ALBDnsAttack (schema)

DnsAttack

Advanced load balancer DnsAttack object
Name Description Type Notes
attack_vector Attack vector

The DNS attack vector.
Enum options - DNS_REFLECTION, DNS_NXDOMAIN,
DNS_AMPLIFICATION_EGRESS.
ALBDnsAttackVector Required
enabled Enabled

Enable or disable the mitigation of the attack vector.
Default value when not specified in API or module is
interpreted by ALB Controller as true.
boolean Default: "True"
max_mitigation_age Max mitigation age

Time in minutes after which mitigation will be deactivated.
Allowed values are 1-4294967295.
Special values are 0- 'blocked for ever'.
Unit is MIN.
Default value when not specified in API or module is
interpreted by ALB Controller as 60.
integer Minimum: 0
Maximum: 4294967295
Default: "60"
mitigation_action Mitigation action

Mitigation action to perform for this DNS attack vector.
ALBAttackMitigationAction
threshold Threshold

Threshold, in terms of DNS packet per second, for the DNS
attack vector.
integer