IP Blacklist/Whitelist
Overview
ZStack Cloud allows you to configure a blacklist or whitelist for login IP addresses to protect your cloud. You can configure a blacklist or whitelist as needed to identify and filter the identities of those who access your cloud, thereby enhancing the access control and security of your cloud.
Inventory
Properties
| Name | Description | Optional | Valid Value | Starting Version |
|---|---|---|---|---|
| uuid | The UUID. For more information, see Resource Property. | 3.5.1 | ||
| name | 3.5.1 | |||
| description | The detailed description of the resource. | Yes | 3.5.1 | |
| rule | 3.5.1 | |||
| strategy | 3.5.1 | |||
| groupBy | 3.5.1 | |||
| createDate | The creation date. For more information, see Resource Property. | 3.5.1 | ||
| lastOpDate | The last operation date. For more information, see Resource Property. | 3.5.1 | ||
| systemTags | 3.5.1 | |||
| userTags | 3.5.1 |
Sample
{
"inventories": [
{
"createDate": "Jul 11, 2019 2:43:32 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 2:43:32 PM",
"name": "aaa",
"rule": "1.1.1.1",
"strategy": "REJECT",
"uuid": "036e0ab3e5be46909aed2183cd6208e9"
},
{
"createDate": "Jul 11, 2019 2:54:24 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 2:54:24 PM",
"name": "tttt",
"rule": "1.1.1.1",
"strategy": "ACCEPT",
"uuid": "1bca2e2d95ad476a9e697692fbbe088c"
},
{
"createDate": "Jul 11, 2019 8:16:27 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 8:16:27 PM",
"name": "172.20.15.194",
"rule": "172.20.15.194",
"strategy": "REJECT",
"uuid": "37ca231828364ec198cd39931c42f1a8"
},
{
"createDate": "Jul 11, 2019 2:56:43 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 2:56:43 PM",
"name": "ppppp",
"rule": "2.2.2.2",
"strategy": "ACCEPT",
"uuid": "40249c3b554a4205916c626fc72f8799"
},
{
"createDate": "Jul 11, 2019 8:16:12 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 8:16:12 PM",
"name": "172.20.15.194",
"rule": "172.20.15.194,172.20.15.194",
"strategy": "REJECT",
"uuid": "4c4e42efd3234772bc07e50ed9acc52d"
},
{
"createDate": "Jul 11, 2019 8:16:05 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 8:16:05 PM",
"name": "172.20.15.194",
"rule": "172.20.15.194",
"strategy": "REJECT",
"uuid": "5adcfe4410c8436cb7b267c0f860459c"
},
{
"createDate": "Jul 11, 2019 2:52:58 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 2:52:58 PM",
"name": "rrrr",
"rule": "1.1.1.1",
"strategy": "ACCEPT",
"uuid": "7afc374dfb8d4a41a103cbbd978af33c"
},
{
"createDate": "Jul 11, 2019 8:16:18 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 8:16:18 PM",
"name": "172.20.15.194",
"rule": "172.20.15.194",
"strategy": "REJECT",
"uuid": "d862ab35843947dcb1f8292b5e04ff4f"
},
{
"createDate": "Jul 11, 2019 2:53:58 PM",
"description": "",
"lastOpDate": "Jul 11, 2019 2:53:58 PM",
"name": "ccc",
"rule": "1.1.1.1",
"strategy": "ACCEPT",
"uuid": "fb927b7a9e114e7abec82f9d7079f0c6"
}
],
"success": true
}
Operations
AddAccessControlRule
Adds an IP access control rule. For
example,
AddAccessControlRule name=rule1 rule=172.20.1.1,172.20.1.2 controlStrategy=ACCEPTParameters
| Name | Description | Optional | Valid Value | Starting Version |
|---|---|---|---|---|
| name | The resource name. | 3.5.1 | ||
| description | The detailed description of the resource. | Yes | 3.5.1 | |
| rule | 3.5.1 | |||
| controlStrategy | 3.5.1 | |||
| resourceUuid | Yes | 3.5.1 | ||
| tagUuids | The tag UUID list. | Yes | 3.5.1 | |
| userTags | The user tags. For more information, see CreateUserTag. | Yes | 3.5.1 | |
| systemTags | The system tags. For more information, see CreateSystemTag. | Yes | 3.5.1 | |
| timeout | Yes |
DeleteAccessControlRule
Deletes an IP access control rule. For
example,
DeleteAccessControlRule uuid=b86c9016b4f24953a9edefb53ca0678cParameters
| Name | Description | Optional | Valid Value | Starting Version |
|---|---|---|---|---|
| uuid | The resource UUID. | 3.5.1 | ||
| deleteMode | Yes | 3.5.1 | ||
| userTags | The user tags. For more information, see CreateUserTag. | Yes | 3.5.1 | |
| systemTags | The system tags. For more information, see CreateSystemTag. | Yes | 3.5.1 | |
| timeout | Yes |
UpdateAccessControlRule
Updates an IP access control rule. For
example,
UpdateAccessControlRule uuid=b86c9016b4f24953a9edefb53ca0678cParameters
| Name | Description | Optional | Valid Value | Starting Version |
|---|---|---|---|---|
| uuid | The resource UUID. | 3.5.1 | ||
| name | The resource name. | Yes | 3.5.1 | |
| description | The detailed description of the resource. | Yes | 3.5.1 | |
| userTags | The user tags. For more information, see CreateUserTag. | Yes | 3.5.1 | |
| systemTags | The system tags. For more information, see CreateSystemTag. | Yes | 3.5.1 | |
| timeout | Yes |
QueryAccessControlRule
Queries an IP access control rule. For
example,
QueryAccessControlRule Primitive Fields of Query
See Properties.
GetLoginCaptcha
Obtains the login verification code. For
example,
GetLoginCaptcha resourceName=admin loginType=TestParameters
| Name | Description | Optional | Valid Value | Starting Version |
|---|---|---|---|---|
| resourceName | 3.5.1 | |||
| loginType | 3.5.1 | |||
| captchaUuid | Yes | 3.5.1 | ||
| userTags | The user tags. For more information, see CreateUserTag. | Yes | 3.5.1 | |
| systemTags | The system tags. For more information, see CreateSystemTag. | Yes | 3.5.1 | |
| timeout | Yes |
Tags
You can create a user tag on an access control rule by using CreateUserTag
resourceType=AccessControlRuleVO. For
example,
CreateUserTag resourceType=AccessControlRuleVO tag=Test1 \
resourceUuid=3214e0dcd01d4e2aa8407968e1ccreatee51d58