SetLoadBalancerHTTPSListenerAttribute

The region ID of the Classic Load Balancer instance.

You can call the DescribeRegions operation to query the most recent region list.

The ID of the Classic Load Balancer instance.

The frontend port used by the Classic Load Balancer instance.

Valid values: 1 to 65535.

The peak bandwidth of the listener. Unit: Mbit/s.

Valid values:

• -1: The peak bandwidth is not limited.

• 1 to 5120: The peak bandwidth of the listener. The sum of the peak bandwidths of all listeners on the instance cannot exceed the peak bandwidth of the instance.

Specifies whether to use the X-Forwarded-For header to retrieve the real IP addresses of clients. Valid values:

• on

• off

The scheduling algorithm. Valid values:

• wrr: Weighted round-robin. Backend servers with higher weights receive a larger proportion of requests.

• rr: Round-robin. Requests are distributed to backend servers in sequence.

Specifies whether to enable sticky sessions. Valid values:

• on

• off

The method that is used to handle cookies. Valid values:

• insert: The load balancer inserts a cookie (SERVERID) into the first response that is sent to a client. The next request from the client will contain the cookie, and the load balancer will redirect the request to the same backend server.

• server: The load balancer rewrites a custom cookie. When the load balancer detects a user-defined cookie, it overwrites the original cookie with a new cookie. The next request from the client will contain the new cookie, and the load balancer will redirect the request to the same backend server.

The timeout period of a cookie.

Valid values: 1 to 86400. Unit: seconds.

The cookie that is configured on the backend server.

The cookie name must be 1 to 200 characters in length and can contain only ASCII letters and digits. It cannot contain commas (,), semicolons (;), or spaces. It cannot start with a dollar sign ($).

Specifies whether to enable health checks. Valid values:

• on

• off

The HTTP method that is used for health checks. Valid values: head and get.

The domain name that is used for health checks. Valid values:

• $_ip: The private IP address of a backend server. If you specify an IP address for this parameter or omit this parameter, the load balancer uses the private IP address of each backend server as the health check domain.

• domain: The domain name must be 1 to 80 characters in length and can contain only letters, digits, periods (.), and hyphens (-).

The URI that is used for health checks.

The URI must be 1 to 80 characters in length and must start with a forward slash (/). It can contain letters, digits, and the following special characters: - / . % ? # &. The URI cannot consist of only a forward slash (/).

The number of consecutive successful health checks required to change the health check status of the backend server from fail to success.

Valid values: 2 to 10.

The number of consecutive health check failures required to change the health check status of a backend server from success to fail.

Valid values: 2 to 10.

The timeout period for a health check response. If a backend server, such as an Elastic Compute Service (ECS) instance, does not return a health check response within the specified timeout period, the health check fails. Unit: seconds. Valid values: 1 to 300.

The interval at which health checks are performed. Unit: seconds.

Valid values: 1 to 50.

The port that is used for health checks.

Valid values: 1 to 65535.

The HTTP status codes that indicate a successful health check. Separate multiple HTTP status codes with commas (,).

Valid values: http_2xx, http_3xx, http_4xx, and http_5xx.

The ID of the server certificate.

The ID of the CA certificate.

• If both a CA certificate and a server certificate are uploaded, mutual authentication is used.

• If you upload only a server certificate, one-way authentication is used.

Specifies whether to use a vServer group. Valid values:

• on

• off

The ID of the vServer group.

Specifies whether to use the SLB-IP header to retrieve the virtual IP address (VIP) of the CLB instance. Valid values:

• on

• off

Specifies whether to use the SLB-ID header to retrieve the ID of the CLB instance. Valid values:

• on

• off

Specifies whether to use the X-Forwarded-Proto header to retrieve the listener protocol of the CLB instance. Valid values:

• on

• off

Specifies whether to enable Gzip compression to compress files of a specific type. Valid values:

• on

• off

The ID of the network access control list (ACL) that is associated with the listener.

This parameter is required if AclStatus is set to on.

The type of the network ACL. Valid values:

• white: a whitelist. The listener forwards requests only from the IP addresses or CIDR blocks specified in the network ACL. Whitelists are suitable for scenarios in which you want to allow only specific IP addresses to access an application. If you configure a whitelist but do not specify an IP address in the network ACL, the listener forwards all requests.

• black: a blacklist. The listener denies all requests from the IP addresses or CIDR blocks specified in the network ACL. Blacklists are suitable for scenarios in which you want to deny access from specific IP addresses. If you configure a blacklist but do not specify an IP address in the network ACL, the listener forwards all requests.

Specifies whether to enable access control. Valid values:

• on

• off

The timeout period of an idle connection. Unit: seconds. Valid values: 1 to 60. Default value: 15.

If no request is received within the specified timeout period, CLB closes the connection. When a new request is received, CLB establishes a new connection.

The timeout period of a request. Unit: seconds. Valid values: 1 to 180. Default value: 60.

If a backend server does not respond within the specified timeout period, CLB returns an HTTP 504 error code to the client.

Specifies whether to enable HTTP/2. Valid values:

• on

• off

The Transport Layer Security (TLS) security policy. Each security policy contains TLS protocol versions and cipher suites.

• tls_cipher_policy_1_0

  Supported TLS versions: TLS 1.0, TLS 1.1, and TLS 1.2.

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA256, AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, AES128-SHA, AES256-SHA, and DES-CBC3-SHA.

• tls_cipher_policy_1_1

  Supported TLS versions: TLS 1.1 and TLS 1.2.

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA256, AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, AES128-SHA, AES256-SHA, and DES-CBC3-SHA.

• tls_cipher_policy_1_2

  Supported TLS version: TLS 1.2.

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, AES128-GCM-SHA256, AES256-GCM-SHA384, AES128-SHA256, AES256-SHA256, ECDHE-RSA-AES128-SHA, ECDHE-RSA-AES256-SHA, AES128-SHA, AES256-SHA, and DES-CBC3-SHA.

• tls_cipher_policy_1_2_strict

  Supported TLS version: TLS 1.2.

  Supported cipher suites: ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, ECDHE-RSA-AES128-SHA, and ECDHE-RSA-AES256-SHA.

• tls_cipher_policy_1_2_strict_with_1_3

  Supported TLS versions: TLS 1.2 and TLS 1.3.

  Supported cipher suites: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_AES_128_CCM_SHA256, TLS_AES_128_CCM_8_SHA256, ECDHE-ECDSA-AES128-GCM-SHA256, ECDHE-ECDSA-AES256-GCM-SHA384, ECDHE-ECDSA-AES128-SHA256, ECDHE-ECDSA-AES256-SHA384, ECDHE-RSA-AES128-GCM-SHA256, ECDHE-RSA-AES256-GCM-SHA384, ECDHE-RSA-AES128-SHA256, ECDHE-RSA-AES256-SHA384, ECDHE-ECDSA-AES128-SHA, ECDHE-ECDSA-AES256-SHA, ECDHE-RSA-AES128-SHA, and ECDHE-RSA-AES256-SHA.

The name of the listener.

The name must be 1 to 256 characters in length and can contain letters, digits, hyphens (-), forward slashes (/), periods (.), and underscores (_).

Specifies whether to use the X-Forwarded-Port header to retrieve the listener port of the CLB instance. Valid values:

• on

• off

Specifies whether to use the X-Forwarded-Client-SrcPort header to retrieve the source port of the client that accesses the CLB instance. Valid values:

• on

• off