Disconnecting a security profile from a virtual host

If you do not have the Yandex Cloud command line interface yet, install and initialize it.

The folder specified in the CLI profile is used by default. You can specify a different folder using the --folder-name or --folder-id parameter.

1. To view a list of HTTP routers in the default folder, run this command:

   yc application-load-balancer http-router list
   

   Result:

   +----------------------+-------------------+-------------+-------------+
   |          ID          |       NAME        | VHOST COUNT | ROUTE COUNT |
   +----------------------+-------------------+-------------+-------------+
   | ds7e9te73uak******** |  my-first-router  |           1 |           1 |
   +----------------------+-------------------+-------------+-------------+
   

2. To view a list of virtual hosts for the selected HTTP router, run this command:

   yc application-load-balancer http-router get <HTTP_router_name_or_ID>
   

   Result:

   id: ds7e9te73uak********
   name: my-first-router
   folder_id: b1gt6g8ht345********
   virtual_hosts:
     - name: test-virtual-host
       routes:
         - name: test-route
           http:
             match:
               path:
                 prefix_match: /
             route:
               backend_group_id: ds7e12p7l6j4********
               timeout: 60s
               auto_host_rewrite: false
       route_options:
         security_profile_id: fev3s055oq64********
   created_at: "2024-08-05T08:34:03.973000654Z"
   

   Names of virtual hosts are specified in the virtual_hosts.name parameter. The example above features only one virtual host: test-virtual-host.

3. To disconnect a security profile from a virtual host, run this command:

   yc application-load-balancer virtual-host update <virtual_host_name> \
      --http-router-name <HTTP_router_name> \
      --security-profile-id ""
   

   Where:

   • <virtual_host_name>: Virtual host name from the previous step.
   • --http-router-name: HTTP router name. This is a required parameter. Instead of the HTTP router name, you can provide its ID in the http-router-id parameter.
   • --security-profile-id: Security profile ID. This is a required parameter.

   Result:

   done (1s)
   name: test-virtual-host
   routes:
     - name: test-route
       http:
         match:
           path:
             prefix_match: /
         route:
           backend_group_id: ds7e12p7l6j4********
           timeout: 60s
           auto_host_rewrite: false
   route_options: {}
   

For more information about the yc application-load-balancer virtual-host update command, see the CLI reference.

Use the update REST API method for the VirtualHost resource or the VirtualHostService/Update gRPC API call of the Application Load Balancer service.