anti-ddos http-flood defend alert-rate

Function

The anti-ddos http-flood defend alert-rate command configures the threshold of the HTTP request packet rate that triggers global HTTP flood attack defense.

The undo anti-ddos http-flood defend alert-rate command restores the threshold to the default value (8000).

Format

anti-ddos http-flood defend alert-rate alert-rate

undo anti-ddos http-flood defend alert-rate

Parameters

Parameter	Description	Value
alert-rate alert-rate	Specifies the threshold of the HTTP request packet rate that triggers global HTTP flood attack defense.	The value is an integer ranging from 1 to 80000000, in pps. The default value is 8000.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

If the rate of HTTP request packets destined for the same destination IP address reaches alert-rate, the global HTTP flood attack defense function is triggered.

The defense threshold can be manually configured or automatically learned. For details about the threshold learning configuration, see Configuring Threshold Learning.

Example

# Set the threshold of HTTP request packet rate that triggers global HTTP flood attack defense to 5000 pps. In this case, when the HTTP request packet rate exceeds 5000 pps, the HTTP flood attack defense is triggered.

<sysname> system-view
[sysname] anti-ddos http-flood defend alert-rate 5000