Firewall
Per-interface firewall state and rulesets.
Endpoints
- GETRetrieve firewall rulesets ●
/firewall/rulesetsPaged list of the firewall rulesets defined on the Control Server, with their rules. - GETRetrieve a firewall ruleset ●
/firewall/rulesets/{rulesetId}One ruleset with its rules, highest priority first. - POSTDisable firewall
/servers/{serverId}/firewall/{interface}/disableDisable the firewall on the server's primary or secondary interface. sync=true applies it on the hypervisor now; otherwise it applies at the next… - POSTEnable firewall
/servers/{serverId}/firewall/{interface}/enableEnable the firewall on the server's primary or secondary interface. sync=true applies the rules on the hypervisor now; otherwise they apply at the next… - GETRetrieve firewall
/servers/{serverId}/firewall/{interface}The firewall state and the raw rules stored for the interface. GET .../firewall/{interfaceRef}/rules returns the same rules as rule objects. - GETRetrieve a server interface's firewall rules ●
/servers/{serverId}/firewall/{interfaceRef}/rulesThe interface's rules, highest priority first. They take effect once the interface's firewall is enabled. - POSTAdd a firewall rule to a server interface ●
/servers/{serverId}/firewall/{interfaceRef}/rulesAdd a rule. An identical rule already on the interface is returned unchanged with created: false . apply: true pushes the rules to the running server. A body… - PUTEnable or disable a firewall rule ●
/servers/{serverId}/firewall/{interfaceRef}/rules/{ruleId}Enable or disable a rule. apply: true pushes the interface's rules to the running server; the status then follows the push. - DELETERemove a firewall rule ●
/servers/{serverId}/firewall/{interfaceRef}/rules/{ruleId}Remove a rule. apply: true also pushes the interface's rules to the running server and reports the outcome; the removal stands either way. - POSTAttach a firewall ruleset to a server interface ●
/servers/{serverId}/firewall/{interfaceRef}/rulesetsCopy a ruleset's rules onto the interface, keeping the rules already there. Does not enable the firewall. apply: true pushes the rules to the running server. - POSTApply a server interface's firewall rules now ●
/servers/{serverId}/firewall/{interfaceRef}/applyPush the interface's stored rules to the running server, waiting up to 30 seconds for the hypervisor's answer. One apply per server runs at a time.