{"action":"closed","issue":{"url":"https://api.github.com/repos/F5Networks/f5-ansible/issues/641","repository_url":"https://api.github.com/repos/F5Networks/f5-ansible","labels_url":"https://api.github.com/repos/F5Networks/f5-ansible/issues/641/labels{/name}","comments_url":"https://api.github.com/repos/F5Networks/f5-ansible/issues/641/comments","events_url":"https://api.github.com/repos/F5Networks/f5-ansible/issues/641/events","html_url":"https://github.com/F5Networks/f5-ansible/issues/641","id":299044136,"node_id":"MDU6SXNzdWUyOTkwNDQxMzY=","number":641,"title":"Support DDOS profile creation, modify and applying it to virtual ","user":{"login":"vs926p","id":35071951,"node_id":"MDQ6VXNlcjM1MDcxOTUx","avatar_url":"https://avatars1.githubusercontent.com/u/35071951?v=4","gravatar_id":"","url":"https://api.github.com/users/vs926p","html_url":"https://github.com/vs926p","followers_url":"https://api.github.com/users/vs926p/followers","following_url":"https://api.github.com/users/vs926p/following{/other_user}","gists_url":"https://api.github.com/users/vs926p/gists{/gist_id}","starred_url":"https://api.github.com/users/vs926p/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vs926p/subscriptions","organizations_url":"https://api.github.com/users/vs926p/orgs","repos_url":"https://api.github.com/users/vs926p/repos","events_url":"https://api.github.com/users/vs926p/events{/privacy}","received_events_url":"https://api.github.com/users/vs926p/received_events","type":"User","site_admin":false},"labels":[{"id":655719477,"node_id":"MDU6TGFiZWw2NTU3MTk0Nzc=","url":"https://api.github.com/repos/F5Networks/f5-ansible/labels/high","name":"high","color":"5319e7","default":false},{"id":322141033,"node_id":"MDU6TGFiZWwzMjIxNDEwMzM=","url":"https://api.github.com/repos/F5Networks/f5-ansible/labels/new-module","name":"new-module","color":"fad8c7","default":false}],"state":"closed","locked":false,"assignee":{"login":"caphrim007","id":46956,"node_id":"MDQ6VXNlcjQ2OTU2","avatar_url":"https://avatars1.githubusercontent.com/u/46956?v=4","gravatar_id":"","url":"https://api.github.com/users/caphrim007","html_url":"https://github.com/caphrim007","followers_url":"https://api.github.com/users/caphrim007/followers","following_url":"https://api.github.com/users/caphrim007/following{/other_user}","gists_url":"https://api.github.com/users/caphrim007/gists{/gist_id}","starred_url":"https://api.github.com/users/caphrim007/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caphrim007/subscriptions","organizations_url":"https://api.github.com/users/caphrim007/orgs","repos_url":"https://api.github.com/users/caphrim007/repos","events_url":"https://api.github.com/users/caphrim007/events{/privacy}","received_events_url":"https://api.github.com/users/caphrim007/received_events","type":"User","site_admin":false},"assignees":[{"login":"caphrim007","id":46956,"node_id":"MDQ6VXNlcjQ2OTU2","avatar_url":"https://avatars1.githubusercontent.com/u/46956?v=4","gravatar_id":"","url":"https://api.github.com/users/caphrim007","html_url":"https://github.com/caphrim007","followers_url":"https://api.github.com/users/caphrim007/followers","following_url":"https://api.github.com/users/caphrim007/following{/other_user}","gists_url":"https://api.github.com/users/caphrim007/gists{/gist_id}","starred_url":"https://api.github.com/users/caphrim007/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caphrim007/subscriptions","organizations_url":"https://api.github.com/users/caphrim007/orgs","repos_url":"https://api.github.com/users/caphrim007/repos","events_url":"https://api.github.com/users/caphrim007/events{/privacy}","received_events_url":"https://api.github.com/users/caphrim007/received_events","type":"User","site_admin":false}],"milestone":null,"comments":19,"created_at":"2018-02-21T16:44:37Z","updated_at":"2018-11-07T20:42:03Z","closed_at":"2018-11-07T20:42:03Z","author_association":"NONE","body":"<!--- Verify first that your issue/request is not already reported in GitHub -->\r\n\r\n##### ISSUE TYPE\r\n<!--- Pick one below and delete the rest: -->\r\n - Feature Idea\r\n\r\n\r\n##### COMPONENT NAME\r\nSupport DDOS profile creation, modify and applying it to virtual\r\n\r\n##### ANSIBLE VERSION\r\nPlease support it as part of 2.6\r\n\r\n##### PYTHON VERSION\r\n<!--- Paste verbatim output from “python -V” between quotes below -->\r\n```\r\n\r\n```\r\n\r\n##### BIGIP VERSION\r\n<!---\r\nPaste verbatim output from “tmsh show sys version” between quotes below\r\n-->\r\n```\r\n\r\n```\r\n\r\n##### LIBRARY VERSIONS\r\n<!---\r\nPaste verbatim output from “pip freeze | egrep '(f5-sdk|bigsuds)'” between quotes below\r\n-->\r\n```\r\n\r\n```\r\n\r\n##### CONFIGURATION\r\n<!---\r\nMention any settings you have changed/added/removed in ansible.cfg\r\n(or using the ANSIBLE_* environment variables).\r\n-->\r\n\r\n##### OS / ENVIRONMENT\r\n<!---\r\nMention the OS you are running Ansible from, and the OS you are\r\nmanaging, or say “N/A” for anything that is not platform-specific.\r\n-->\r\n\r\n##### SUMMARY\r\nSupport DDOS profile creation, modify and applying it to virtual\r\n\r\nConfiguring dos\r\n```\r\ncreate security dos profile DNS-TO-INET-PROFILE protocol-dns replace-all-with {\r\n  DNStoINETProfile {\r\n    dns-query-vector add {\r\n      a {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      aaaa {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      any {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      axfr {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 8000\r\n      }\r\n      cname {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      ixfr {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 8000\r\n      }\r\n      mx {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      ns {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      other {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      ptr {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      soa {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      srv {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n      txt {\r\n        rate-increase 100\r\n        rate-limit 4294967288\r\n        rate-threshold 120000\r\n      }\r\n    }\r\n    prot-err-attack-detection enabled\r\n    prot-err-atck-rate-incr 200\r\n    prot-err-atck-rate-limit 80000\r\n    prot-err-atck-rate-threshold 8000\r\n  }\r\n}\r\n```\r\n\r\nDevices\r\n```\r\nmodify security dos device-config all log-publisher JSA-HSL-PUBLISHER\r\n\r\nmodify security dos device-config /Common/dos-device-config {\r\n  dos-device-vector {\r\n    tcp-ack-flood {\r\n      default-internal-rate-limit infinite\r\n      detection-threshold-percent infinite\r\n      detection-threshold-pps infinite\r\n    }\r\n  }\r\n}\r\n```\r\n\r\n~~Attaching to LTM virtuals~~ (this is part of profiles, so already complete)\r\n```\r\ncreate ltm virtual DNS-OUT-ANYCAST-UDP-V4\r\n  destination 155.165.48.0:53\r\n  fw-enforced-policy DNS-SERVERS-TO-SUPPORTZONE-POLICY-V4\r\n  ip-protocol udp\r\n  pool VROUTER-CORE-DIRECT-NET-V4\r\n  profiles replace-all-with {\r\n    DNS-UDP\r\n    DNS-TO-INET-PROFILE DNS-PROFILE\r\n  }\r\n  security-log-profiles replace-all-with {\r\n    HSL-LOGGING-PROFILE\r\n  }\r\n  vlans-enabled  vlans add {\r\n    INT-FW-DNS-TRUSTED\r\n  }\r\n  source-address-translation { type automap }\r\n  translate-address disabled\r\n  translate-port disabled\r\n```\r\n\r\n##### STEPS TO REPRODUCE\r\n<!---\r\nFor bugs, show exactly how to reproduce the problem.\r\nFor new features, show how the feature would be used.\r\n-->\r\n\r\n<!--- Paste example playbooks or commands between quotes below -->\r\n```\r\n\r\n```\r\n\r\n<!--- You can also paste gist.github.com links for larger files -->\r\n\r\n##### EXPECTED RESULTS\r\n<!--- What did you expect to happen when running the steps above? -->\r\n\r\n##### ACTUAL RESULTS\r\n<!--- What actually happened? If possible run with high verbosity (-vvvv) -->\r\n\r\n<!--- Paste verbatim command output between quotes below -->\r\n```\r\n\r\n```\r\n"}}
{"actor":{"display_login":"caphrim007"}}