tencent cloud

Feedback

CreateFirewallRules

Last updated: 2022-09-26 17:00:24

1. API Description

Domain name for API request: lighthouse.tencentcloudapi.com.

This API is used to add a firewall rule on an instance.

  • FirewallVersion is the firewall version number. Every time you update the firewall rule version, it will be automatically increased by 1 to prevent the updated rule from expiring. If it is left empty, conflicts will not be considered.

In the FirewallRules parameter:

  • Valid values of the Protocol field include TCP, UDP, ICMP, and ALL.
  • For the Port field, you can enter only ALL, a single port number, several port numbers separated by commas, or a port range indicated by two port numbers separated by a minus sign. If Port is a range, the port number on the left of the minus sign must be smaller than the one on the right. If Protocol is not TCP or UDP, Port can only be empty or ALL. The length of the Port field cannot exceed 64 characters.
  • For the CidrBlock field, you can enter any string that conforms to the CIDR format standard. Multi-Tenant network isolation rules take precedence over private network rules in the firewall.
  • For the Action field, you can enter only ACCEPT or DROP.
  • The length of the FirewallRuleDescription field cannot exceed 64 characters.

A maximum of 10 requests can be initiated per second for this API.

We recommend you to use API Explorer
Try it
API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

2. Input Parameters

The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

Parameter Name Required Type Description
Action Yes String Common Params. The value used for this API: CreateFirewallRules.
Version Yes String Common Params. The value used for this API: 2020-03-24.
Region Yes String Common Params. For more information, please see the list of regions supported by the product.
InstanceId Yes String Instance ID.
FirewallRules.N Yes Array of FirewallRule Firewall rule list.
FirewallVersion No Integer Current firewall version number. Every time you update the firewall rule version, it will be automatically increased by 1 to prevent the rule from expiring. If it is left empty, conflicts will not be considered.

3. Output Parameters

Parameter Name Type Description
RequestId String The unique request ID, which is returned for each request. RequestId is required for locating a problem.

4. Example

Example1 Adding firewall rule

Input Example

https://lighthouse.tencentcloudapi.com/?Action=CreateFirewallRules
&InstanceId=lhins-aglzynfg
&FirewallRules.0.Protocol=TCP
&FirewallRules.0.Port=80
&FirewallRules.1.Protocol=UDP
&FirewallRules.1.Port=22,443
&FirewallRules.2.Protocol=TCP
&FirewallRules.2.Port=8000-8080
&<Common request parameters>

Output Example

{
    "Response": {
        "RequestId": "667cc0c1-fa3e-4752-a36b-4bf45ec4bc7d"
    }
}

5. Developer Resources

SDK

TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

Command Line Interface

6. Error Code

The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.

Error Code Description
FailedOperation.FirewallRulesOperationFailed Failed to manipulate the firewall rule.
InvalidParameter.FirewallRulesDuplicated Invalid parameter: the firewall rule is duplicated.
InvalidParameter.FirewallRulesExist Invalid parameter: the firewall rule already exists.
InvalidParameterValue.Duplicated Invalid parameter value: duplicate values are not allowed.
InvalidParameterValue.FirewallRuleDescriptionTooLong The length of the firewall rule description exceeds the limit.
InvalidParameterValue.InstanceIdMalformed Invalid parameter value: the instance ID format is invalid.
LimitExceeded.FirewallRulesLimitExceeded The firewall rule quota is exceeded.
ResourceNotFound.FirewallNotFound The firewall does not exist.
ResourceNotFound.InstanceIdNotFound The instance ID does not exist.
UnauthorizedOperation.NoPermission No permission
UnsupportedOperation.FirewallBusy The firewall is busy.
UnsupportedOperation.FirewallVersionMismatch The specified firewall version number does not match the current version.
Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

7x24 Phone Support