TinoWAF
Website firewall: add websites, protection level, emergency anti-attack mode, domain names and DNS records, origin servers, event log, IP block/allow list.
Every route is called through the gateway https://api.tino.vn/v1 with Authorization: Bearer <token>; see Calling the Tino API.
TinoWAF
| Method | Path | Name | Scope |
|---|---|---|---|
GET | /v1/service/@id/waf/events | Event summary | waf:read |
GET | /v1/service/@id/waf/ip-rules | List IP rules | waf:read |
POST | /v1/service/@id/waf/ip-rules | Block or allow an IP | waf:write |
DELETE | /v1/service/@id/waf/ip-rules/@rule | Delete an IP rule | waf:write |
POST | /v1/service/@id/waf/ip-rules/apply | Re-apply IP rules | waf:write |
GET | /v1/service/@id/waf/overview | TinoWAF overview | waf:read |
GET | /v1/service/@id/waf/zones | List websites | waf:read |
POST | /v1/service/@id/waf/zones | Add a website | waf:write |
GET | /v1/service/@id/waf/zones/@zone | Get a website | waf:read |
DELETE | /v1/service/@id/waf/zones/@zone | Delete a website | waf:write |
POST | /v1/service/@id/waf/zones/@zone/check | Check DNS now | waf:write |
GET | /v1/service/@id/waf/zones/@zone/events | List a website's events | waf:read |
GET | /v1/service/@id/waf/zones/@zone/hostnames | List a website's domain names | waf:read |
POST | /v1/service/@id/waf/zones/@zone/hostnames | Add a domain name to a website | waf:write |
DELETE | /v1/service/@id/waf/zones/@zone/hostnames/@hostname | Remove a domain name from a website | waf:write |
GET | /v1/service/@id/waf/zones/@zone/origin | Get a website's origin servers | waf:read |
PUT | /v1/service/@id/waf/zones/@zone/origin | Update origin servers | waf:write |
PUT | /v1/service/@id/waf/zones/@zone/under-attack | Turn emergency anti-attack mode on or off | waf:write |
PUT | /v1/service/@id/waf/zones/@zone/waf-mode | Change the protection level | waf:write |