RESTful Server

This section describes how to trigger or remove the blackhole for the received IP address, and report the blackhole information to the configured RESTful server.

Procedure

  1. Choose System > Notification Server > RESTful Server.
  2. In the Restful Server area, click .
  3. Configure basic information about the RESTful server.

    • Receiving Black Hole Message URL Configure

      1. Click the Receiving Black Hole Message URL Configure tab.

      2. Configure RESTful Configuration for Black Hole Reporting. Table 1 describes the parameters.
        Table 1 Description of RESTful Configuration for Black Hole Reporting parameters

        Parameter

        Description

        Message Type

        Blackhole.

        Receiving Black Hole Trigger Message URL

        URL for receiving blackhole triggering messages reported by the ATIC.

        Receiving Black Hole Cancel Message URL

        URL used to receive blackhole removal messages reported by the ATIC. (This parameter is optional. If the ATIC needs to decapsulate the blackhole policy, this parameter must be configured.)

        NOTE:

        When two-level blackhole policies are used, ensure that the blocking durations for the policies are consistent. Otherwise, services will still be affected after one blackhole policy is decapsulated. To ensure that the blocking durations for the two-level blocking policies are consistent and services are not affected after policy decapsulation, perform either of the following methods:

        1. The ATIC decapsulates blackhole policies in a unified manner.
        2. The blocking duration for the blackhole policy on the upstream network is set to be consistent with Scheduled unblocking time on the ATIC.

        Black Hole Certificate

        Certificate used to authenticate received blackhole messages. Select a certificate from the drop-down list box.

        NOTE:

        Before configuring this item, create a blackhole certificate on the Certificate Management tab page. For details, see Certificate Management.

    • Login configuration (optional. Configure login parameters only when login authentication is required.)

      1. Click the Login Configuration tab.

      2. Configure login information. Table 2 describes login configuration parameters.
        Table 2 Description of login configuration parameters

        Parameter

        Description

        Recommended Value

        loginURL

        URL for login authentication.

        -

        user

        Authentication user name for receiving the blackhole information reported by the ATIC device.

        -

        password

        Authentication password for receiving the blackhole information reported by the ATIC device.

        The password must meet the minimum complexity requirements, contain letters, digits, (0-9), and special characters (such as! , #, $, and %), and be changed periodically.

        domain

        Authentication domain for receiving the blackhole information reported by the ATIC device.

        -

        project

        Authentication project for receiving the blackhole information reported by the ATIC device.

        -

        Certificate

        Used for third-party RESTful server login authentication. Select a certificate from the drop-down list box.

        NOTE:

        Before configuring this item, create a login authentication certificate on the Certificate Management tab page. For details, see Certificate Management.

        -

  4. Click OK. The configuration succeeds.

Copyright © Huawei Technologies Co., Ltd.