Yandex Cloud
Поиск
Связаться с экспертомПопробовать бесплатно
  • Кейсы
  • Документация
  • Блог
  • Все сервисы
    • Cloud Interconnect
    • Cloud Backup
    • Compute Cloud
    • Object Storage
    • Managed Service for Kubernetes®
    • Managed Service for PostgreSQL
    • Managed Service for ClickHouse®
    • Monium
    • Cloud CDN
    • Network Load Balancer
    • Virtual Private Cloud
    • Cloud DNS
    • Application Load Balancer
    • Yandex Cloud Router
    • Managed Service for MySQL®
    • Managed Service for Valkey™
    • Managed Service for Apache Spark™
    • Managed Service for OpenSearch
    • Managed Service for Apache Kafka®
    • Data Transfer
    • Yandex MPP Analytics Engine for PostgreSQL
    • Managed Service for YDB
    • SpeechKit
    • Yandex Identity Hub
    • Key Management Service
    • Certificate Manager
    • Yandex Lockbox
    • Audit Trails
    • Container Registry
    • Managed Service for Prometheus®
    • Message Queue
    • Identity and Access Management
    • Yandex Cloud Console
    • Resource Manager
    • Yandex Cloud Billing
    • Cloud Apps
    • Yandex AI Studio
    • Yandex BareMetal
    • Smart Web Security
    • Security Deck
    • Yandex Cloud Video
    • Stackland
    • Yandex Managed Service for Apache Airflow®
    • Data Processing
    • Yandex MetaData Hub
    • Yandex WebSQL
    • DataLens
    • Yandex Search API
    • SpeechSense
    • DataSphere
    • Vision OCR
    • Translate
    • Cloud Registry
    • SmartCaptcha
    • Cloud Desktop
    • Yandex SIEM
    • SourceCraft Code Assistant
    • Managed Service for GitLab
    • Cloud Functions
    • API Gateway
    • Yandex Cloud Postbox
    • Serverless Integrations
    • IoT Core
    • Serverless Containers
    • Cloud Notification Service
    • Yandex Query
  • Статус работы сервисов
  • Marketplace
    • Доступны в регионе
    • Инфраструктура и сеть
    • Платформа данных
    • Искусственный интеллект
    • Безопасность
    • Инструменты DevOps
    • Бессерверные вычисления
    • Управление ресурсами
  • Все решения
    • По отраслям
    • По типу задач
    • Экономика платформы
    • Безопасность
    • Техническая поддержка
    • Каталог партнёров
    • Обучение и сертификация
    • Облако для стартапов
    • Облако для крупного бизнеса
    • Центр технологий для общества
    • Партнёрская программа
    • Поддержка IT-бизнеса
    • Облако для фрилансеров
    • Обучение и сертификация
    • Блог
    • Документация
    • Мероприятия и вебинары
    • Контакты, чаты и сообщества
    • Идеи
    • Калькулятор цен
    • Тарифы
    • Акции и free tier
  • Кейсы
  • Документация
  • Блог
Создавайте контент и получайте гранты!Готовы написать своё руководство? Участвуйте в контент-программе и получайте гранты на работу с облачными сервисами!
Подробнее о программе
Проект Яндекса
© 2026 ТОО «Облачные Сервисы Казахстан»
Yandex Smart Web Security
RU
  • Начало работы
    • Обзор
    • Профили безопасности
    • WAF
    • ARL (лимит на запросы)
    • Правила
    • Условия
    • Списки
    • Управление бот-трафиком
    • Защита доменов
    • Шаблоны ответов
    • Логирование
    • Квоты и лимиты
  • Управление доступом
  • Правила тарификации
    • Overview
      • Overview
        • Overview
        • create
        • delete
        • get
        • list
        • update
  • Справочник Terraform
  • Метрики Monitoring
  • Аудитные логи Audit Trails
  • История изменений
  1. Справочник CLI (англ.)
  2. load-balancer
  3. domain
  4. update

yc smartwebsecurity load-balancer domain update

Статья создана
Yandex Cloud
Обновлена 12 августа 2026 г.
Открыть в Markdown

Updates the specified domain.

Command UsageCommand Usage

Syntax:

yc smartwebsecurity load-balancer domain update <LOAD-BALANCER-ID>

FlagsFlags

Flag

Description

--update-mask

[]string

Field paths for FieldMask: each segment may be proto snake_case or CLI kebab-case (e.g. name, labels, network-interface). Repeat the flag or use comma-separated values. When set and non-empty, takes precedence over update_mask in the request body/file and over mask inferred from -r. If omitted or empty, the mask is built from the fields you pass (changed flags, JSON/shorthand, and request file when update_mask is absent there).

--load-balancer-id

string

ID of the Load balancer that the domain belongs to.

--name

string

Name of domain that is being updated.

--server-name

string

Server name or wildcard to be matched against SNI in a TLS connection and authority(host) header. Wildcards are in the form of ".s.o.m.e". Allowed: "example.com", ".example.com". Not allowed: "..example.com", "*-sub.example.com".

--description

string

Domain description

--security-profile-id

string

Security Profile ID of SmartWebSecurity service.

--http-backend

shorthand/json

Backend settings.

Description
  • targets ([]structure)
    List of targets.
  • ip-address (string)
    IPv4 address.
  • description (string)
    Target description.
  • port (integer)
    Target port.
  • use-http2 (boolean)
    Enables HTTP2 for upstream requests. If not set, HTTP 1.1 will be used by default.
  • use-tls (boolean)
    Enable TLS for upstream requests.
  • sni (string)
    SNI string for TLS connections. Applicable only if use_tls enabled.
  • trusted-ca-bytes (string)
    Trusted certificate authority certificates bundle (PEM text). Applicable only if use_tls enabled.
  • timeout (duration)
    Backend timeout. If not set, default is 300 seconds.
  • idle-timeout (duration)
    Specifies the idle timeout for the route. If not specified, there is no per-route idle timeout.
  • session-affinity (structure)
    Session affinity.
  • session-affinity (oneof)
    Oneof session-affinity field
  • connection (structure)
    Session affinity based on source IP address.
  • source-ip (boolean)
    IP address.
  • header (structure)
    Session affinity based on an HTTP header.
  • header-name (string)
    Header name.
  • cookie (structure)
    Session affinity based on a cookie.
  • name (string)
    Cookie name.
  • ttl (duration)
    If not set, session cookie will be used (not persisted between browser restarts).
  • path (string)
    Optional cookie path.
Shorthand Syntax
{
  idle-timeout = duration,
  session-affinity = {
    session-affinity = connection={
      source-ip = boolean
    } | cookie={
      name = string,
      path = string,
      ttl = duration
    } | header={
      header-name = string
    }
  },
  sni = string,
  targets = [
    {
      description = string,
      ip-address = string,
      port = integer
    }, ...
  ],
  timeout = duration,
  trusted-ca-bytes = string,
  use-http2 = boolean,
  use-tls = boolean
}
JSON Syntax
{
  "idle-timeout": "duration",
  "session-affinity": {
    "session-affinity": {
      "connection": {
        "source-ip": "boolean"
      },
      "cookie": {
        "name": "string",
        "path": "string",
        "ttl": "duration"
      },
      "header": {
        "header-name": "string"
      }
    }
  },
  "sni": "string",
  "targets": [
    {
      "description": "string",
      "ip-address": "string",
      "port": "integer"
    }, ...
  ],
  "timeout": "duration",
  "trusted-ca-bytes": "string",
  "use-http2": "boolean",
  "use-tls": "boolean"
}

--tls-listener

shorthand/json

Optional TLS listener settings.

Description
  • enabled (boolean)
    Enable TLS listener.
  • certificate-id (string)
    Certificate ID in the Certificate Manager.
  • port (integer)
    Listener port. If value is not set, used 443 by default.
  • enable-http1 (boolean)
    Enables HTTP/1.0 and HTTP/1.1 support and disables HTTP/2.
Shorthand Syntax
{
  certificate-id = string,
  enable-http1 = boolean,
  enabled = boolean,
  port = integer
}
JSON Syntax
{
  "certificate-id": "string",
  "enable-http1": "boolean",
  "enabled": "boolean",
  "port": "integer"
}

--http-listener

shorthand/json

Optional plaintext listener settings.

Description
  • enabled (boolean)
    Enable http (plaintext) listener.
  • redirect-to-https (boolean)
    Automatically redirect from HTTP to HTTPS. If TlsListener's port is 443 or not set, redirect URL will be "https://<host><path>" and "https://<host>:<port><path>" in other case.
  • port (integer)
    Listener port. If value is not set, used 80 by default.
Shorthand Syntax
{
  enabled = boolean,
  port = integer,
  redirect-to-https = boolean
}
JSON Syntax
{
  "enabled": "boolean",
  "port": "integer",
  "redirect-to-https": "boolean"
}

--solid-waf-settings

shorthand/json

Optional Solid WAF settings.

Description
  • solid-waf-profile-id (string)
    ID of the Solid WAF profile.
  • session-affinity (structure)
    Session affinity to analyzers. If not set, ConnectionSessionAffinity will be used.
  • session-affinity (oneof)
    Oneof session-affinity field
  • connection (structure)
    Session affinity based on source IP address.
  • source-ip (boolean)
    IP address.
  • header (structure)
    Session affinity based on an HTTP header.
  • header-name (string)
    Header name.
  • cookie (structure)
    Session affinity based on a cookie.
  • name (string)
    Cookie name.
  • ttl (duration)
    If not set, session cookie will be used (not persisted between browser restarts).
  • path (string)
    Optional cookie path.
Shorthand Syntax
{
  session-affinity = {
    session-affinity = connection={
      source-ip = boolean
    } | cookie={
      name = string,
      path = string,
      ttl = duration
    } | header={
      header-name = string
    }
  },
  solid-waf-profile-id = string
}
JSON Syntax
{
  "session-affinity": {
    "session-affinity": {
      "connection": {
        "source-ip": "boolean"
      },
      "cookie": {
        "name": "string",
        "path": "string",
        "ttl": "duration"
      },
      "header": {
        "header-name": "string"
      }
    }
  },
  "solid-waf-profile-id": "string"
}

--rate-limit

shorthand/json

Optional rate limit settings.

Description
  • all-requests-per-second (integer)
    Rate limit for all requests. Defaults: - with SolidWaf enabled: 20000 RPS - without SolidWaf enabled: unlimited
  • requests-per-ip-per-second (integer)
    Rate limit for individual IP addresses. Defaults: - with SolidWaf enabled: 1000 RPS - without SolidWaf enabled: unlimited
Shorthand Syntax
{
  all-requests-per-second = integer,
  requests-per-ip-per-second = integer
}
JSON Syntax
{
  "all-requests-per-second": "integer",
  "requests-per-ip-per-second": "integer"
}

--async

Display information about the operation in progress, without waiting for the operation to complete.

-r, --request-file

string

Path to a request file.

--example-json

Generates a JSON template of the request.

-e, --example-yaml

Generates a YAML template of the request.

The template can be customized and used as input for the command.

Usage example:

  1. Generate template:
    yc smartwebsecurity load-balancer domain update --example-json > request.json
    or
    yc smartwebsecurity load-balancer domain update --example-yaml > request.yaml

  2. Edit the template file

  3. Run with template:
    yc smartwebsecurity load-balancer domain update -r request.json
    or
    yc smartwebsecurity load-balancer domain update -r request.yaml

Global FlagsGlobal Flags

Flag

Description

--profile

string

Set the custom profile.

--region

string

Set the region.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--pager

string

Set the custom pager.

--no-pager

Do not pipe help output through a pager.

--format

string

Set the output format: text, yaml, json, table, summary || summary[name, instance.id, instance.disks[0].size].

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--timeout

string

Set the timeout.

--token

string

Set the IAM token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--query

string

Query to select values from the response using jq syntax

--print-metadata

Print operation metadata along with result.

--syntax

string

Choose syntax option.

--cli-auto-prompt

string[="on"]

Enable interactive auto-prompt mode. Values: on, partial, off. Bare --cli-auto-prompt is equivalent to --cli-auto-prompt=on.

--no-cli-auto-prompt

Disable interactive auto-prompt mode (overrides --cli-auto-prompt, env and profile).

-h, --help

Display help for the command.

Была ли статья полезна?

Предыдущая
list
Следующая
Overview
Создавайте контент и получайте гранты!Готовы написать своё руководство? Участвуйте в контент-программе и получайте гранты на работу с облачными сервисами!
Подробнее о программе
Проект Яндекса
© 2026 ТОО «Облачные Сервисы Казахстан»