http-control post

Function

The http-control post command limits the size of posted content in HTTP POST operations.

The undo http-control post command cancels the limit of the size of posted content in HTTP POST operations.

Format

http-control post { alert-size alert-size | block-size block-size } ^*

undo http-control post { alert-size | block-size } ^*

Parameters

Parameter	Description	Value
alert-size alert-size	Alert threshold: When the size of posted content hits the alert threshold, the system generates a log to notify the device administrator.	The value is an integer ranging from 1 to 1048576, in Bytes.
block-size block-size	Block threshold: When the size of posted content hits the block threshold, the system blocks the HTTP POST operation and generates a log to notify the device administrator. The block threshold must be greater than the alert threshold.	The value is an integer ranging from 1 to 1048576, in Bytes.

Parameter

Description

Value

alert-size alert-size

Alert threshold: When the size of posted content hits the alert threshold, the system generates a log to notify the device administrator.

The value is an integer ranging from 1 to 1048576, in Bytes.

block-size block-size

Block threshold: When the size of posted content hits the block threshold, the system blocks the HTTP POST operation and generates a log to notify the device administrator.

The block threshold must be greater than the alert threshold.

The value is an integer ranging from 1 to 1048576, in Bytes.

Views

Application behavior control profile view

Default Level

2: Configuration level

Usage Guidelines

The FW does not limit the size of posted content in HTTP POST operations by default.

You can run this command only when the FW allows HTTP POST operations (http-control post action permit).

Example

# In the system view, create an application behavior control profile hello, set the allowed size of posted content in HTTP POST operations, and set the alert threshold to 800,000 bytes and block threshold to 1,000,000 bytes.

<sysname> system-view
[sysname] profile type app-control name hello
[sysname-profile-app-control-hello] http-control post action permit
[sysname-profile-app-control-hello] http-control post alert-size 800000 block-size 1000000