Edit a rule set

PUT /api/v1/firewall/sets/{id}

operationIdputFirewallSet

Required level: Operations
Rate limit: mutation, 300 calls per hour

Replaces the name and all the rules: this is not a merge, rules missing from the body are deleted. A description missing from the body is kept; present and empty, it is cleared.

The firewall update of every VPS the rule set is applied to is queued right away (allow a few minutes): editing a rule set in use changes the firewall of several machines at once (applied_to tells which ones).

With a key restricted to a selection of VPS, a rule set that is also applied to a VPS the key does not cover can be neither edited nor deleted (409 invalid_state): do it from the panel, or extend the key's scope.

Path parameters

id string required: Identifier of the rule set.

pattern ^\d+$ Example: 34

Request body

application/json

name string

max 100 characters

required
description string

optional
rules object[]

required
port string

Port (443) or range (8000-8100), from 1 to 65535

Example: 443

required
protocol string

one of: TCP, UDP

required
subnet string

IPv4/IPv6 addresses (CIDR accepted, except /0 for IPv6) separated by commas; missing, empty or NULL: from anywhere, over both IPv4 and IPv6

Example: 45.54.45.54

optional

Example request

{
  "name": "Web public",
  "rules": [
    {
      "port": "443",
      "protocol": "TCP",
      "subnet": "45.54.45.54"
    },
    {
      "port": "8000-8100",
      "protocol": "TCP",
      "subnet": "NULL"
    }
  ]
}

Responses

200

Rule set updated

{
  "data": {
    "id": "34",
    "name": "Web public",
    "description": "HTTPS depuis le bureau",
    "rules": [
      {
        "port": "443",
        "protocol": "TCP",
        "sources": [
          "45.54.45.54"
        ],
        "open_to_any": false
      }
    ],
    "applied_to": [
      "116807"
    ]
  }
}

Response fields 10

data object

FirewallSet

required
id string

Example: 34
name string
description string
rules object[]
port string

Port or start-end range

Example: 443
protocol string

Protocol, always in uppercase

one of: TCP, UDP
sources string[]

Authorized addresses or CIDR ranges; empty if the rule is open to all
open_to_any boolean

true if no address restricts the rule
applied_to string[]

VPS (covered by the key) the rule set is applied to

400

Invalid parameters: validation_failed — name missing or too long, or invalid rule (its position is given).

{
  "type": "https://docs.lws.fr/kvm/errors/validation-failed",
  "title": "Paramètres invalides",
  "status": 400,
  "code": "validation_failed",
  "detail": "Règle #2 : port hors limites (99999)",
  "request_id": "3f9a1c07b2e45d18",
  "errors": {
    "rules": "Règle #2 : port hors limites (99999)"
  }
}

Response fields 18

type string (uri)

Example: https://docs.lws.fr/kvm/errors/vm-not-found

required
title string

Short title, in French

Example: VPS introuvable

required
status integer (int64)

HTTP status

Example: 404

required
code string

Stable machine-readable code (see "Errors" in Getting started)

Example: vm_not_found

required
detail string

Detailed message, in French

Example: Aucun VPS 999999 sur ce compte.

required
request_id string

Identifier of the request, to give to support

Example: 3f9a1c07b2e45d18

required
errors object

validation_failed: message per faulty parameter
required_level string

insufficient_scope: level required by the operation

one of: read, exploitation, full
task_id string

task_already_running: task running on this VPS

Example: tsk_000002d5
family string

rate_limited: exhausted rate limit family

one of: read, mutation, heavy
limit integer (int64)

rate_limited: hourly limit of the family
retry_after integer (int64)

rate_limited: seconds to wait
lock string

server_locked: lock set by the hypervisor (backup, snapshot, suspended…)

Example: snapshot
reason string

server_locked: operation_in_progress, an operation is running, retry after Retry-After; suspended, the VPS is hibernating, start it first; support_notified, abnormal lock, the LWS team has been notified and is taking care of it

one of: operation_in_progress, suspended, support_notified
maintenance object

server_maintenance: nature of the intervention, start and expected end (null for an incident)
kind string

one of: works, incident
started_at string (date-time)
expected_end string (date-time)

401

Authentication refused: invalid_token — Authorization header missing or malformed, or unknown key; access_disabled — API access turned off for this account, or API service temporarily turned off by LWS.

Authorization header missing or malformed, or unknown key

{
  "type": "https://docs.lws.fr/kvm/errors/invalid-token",
  "title": "Authentification invalide",
  "status": 401,
  "code": "invalid_token",
  "detail": "Clé inconnue ou révoquée.",
  "request_id": "3f9a1c07b2e45d18"
}

API access turned off for this account, or API service temporarily turned off by LWS

{
  "type": "https://docs.lws.fr/kvm/errors/access-disabled",
  "title": "Accès API désactivé",
  "status": 401,
  "code": "access_disabled",
  "detail": "L'accès API est désactivé pour ce compte. Réactivez-le depuis la page « API / MCP » du panel.",
  "request_id": "3f9a1c07b2e45d18"
}

Response fields 18

type string (uri)

Example: https://docs.lws.fr/kvm/errors/vm-not-found

required
title string

Short title, in French

Example: VPS introuvable

required
status integer (int64)

HTTP status

Example: 404

required
code string

Stable machine-readable code (see "Errors" in Getting started)

Example: vm_not_found

required
detail string

Detailed message, in French

Example: Aucun VPS 999999 sur ce compte.

required
request_id string

Identifier of the request, to give to support

Example: 3f9a1c07b2e45d18

required
errors object

validation_failed: message per faulty parameter
required_level string

insufficient_scope: level required by the operation

one of: read, exploitation, full
task_id string

task_already_running: task running on this VPS

Example: tsk_000002d5
family string

rate_limited: exhausted rate limit family

one of: read, mutation, heavy
limit integer (int64)

rate_limited: hourly limit of the family
retry_after integer (int64)

rate_limited: seconds to wait
lock string

server_locked: lock set by the hypervisor (backup, snapshot, suspended…)

Example: snapshot
reason string

server_locked: operation_in_progress, an operation is running, retry after Retry-After; suspended, the VPS is hibernating, start it first; support_notified, abnormal lock, the LWS team has been notified and is taking care of it

one of: operation_in_progress, suspended, support_notified
maintenance object

server_maintenance: nature of the intervention, start and expected end (null for an incident)
kind string

one of: works, incident
started_at string (date-time)
expected_end string (date-time)

403

Access denied: insufficient_scope — key level too low; ip_not_allowed — calling address not authorized.

key level too low

{
  "type": "https://docs.lws.fr/kvm/errors/insufficient-scope",
  "title": "Droits insuffisants",
  "status": 403,
  "code": "insufficient_scope",
  "detail": "Niveau de permission « exploitation » requis.",
  "request_id": "3f9a1c07b2e45d18",
  "required_level": "exploitation"
}

calling address not authorized

{
  "type": "https://docs.lws.fr/kvm/errors/ip-not-allowed",
  "title": "Adresse non autorisée",
  "status": 403,
  "code": "ip_not_allowed",
  "detail": "L'adresse 203.0.113.10 ne figure pas parmi les adresses autorisées de ce compte.",
  "request_id": "3f9a1c07b2e45d18"
}

Response fields 18

type string (uri)

Example: https://docs.lws.fr/kvm/errors/vm-not-found

required
title string

Short title, in French

Example: VPS introuvable

required
status integer (int64)

HTTP status

Example: 404

required
code string

Stable machine-readable code (see "Errors" in Getting started)

Example: vm_not_found

required
detail string

Detailed message, in French

Example: Aucun VPS 999999 sur ce compte.

required
request_id string

Identifier of the request, to give to support

Example: 3f9a1c07b2e45d18

required
errors object

validation_failed: message per faulty parameter
required_level string

insufficient_scope: level required by the operation

one of: read, exploitation, full
task_id string

task_already_running: task running on this VPS

Example: tsk_000002d5
family string

rate_limited: exhausted rate limit family

one of: read, mutation, heavy
limit integer (int64)

rate_limited: hourly limit of the family
retry_after integer (int64)

rate_limited: seconds to wait
lock string

server_locked: lock set by the hypervisor (backup, snapshot, suspended…)

Example: snapshot
reason string

server_locked: operation_in_progress, an operation is running, retry after Retry-After; suspended, the VPS is hibernating, start it first; support_notified, abnormal lock, the LWS team has been notified and is taking care of it

one of: operation_in_progress, suspended, support_notified
maintenance object

server_maintenance: nature of the intervention, start and expected end (null for an incident)
kind string

one of: works, incident
started_at string (date-time)
expected_end string (date-time)

404

Resource not found: set_not_found — rule set unknown or belonging to another account.

{
  "type": "https://docs.lws.fr/kvm/errors/set-not-found",
  "title": "Jeu de règles introuvable",
  "status": 404,
  "code": "set_not_found",
  "detail": "Jeu de règles introuvable.",
  "request_id": "3f9a1c07b2e45d18"
}

Response fields 18

type string (uri)

Example: https://docs.lws.fr/kvm/errors/vm-not-found

required
title string

Short title, in French

Example: VPS introuvable

required
status integer (int64)

HTTP status

Example: 404

required
code string

Stable machine-readable code (see "Errors" in Getting started)

Example: vm_not_found

required
detail string

Detailed message, in French

Example: Aucun VPS 999999 sur ce compte.

required
request_id string

Identifier of the request, to give to support

Example: 3f9a1c07b2e45d18

required
errors object

validation_failed: message per faulty parameter
required_level string

insufficient_scope: level required by the operation

one of: read, exploitation, full
task_id string

task_already_running: task running on this VPS

Example: tsk_000002d5
family string

rate_limited: exhausted rate limit family

one of: read, mutation, heavy
limit integer (int64)

rate_limited: hourly limit of the family
retry_after integer (int64)

rate_limited: seconds to wait
lock string

server_locked: lock set by the hypervisor (backup, snapshot, suspended…)

Example: snapshot
reason string

server_locked: operation_in_progress, an operation is running, retry after Retry-After; suspended, the VPS is hibernating, start it first; support_notified, abnormal lock, the LWS team has been notified and is taking care of it

one of: operation_in_progress, suspended, support_notified
maintenance object

server_maintenance: nature of the intervention, start and expected end (null for an incident)
kind string

one of: works, incident
started_at string (date-time)
expected_end string (date-time)

409

Conflict with the current state: invalid_state — rule set also applied to VPS the key does not cover.

{
  "type": "https://docs.lws.fr/kvm/errors/invalid-state",
  "title": "Opération impossible en l'état",
  "status": 409,
  "code": "invalid_state",
  "detail": "Ce jeu de règles est aussi appliqué à des VPS que cette clé ne couvre pas. Modifiez-le depuis le panel, ou étendez la portée de la clé à ces VPS.",
  "request_id": "3f9a1c07b2e45d18"
}

Response fields 18

type string (uri)

Example: https://docs.lws.fr/kvm/errors/vm-not-found

required
title string

Short title, in French

Example: VPS introuvable

required
status integer (int64)

HTTP status

Example: 404

required
code string

Stable machine-readable code (see "Errors" in Getting started)

Example: vm_not_found

required
detail string

Detailed message, in French

Example: Aucun VPS 999999 sur ce compte.

required
request_id string

Identifier of the request, to give to support

Example: 3f9a1c07b2e45d18

required
errors object

validation_failed: message per faulty parameter
required_level string

insufficient_scope: level required by the operation

one of: read, exploitation, full
task_id string

task_already_running: task running on this VPS

Example: tsk_000002d5
family string

rate_limited: exhausted rate limit family

one of: read, mutation, heavy
limit integer (int64)

rate_limited: hourly limit of the family
retry_after integer (int64)

rate_limited: seconds to wait
lock string

server_locked: lock set by the hypervisor (backup, snapshot, suspended…)

Example: snapshot
reason string

server_locked: operation_in_progress, an operation is running, retry after Retry-After; suspended, the VPS is hibernating, start it first; support_notified, abnormal lock, the LWS team has been notified and is taking care of it

one of: operation_in_progress, suspended, support_notified
maintenance object

server_maintenance: nature of the intervention, start and expected end (null for an incident)
kind string

one of: works, incident
started_at string (date-time)
expected_end string (date-time)

429

Rate limit exceeded: rate_limited — hourly limit of the family exhausted.

{
  "type": "https://docs.lws.fr/kvm/errors/rate-limited",
  "title": "Quota dépassé",
  "status": 429,
  "code": "rate_limited",
  "detail": "Quota dépassé pour les opérations de type « mutation » : 300 appels par heure. Réessayez dans 95 seconde(s).",
  "request_id": "3f9a1c07b2e45d18",
  "family": "mutation",
  "limit": 300,
  "retry_after": 95
}

Response fields 18

type string (uri)

Example: https://docs.lws.fr/kvm/errors/vm-not-found

required
title string

Short title, in French

Example: VPS introuvable

required
status integer (int64)

HTTP status

Example: 404

required
code string

Stable machine-readable code (see "Errors" in Getting started)

Example: vm_not_found

required
detail string

Detailed message, in French

Example: Aucun VPS 999999 sur ce compte.

required
request_id string

Identifier of the request, to give to support

Example: 3f9a1c07b2e45d18

required
errors object

validation_failed: message per faulty parameter
required_level string

insufficient_scope: level required by the operation

one of: read, exploitation, full
task_id string

task_already_running: task running on this VPS

Example: tsk_000002d5
family string

rate_limited: exhausted rate limit family

one of: read, mutation, heavy
limit integer (int64)

rate_limited: hourly limit of the family
retry_after integer (int64)

rate_limited: seconds to wait
lock string

server_locked: lock set by the hypervisor (backup, snapshot, suspended…)

Example: snapshot
reason string

server_locked: operation_in_progress, an operation is running, retry after Retry-After; suspended, the VPS is hibernating, start it first; support_notified, abnormal lock, the LWS team has been notified and is taking care of it

one of: operation_in_progress, suspended, support_notified
maintenance object

server_maintenance: nature of the intervention, start and expected end (null for an incident)
kind string

one of: works, incident
started_at string (date-time)
expected_end string (date-time)

502

Dependency unreachable: upstream_unavailable — could not be saved.

{
  "type": "https://docs.lws.fr/kvm/errors/upstream-unavailable",
  "title": "Service momentanément indisponible",
  "status": 502,
  "code": "upstream_unavailable",
  "detail": "Inventaire des VM indisponible.",
  "request_id": "3f9a1c07b2e45d18"
}

Response fields 18

type string (uri)

Example: https://docs.lws.fr/kvm/errors/vm-not-found

required
title string

Short title, in French

Example: VPS introuvable

required
status integer (int64)

HTTP status

Example: 404

required
code string

Stable machine-readable code (see "Errors" in Getting started)

Example: vm_not_found

required
detail string

Detailed message, in French

Example: Aucun VPS 999999 sur ce compte.

required
request_id string

Identifier of the request, to give to support

Example: 3f9a1c07b2e45d18

required
errors object

validation_failed: message per faulty parameter
required_level string

insufficient_scope: level required by the operation

one of: read, exploitation, full
task_id string

task_already_running: task running on this VPS

Example: tsk_000002d5
family string

rate_limited: exhausted rate limit family

one of: read, mutation, heavy
limit integer (int64)

rate_limited: hourly limit of the family
retry_after integer (int64)

rate_limited: seconds to wait
lock string

server_locked: lock set by the hypervisor (backup, snapshot, suspended…)

Example: snapshot
reason string

server_locked: operation_in_progress, an operation is running, retry after Retry-After; suspended, the VPS is hibernating, start it first; support_notified, abnormal lock, the LWS team has been notified and is taking care of it

one of: operation_in_progress, suspended, support_notified
maintenance object

server_maintenance: nature of the intervention, start and expected end (null for an incident)
kind string

one of: works, incident
started_at string (date-time)
expected_end string (date-time)

Edit a rule set

Path parameters

Request body

Responses

Report an error

AI assistant