防护规则配置

请求参数

Authorization

在 Header 添加参数

Authorization

，其值为在 Bearer 之后拼接 Token

示例：

Authorization: Bearer ********************

Header 参数

string

必需

默认值:

application/json

Body 参数application/json

referer

object (防盗链配置)

防盗链

可选

type

boolean

类型

必需

0:白名单 1:黑名单

domains

array[string]

域名列表

必需

allow_empty

boolean

允许空Referer

必需

active

boolean

是否开启

必需

accessControl

object (精准访问控制配置)

精准访问控制

必需

active

boolean

功能开启

可选

config

array [object {5}]

必需

requestpwd

object (安全访问控制配置)

安全访问控制

必需

config

array [object {7}]

必需

contentKeywords

object (内容风控配置（文字）)

内容安全风控(关键字)

可选

更新日期：2024/07/17

keywords

array[string]

关键词列表

必需

关键列表：["test", "mock"]

gzip

boolean

回源gzip标识

必需

根据 content-encoding 的gzip是否开启关闭gzip，如果站点存在gzip，设置为false，会无法解压页面导致功能失效

active

boolean

开关

必需

rules

array[string]

敏感检测正则表达式

必需

sensitiveActive

boolean

服务器敏感信息检测

必需

senWords

array[string]

敏感词列表

必需

contentImg

object (内容风控配置（图片）)

内容安全风控(图片)

可选

active

boolean

开关

必需

waf

object

WAF配置

必需

rule_id

array[integer]

WAF启用规则列表

必需

mode

integer

必需

httpMethod

array[string]

必需

domainUuidList

array[string]

域名列表

必需

要覆盖的域名列表

object (CC防护)

防CC

可选

config

object

必需

active

boolean

整体开关

必需

use_default

boolean

必需

region

object

必需

regions

array[string]

区域名称

必需

active

boolean

开关

必需

ipBlock

object

必需

seven_ip_block

object

必需

three_ip_block

object

必需

urlBlock

object

可选

url_white_list

array [object {2}]

可选

url_black_list

array [object {2}]

可选

active

boolean

可选

tamper

object

防篡改配置

可选

添加日期：2024/07/17

riskURL

boolean

不良信息推送开关

必需

susc

boolean

敏感时期直接返回缓存页面

必需

minScore

integer

必需

页面相似度 0.0 —1.0 超过则认为被篡改，直接返回缓存页面

active

boolean

开关

必需

httpProtection

object

http防护配置

可选

添加日期：2024/07/17

methodType

array[string]

请求类型

必需

CType

array[string]

content-type

必需

active

boolean

总开关

必需

fileType

array[string]

文件类型

必需

httpActive

boolean

http防护开关

必需

httpQuery

object

必需

requestencrypt

object | null

动态防护配置

可选

添加日期：2024/07/17

active

boolean

开关

必需

activeForm

boolean

form表单防护

必需

activeXHR

boolean

xhr防护

必需

hookSkewTimestamp

integer

xhr请求时间差范围

可选

默认60

formSkewTimestamp

integer

form请求时间范围

可选

默认60

formBodyLength

integer

表单内容大小限制

可选

mb，默认0

resource

object

资源访问控制配置

可选

添加日期：2024/07/17

active

boolean

开关

必需

referActive

boolean

防盗链开关

必需

type

integer

类型

必需

0:白名单 1:黑名单

domains

array[string]

域名列表

必需

urls

array[string]

资源urls

必需

rate

integer

资源请求频率

必需

次/秒

bot

object

bot防护配置

可选

添加日期：2024/07/17

bots

array[string]

必需

白名单模式，在列表中的bot不会被拦截

active

boolean

必需

api_protect

array [object {5}]

api防护配置

可选

添加日期：2024/07/17

url

string

api地址

必需

authentication

object

api鉴权

可选

check

object

参数校验

可选

rateLimit

object

频率限制

可选

sensitive

object

敏感信息

可选

示例

{
  "referer": {
    "type": true,
    "domains": [
      "string"
    ],
    "allow_empty": true,
    "active": true
  },
  "accessControl": {
    "active": true,
    "config": [
      {
        "action": "string",
        "location": "string",
        "access_uuid": "string",
        "rule": "string",
        "block_time": 0
      }
    ]
  },
  "requestpwd": {
    "config": [
      {
        "url": "string",
        "password": "string",
        "ip": [
          "string"
        ],
        "region": [
          "string"
        ],
        "phone": [
          "string"
        ],
        "startTime": "string",
        "endTime": "string"
      }
    ]
  },
  "contentKeywords": {
    "keywords": [
      "string"
    ],
    "gzip": true,
    "active": true,
    "rules": [
      "string"
    ],
    "sensitiveActive": true,
    "senWords": [
      "string"
    ]
  },
  "contentImg": {
    "active": true
  },
  "waf": {
    "rule_id": [
      0
    ],
    "mode": 0,
    "httpMethod": [
      "string"
    ]
  },
  "domainUuidList": [
    "string"
  ],
  "cc": {
    "config": {
      "site": {
        "active": true,
        "global_concurrent": 0,
        "time_interval": 0,
        "policy": "string",
        "blockminutes": 0,
        "waitseconds": 0,
        "waitpolicyminutes": 0,
        "redirectlocation": "string",
        "redirectwaitseconds": 0,
        "protectMode": "string",
        "url_rates": [
          {
            "url": "string",
            "rate": 0,
            "time_interval": 0
          }
        ]
      },
      "resuest_rate": {
        "active": true,
        "rate": 0,
        "time_interval": 0,
        "challengePolicy": "string",
        "protectMinutes": 0,
        "whiteMinutes": 0,
        "challengeMethods": [
          "string"
        ],
        "challengeLimit": 0,
        "blockMinutes": 0,
        "excludeExt": "string",
        "cookieName": "string",
        "protectMode": "string",
        "url_rates": [
          {
            "url": "string",
            "rate": 0,
            "time_interval": 0
          }
        ],
        "is_api": true,
        "access_rate": 0,
        "to_requests": 0,
        "time_type": 0,
        "block_time": 0
      },
      "block_config": {
        "block_active": true,
        "block_time": 0,
        "count": 0
      }
    },
    "active": true,
    "use_default": true
  },
  "region": {
    "regions": [
      "string"
    ],
    "active": true
  },
  "ipBlock": {
    "seven_ip_block": {
      "white_block": {
        "blocked_ip": [
          "string"
        ],
        "release_time": 0,
        "type": 0,
        "blocked_type": "string"
      },
      "black_block": {
        "blocked_ip": [
          "string"
        ],
        "release_time": 0,
        "type": 0,
        "blocked_type": "string"
      }
    },
    "three_ip_block": {
      "black_block": {
        "blocked_ip": [
          "string"
        ],
        "release_time": 0,
        "type": 0,
        "blocked_type": "string"
      },
      "white_block": {
        "blocked_ip": [
          "string"
        ],
        "release_time": 0,
        "type": 0,
        "blocked_type": "string"
      }
    }
  },
  "urlBlock": {
    "url_white_list": [
      {
        "path": "string",
        "method": "string"
      }
    ],
    "url_black_list": [
      {
        "path": "string",
        "method": "string"
      }
    ],
    "active": true
  },
  "tamper": {
    "riskURL": true,
    "susc": true,
    "minScore": 0,
    "active": true
  },
  "httpProtection": {
    "methodType": [
      "string"
    ],
    "CType": [
      "string"
    ],
    "active": true,
    "fileType": [
      "string"
    ],
    "httpActive": true,
    "httpQuery": {
      "queryLength": 0,
      "queryValueLength": 0,
      "queryValueNum": 0,
      "cookiesLength": 0,
      "fileLength": 0,
      "headerLength": 0,
      "urlLength": 0
    }
  },
  "requestencrypt": {
    "active": true,
    "activeForm": true,
    "activeXHR": true,
    "hookSkewTimestamp": 0,
    "formSkewTimestamp": 0,
    "formBodyLength": 0
  },
  "resource": {
    "active": true,
    "referActive": true,
    "type": 0,
    "domains": [
      "string"
    ],
    "urls": [
      "string"
    ],
    "rate": 0
  },
  "bot": {
    "bots": [
      "string"
    ],
    "active": true
  },
  "api_protect": [
    {
      "url": "string",
      "authentication": {
        "type": 0,
        "failCount": 0,
        "banTime": 0,
        "hash": "string",
        "key": "string",
        "header": "string",
        "banType": 0
      },
      "check": {
        "active": true,
        "checkRule": [
          "string"
        ],
        "failCount": 0,
        "banTime": 0,
        "banType": 0
      },
      "rateLimit": {
        "callCount": 0,
        "callTime": 0,
        "failCount": 0,
        "banTime": 0,
        "banType": 0
      },
      "sensitive": {
        "active": true,
        "rule": [
          "string"
        ],
        "gzip": true,
        "failType": 0
      }
    }
  ]
}

防护规则配置

请求参数

示例代码

返回响应