All Products
Search
Document Center

Cloud Firewall:DescribeTrFirewallsV2List

Last Updated:Dec 13, 2024

Queries the virtual private cloud (VPC) firewalls that are created for transit routers.

Debugging

You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
yundun-cloudfirewall:DescribeTrFirewallsV2Listget
*VpcCenTrFirewall
acs:yundun-cloudfirewall::{#accountId}:vpccentrfirewall/{#FirewallId}
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
LangstringNo

The language of the content within the response. Valid values:

  • zh: Chinese (default)
  • en: English
zh
RegionNostringNo

The region ID of the transit router.

cn-hangzhou
FirewallSwitchStatusstringNo

The status of the VPC firewall. Valid values:

  • opened: The VPC firewall is enabled.
  • closed: The VPC firewall is disabled.
  • notconfigured: The VPC firewall is not created.
  • configured: The VPC firewall is created but is not enabled.
  • creating: The VPC firewall is being created.
  • opening: The VPC firewall is being enabled.
  • deleting: The VPC firewall is being deleted.
Note If you do not specify this parameter, VPC firewalls in all states are queried.
opened
CurrentPageintegerNo

The page number. Default value: 1.

1
PageSizeintegerNo

The number of entries per page. Default value: 10.

10
FirewallIdstringNo

The instance ID of the VPC firewall.

vfw-tr-f1799baa9e254651****
FirewallNamestringNo

The name of the VPC firewall.

test
RouteModestringNo

The routing mode of the VPC firewall. Valid values:

  • managed: automatic mode
  • manual: manual mode
Note If you do not specify this parameter, VPC firewalls in all routing modes are queried.
managed
CenIdstringNo

The ID of the Cloud Enterprise Network (CEN) instance.

cen-rig0t5zi96crkl****
TransitRouterIdstringNo

The ID of the transit router.

tr-uf6egtvyaedvt20xl****

Response parameters

ParameterTypeDescriptionExample
object
TotalCountstring

The total number of entries returned.

6
RequestIdstring

The request ID.

1471E2EC-F706-5F11-A79B-BD583ACB8297
VpcTrFirewallsarray<object>

The information about the VPC firewalls.

VpcTrFirewallsobject

The information about the VPC firewall.

CenIdstring

The ID of the CEN instance.

cen-03f8s0z052ka3v****
CenNamestring

The name of the CEN instance.

cen_swas
CloudFirewallVpcOrderTypestring

The party responsible for the TR fees generated by the VPC firewall. Values:

  • PayByCloudFirewall: Fees are borne by the Cloud Firewall.
  • PayByCenOwner: Fees are borne by the account to which the CEN instance belongs.
PayByCenOwner
FirewallIdstring

The instance ID of the VPC firewall.

vfw-tr-99bc4f0fc88b4d00****
FirewallSwitchStatusstring

The status of the VPC firewall. Valid values:

  • opened: The VPC firewall is enabled.
  • closed: The VPC firewall is disabled.
  • notconfigured: The VPC firewall is not created.
  • configured: The VPC firewall is created but is not enabled.
  • creating: The VPC firewall is being created.
  • opening: The VPC firewall is being enabled.
  • deleting: The VPC firewall is being deleted.
Note If you do not specify this parameter, VPC firewalls in all states are queried.
opened
IpsConfigobject

The intrusion prevention system (IPS) configurations.

BasicRulesinteger

Indicates whether basic protection is enabled. Valid values:

  • 1: yes
  • 0: no
1
EnableAllPatchinteger

Indicates whether virtual patching is enabled. Valid values:

  • 1: yes
  • 0: no
1
RuleClassinteger

The level of the rule group for the IPS. Valid values:

  • 1: loose.
  • 2: medium.
  • 3: strict.
3
RunModeinteger

The mode of the IPS. Valid values:

  • 1: block mode
  • 0: monitor mode
1
OwnerIdlong

The ID of the Alibaba Cloud account to which the VPC belongs.

171761785151****
PrecheckStatusstring

Indicates whether the VPC firewall can be automatically enabled. Valid values:

  • passed: yes
  • failed: no
  • unknown
passed
ProtectedResourceobject

The protected resources.

Countinteger

The number of protected resources.

1
EcrListarray

The protected express connect routers.

ecrstring

The protected express connect router.

[ "ecr-d6yi3kl5qxmvkz****" ]
PeerTrListarray

The protected peer transit routers.

peerTrstring

The protected peer transit router.

[ "tr-2zegxdvs5f2je81ph****" ]
VbrListarray

The protected virtual border routers (VBRs).

vbrstring

The protected VBR.

[ "vbr-2zegxdvs5f2je81ph****" ]
VpcListarray

The protected VPCs.

vpcstring

The protected VPC.

["vpc-2zegxdvs5f2je81ph****"]
VpnListarray

The protected VPN gateways.

vpnstring

The protected VPN gateway.

[ "vpn-2zegxdvs5f2je81ph****" ]
RegionNostring

The region ID of the transit router.

cn-hangzhou
RegionStatusstring

Indicates whether you can create a VPC firewall in a specified region. Valid values:

  • enable: yes
  • disable: no
enable
ResultCodestring

The result code of the operation that creates the VPC firewall. Valid values:

  • RegionDisable: VPC Firewall is not supported in the region of the network instance. You cannot create a VPC firewall for the network instance.
  • Empty string: You can create a VPC firewall for the network instance.
RegionDisable
RouteModestring

The routing mode of the VPC firewall. Valid values:

  • managed: automatic mode
  • manual: manual mode
managed
TransitRouterIdstring

The ID of the transit router.

tr-2vcmhjs88nil55fvu****
UnprotectedResourceobject

The unprotected resources.

Countinteger

The number of unprotected resources.

1
EcrListarray

The unprotected express connect routers.

ecrstring

The unprotected express connect router.

[ "ecr-d6yi3kl5qxmvkz****" ]
PeerTrListarray

The unprotected peer transit routers.

peerTrstring

The unprotected peer transit router.

[ "tr-2zegxdvs5f2je81ph****" ]
VbrListarray

The unprotected VBRs.

vbrstring

The unprotected VBR.

[ "vbr-2zegxdvs5f2je81ph****" ]
VpcListarray

The unprotected VPCs.

vpcstring

The unprotected VPC.

[ "vpc-2zegxdvs5f2je81ph****" ]
VpnListarray

The unprotected VPN gateways.

vpnstring

The unprotected VPN gateway.

[ "vpn-2zegxdvs5f2je81ph****" ]
VpcFirewallNamestring

The instance name of the VPC firewall.

test

Examples

Sample success responses

JSONformat

{
  "TotalCount": "6",
  "RequestId": "1471E2EC-F706-5F11-A79B-BD583ACB8297",
  "VpcTrFirewalls": [
    {
      "CenId": "cen-03f8s0z052ka3v****",
      "CenName": "cen_swas",
      "CloudFirewallVpcOrderType": "PayByCenOwner",
      "FirewallId": "vfw-tr-99bc4f0fc88b4d00****",
      "FirewallSwitchStatus": "opened",
      "IpsConfig": {
        "BasicRules": 1,
        "EnableAllPatch": 1,
        "RuleClass": 3,
        "RunMode": 1
      },
      "OwnerId": 0,
      "PrecheckStatus": "passed",
      "ProtectedResource": {
        "Count": 1,
        "EcrList": [
          "[\n    \"ecr-d6yi3kl5qxmvkz****\"\n]"
        ],
        "PeerTrList": [
          "[\n      \"tr-2zegxdvs5f2je81ph****\"\n]"
        ],
        "VbrList": [
          "[\n      \"vbr-2zegxdvs5f2je81ph****\"\n]"
        ],
        "VpcList": [
          "[\"vpc-2zegxdvs5f2je81ph****\"]"
        ],
        "VpnList": [
          "[\n      \"vpn-2zegxdvs5f2je81ph****\"\n]"
        ]
      },
      "RegionNo": "cn-hangzhou",
      "RegionStatus": "enable",
      "ResultCode": " RegionDisable",
      "RouteMode": "managed",
      "TransitRouterId": "tr-2vcmhjs88nil55fvu****",
      "UnprotectedResource": {
        "Count": 1,
        "EcrList": [
          "[\n    \"ecr-d6yi3kl5qxmvkz****\"\n]"
        ],
        "PeerTrList": [
          "[\n      \"tr-2zegxdvs5f2je81ph****\"\n]"
        ],
        "VbrList": [
          "[\n      \"vbr-2zegxdvs5f2je81ph****\"\n]"
        ],
        "VpcList": [
          "[\n      \"vpc-2zegxdvs5f2je81ph****\"\n]"
        ],
        "VpnList": [
          "[\n      \"vpn-2zegxdvs5f2je81ph****\"\n]"
        ]
      },
      "VpcFirewallName": "test"
    }
  ]
}

Error codes

HTTP status codeError codeError messageDescription
400ErrorUserNotFoundUser not foundThe user does not exist.
400ErrorUserCredentialsUser credentials failed.Unauthorized, not accessible, please first authorize firewall permissions.
400ErrorDBTxErrorA database transaction error occurred.The error message returned because an internal error has occurred in the database transaction.
400ErrorDBSelectErrorA database select error occurred.The error message returned because an internal error has occurred in querying the database.
400ErrorUnMarshalJSONinternal error.Internal Error

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2024-09-06API Description Update. The Error code has changedView Change Details
2024-08-15The response structure of the API has changedView Change Details
2023-06-13The response structure of the API has changedView Change Details