Infoblox::Grid::DNS::AttackMitigation - a DNS Attack Mitigation object.
The DNS Attack Mitigation object provides information about mitigation configuration for DNS attacks.
my $attack_mitigation = Infoblox::Grid::DNS::AttackMitigation->new( detect_chr => $attack_detect, # Optional detect_chr_grace => $uint, # Optional detect_nxdomain_responses => $attack_detect, # Optional detect_udp_drop => $attack_detect, # Optional interval => $uint, # Optional mitigate_nxdomain_lru => 'true' | 'false', # Optional );
The object does not support any session methods.
The following functions can be applied to a DNS Attack Mitigation object.
Use this method to set or retrieve mitigation settings for DNS attacks. See Infoblox::Grid::DNS->attack_mitigation() for parameters and return values.
#Get attack_mitigation value my $attack_mitigation = $grid_dns->attack_mitigation(); #Modify attack_mitigation $grid_dns->attack_mitigation($attack_mitigation);
Use this method to set or retrieve mitigation settings for DNS attacks on the member. See Infoblox::Grid::Member::DNS->attack_mitigation() for parameters and return values.
#Get attack_mitigation value my $attack_mitigation = $member_dns->attack_mitigation(); #Modify attack_mitigation $member_dns->attack_mitigation($attack_mitigation);
Use this method to set or retrieve configuration for the Cache Hit Ratio (CHR) changes detection.
Include the specified parameter to set the attribute value. Omit the parameter to retrieve the attribute value.
The valid value is an Infoblox::Grid::DNS::AttackDetect object.
If you specified a parameter, the method returns true when the modification succeeds, and returns false when the operation fails.
If you did not specify a parameter, the method returns the attribute value.
#Get detect_chr value my $detect_chr = $attack_mitigation->detect_chr(); #Modify detect_chr $attack_mitigation->detect_chr($detect_chr);
Use this method to set or retrieve the cache usage (in percentage) when Cache Hit Ratio (CHR) detection starts.
Include the specified parameter to set the attribute value. Omit the parameter to retrieve the attribute value.
The valid value is an unsigned integer between 0 and 100.
If you specified a parameter, the method returns true when the modification succeeds, and returns false when the operation fails.
If you did not specify a parameter, the method returns the attribute value.
#Get detect_chr_grace value my $detect_chr_grace = $attack_mitigation->detect_chr_grace(); #Modify detect_chr_grace $attack_mitigation->detect_chr_grace(50);
Use this method to set or retrieve configuration for the recursive queries NXDOMAIN responses detection.
Include the specified parameter to set the attribute value. Omit the parameter to retrieve the attribute value.
The valid value is an Infoblox::Grid::DNS::AttackDetect object.
If you specified a parameter, the method returns true when the modification succeeds, and returns false when the operation fails.
If you did not specify a parameter, the method returns the attribute value.
#Get detect_nxdomain_responses value my $detect_nxdomain_responses = $attack_mitigation->detect_nxdomain_responses(); #Modify detect_nxdomain_responses $attack_mitigation->detect_nxdomain_responses($detect_nxdomain_responses);
Use this method to set or retrieve configuration for the UDP packet drop rate detection.
Include the specified parameter to set the attribute value. Omit the parameter to retrieve the attribute value.
The valid value is an Infoblox::Grid::DNS::AttackDetect object.
If you specified a parameter, the method returns true when the modification succeeds, and returns false when the operation fails.
If you did not specify a parameter, the method returns the attribute value.
#Get detect_udp_drop value my $detect_udp_drop = $attack_mitigation->detect_udp_drop(); #Modify detect_udp_drop $attack_mitigation->detect_udp_drop($detect_udp_drop);
Use this method to set or retrieve the minimum time interval (in seconds) between changes in attack status.
Include the specified parameter to set the attribute value. Omit the parameter to retrieve the attribute value.
The valid value is an unsigned integer.
If you specified a parameter, the method returns true when the modification succeeds, and returns false when the operation fails.
If you did not specify a parameter, the method returns the attribute value.
#Get interval value my $interval = $attack_mitigation->interval(); #Modify interval $attack_mitigation->interval(50);
Use this method to enable or disable impact mitigation of NXDOMAIN responses in cache by tracking NXDOMAIN entries.
Include the specified parameter to set the attribute value. Omit the parameter to retrieve the attribute value.
Specify 'true' to enable impact mitigation of NXDOMAIN responses, or 'false' to disable it. The default value is 'false'.
If you specified a parameter, the method returns true when the modification succeeds, and returns false when the operation fails.
If you did not specify a parameter, the method returns the attribute value.
#Get mitigate_nxdomain_lru value my $mitigate_nxdomain_lru = $attack_mitigation->mitigate_nxdomain_lru(); #Modify mitigate_nxdomain_lru $attack_mitigation->mitigate_nxdomain_lru('true');
Infoblox Inc. http://www.infoblox.com/
Infoblox::Grid::DNS, Infoblox::Grid::DNS->attack_mitigation(), Infoblox::Grid::Member::DNS, Infoblox::Grid::Member::DNS->attack_mitigation(), Infoblox::Grid::DNS::AttackDetect,
Copyright (c) 2017 Infoblox Inc.