Appliance Management API (0.1.0)

Download OpenAPI specification:Download

Anapaya Operations: [email protected]

Management API for the Anapaya EDGE and CORE appliances

init

Operations that are important for initialization of the appliance.

Put a new configuration

✨Added in v0.24

Put a new configuration to the appliance.

query Parameters

force	boolean Push the configuration, even if configuration validation fails. This parameter MUST be used with care as it can leave the appliance in a misconfigured state.
disable_strict_parsing	boolean Disable strict parsing of the appliance configuration.

header Parameters

If-Match

string

Request Body schema: application/json

The config to be pushed to the appliance.

required

object (Config)

Anapaya appliance configuration

Responses

Request samples

Payload

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
}
}

Response samples

200
400
412
500

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
},
"metadata": {"release_version": "v1.0.0"
}
}

Validates a configuration

✨Added in v0.34

Validates a configuration.

query Parameters

disable_strict_parsing

boolean

Disable strict parsing of the appliance configuration.

Request Body schema: application/json

The config to be validated.

required

object (Config)

Anapaya appliance configuration

Responses

Request samples

Payload

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
}
}

Response samples

200
400
500

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
},
"metadata": {"release_version": "v1.0.0"
}
}

Add a TRC file

✨Added in v0.24

Add a SCION CPPKI Trust Root Configuration (TRC) file to the device. The TRC is first validated before it is added to the trust store. Only valid TRCs are added to the trust store. Use the 'force' query parameter to force the addition of the TRC regardless of validity.

query Parameters

force

boolean

Default: false

If force is true, the TRC is added regardless of validity.

Request Body schema: application/x-pem-files

string <binary>

The PEM encoded signed TRC.

Responses

Request samples

Payload

Content type

application/x-pem-files

-----BEGIN TRC-----
ZjAwOjA6MTEwI ...
-----END TRC-----

Response samples

200
400
500

Content type

application/json

{"trc": {"id": {"isd": 15,
"base_number": 1,
"serial_number": 3
},
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"core_ases": ["1-ff00:0:110"
],
"authoritative_ases": ["1-ff00:0:110"
],
"description": "string",
"blob": "string"
}
}

Add a bundle of TRC files

✨Added in v0.28

Add a bundle SCION CPPKI Trust Root Configuration (TRC) files to the device. The TRCs are first validated before they are added to the trust store. Only valid TRCs are added to the trust store. Use the 'force' query parameter to force the addition of the TRCs regardless of validity.

query Parameters

force

boolean

Default: false

If force is true, the TRC is added regardless of validity.

Request Body schema: application/x-pem-files

string <binary>

The PEM encoded signed TRC.

Responses

Request samples

Payload

Content type

application/x-pem-files

-----BEGIN TRC-----
ZjAwOjA6MTEwI ...
-----END TRC-----
-----BEGIN TRC-----
6QV3F2EsMZVWD ...
-----END TRC-----
-----BEGIN TRC-----
GO0Vg34C8eRAu ...
-----END TRC-----

Response samples

200
400
500

Content type

application/json

{"trcs": [{"id": {"isd": 15,
"base_number": 1,
"serial_number": 3
},
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"core_ases": ["1-ff00:0:110"
],
"authoritative_ases": ["1-ff00:0:110"
],
"description": "string",
"blob": "string"
}
]
}

Create an AS certificate signing request

✨Added in v0.24

Create a SCION CPPKI AS Certificate Signing Request (CSR). The CSR needs to be signed by a SCION CPPKI Certificate Authority in the local ISD. The fully signed certificate chain then needs to be installed via the /cppki/certificates endpoint.

Request Body schema: application/json

The parameters for the CSR.

required

object (Subject of a certificate signing request.)

Responses

Request samples

Payload

Content type

application/json

{"subject": {"isd_as": "1-ff00:0:110",
"common_name": "Anapaya Switzerland AS",
"country": "CH",
"locality": "Zurich",
"organization": "Anapaya Systems AG",
"organizational_unit": "Anapaya Systems Engineering Department",
"postal_code": "8005",
"province": "Zurich",
"serial_number": "CHE 123.456.789",
"street_address": "Hardturmstrasse 253, 8005 Zurich"
}
}

Response samples

200
400
500

Content type

application/json

{"certificate_signing_request": {"subject": {"isd_as": "1-ff00:0:110",
"common_name": "Anapaya Switzerland AS",
"country": "CH",
"locality": "Zurich",
"organization": "Anapaya Systems AG",
"organizational_unit": "Anapaya Systems Engineering Department",
"postal_code": "8005",
"province": "Zurich",
"serial_number": "CHE 123.456.789",
"street_address": "Hardturmstrasse 253, 8005 Zurich"
},
"creation_time": "2021-01-04T09:59:33Z",
"id": "fa53a04a"
}
}

Add an AS certificate chain

✨Added in v0.24

Add a SCION CPPKI AS certificate chain to the device by promoting an existing certificate signing request. The certificate chain is first verified against the active TRC of the local ISD before it is added. Only verifiable certificate chains are added. Use the 'force' query parameter to force the addition of the certificate chain regardless of validity or verifiability.

query Parameters

force

boolean

Default: false

If force is true the certificate chain is added regardless of validity.

Request Body schema:
application/pkcs7-mime

string <binary>

Certificate chain containing the new AS certificate and the issuing CA certificate encoded in a degenerate PKCS#7 data structure.

Responses

Request samples

Payload

Content type

application/pkcs7-mime

No sample

Response samples

200
400
500

Content type

application/json

{"certificate_chain": {"id": "fa53a04a",
"subject": "1-ff00:0:110",
"issuer": "1-ff00:0:110",
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"chain": "string",
"blob": "string"
}
}

config

Operations related to managing the configuration of the appliance.

Get the current configuration

✨Added in v0.24

Get the currently active appliance configuration.

header Parameters

If-None-Match

string

Responses

Response samples

200
400
500

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
},
"metadata": {"release_version": "v1.0.0"
}
}

Put a new configuration

✨Added in v0.24

Put a new configuration to the appliance.

query Parameters

force	boolean Push the configuration, even if configuration validation fails. This parameter MUST be used with care as it can leave the appliance in a misconfigured state.
disable_strict_parsing	boolean Disable strict parsing of the appliance configuration.

header Parameters

If-Match

string

Request Body schema: application/json

The config to be pushed to the appliance.

required

object (Config)

Anapaya appliance configuration

Responses

Request samples

Payload

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
}
}

Response samples

200
400
412
500

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
},
"metadata": {"release_version": "v1.0.0"
}
}

Validates a configuration

✨Added in v0.34

Validates a configuration.

query Parameters

disable_strict_parsing

boolean

Disable strict parsing of the appliance configuration.

Request Body schema: application/json

The config to be validated.

required

object (Config)

Anapaya appliance configuration

Responses

Request samples

Payload

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
}
}

Response samples

200
400
500

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
},
"metadata": {"release_version": "v1.0.0"
}
}

cppki

Operations related to managing SCION CPPKI cryptographic material of the appliance.

List the TRC files

✨Added in v0.24

List the latest SCION CPPKI Trust Root Configuration (TRC) files for each ISD that are known to the appliance. The result can be filtered by ISD. Optionally, all TRCs can be requested instead of only the latest ones by setting the 'all' query parameter.

query Parameters

isd	Array of integers Comma-separated list of ISDs to include.
all	boolean Include all TRCs instead of just the latest one per ISD.

Responses

Response samples

200
400
500

Content type

application/json

{"trcs": [{"id": {"isd": 15,
"base_number": 1,
"serial_number": 3
},
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"core_ases": ["1-ff00:0:110"
],
"authoritative_ases": ["1-ff00:0:110"
],
"description": "string",
"blob": "string"
}
]
}

Add a TRC file

✨Added in v0.24

Add a SCION CPPKI Trust Root Configuration (TRC) file to the device. The TRC is first validated before it is added to the trust store. Only valid TRCs are added to the trust store. Use the 'force' query parameter to force the addition of the TRC regardless of validity.

query Parameters

force

boolean

Default: false

If force is true, the TRC is added regardless of validity.

Request Body schema: application/x-pem-files

string <binary>

The PEM encoded signed TRC.

Responses

Request samples

Payload

Content type

application/x-pem-files

-----BEGIN TRC-----
ZjAwOjA6MTEwI ...
-----END TRC-----

Response samples

200
400
500

Content type

application/json

{"trc": {"id": {"isd": 15,
"base_number": 1,
"serial_number": 3
},
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"core_ases": ["1-ff00:0:110"
],
"authoritative_ases": ["1-ff00:0:110"
],
"description": "string",
"blob": "string"
}
}

Add a bundle of TRC files

✨Added in v0.28

Add a bundle SCION CPPKI Trust Root Configuration (TRC) files to the device. The TRCs are first validated before they are added to the trust store. Only valid TRCs are added to the trust store. Use the 'force' query parameter to force the addition of the TRCs regardless of validity.

query Parameters

force

boolean

Default: false

If force is true, the TRC is added regardless of validity.

Request Body schema: application/x-pem-files

string <binary>

The PEM encoded signed TRC.

Responses

Request samples

Payload

Content type

application/x-pem-files

-----BEGIN TRC-----
ZjAwOjA6MTEwI ...
-----END TRC-----
-----BEGIN TRC-----
6QV3F2EsMZVWD ...
-----END TRC-----
-----BEGIN TRC-----
GO0Vg34C8eRAu ...
-----END TRC-----

Response samples

200
400
500

Content type

application/json

{"trcs": [{"id": {"isd": 15,
"base_number": 1,
"serial_number": 3
},
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"core_ases": ["1-ff00:0:110"
],
"authoritative_ases": ["1-ff00:0:110"
],
"description": "string",
"blob": "string"
}
]
}

Get the TRC

✨Added in v0.24

Get the SCION CPPKI Trust Root Configuration (TRC).

path Parameters

isd required	integer Example: 12
base required	integer Example: 1
serial required	integer Example: 3

Responses

Response samples

200
400
404
500

Content type

application/json

{"trc": {"id": {"isd": 15,
"base_number": 1,
"serial_number": 3
},
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"core_ases": ["1-ff00:0:110"
],
"authoritative_ases": ["1-ff00:0:110"
],
"description": "string",
"blob": "string"
}
}

Get the TRC blob

✨Added in v0.24

Get the SCION CPPKI Trust Root Configuration (TRC) as PEM encoded byte blob.

path Parameters

isd required	integer Example: 12
base required	integer Example: 1
serial required	integer Example: 3

Responses

Response samples

200
400
404
500

Content type

application/json

{"trc": "-----BEGIN TRC-----\\nZjAwOjA6MTEwI ...\\n-----END TRC-----"
}

List the certificate signing requests

✨Added in v0.26

List the certificate signing requests that are available on the device.

query Parameters

isd_as

string (ISD-AS Identifier) ^\d+-([a-f0-9]{1,4}:){2}([a-f0-9]{1,4})|\d+$

Example: isd_as=1-ff00:0:110

Responses

Response samples

200
400
500

Content type

application/json

{"certificate_signing_requests": [{"subject": {"isd_as": "1-ff00:0:110",
"common_name": "Anapaya Switzerland AS",
"country": "CH",
"locality": "Zurich",
"organization": "Anapaya Systems AG",
"organizational_unit": "Anapaya Systems Engineering Department",
"postal_code": "8005",
"province": "Zurich",
"serial_number": "CHE 123.456.789",
"street_address": "Hardturmstrasse 253, 8005 Zurich"
},
"creation_time": "2021-01-04T09:59:33Z",
"id": "fa53a04a"
}
]
}

Create an AS certificate signing request

✨Added in v0.24

Create a SCION CPPKI AS Certificate Signing Request (CSR). The CSR needs to be signed by a SCION CPPKI Certificate Authority in the local ISD. The fully signed certificate chain then needs to be installed via the /cppki/certificates endpoint.

Request Body schema: application/json

The parameters for the CSR.

required

object (Subject of a certificate signing request.)

Responses

Request samples

Payload

Content type

application/json

{"subject": {"isd_as": "1-ff00:0:110",
"common_name": "Anapaya Switzerland AS",
"country": "CH",
"locality": "Zurich",
"organization": "Anapaya Systems AG",
"organizational_unit": "Anapaya Systems Engineering Department",
"postal_code": "8005",
"province": "Zurich",
"serial_number": "CHE 123.456.789",
"street_address": "Hardturmstrasse 253, 8005 Zurich"
}
}

Response samples

200
400
500

Content type

application/json

{"certificate_signing_request": {"subject": {"isd_as": "1-ff00:0:110",
"common_name": "Anapaya Switzerland AS",
"country": "CH",
"locality": "Zurich",
"organization": "Anapaya Systems AG",
"organizational_unit": "Anapaya Systems Engineering Department",
"postal_code": "8005",
"province": "Zurich",
"serial_number": "CHE 123.456.789",
"street_address": "Hardturmstrasse 253, 8005 Zurich"
},
"creation_time": "2021-01-04T09:59:33Z",
"id": "fa53a04a"
}
}

Get the certificate signing request

✨Added in v0.26

Get the SCION Certificate Signing Request for a given CSR ID

path Parameters

csr_id

required

string <hex-string> (Certificate signing request identifier)

Example: fa53a04a

Certificate signing request identifier.

Responses

Response samples

200
400
404
500

Content type

application/json

{"certificate_signing_request": {"subject": {"isd_as": "1-ff00:0:110",
"common_name": "Anapaya Switzerland AS",
"country": "CH",
"locality": "Zurich",
"organization": "Anapaya Systems AG",
"organizational_unit": "Anapaya Systems Engineering Department",
"postal_code": "8005",
"province": "Zurich",
"serial_number": "CHE 123.456.789",
"street_address": "Hardturmstrasse 253, 8005 Zurich"
},
"creation_time": "2021-01-04T09:59:33Z",
"id": "fa53a04a"
}
}

Get the certificate signing request blob

✨Added in v0.26

Get the SCION CPPKI Certificate Signing Request encoded as PEM bytes blob for a given CSR ID.

path Parameters

csr_id

required

string <hex-string> (Certificate signing request identifier)

Example: fa53a04a

Certificate signing request identifier.

Responses

Response samples

200
400
404
500

Content type

application/json

{"csr": "-----BEGIN CERTIFICATE REQUEST-----\\nCertificateSigningRequest ...\\n-----END CERTIFICATE REQUEST-----"
}

List the certificate chains

✨Added in v0.24

List the certificate chains that are available on the device.

query Parameters

isd_as	string (ISD-AS Identifier) ^\d+-([a-f0-9]{1,4}:){2}([a-f0-9]{1,4})\|\d+$ Example: isd_as=1-ff00:0:110
all	boolean Include all certificate chains instead of just the valid ones.

Responses

Response samples

200
400
500

Content type

application/json

{"certificate_chains": [{"id": "fa53a04a",
"subject": "1-ff00:0:110",
"issuer": "1-ff00:0:110",
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"chain": "string",
"blob": "string"
}
]
}

Add an AS certificate chain

✨Added in v0.24

Add a SCION CPPKI AS certificate chain to the device by promoting an existing certificate signing request. The certificate chain is first verified against the active TRC of the local ISD before it is added. Only verifiable certificate chains are added. Use the 'force' query parameter to force the addition of the certificate chain regardless of validity or verifiability.

query Parameters

force

boolean

Default: false

If force is true the certificate chain is added regardless of validity.

Request Body schema:
application/pkcs7-mime

string <binary>

Certificate chain containing the new AS certificate and the issuing CA certificate encoded in a degenerate PKCS#7 data structure.

Responses

Request samples

Payload

Content type

application/pkcs7-mime

No sample

Response samples

200
400
500

Content type

application/json

{"certificate_chain": {"id": "fa53a04a",
"subject": "1-ff00:0:110",
"issuer": "1-ff00:0:110",
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"chain": "string",
"blob": "string"
}
}

Manually renew an AS certificate chain

✨Added in v0.24

Manually renew a SCION CPPKI AS certificate chain with the regular renewal mechanism. By default, the distinguished name of the subject in the predecessor certificate chain is used. A different distinguished name can be requested by setting the subject in the request body. By default the issuers are taken from the appliance configuration, specific issuers can be configured in the request body. If they are set, certificate renewal is attempted with each issuer in order until success.

Note that certificate renewal requires at least one valid certificate chain to be present on the appliance.

query Parameters

isd_as

string (ISD-AS Identifier) ^\d+-([a-f0-9]{1,4}:){2}([a-f0-9]{1,4})|\d+$

Example: isd_as=1-ff00:0:110

The ISD-AS for which the certificate is renewed. This parameter is required only if the request body is not set, and there are multiple ISD-ASes configured on the appliance.

Request Body schema: application/json

	object (Subject of a certificate signing request.)
issuers	Array of strings (ISD-AS Identifier)

Responses

Request samples

Payload

Content type

application/json

{"subject": {"isd_as": "1-ff00:0:110",
"common_name": "Anapaya Switzerland AS",
"country": "CH",
"locality": "Zurich",
"organization": "Anapaya Systems AG",
"organizational_unit": "Anapaya Systems Engineering Department",
"postal_code": "8005",
"province": "Zurich",
"serial_number": "CHE 123.456.789",
"street_address": "Hardturmstrasse 253, 8005 Zurich"
},
"issuers": ["1-ff00:0:110"
]
}

Response samples

200
400
500

Content type

application/x-pem-file

-----BEGIN CERTIFICATE-----
ASCertificate ...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
CACertificate ...
-----END CERTIFICATE-----

Get the certificate chain

✨Added in v0.24

Get the SCION CPPKI AS certificate chain for a given ChainID.

path Parameters

chain_id

required

string <hex-string> (Certificate chain identifier)

Example: fa53a04a

Certificate chain identifier.

Responses

Response samples

200
400
404
500

Content type

application/json

{"certificate_chain": {"as_certificate": {"distinguished_name": "string",
"isd_as": "1-ff00:0:110",
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"subject_key_algo": "ECDSA",
"subject_key_id": "89 B9 49 C2 2F 2F 9C DD 0D 2A 57 A9 DE 8E 2F 95 F3 09 10 D1"
},
"ca_certificate": {"distinguished_name": "string",
"isd_as": "1-ff00:0:110",
"validity": {"not_before": "2021-01-04T09:59:33Z",
"not_after": "2022-01-04T09:59:33Z"
},
"subject_key_algo": "ECDSA",
"subject_key_id": "89 B9 49 C2 2F 2F 9C DD 0D 2A 57 A9 DE 8E 2F 95 F3 09 10 D1"
}
}
}

Get the certificate chain blob

✨Added in v0.24

Get the SCION CPPKI AS certificate chain encoded as PEM bytes blob for a given ChainID.

path Parameters

chain_id

required

string <hex-string> (Certificate chain identifier)

Example: fa53a04a

Certificate chain identifier.

Responses

Response samples

200
400
404
500

Content type

application/json

{"certificate_chain": "-----BEGIN CERTIFICATE-----\\nASCertificate ...\\n-----END CERTIFICATE-----"
}

Manually request an AS certificate chain for a given CSR

✨Added in v0.34

Manually request a SCION CPPKI AS certificate chain for a given CSR using the regular certificate renewal mechanism. The endpoint expects a CSR and uses that to request a certificate renewal. The certificate renewal request is signed by an active key/certificate of the appliance such that the CA will be able to authenticate the renewal request and issue the certificate. This is useful if one appliance has been disconnected from the SCION network for several days and thus has no valid AS certificate anymore that could be used for certificate renewal. In such a case, one can generate a new CSR on the appliance that was offline and use this endpoint on an appliance that still has a valid AS certificate to request a new certificate on behalf of the sibling.The returned certificate can then be deployed to the offline appliance using the regular POST /cppki/certificates endpoint.

Request Body schema: application/json

csr

required

string

PEM encoded CSR

Responses

Request samples

Payload

Content type

application/json

{"csr": "-----BEGIN CERTIFICATE REQUEST-----\\nCertificateSigningRequest ...\\n-----END CERTIFICATE REQUEST-----"
}

Response samples

200
400
500

Content type

application/x-pem-file

-----BEGIN CERTIFICATE-----
ASCertificate ...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
CACertificate ...
-----END CERTIFICATE-----

tools

Operations used to trigger SCION utilities, such as ping and traceroute.

Trigger a scion ping run

✨Added in v0.26

Trigger and wait for a ping run to test connectivity to a remote SCION host using SCMP echo packets.

Request Body schema: application/json

required

object (PingRun)

Responses

Request samples

Payload

Content type

application/json

{"run": {"destination_host": "string",
"destination_isd_as": "1-ff00:0:110",
"count": 1,
"source_isd_as": "1-ff00:0:110",
"max_mtu": true,
"payload_size": 8,
"sequence": "string",
"timeout": "1s"
}
}

Response samples

200
400
500

Content type

application/json

{"summary": {"path": {"fingerprint": "string",
"hops": [{"isd_as": "1-ff00:0:110",
"interface": 42
}
],
"next_hop": "string",
"expiry": "2019-08-24T14:15:22Z",
"mtu": 0,
"latency": ["string"
],
"status": "unknown",
"local_ip": "string"
},
"payload_size": 0,
"scion_packet_size": 0,
"replies": [{"scion_packet_size": 0,
"source_isd_as": "1-ff00:0:110",
"source_host": "string",
"scmp_seq": 0,
"round_trip_time": "string",
"state": "success"
}
],
"statistics": {"sent": 0,
"received": 0,
"packet_loss": 0,
"time": 0
}
}
}

Trigger a SCION showpaths request

✨Added in v0.26

Trigger a SCION showpaths request to a remote SCION AS.

Request Body schema: application/json

required

object (ShowpathsRun)

Responses

Request samples

Payload

Content type

application/json

{"run": {"destination_isd_as": "1-ff00:0:110",
"source_isd_as": "1-ff00:0:110",
"no_probe": false,
"refresh": false,
"maxpaths": 0,
"sequence": "string",
"timeout": "1s"
}
}

Response samples

200
400
500

Content type

application/json

{"paths": [{"fingerprint": "string",
"hops": [{"isd_as": "1-ff00:0:110",
"interface": 42
}
],
"next_hop": "string",
"expiry": "2019-08-24T14:15:22Z",
"mtu": 0,
"latency": ["string"
],
"status": "unknown",
"local_ip": "string"
}
]
}

Trigger a scion traceroute run

✨Added in v0.26

Trigger a SCION traceroute run and trace the SCION path to a remote AS using SCMP traceroute packets.

Request Body schema: application/json

required

object (TracerouteRun)

Responses

Request samples

Payload

Content type

application/json

{"run": {"destination_host": "string",
"destination_isd_as": "1-ff00:0:110",
"source_isd_as": "1-ff00:0:110",
"sequence": "string",
"timeout": "1s",
"probes_per_hop": 3
}
}

Response samples

200
400
500

Content type

application/json

{"summary": {"path": {"fingerprint": "string",
"hops": [{"isd_as": "1-ff00:0:110",
"interface": 42
}
],
"next_hop": "string",
"expiry": "2019-08-24T14:15:22Z",
"mtu": 0,
"latency": ["string"
],
"status": "unknown",
"local_ip": "string"
},
"hops": [{"isd_as": "1-ff00:0:110",
"ip": "10.0.0.1",
"interface_id": 42,
"round_trip_times": ["300ms"
]
}
]
}
}

software

Operations related to managing and installing software packages.

List the package information for scion packages in the remote repository.

✨Added in v0.26

List the package information (e.g., version) for all the scion packages which are available in the remote repository.

Responses

Response samples

200
500
504

Content type

application/json

{"packages": [{"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
]
}

Get the scion package information.

✨Added in v0.26

Get the package information of the scion package for the given version.

path Parameters

version

required

string (Package version)

Example: v0.25.12

Version of the scion package.

Responses

Response samples

200
400
404
500
504

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

List the package information for system packages in the remote repository.

✨Added in v0.26

List the package information (e.g., version) for all the system packages which are available in the remote repository.

Responses

Response samples

200
500
504

Content type

application/json

{"packages": [{"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
]
}

Get the system package information.

✨Added in v0.26

Get the package information of the system package for the given version.

path Parameters

version

required

string (Package version)

Example: v0.25.12

Version of the system package.

Responses

Response samples

200
400
404
500
504

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

Fetch the software scion package of a given version.

✨Added in v0.26

Fetch the software scion package of a given version from a remote repository.

Request Body schema: application/json

version

required

string (Package version)

Responses

Request samples

Payload

Content type

application/json

{"version": "v0.25.12"
}

Response samples

Content type

application/json

{"fetch": {"version": "v0.25.12",
"fetch_id": "string",
"status": "pending"
}
}

Fetch the software system package for a given version.

✨Added in v0.26

Fetch the software system package for a given version from a remote repository.

Request Body schema: application/json

version

required

string (Package version)

Responses

Request samples

Payload

Content type

application/json

{"version": "v0.25.12"
}

Response samples

Content type

application/json

{"fetch": {"version": "v0.25.12",
"fetch_id": "string",
"status": "pending"
}
}

Get the download status of a software scion package.

✨Added in v0.26

Get the download status of a software scion package from a remote repository.

path Parameters

id

required

string (Identifier of the software package fetching process.)

Identifier of the fetch process for the specific scion package version.

Responses

Response samples

200
404
500

Content type

application/json

{"fetch_status": {"version": "v0.25.12",
"fetch_id": "string",
"status": "pending"
}
}

Get the download status of a software system package.

✨Added in v0.26

Get the download status of a software system package from a remote repository.

path Parameters

id

required

string (Identifier of the software package fetching process.)

Identifier of the fetch process for the specific system package version.

Responses

Response samples

200
404
500

Content type

application/json

{"fetch_status": {"version": "v0.25.12",
"fetch_id": "string",
"status": "pending"
}
}

List the package information for scion packages available locally.

✨Added in v0.26

List the package information (e.g., version) for all the scion packages which are available locally on the appliance.

Responses

Response samples

200
500

Content type

application/json

{"packages": [{"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
]
}

Upload the scion package.

✨Added in v0.26

Upload the scion package to the local repository of the appliance.

query Parameters

force

boolean

Default: false

If force is true, the package is stored regardless of whether it already exists.

Request Body schema: application/octet-stream

string <binary>

Responses

Response samples

201
400
409
500

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

Get the scion package information.

✨Added in v0.26

Get the package information of the scion package for the given version.

path Parameters

version

required

string (Package version)

Example: v0.25.12

Version of the scion package.

Responses

Response samples

200
400
404
500

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

Delete the given scion package.

✨Added in v0.26

Delete the scion package for the given version if it is available locally on the appliance.

path Parameters

version

required

string (Package version)

Example: v0.25.12

Version of the scion package.

Responses

Response samples

200
400
404
500

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

List the package information for system packages available locally.

✨Added in v0.26

List the package information (e.g., version) for all the system packages which are available locally on the appliance.

Responses

Response samples

200
500

Content type

application/json

{"packages": [{"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
]
}

Upload the system package.

✨Added in v0.26

Upload the system package to the local repository of the appliance.

query Parameters

force

boolean

Default: false

If force is true, the package is stored regardless of whether it already exists.

Request Body schema: application/octet-stream

string <binary>

Responses

Response samples

201
400
409
500

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

Get the system package information.

✨Added in v0.26

Get the package information of the system package for the given version.

path Parameters

version

required

string (Package version)

Example: v0.25.12

Version of the system package.

Responses

Response samples

200
400
404
500

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

Delete the given system package.

✨Added in v0.26

Delete the system package for the given version if it is available locally on the appliance.

path Parameters

version

required

string (Package version)

Example: v0.25.12

Version of the system package.

Responses

Response samples

200
400
404
500

Content type

application/json

{"package": {"version": "v0.25.12",
"url": "https://localhost:42000/api/v1/software/scion/packages/local/v0.25.12"
}
}

Trigger installation of the specified scion package.

✨Added in v0.26

Trigger the installation of the scion package with the version specified in the request body.

Request Body schema: application/json

version required	string (Package version)
force	boolean Default: false
skip_signature_verification	boolean Default: false

Responses

Request samples

Payload

Content type

application/json

{"version": "v0.25.12",
"force": false,
"skip_signature_verification": false
}

Response samples

Content type

application/json

{"install_info": {"version": "v0.25.12",
"install_id": "string",
"install_status": "in_progress",
"rollback_id": "string"
}
}

Trigger installation of the specified system package.

✨Added in v0.26

Trigger the installation of the system package with the version specified in the request body.

Request Body schema: application/json

version required	string (Package version)
force	boolean Default: false
skip_signature_verification	boolean Default: false

Responses

Request samples

Payload

Content type

application/json

{"version": "v0.25.12",
"force": false,
"skip_signature_verification": false
}

Response samples

Content type

application/json

{"install_info": {"version": "v0.25.12",
"install_id": "string",
"install_status": "in_progress",
"rollback_id": "string"
}
}

Get the status of the scion package installation process for the given id.

✨Added in v0.26

Get the status of the installation process of the scion package for the given id.

path Parameters

id

required

string (Identifier of the software package installation process.)

Identifier of the installation process for the specific scion package version.

Responses

Response samples

200
404
500

Content type

application/json

{"install_info": {"version": "v0.25.12",
"install_id": "string",
"install_status": "in_progress",
"rollback_id": "string"
}
}

Get the status of the system package installation process for the given id.

✨Added in v0.26

Get the status of the installation process of the system package for the given id.

path Parameters

id

required

string (Identifier of the software package installation process.)

Identifier of the installation process for the specific system package version.

Responses

Response samples

200
404
500

Content type

application/json

{"install_info": {"version": "v0.25.12",
"install_id": "string",
"install_status": "in_progress",
"rollback_id": "string"
}
}

Get the installed scion version.

✨Added in v0.26

Get the version of scion package currently installed.

Responses

Response samples

200
500
504

Content type

application/json

{"version": "v0.25.12",
"checksum": "string"
}

Get the installed system version.

✨Added in v0.26

Get the version of system package currently installed.

Responses

Response samples

200
500
504

Content type

application/json

{"version": "v0.25.12",
"checksum": "string"
}

migrations

Operations related to migrations towards a new version of the appliance.

Put the configuration for migration to {version}.

✨Added in v0.32

This endpoint allows the preparation of the installation of a new appliance release. It accepts any json and stores this so that the new appliance version will find it. The new appliance version will validate the configuration and if validation succeeds use that as configuration. This helps to do upgrades where new configuration features can't be automatically migrated or are newly added. For example to migrate to v0.33.1 put the new configuration to /migrations/v0.33/config. Note that if there was a previous configuration it is overwritten.

path Parameters

version

required

string (Version without patch)

Example: v0.32

Version of the appliance for which the configuration is.

Responses

Response samples

400
500

Content type

application/json+problem

{"type": "https://anapaya.net/probs/bad-request",
"title": "The request parameters are invalid.",
"status": 503,
"detail": "Connection to database timed out"
}

Get the configuration for migration to {version}.

✨Added in v0.32

Get the configuration that is applied on the migration to version {version}.

path Parameters

version

required

string (Version without patch)

Example: v0.32

Version of the appliance for which the configuration is.

Responses

Response samples

404

Content type

application/json+problem

{"type": "https://anapaya.net/probs/bad-request",
"title": "The request parameters are invalid.",
"status": 503,
"detail": "Connection to database timed out"
}

debug

Operations related to enabling and disabling debug information.

Network interfaces summary.

✨Added in v0.32

Network interfaces summary.

query Parameters

interface-name

string

Responses

Response samples

200
404
500

Content type

application/json

{"interfaces": [{"name": "string",
"mtu": 0,
"state": "up",
"driver": "linux",
"addresses": ["string"
]
}
]
}

Network routes summary.

✨Added in v0.33

Network routes summary.

query Parameters

ip

string

Responses

Response samples

200
404
500

Content type

application/json

{"routes": [{"destination": "string",
"interface": "string",
"scope": "string",
"source": "string",
"via": "string",
"gateway": "string",
"mtu": 0,
"metric": 0
}
]
}

Get if the periodic appliance-controller notifications are enabled.

✨Added in v0.27

Check if the controller notifications are enabled or not. For context: If notifications are enabled, the appliance-controller periodically sends notifications with the latest configuration, which eventually overwrites any manual changes. By default, the controller notifications should be enabled. However, in the case of manual troubleshooting, it may be convenient to temporarily disable the controller notifications.

Responses

Response samples

200
500

Content type

application/json

{"disabled": true,
"indefinite": false,
"deadline": "2022-02-21T10:31:45Z",
"timeout": "10m"
}

Enable or disable periodic notifications from the appliance-controller.

✨Added in v0.27

Enable or disable the appliance-controller notifications. Optionally, a deadline can be provided, either as absolute time or as a relative duration. The deadline indicates until when the appliance-controller notifications should be disabled. If both absolute and relative times are given, the minimum is taken. For context: If notifications are enabled (default), the appliance-controller periodically sends notifications with the latest configuration, which overwrites any manual changes. Note that disabling notifications should only happen when debugging the configuration of the host. It should not be treated as a permanent solution to configuration changes, meaning that eventually the appliance-controller notifications should be re-enabled.

Request Body schema: application/json

disabled required	boolean Whether the appliance-controller notifications are disabled.
indefinite	boolean Default: false Whether the appliance-controller notifications are disabled indefinitely. Only one of indefinite, deadline and timeout must be set.
deadline	string <date-time> Until when appliance-controller notifications are disabled specified as a RFC3339 formatted date-time string. Only one of indefinite, deadline and timeout must be set.
timeout	string Duration during which the appliance-controller notifications are disabled specified as a duration string. A duration string is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as "300ms", "-1.5h" or "2h45m". Valid time units are "ns", "us" (or "µs"), "ms", "s", "m", "h". Only one of indefinite, deadline and timeout must be set.

Responses

Request samples

Payload

Content type

application/json

{"disabled": true,
"indefinite": false,
"deadline": "2022-02-21T10:31:45Z",
"timeout": "10m"
}

Response samples

200
400
500

Content type

application/json

{"disabled": true,
"indefinite": false,
"deadline": "2022-02-21T10:31:45Z",
"timeout": "10m"
}

Trigger a notification from the appliance-controller.

✨Added in v0.34

Triggering a notification will reapply the lastest stored configuration.

Responses

Response samples

500

Content type

application/json+problem

{"type": "https://anapaya.net/probs/bad-request",
"title": "The request parameters are invalid.",
"status": 503,
"detail": "Connection to database timed out"
}

Get the SCION interfaces.

✨Added in v0.32

Get a list of all the SCION interfaces configured on the host.

query Parameters

local_isd_as	string (ISD-AS Identifier) ^\d+-([a-f0-9]{1,4}:){2}([a-f0-9]{1,4})\|\d+$ Example: local_isd_as=1-ff00:0:110
remote_isd_as	string (ISD-AS Identifier) ^\d+-([a-f0-9]{1,4}:){2}([a-f0-9]{1,4})\|\d+$ Example: remote_isd_as=1-ff00:0:110
interface_id	integer >= 0

Responses

Response samples

200
400
404
500

Content type

application/json

{"interfaces": [{"local": {"isd_as": "1-ff00:0:110",
"address": "string",
"interface_id": 0
},
"remote": {"isd_as": "1-ff00:0:110",
"address": "string",
"interface_id": 0
},
"relationship": "CHILD",
"mtu": 0,
"state": "UP"
}
],
"sibling_interfaces": [{"mtu": 0,
"relationship": "CHILD",
"remote_isd_as": "1-ff00:0:110",
"local_isd_as": "1-ff00:0:110",
"local_interface_id": 0,
"next_hop_address": "string"
}
]
}

The user-provided domain configuration.

✨Added in v0.35

The user-provided domain configuration.

Responses

Response samples

200
500

Content type

application/json

{ }

The full current state of the gateway.

✨Added in v0.35

The full current state of the gateway.

Responses

Response samples

200
500

Content type

application/json

{ }

The state monitored by the gateway.

✨Added in v0.35

The state monitored by the gateway.

Responses

Response samples

200
500

Content type

application/json

{ }

Get summary of the SCION tunneling infrastructure.

✨Added in v0.33

Get summary of the SCION tunneling infrastructure.

Responses

Response samples

200
500

Content type

application/json

{"sessions": [{"session_id": "string",
"session_id_legacy": 0,
"local_isd_as": "1-ff00:0:110",
"remote_isd_as": "1-ff00:0:110",
"data_addr": "string",
"probe_addr": "string",
"pinned": [0
],
"domain": "string",
"traffic_matcher": "string",
"path_filter": "string",
"healthy": true,
"paths": [{"fingerprint": "string",
"current": true,
"rejected": true
}
]
}
],
"routing_chains": [{"routing_chain_id": "string",
"routing_chain_id_legacy": 0,
"prefixes": ["string"
],
"domain": "string",
"traffic_matchers": [{"traffic_policy_id": 0,
"traffic_matcher": "string",
"failover_sequence": [{"path_filter_name": "string",
"sessions": ["string"
],
"sessions_legacy": [0
]
}
],
"selected_session": "string",
"selected_session_legacy": 0,
"selected_path": "string"
}
]
}
],
"paths": {"property1": {"fingerprint": "string",
"human": "1-ff00:0:110 1>1 1-ff00:0:111",
"hops": [{"ifid": 0,
"isd_as": "1-ff00:0:110"
}
],
"status": "alive",
"next_hop": "string",
"expiration": "2019-08-24T14:15:22Z",
"mtu": 0,
"latency": 0,
"jitter": 0,
"droprate": 0,
"throughput_pkts": 0,
"throughput_bytes": 0
},
"property2": {"fingerprint": "string",
"human": "1-ff00:0:110 1>1 1-ff00:0:111",
"hops": [{"ifid": 0,
"isd_as": "1-ff00:0:110"
}
],
"status": "alive",
"next_hop": "string",
"expiration": "2019-08-24T14:15:22Z",
"mtu": 0,
"latency": 0,
"jitter": 0,
"droprate": 0,
"throughput_pkts": 0,
"throughput_bytes": 0
}
}
}

Get the SCION tunneling domains configuration.

✨Added in v0.32

Get the SCION tunneling domains configuration.

query Parameters

domain

string

Responses

Response samples

200
404
500

Content type

application/json

{"domains": [{"domain_name": "string",
"default": true,
"local_isd_ases": ["1-ff00:0:110"
],
"remote_isd_ases": [{"action": "ACCEPT",
"isd_as": "1-ff00:0:110"
}
],
"prefixes": {"announce_filter": [{"action": "ACCEPT",
"prefixes": ["string"
]
}
],
"accept_filter": [{"action": "ACCEPT",
"prefixes": ["string"
]
}
]
},
"traffic_policies": [{"traffic_matcher": "string",
"failover_sequence": ["string"
]
}
]
}
]
}

Discovery of tunneling peers.

✨Added in v0.32

Discovery of tunneling peers.

Responses

Response samples

200
500

Content type

application/json

{"sessions": [{"local-isd-as": "1-ff00:0:110",
"remote-isd-as": "1-ff00:0:110",
"path": "string",
"peers": [{"control": "string",
"data": "string",
"probe": "string",
"interfaces": [0
]
}
],
"last-success": "string",
"error": "string"
}
]
}

List of all SCION paths with their stats.

✨Added in v0.33

Returns a list of all SCION paths and their stats.

Responses

Response samples

200
500

Content type

application/json

{"paths": [{"path": {"fingerprint": "string",
"human": "1-ff00:0:110 1>1 1-ff00:0:111",
"hops": [{"ifid": 0,
"isd_as": "1-ff00:0:110"
}
],
"status": "alive",
"next_hop": "string",
"expiration": "2019-08-24T14:15:22Z",
"mtu": 0,
"latency": 0,
"jitter": 0,
"droprate": 0,
"throughput_pkts": 0,
"throughput_bytes": 0
}
}
]
}

List of SCION paths with their stats.

✨Added in v0.32

Returns a list of all SCION paths and their stats filtered by the fingerprints provided in the request body.

Request Body schema: application/json

fingerprints

required

Array of strings

List of path fingerprints to search for.

Responses

Request samples

Payload

Content type

application/json

{"fingerprints": ["string"
]
}

Response samples

200
400
500

Content type

application/json

{"paths": [{"path": {"fingerprint": "string",
"human": "1-ff00:0:110 1>1 1-ff00:0:111",
"hops": [{"ifid": 0,
"isd_as": "1-ff00:0:110"
}
],
"status": "alive",
"next_hop": "string",
"expiration": "2019-08-24T14:15:22Z",
"mtu": 0,
"latency": 0,
"jitter": 0,
"droprate": 0,
"throughput_pkts": 0,
"throughput_bytes": 0
}
}
]
}

SGRP domains.

✨Added in v0.32

SGRP domains with the associated network prefixes.

query Parameters

domain

string

Responses

Response samples

200
400
404
500

Content type

application/json

{"domains": {"property1": {"announced": ["string"
],
"received": ["string"
]
},
"property2": {"announced": ["string"
],
"received": ["string"
]
}
}
}

Known local network prefixes.

✨Added in v0.32

Known local network prefixes, including their source. These are afterwards filtered according to domain definitions and eventually sent to SGRP peers.

Responses

Response samples

200
500

Content type

application/json

{"local-prefixes": {"static": {"prefixes": ["string"
]
},
"static-probed": [{"next-hop": "string",
"reachable": true,
"last-success": "string",
"prefixes": ["string"
],
"error": "string"
}
],
"bgp": {"prefixes": ["string"
]
}
}
}

SGRP peers.

✨Added in v0.32

SGRP peers. Peer is a remote SGRP-capable application accessed from a specific local ISD-AS.

query Parameters

local-isd-as	string (ISD-AS Identifier) ^\d+-([a-f0-9]{1,4}:){2}([a-f0-9]{1,4})\|\d+$ Example: local-isd-as=1-ff00:0:110
remote-isd-as	string (ISD-AS Identifier) ^\d+-([a-f0-9]{1,4}:){2}([a-f0-9]{1,4})\|\d+$ Example: remote-isd-as=1-ff00:0:110

Responses

Response samples

200
400
500

Content type

application/json

{"peers": [{"local-isd-as": "1-ff00:0:110",
"remote-isd-as": "1-ff00:0:110",
"remote-address": "string",
"announced": ["string"
],
"received": ["string"
],
"path": "string",
"last-received": "string",
"error": "string"
}
]
}

Get the list of appliance services and service groups.

✨Added in v0.32

Get the list of services and service groups that must be running on the appliance.

Responses

Response samples

200
404
500

Content type

application/json

{"services": ["string"
],
"groups": [{"group": "string",
"services": ["string"
]
}
]
}

Restarts the given service.

✨Added in v0.32

Restarts the given service.

path Parameters

service_name

required

string

Name of the service to restart.

Responses

Response samples

200
400
500

Content type

application/json

{ }

Indicate the service health.

✨Added in v0.33

Present the health of the service along with the executed health checks.

path Parameters

service_name

required

string

Name of the service to get health of.

Responses

Response samples

200
404
500

Content type

application/json

{"health": {"status": "passing",
"checks": [{"name": "valid signer available",
"status": "passing",
"data": { },
"reason": "",
"detail": ""
}
]
}
}

Restart group of services.

✨Added in v0.32

Trigger restart of all the services in a group.

path Parameters

group_name

required

string

Name of the service groups to restart.

Responses

Response samples

200
404
500

Content type

application/json

{"services": ["string"
]
}

Summary of all service health checks.

✨Added in v0.33

Present the health of all the services along with the executed health checks.

Responses

Response samples

200
500

Content type

application/json

{"health": {"status": "passing",
"checks": [{"service": "router",
"name": "valid signer available",
"status": "passing",
"data": { },
"reason": "",
"detail": ""
}
]
}
}

Get the BGP configuration.

✨Added in v0.32

Get the BGP configuration of the host.

Responses

Response samples

200
404
500

Content type

application/json

{"configuration": {"asn": 0,
"router_id": "string",
"neighbors": [{"remote_asn": 0,
"remote_address": "string",
"timers": {"keepalive_interval": 0,
"hold_time": 0,
"connect_retry": 0,
"minimum_advertisement_interval": 0
}
}
],
"networks": ["string"
]
}
}

Get the state of the BGP neighbors.

✨Added in v0.32

Get the state of the BGP neighbors.

Responses

Response samples

200
404
500

Content type

application/json

{"neighbors": [{"neighbor": "string",
"remote_as": 0,
"family": "string",
"state": "string",
"uptime": 0,
"number_of_sent_prefixes": 0,
"number_of_received_prefixes": 0
}
]
}

Get the cluster status.

✨Added in v0.35

Get the status of the cluster. The status includes for each peer the name, the address, the time of the last synchronization, the status of said synchronization, and if the attempt failed the reason for the failure.

Responses

Response samples

200
500

Content type

application/json

{"mode": "static",
"peers": [{"name": "string",
"address": "string",
"last_sync_attempt": "2019-08-24T14:15:22Z",
"status": "success",
"error": "string"
}
]
}

vpp

Get the list of avaiable VPP coredumps.

✨Added in v0.35

undefined

Responses

Response samples

200
500

Content type

application/json

["string"
]

Download the coredump.

✨Added in v0.35

undefined

path Parameters

filename

required

string

Filename of the coredump.

Responses

Response samples

200
500

Content type

application/json

["string"
]

Dump of the VPP state set up by dataplane-control service.

✨Added in v0.33

undefined

Responses

Response samples

200
500

Content type

application/json

{ }

Dump of the VPP state set up by the gateway service.

✨Added in v0.33

undefined

Responses

Response samples

200
500

Content type

application/json

{ }

Status page listing of loaded VPP plugins.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP errors.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP logs.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP events.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page listing internal VPP interfaces.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page listing interfaces mirrored from VPP to Linux.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page listing addresses on VPP interfaces.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page listing hardware interfaces managed by VPP.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP IPv4 neighbors.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP IPv6 neighbors.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP IPv4 FIB.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP IPv6 FIB.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP IPv6 link-local FIB.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP VRRP.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP memory.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP buffers.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to clear the VPP runtime.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to clear the metrics on VPP interfaces.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to clear VPP errors.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP runtime.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting TUN/TAP devices created by VPP.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting bonds created by VPP.

✨Added in v0.35

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting VPP LACP info.

✨Added in v0.35

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute free form packet trace.

✨Added in v0.33

undefined

query Parameters

n	string Default: "" VPP node to trace.
i	string Default: "" Include only packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
e	string Default: "" Exclude packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path that starts a trace without timeout. The trace can be stopped with the `/vpp/trace/stop` endpoint.

✨Added in v0.33

undefined

query Parameters

n	string Default: "" VPP node to trace.
i	string Default: "" Include only packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
e	string Default: "" Exclude packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path that stops tracing.

✨Added in v0.33

undefined

query Parameters

p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for packets entering via memif.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for packets entering via DPDK.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for IPv4 packets entering via VPP UDP socket.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for IPv6 packets entering via VPP UDP socket.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for packets entering via TUN/TAP.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the bfd session states.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the SCION interfaces.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the SCION router ASes.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the SCION services.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the SCION router IPFIX table.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the SCION router IPFIX statistics.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the SCION router IPFIX parameters.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Status page reporting the SCION router bandwidth reservations.

✨Added in v0.32

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: global settings.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: routing hierarchy.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: TUN device.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: remote ASes.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: routing chains.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: traffic classes.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: sessions.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: known paths.

✨Added in v0.33

undefined

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all egress IPv4 packets entering via memif.

✨Added in v0.34

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all egress IPv6 packets entering via memif.

✨Added in v0.34

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all egress IPv4 packets entering via dpdk.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all egress IPv6 packets entering via dpdk.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all egress frames on top of IPv4 underlay.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all egress frames on top of IPv6 underlay.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all ingress frames entering via memif.

✨Added in v0.34

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all ingress frames entering via dpdk.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

SCION gateway: trace all ingress IP packets.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

vpp-trace

Action path to execute free form packet trace.

✨Added in v0.33

undefined

query Parameters

n	string Default: "" VPP node to trace.
i	string Default: "" Include only packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
e	string Default: "" Exclude packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path that starts a trace without timeout. The trace can be stopped with the `/vpp/trace/stop` endpoint.

✨Added in v0.33

undefined

query Parameters

n	string Default: "" VPP node to trace.
i	string Default: "" Include only packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
e	string Default: "" Exclude packets passing through the specified VPP node. Include and exclude parameters are mutually exclusive.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path that stops tracing.

✨Added in v0.33

undefined

query Parameters

p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for packets entering via memif.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for packets entering via DPDK.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for IPv4 packets entering via VPP UDP socket.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for IPv6 packets entering via VPP UDP socket.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

Action path to execute a trace for packets entering via TUN/TAP.

✨Added in v0.33

undefined

query Parameters

t	integer Default: 500 Timeout (in ms) for the trace to be stopped.
p	integer Default: 50 maximum number of packets to return.

Responses

Response samples

400

Content type

application/json+problem

{"type": "/problem/connection-error",
"title": "Service Unavailable",
"status": 503,
"detail": "Connection to database timed out",
"instance": "/problem/connection-error#token-info-read-timed-out"
}

firewall

Get the firewall configuration of the appliance.

✨Added in v0.34

Get the installed firewall configuration of the appliance, including the tables, named counters, chains and rules.

Responses

Response samples

200
500

Content type

application/json

{"tables": [{"name": "string",
"family": "ip",
"chains": [{"name": "string",
"hook": "prerouting",
"priority": 0,
"policy": "accept",
"type": "filter",
"rules": [{"rule": "string",
"comment": "string"
}
]
}
],
"counters": [{"name": "string",
"packets": 0,
"bytes": 0
}
]
}
]
}

Get a specific firewall table.

✨Added in v0.34

Get a specific firewall table of the appliance by name, including the named counters, chains, and their rules.

path Parameters

table_name

required

string

Responses

Response samples

200
404
500

Content type

application/json

{"table": {"name": "string",
"family": "ip",
"chains": [{"name": "string",
"hook": "prerouting",
"priority": 0,
"policy": "accept",
"type": "filter",
"rules": [{"rule": "string",
"comment": "string"
}
]
}
],
"counters": [{"name": "string",
"packets": 0,
"bytes": 0
}
]
}
}

Get the rules of a chain of a firewall table.

✨Added in v0.34

Get a specific set of rules specified by their chain and table name of the appliance firewall.

path Parameters

table_name required	string
chain_name required	string

Responses

Response samples

200
404
500

Content type

application/json

{"chain": {"name": "string",
"hook": "prerouting",
"priority": 0,
"policy": "accept",
"type": "filter",
"rules": [{"rule": "string",
"comment": "string"
}
]
}
}

Generate the default firewall configuration for the given appliance configuration.

✨Added in v0.34

Validates a configuration and returns the firewall configuration which would be applied for the given appliance configuration.

query Parameters

disable_strict_parsing

boolean

Disable strict parsing of the appliance configuration.

Request Body schema: application/json

The config to be validated.

required

object (Config)

Anapaya appliance configuration

Responses

Request samples

Payload

Content type

application/json

{"config": {"bgp": {"global": {"as": 0,
"networks": ["string"
],
"router_id": "string",
"src_address": "string"
},
"neighbors": [{"auth_password": "string",
"description": "string",
"ebgp_multihop": 0,
"enabled": true,
"local_as": 0,
"neighbor_address": "string",
"peer_as": 0,
"timers": {"connect_retry": 0,
"hold_time": 0,
"keepalive_interval": 0,
"minimum_advertisement_interval": 0
},
"transport": {"local_address": "string"
},
"ttl_security": 0
}
]
},
"cluster": {"features": {"scion_rss": true
},
"peers": [{"description": "string",
"features": {"scion_rss": true
},
"name": "string",
"scion": {"ases": [{"control": {"address": "192.168.1.1:30100"
},
"isd_as": "1-ff00:0:110",
"neighbors": [{"interfaces": [ ],
"neighbor_isd_as": null,
"relationship": null
}
],
"shard_id": 0
}
]
},
"scion_tunneling": {"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"disable_auto_allowed_interfaces": true,
"ip": "192.168.1.100",
"probe_port": 40202
}
},
"synchronization": {"address": "192.168.1.1:30100"
}
}
],
"synchronization": {"address": "192.0.2.3:40000",
"node_synchronization_interval": "string"
}
},
"experiments": {"features": [{"name": "string",
"value": "string"
}
]
},
"firewall": {"mode": "AUTO",
"tables": [{"chains": [{"chaintype": "FILTER",
"hook": "PREROUTING",
"name": "string",
"policy": "ACCEPT",
"priority": 0,
"rules": [{"comment": "string",
"rule": "string",
"sequence_id": 1
}
]
}
],
"counters": [{"name": "string"
}
],
"family": "IP",
"name": "string"
}
]
},
"interfaces": {"bonds": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"interfaces": ["string"
],
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"ethernets": [{"accept_ra": true,
"addresses": ["string"
],
"driver": "LINUX",
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vpp": {"vlan_strip_offload": true
},
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"loopbacks": [{"addresses": ["string"
],
"name": "string"
}
],
"virtual_functions": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"vlans": [{"accept_ra": true,
"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"id": 4095,
"link": "string",
"mac": "string",
"mtu": 1472,
"name": "string",
"neighbors": [{"address": "string",
"comment": "string",
"mac": "string",
"sequence_id": 3
}
],
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
],
"vrrp": [{"addresses": ["string"
],
"peers": ["string"
],
"priority": 17,
"vrid": 3
}
]
}
],
"wireguards": [{"addresses": ["string"
],
"gateway": {"ipv4_gateway": "string",
"ipv6_gateway": "string"
},
"mtu": 0,
"name": "string",
"peers": [{"allowed_ips": ["string"
],
"endpoint": "string",
"public_key": "string"
}
],
"pointopoint": "string",
"port": 0,
"routes": [{"comment": "string",
"from": "string",
"metric": 0,
"sequence_id": 3,
"to": "string",
"via": "string"
}
]
}
]
},
"management": {"api": {"basic_auth": {"enabled": true,
"users": [{"password_hashed": "$2y$10$QNodxwKFABMWu4XlFPmZDOSfqxrsqNvrSn487lCi7tJ/4nTsT/f02",
"username": "admin"
}
]
},
"listeners": [{"address": "127.0.0.1:443",
"description": "string"
}
],
"oauth": {"enabled": true,
"identity_providers": [{"base_auth_url": "https://anapaya.eu.auth0.com/",
"client_id": "string",
"client_secret": "string",
"id": "string",
"metadata_url": "https://anapaya.eu.auth0.com/.well-known/openid-configuration",
"tenant_id": "string",
"type": "GENERIC"
}
],
"token_verification_keys": [{"id": "anapaya.auth0",
"jwks_url": "https://anapaya.eu.auth0.com/.well-known/jwks.json"
}
]
}
},
"hostname": "edge.geneva.corpbank",
"remote_repository": {"cloudsmith": {"access_token": "APIKEY#ENTITLEMENTTOKEN",
"url": "https://cloudsmith.io/anapaya/repos/external"
},
"repository_type": "CLOUDSMITH"
},
"telemetry": {"address": ":42001",
"flow_metrics": {"cleanup_task_interval": "string",
"collector_url": "string",
"enabled": true,
"export_task_interval": "string",
"flow_expiration_interval": "string",
"proxy_url": "string"
},
"labels": [{"label": "string",
"value": "string"
}
],
"logging": {"logging_type": "LOKI",
"loki": {"basic_auth": {"password": "string",
"username": "promtail"
},
"tls_config": {"insecure_skip_verify": true
},
"url": "https://loki.anapaya.net/loki/api/v1/push"
}
}
}
},
"nat": {"snat": {"address_pool": ["string"
],
"exclude": ["string"
],
"interfaces": ["string"
]
}
},
"scion": {"ases": [{"ca_service": {"anapaya_vault": {"addresses": ["string"
],
"credentials": {"role_id": "string",
"secret_id": "string"
},
"validation": {"subject": "MATCHING_ISD_AS"
}
},
"external": {"address": "192.0.2.3:5000",
"client_id": "string",
"shared_secret": "shared secret"
},
"service_type": "EXTERNAL"
},
"control": {"address": "192.168.1.1:30100",
"enabled": true
},
"core": true,
"cppki": {"disable_auto_renewal": true,
"issuers": [{"isd_as": "1-ff00:0:120",
"priority": 0
}
]
},
"default": true,
"details": {"description": "string",
"name": "string"
},
"forwarding_key": "string",
"isd_as": "1-ff00:0:110",
"neighbors": [{"description": "string",
"interfaces": [{"address": "169.254.0.1:30100",
"administrative_state": "UP",
"bfd": {"desired_minimum_tx_interval": null,
"detection_multiplier": null,
"enabled": null,
"required_minimum_receive": null
},
"description": "string",
"enable_scion_rss": true,
"interface_id": 1,
"remote": {"address": null,
"interface_id": null
},
"scion_mtu": 1472
}
],
"neighbor_isd_as": "2-ff00:0:210",
"relationship": "CORE"
}
],
"router": {"enabled": true,
"internal_interface": "192.168.1.1:30100"
},
"scion_mtu": 1472,
"shard_id": 0
}
],
"synchronization": {"beacon_synchronization_interval": "string",
"path_segment_synchronization_interval": "string"
}
},
"scion_tunneling": {"domains": [{"default": true,
"description": "The domain. It matches all packets and allows any\npath to be used.",
"local_isd_ases": ["string"
],
"name": "Default Domain",
"prefixes": {"accept_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
],
"announce_filter": [{"action": "ACCEPT",
"description": "string",
"prefixes": ["192.168.1.0/24"
],
"sequence_id": 1
}
]
},
"remote_isd_ases": [{"action": "ACCEPT",
"description": "string",
"isd_as": "0-ff00:0:310",
"sequence_id": 1
}
],
"traffic_policies": [{"description": "Default traffic policy",
"failover_sequence": [{"path_filter": "string",
"sequence_id": 1
}
],
"sequence_id": 1,
"traffic_matcher": "string"
}
]
}
],
"endpoint": {"allowed_interfaces": [{"interfaces": [2,
3
],
"isd_as": "string"
}
],
"control_port": 40201,
"data_port": 40200,
"description": "string",
"disable_auto_allowed_interfaces": true,
"enable_scion_rss": true,
"enabled": true,
"ip": "192.168.1.100",
"probe_port": 40202
},
"path_filters": [{"acl": ["+ 64-0"
],
"description": "Match only paths in the Swiss Isolation Domain (ID 64).",
"hop_pattern": "0* 64+ 0+",
"name": "CH ISD only"
}
],
"remotes": [{"description": "string",
"isd_as": "1-ff00:0:310"
}
],
"static_announcements": [{"description": "string",
"next_hop_tracking": {"enabled": true,
"target": "string"
},
"prefixes": ["192.168.1.0/24",
"172.30.100.0/28"
],
"sequence_id": 1
}
],
"traffic_matchers": [{"condition": "BOOL=true",
"description": "'all packets' matches all packets.",
"name": "all packets"
}
]
},
"system": {"dns": {"servers": [{"address": "string"
}
]
},
"kernel": {"hugepage_size": "string",
"hugepages": 0,
"iommu_enabled": true
},
"ntp": {"root_distance_max": "1s",
"servers": [{"address": "string"
}
]
},
"vpp": {"buffers": {"data_size": 0
},
"connection": {"health_check": {"probe_interval": "1s",
"reply_timeout": "250ms",
"threshold": 3
},
"reconnect_attempts": 5,
"reconnect_interval": "1s"
},
"cpu": {"main_core": 0,
"workers": 0
},
"poll_sleep": "string",
"tun": {"mtu": 1500,
"prefixes": ["192.168.1.0/24"
]
}
}
}
}
}

Response samples

200
400
500

Content type

application/json

{"tables": [{"name": "string",
"family": "ip",
"chains": [{"name": "string",
"hook": "prerouting",
"priority": 0,
"policy": "accept",
"type": "filter",
"rules": [{"rule": "string",
"comment": "string"
}
]
}
],
"counters": [{"name": "string",
"packets": 0,
"bytes": 0
}
]
}
]
}

network

List the available physical interfaces

✨Added in v0.32

List the available physical interfaces of the appliance. The result includes the interface name and the PCI-E Bus/Device/Function (BDF) address for each interface. Only physical interfaces are listed here. To configure them use the config endpoint of the API.

Responses

Response samples

200
400
500

Content type

application/json

{"interfaces": [{"name": "eth0",
"pcie_bdf": "0000:00:1f.0",
"driver": "vfio-pci",
"num_vfs": 0
}
]
}

Get list of Wireguard interfaces.

✨Added in v0.32

List the configured wireguard interfaces. The result includes the interface name and the public key.

Responses

Response samples

200
404
500

Content type

application/json

{"interfaces": [{"name": "wg0",
"public_key": "SqLwwTSYHBwQljJDqx7aUVWVDFN6ir6FQL/m3VfmhhQ="
}
]
}

Get a Wireguard interface.

✨Added in v0.32

Returns the configured wireguard interface and the public key.

path Parameters

interface_name

required

string

Name of the interface to list.

Responses

Response samples

200
404
500

Content type

application/json

{"name": "wg0",
"public_key": "SqLwwTSYHBwQljJDqx7aUVWVDFN6ir6FQL/m3VfmhhQ="
}

signing

Get the specified signatures

✨Added in v0.31

Get the specified signatures.

path Parameters

type required	string
version required	string

Responses

Response samples

200
404
500
504

Content type

application/json

{"name": "string",
"sha256sum": "string",
"signatures": [{"public_key": "string",
"signature": "string",
"creation_time": "2019-08-24T14:15:22Z"
}
]
}

Install signatures.

✨Added in v0.31

Install signatures.

path Parameters

type required	string
version required	string

Request Body schema: application/json

name required	string Name of the signed file
sha256sum required	string SHA256 hash of the signed file
required	Array of objects (Signature) A list of signatures

Responses

Request samples

Payload

Content type

application/json

{"name": "string",
"sha256sum": "string",
"signatures": [{"public_key": "string",
"signature": "string",
"creation_time": "2019-08-24T14:15:22Z"
}
]
}

Response samples

400
500
504

Content type

application/json+problem

{"type": "https://anapaya.net/probs/bad-request",
"title": "The request parameters are invalid.",
"status": 503,
"detail": "Connection to database timed out"
}

Get the public signing keys.

✨Added in v0.31

Get the currently installed public signing keys.

Responses

Response samples

200
404
500
504

Content type

application/json

{"public_keys": [{"key": "string",
"fingerprint": "string",
"creation_time": "2019-08-24T14:15:22Z"
}
]
}

Install new public signing keys.

✨Added in v0.31

Install new public signing keys.

Request Body schema: application/json

required

Array of objects (PublicKey)

a list of public signing keys

Responses

Request samples

Payload

Content type

application/json

{"public_keys": [{"key": "string",
"fingerprint": "string",
"creation_time": "2019-08-24T14:15:22Z"
}
]
}

Response samples

400
500
504

Content type

application/json+problem

{"type": "https://anapaya.net/probs/bad-request",
"title": "The request parameters are invalid.",
"status": 503,
"detail": "Connection to database timed out"
}

Appliance Management API (0.1.0)

init

Put a new configuration

query Parameters

header Parameters

Request Body schema: application/json

Responses

Request samples

Response samples

Validates a configuration

query Parameters

Request Body schema: application/json

Responses

Request samples

Response samples

Add a TRC file

query Parameters

Request Body schema: application/x-pem-files

Responses

Request samples

Response samples

Add a bundle of TRC files

query Parameters

Request Body schema: application/x-pem-files

Responses

Request samples

Response samples

Create an AS certificate signing request

Request Body schema: application/json

Responses

Request samples

Response samples

Add an AS certificate chain

query Parameters

Request Body schema: application/pkcs7-mimeapplication/x-pem-filesapplication/pkcs7-mime

Responses

Request samples

Response samples

config

Get the current configuration

header Parameters

Responses

Response samples

Put a new configuration

query Parameters

header Parameters

Request Body schema: application/json

Responses

Request samples

Response samples

Validates a configuration

query Parameters

Request Body schema: application/json

Responses

Request samples

Response samples

cppki

List the TRC files

query Parameters

Responses

Response samples

Add a TRC file

query Parameters

Request Body schema: application/x-pem-files

Responses

Request samples

Response samples

Add a bundle of TRC files

query Parameters

Request Body schema: application/x-pem-files

Responses

Request samples

Response samples

Get the TRC

path Parameters

Responses

Response samples

Get the TRC blob

path Parameters

Responses

Request Body schema:
application/pkcs7-mime

Request Body schema:
application/pkcs7-mime