Network ACLs

Download schema

A Network Access Control List (ACL) is a set of stateless, IP-based rules used to filter packets between Private Networks in a VPC. Each VPC can have a maximum of two Network ACLs: one for IPv4 rules, and one for IPv6 rules. IPv4 and IPv6 rules cannot be mixed in the same ACL.

Get ACL Rules for VPC

GET

https://api.scaleway.com

/vpc/v2/regions/{region}/vpcs/{vpc_id}/acl-rules

Retrieve a list of ACL rules for a VPC, specified by its VPC ID.

Get ACL Rules for VPC › path Parameters

region

string · enum · required

The region you want to target

Enum values:

fr-par

it-mil

nl-ams

pl-waw

vpc_id

string · required

ID of the Network ACL's VPC. (UUID format)

Get ACL Rules for VPC › query Parameters

is_ipv6

boolean · required

Defines whether this set of ACL rules is for IPv6 (false = IPv4). Each Network ACL can have rules for only one IP type.

Get ACL Rules for VPC › Responses

200

scaleway.vpc.v2.GetAclResponse

scaleway.vpc.v2.AclRule[]

default_policy

scaleway.vpc.v2.Action · enum

Enum values:

unknown_action

drop

Default: unknown_action

Set VPC ACL rules

PUT

https://api.scaleway.com

/vpc/v2/regions/{region}/vpcs/{vpc_id}/acl-rules

Set the list of ACL rules and the default routing policy for a VPC.

Set VPC ACL rules › path Parameters

region

string · enum · required

The region you want to target

Enum values:

fr-par

it-mil

nl-ams

pl-waw

vpc_id

string · required

ID of the Network ACL's VPC. (UUID format)

Set VPC ACL rules › Request Body

scaleway.vpc.v2.AclRule[] · required

List of Network ACL rules.

is_ipv6

boolean · required

Defines whether this set of ACL rules is for IPv6 (false = IPv4). Each Network ACL can have rules for only one IP type.

default_policy

scaleway.vpc.v2.Action · enum · required

Action to take for packets which do not match any rules.

Enum values:

unknown_action

drop

Default: unknown_action

Set VPC ACL rules › Responses

200

scaleway.vpc.v2.SetAclResponse

scaleway.vpc.v2.AclRule[]

default_policy

scaleway.vpc.v2.Action · enum

Enum values:

unknown_action

drop

Default: unknown_action

PUT/vpc/v2/regions/{region}/vpcs/{vpc_id}/acl-rules

curl -X PUT \
  -H "X-Auth-Token: $SCW_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "default_policy": "unknown_action",
    "is_ipv6": false,
    "rules": [
        ""
    ]
  }' \
  "https://api.scaleway.com/vpc/v2/regions/{region}/vpcs/{vpc_id}/acl-rules"

Example Request Body

{
  "rules": [
    {
      "protocol": "ANY",
      "source": "1.2.3.4/32",
      "src_port_low": 0,
      "src_port_high": 0,
      "destination": "1.2.3.4/32",
      "dst_port_low": 0,
      "dst_port_high": 0,
      "action": "unknown_action",
      "description": "description"
    }
  ],
  "is_ipv6": true,
  "default_policy": "unknown_action"
}

json

Example Responses

{
  "rules": [
    {
      "protocol": "ANY",
      "source": "1.2.3.4/32",
      "src_port_low": 0,
      "src_port_high": 0,
      "destination": "1.2.3.4/32",
      "dst_port_low": 0,
      "dst_port_high": 0,
      "action": "unknown_action",
      "description": "description"
    }
  ],
  "default_policy": "unknown_action"
}

json

application/json

Routes VPC Connectors