance Status Resource level qcs::clb:${region}:uin/${uin}:targetgroup/$targetgroup Supported
      DescribeTargetGroupInstances Get the server bound to the target group Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeTargetGroupList Get target group list Operation level * Supported
      DescribeTargetGroups Query target group infomation Operation level * Supported
      DescribeTargetHealth DescribeTargetHealth Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerId not supported
      DescribeTargetHealthDetail DescribeTargetHealthDetail Resource level qcs::clb:$region::clb/$loadbalancerid Supported
      DescribeTargets Describe targets. Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      DescribeTargetsByVips Query the target service information bound on the load balancing according to the public VIP Resource level qcs::clb::uin/${uin}:clb/$loadbalancerid Supported
      DescribeTaskStatus Query asynchronous task status Operation level * not supported
      DescribeZone Query zone list of a region Operation level * Supported
      DescribeZoneSla Query the loadbalancer specification of the currently supported performance guarantee type Operation level * Supported
      InquirePriceCreateLcuPackage Loadbalancer CU package inquiry (create) Operation level * Supported
      InquirePriceCreateLoadBalancer Loadbalancer inquiry (create) Operation level * not supported
      InquirePriceModifyLoadBalancer Prepaid load balancing inquiry (modify configuration) Resource level qcs::clb:${Region}:uin/${uin}:clb/$loadbalancerid not supported
      InquirePriceRefundLcuPackage LoadBalance CU inquiry (refund) Resource level qcs::clb::uin/${uin}:lcu/$lcupackageId Supported
      InquirePriceRefundLoadBalancer Load balancing inquiry (refund) Resource level qcs::clb:${Region}:uin/${uin}:clb/$loadbalancerid not supported
      InquirePriceRenewLoadBalancer Load balancing inquiry (renew) Resource level qcs::clb:${Region}:uin/${uin}:clb/$loadbalancerid not supported
      InquiryPriceCreateLoadBalancer Loadbalancer inquiry (create) Operation level * Supported
      InquiryPriceModifyLoadBalancer Prepaid load balancing inquiry (modify configuration) Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      InquiryPriceRefundLoadBalancer Load balancing inquiry (refund) Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      InquiryPriceRenewLoadBalancer Load balancing inquiry (renew) Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid Supported
      ModifyLoadBalancerAttributes ModifyLoadBalancerAttributes Resource level qcs::clb:${region}:uin/${uin}:clb/$loadbalancerid not supported
      RegisterTargetGroupInstances RegisterTargetGroupInstances Operation level * Supported

      Other Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      CreateLcuPackage Create LCU Package Operation level * not supported

      List Operations

      API API Description Authorization Granularity Six-segment Resource Description IP Restriction
      DescribeGatewayAclGroups Describe GatewayAclGroups Operation level * Supported
      DescribeGatewayAclRules Describe GatewayAclRules Operation level * Supported
      DescribeGatewayLoadBalancers describe gateway loadbalancers Resource level qcs::clb:${region}:uin/${uin}:gwlb/${loadbalanceid} Supported
      DescribeLoadBalancersDetail DescribeLoadBalancersDetail Resource level qcs::clb:$region::clb/$loadbalancerid not supported
      문의하기

      고객의 업무에 전용 서비스를 제공해드립니다.

      문의하기
      기술 지원

      더 많은 도움이 필요하시면, 티켓을 통해 연락 바랍니다. 티켓 서비스는 연중무휴 24시간 제공됩니다.

      티켓 제출
      연중무휴 24시간 전화 지원
      Copyright © 2013-2024 Tencent Cloud. All Rights Reserved.
      개인정보 처리방침서비스 약관쿠키 정책