gcloud compute security-policies add-layer7-ddos-defense-threshold-config

NAME
gcloud compute security-policies add-layer7-ddos-defense-threshold-config - add a layer7 ddos defense threshold config to a Compute Engine security policy
SYNOPSIS
gcloud compute security-policies add-layer7-ddos-defense-threshold-config NAME --threshold-config-name=THRESHOLD_CONFIG_NAME [--auto-deploy-confidence-threshold=AUTO_DEPLOY_CONFIDENCE_THRESHOLD] [--auto-deploy-expiration-sec=AUTO_DEPLOY_EXPIRATION_SEC] [--auto-deploy-impacted-baseline-threshold=AUTO_DEPLOY_IMPACTED_BASELINE_THRESHOLD] [--auto-deploy-load-threshold=AUTO_DEPLOY_LOAD_THRESHOLD] [--detection-absolute-qps=DETECTION_ABSOLUTE_QPS] [--detection-load-threshold=DETECTION_LOAD_THRESHOLD] [--detection-relative-to-baseline-qps=DETECTION_RELATIVE_TO_BASELINE_QPS] [--traffic-granularity-configs=[type=TYPE[,value=VALUE][,enableEachUniqueValue=ENABLE_EACH_UNIQUE_VALUE];…;…]] [GCLOUD_WIDE_FLAG]
DESCRIPTION
gcloud compute security-policies add-layer7-ddos-defense-threshold-config is used to add layer7 ddos defense threshold configs to security policies.
EXAMPLES
To add a layer7 ddos defense threshold config run the following command:
gcloud compute security-policies add-layer7-ddos-defense-threshold-config NAME --threshold-config-name=my-threshold-config-name --auto-deploy-load-threshold=0.7 --auto-deploy-confidence-threshold=0.8 --auto-deploy-impacted-baseline-threshold=0.1 --auto-deploy-expiration-sec=4800 --detection-load-threshold=0.4 --detection-absolute-qps=1000 --detection-relative-to-baseline-qps=2.0 --traffic-granularity-configs=type=HTTP_HEADER_HOST,value=www.my-test-host.com;type=HTTP_PATH,enableEachUniqueValue=true
POSITIONAL ARGUMENTS
NAME
Name of the security policy to update.
REQUIRED FLAGS
--threshold-config-name=THRESHOLD_CONFIG_NAME
The name for the threshold config.
OPTIONAL FLAGS
--auto-deploy-confidence-threshold=AUTO_DEPLOY_CONFIDENCE_THRESHOLD
The threshold of the confidence of an identified attack, over which auto-deploy takes action.
--auto-deploy-expiration-sec=AUTO_DEPLOY_EXPIRATION_SEC
The duration of actions, if any, taken by auto-deploy.
--auto-deploy-impacted-baseline-threshold=AUTO_DEPLOY_IMPACTED_BASELINE_THRESHOLD
The threshold on the estimated impact to the baseline traffic of a suggested mitigation, below which auto-deploy takes action.
--auto-deploy-load-threshold=AUTO_DEPLOY_LOAD_THRESHOLD
The threshold on backend's load, over which auto-deploy takes action.
--detection-absolute-qps=DETECTION_ABSOLUTE_QPS
The absolute QPS of the incoming traffic, over which adaptive protection detects an attack.
--detection-load-threshold=DETECTION_LOAD_THRESHOLD
The threshold on backend's load, over which adaptive protection detects an attack.
--detection-relative-to-baseline-qps=DETECTION_RELATIVE_TO_BASELINE_QPS
The QPS of the incoming traffic relative to the average baseline QPS, over which adaptive protection detects an attack.
--traffic-granularity-configs=[type=TYPE[,value=VALUE][,enableEachUniqueValue=ENABLE_EACH_UNIQUE_VALUE];…;…]
Specify up to 2 configs matching a specifc type/value of traffic.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES
These variants are also available:
gcloud alpha compute security-policies add-layer7-ddos-defense-threshold-config
gcloud beta compute security-policies add-layer7-ddos-defense-threshold-config