Skip to content

Service Policy

Replace service_policy replaces an existing object in the storage backend for metadata.namespace.

ToolDescription
f5xc-api-networksecurity-service-policy-createCreate Service Policy.
f5xc-api-networksecurity-service-policy-getGET Service Policy.
f5xc-api-networksecurity-service-policy-listList Service Policy.
f5xc-api-networksecurity-service-policy-updateReplace Service Policy.
f5xc-api-networksecurity-service-policy-deleteDELETE Service Policy.
ParameterDescriptionExample
metadata.namespaceNamespace-
nameName-
namespaceNamespace-
metadata.nameName-
ParameterDescriptionExample
response_formatThe format in which the configuration object is to be fetched. This could be for example-
label_filterA LabelSelectorType expression that every item in list response will satisfy.-
report_fieldsThe report_fields parameter-
report_status_fieldsThe report_status_fields parameter-

This resource includes mutually exclusive configuration options:

OptionDescriptionRecommended
spec.allow_all_requests-
spec.allow_list-
spec.deny_all_requests-
spec.deny_list-
spec.rule_list-
OptionDescriptionRecommended
spec.any_server-
spec.server_name-
spec.server_name_matcher-
spec.server_selector-
OptionDescriptionRecommended
spec.allow_list.default_action_allow-
spec.allow_list.default_action_deny-
spec.allow_list.default_action_next_policy-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.any_asn-
spec.rule_list.rules[].spec.asn_list-
spec.rule_list.rules[].spec.asn_matcher-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.any_client-
spec.rule_list.rules[].spec.client_name-
spec.rule_list.rules[].spec.client_name_matcher-
spec.rule_list.rules[].spec.client_selector-
spec.rule_list.rules[].spec.ip_threat_category_list-
OptionDescriptionRecommended
OptionDescriptionRecommended
OptionDescriptionRecommended
spec.rule_list.rules[].spec.any_ip-
spec.rule_list.rules[].spec.ip_matcher-
spec.rule_list.rules[].spec.ip_prefix_list-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.ja4_tls_fingerprint-
spec.rule_list.rules[].spec.tls_fingerprint_matcher-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.arg_matchers[].check_not_present-
spec.rule_list.rules[].spec.arg_matchers[].check_present-
spec.rule_list.rules[].spec.arg_matchers[].item-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.bot_action.bot_skip_processing-
spec.rule_list.rules[].spec.bot_action.none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_cookie_count_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_cookie_count_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_cookie_key_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_cookie_key_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_cookie_value_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_cookie_value_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_header_count_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_header_count_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_header_key_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_header_key_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_header_value_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_header_value_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_parameter_count_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_parameter_count_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_parameter_name_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_parameter_name_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_parameter_value_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_parameter_value_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_query_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_query_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_request_line_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_request_line_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_request_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_request_size_none-
OptionDescriptionRecommended
spec.rule_list.rules[].spec.request_constraints.max_url_size_exceeds-
spec.rule_list.rules[].spec.request_constraints.max_url_size_none-

Ask Claude to help you work with Service Policy resources:

“Create a service-policy named ‘example’ in the ‘production’ namespace”

“List all service-policys in the ‘production’ namespace”

“Get details of the service-policy named ‘example’ in namespace ‘production‘“

Terminal window
# List resources
curl -X GET "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/service_policys" \
-H "Authorization: APIToken ${F5XC_API_TOKEN}" \
-H "Content-Type: application/json"
# Get specific resource
curl -X GET "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/service_policys/<name>" \
-H "Authorization: APIToken ${F5XC_API_TOKEN}" \
-H "Content-Type: application/json"
# Create resource
curl -X POST "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/service_policys" \
-H "Authorization: APIToken ${F5XC_API_TOKEN}" \
-H "Content-Type: application/json" \
-d @service_policy.json
# Delete resource
curl -X DELETE "https://${TENANT}.console.ves.volterra.io/api/config/namespaces/${NAMESPACE}/service_policys/<name>" \
-H "Authorization: APIToken ${F5XC_API_TOKEN}"