@alicloud/waf-openapi20211001 4.0.4 → 4.0.6

package/dist/client.d.ts

@@ -348,11 +348,11 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     certId?: string;
     /**
      * @remarks
-     * The type of cipher suite that you want to add. This parameter is available only if you specify **HttpsPorts**. Valid values:
+     * The type of the cipher suites that you want to add. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
-     * *   **1:** all cipher suites.
-     * *   **2:** strong cipher suites. You can select this value only if you set **TLSVersion** to **tlsv1.2**.
-     * *   **99:** custom cipher suites.
+     * *   **1**: all cipher suites.
+     * *   **2**: strong cipher suites. This value is available only if you set **TLSVersion** to **tlsv1.2**.
+     * *   **99**: custom cipher suites.
      *
      * @example
      * 2
@@ -360,7 +360,7 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     cipherSuite?: number;
     /**
      * @remarks
-     * The custom cipher suite that you want to add.
+     * The custom cipher suites that you want to add.
      */
     customCiphers?: string[];
     /**
@@ -379,7 +379,7 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     enableTLSv3?: boolean;
     /**
      * @remarks
-     * Specifies whether to enable an exclusive IP address. This parameter is available only if you set **IPv6Enabled** to **false** and **ProtectionResource** to **share**. Valid values:
+     * Specifies whether to enable the exclusive IP address feature. This parameter is available only if you set **IPv6Enabled** to **false** and **ProtectionResource** to **share**. Valid values:
      *
      * *   **true**
      * *   **false** (default)
@@ -390,7 +390,7 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     exclusiveIp?: boolean;
     /**
      * @remarks
-     * Specifies whether to enable HTTP to HTTPS redirection. This parameter is available only if you specify HttpsPorts and leave HttpPorts empty. Valid values:
+     * Specifies whether to enable force redirect from HTTP to HTTPS for received requests. This parameter is available only if you specify HttpsPorts and leave HttpPorts empty. Valid values:
      *
      * *   **true**
      * *   **false**
@@ -412,17 +412,17 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     http2Enabled?: boolean;
     /**
      * @remarks
-     * The HTTP listener port.
+     * The HTTP listener ports.
      */
     httpPorts?: number[];
     /**
      * @remarks
-     * The HTTPS listener port.
+     * The HTTPS listener ports.
      */
     httpsPorts?: number[];
     /**
      * @remarks
-     * Specifies whether to enable IPv6. Valid values:
+     * Specifies whether to enable IPv6 protection. Valid values:
      *
      * *   **true**
      * *   **false** (default)
@@ -435,8 +435,8 @@ export declare class CreateDomainRequestListen extends $dara.Model {
      * @remarks
      * The type of the protection resource. Valid values:
      *
-     * *   **share:** a shared cluster. This is the default value.
-     * *   **gslb:** shared cluster-based intelligent load balancing.
+     * *   **share** (default): a shared cluster.
+     * *   **gslb**: shared cluster-based intelligent load balancing.
      *
      * @example
      * share
@@ -469,7 +469,7 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     SM2CertId?: string;
     /**
      * @remarks
-     * Specifies whether to enable the ShangMi (SM) certificate.
+     * Specifies whether to add an SM certificate.
      *
      * @example
      * true
@@ -480,7 +480,7 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     SM2Enabled?: boolean;
     /**
      * @remarks
-     * The version of the Transport Layer Security (TLS) protocol. This parameter is available only if you specify **HttpsPorts**. Valid values:
+     * The Transport Layer Security (TLS) version that you want to add. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
      * *   **tlsv1**
      * *   **tlsv1.1**
@@ -492,11 +492,11 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     TLSVersion?: string;
     /**
      * @remarks
-     * The method that you want WAF to use to obtain the actual IP address of a client. Valid values:
+     * The method that is used to obtain the originating IP address of a client. Valid values:
      *
-     * *   **0:** No Layer 7 proxies are deployed in front of WAF. This is the default value.
-     * *   **1:** WAF reads the first value of the X-Forwarded-For (XFF) header field as the IP address of the client.
-     * *   **2:** WAF reads the value of a custom header field as the IP address of the client.
+     * *   **0** (default): Client traffic is not filtered by a Layer 7 proxy before the traffic reaches WAF.
+     * *   **1**: WAF reads the first value of the X-Forwarded-For (XFF) header field as the originating IP address of the client.
+     * *   **2**: WAF reads the value of a custom header field as the originating IP address of the client.
      *
      * @example
      * 1
@@ -504,7 +504,7 @@ export declare class CreateDomainRequestListen extends $dara.Model {
     xffHeaderMode?: number;
     /**
      * @remarks
-     * The custom header field that you want WAF to use to obtain the actual IP address of a client.
+     * The custom header fields that are used to obtain the originating IP address of a client.
      */
     xffHeaders?: string[];
     static names(): {
@@ -521,7 +521,7 @@ export declare class CreateDomainRequestListen extends $dara.Model {
 export declare class CreateDomainRequestRedirectRequestHeaders extends $dara.Model {
     /**
      * @remarks
-     * The custom header field.
+     * The key of the custom header field.
      *
      * @example
      * aaa
@@ -552,6 +552,10 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
      * The IP addresses or domain names of the origin server.
      */
     backends?: string[];
+    /**
+     * @remarks
+     * The secondary IP addresses or domain names of the origin server.
+     */
     backupBackends?: string[];
     /**
      * @remarks
@@ -566,7 +570,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     cnameEnabled?: boolean;
     /**
      * @remarks
-     * The timeout period for connections. Unit: seconds. Valid values: 1 to 3600.
+     * The timeout period of connections. Unit: seconds. Valid values: 1 to 3600.
      *
      * @example
      * 120
@@ -574,7 +578,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     connectTimeout?: number;
     /**
      * @remarks
-     * Specifies whether to enable HTTPS to HTTP redirection for back-to-origin requests. This parameter is available only if you specify **HttpsPorts**. Valid values:
+     * Specifies whether to enable force redirect from HTTPS to HTTP for back-to-origin requests. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
      * *   **true**
      * *   **false**
@@ -598,7 +602,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
      * @remarks
      * The number of reused persistent connections. Valid values: 60 to 1000.
      *
-     * >  This parameter specifies the number of reused persistent connections after you enable the persistent connection feature.
+     * >  This parameter specifies the number of persistent connections that can be reused after you enable the persistent connection feature.
      *
      * @example
      * 1000
@@ -606,9 +610,9 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     keepaliveRequests?: number;
     /**
      * @remarks
-     * The timeout period for idle persistent connections. Valid values: 1 to 60. Default value: 15. Unit: seconds.
+     * The timeout period of idle persistent connections. Valid values: 1 to 60. Default value: 15. Unit: seconds.
      *
-     * >  This parameter specifies the time for which a reused persistent connection can remain in the Idle state before the persistent connection is closed.
+     * >  This parameter specifies the period of time after which an idle persistent connection is closed.
      *
      * @example
      * 15
@@ -620,7 +624,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
      *
      * *   **iphash**
      * *   **roundRobin**
-     * *   **leastTime** You can set the parameter to this value only if you set **ProtectionResource** to **gslb**.
+     * *   **leastTime**: This value is available only if you set **ProtectionResource** to **gslb**.
      *
      * This parameter is required.
      *
@@ -630,7 +634,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     loadbalance?: string;
     /**
      * @remarks
-     * The timeout period for read connections. Unit: seconds. Valid values: 1 to 3600.
+     * The timeout period of read connections. Unit: seconds. Valid values: 1 to 3600.
      *
      * @example
      * 200
@@ -638,14 +642,14 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     readTimeout?: number;
     /**
      * @remarks
-     * The custom header field that you want to use to label requests that are processed by WAF.
+     * The custom header fields, which are key-value pairs. The fields are used to mark requests that pass through WAF.
      *
-     * When a request passes through WAF, the custom header field is automatically used to label the request. This way, the backend service can identify requests that are processed by WAF.
+     * When a request passes through WAF, WAF automatically adds the custom header fields to the request to mark the request. This way, the backend service can identify requests that are processed by WAF.
      */
     requestHeaders?: CreateDomainRequestRedirectRequestHeaders[];
     /**
      * @remarks
-     * Specifies whether WAF retries forwarding requests to the origin server when the requests fail to be forwarded to the origin server. Valid values:
+     * Specifies whether WAF retries if WAF fails to forward requests to the origin server. Valid values:
      *
      * *   **true** (default)
      * *   **false**
@@ -656,11 +660,11 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     retry?: boolean;
     /**
      * @remarks
-     * The forwarding rules that you want to configure for the domain name that you want to add to WAF in hybrid cloud mode. This parameter is a string that consists of JSON arrays. Each element in a JSON array is a JSON struct that contains the following fields:
+     * The forwarding rules for the hybrid cloud mode. The value is a string that consists of JSON arrays. Each element in a JSON array is a JSON struct that contains the following fields:
      *
-     * *   **rs**: the back-to-origin IP addresses or CNAMEs. The value must be of the ARRAY type.
-     * *   **location**: the name of the protection node. The value must be of the STRING type.
-     * *   **locationId**: the ID of the protection node. The value must be of the LONG type.
+     * *   **rs**: the back-to-origin IP addresses or CNAMEs. Data type: array.
+     * *   **location**: the name of the protection node. Data type: string.
+     * *   **locationId**: the ID of the protection node. Data type: long.
      *
      * @example
      * [
@@ -676,7 +680,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     routingRules?: string;
     /**
      * @remarks
-     * Specifies whether to enable origin Server Name Indication (SNI). This parameter is available only if you specify **HttpsPorts**. Valid values:
+     * Specifies whether to enable the Server Name Indication (SNI) feature for back-to-origin requests. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
      * *   **true**
      * *   **false** (default)
@@ -687,7 +691,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     sniEnabled?: boolean;
     /**
      * @remarks
-     * The value of the SNI field. If you do not specify this parameter, the value of the **Host** field is automatically used. This parameter is optional. If you want WAF to use an SNI field value that is different from the Host field value in back-to-origin requests, you can specify a custom value for the SNI field.
+     * The custom value of the SNI field. If you do not specify this parameter, the value of the **Host** header field is automatically used. In most cases, you do not need to specify a custom value for the SNI field. However, if you want WAF to use an SNI field whose value is different from the value of the Host header field in back-to-origin requests, you can specify a custom value for the SNI field.
      *
      * >  This parameter is required only if you set **SniEnabled** to **true**.
      *
@@ -697,7 +701,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     sniHost?: string;
     /**
      * @remarks
-     * The timeout period for write connections. Unit: seconds. Valid values: 1 to 3600.
+     * The timeout period of write connections. Unit: seconds. Valid values: 1 to 3600.
      *
      * @example
      * 200
@@ -705,7 +709,7 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     writeTimeout?: number;
     /**
      * @remarks
-     * Specifies whether to use X-Forward-For-Proto to pass the protocol used by WAF to forward requests to the origin server. Valid values:
+     * Specifies whether to use the X-Forward-For-Proto header field to pass the protocol used by WAF to forward requests to the origin server. Valid values:
      *
      * *   **true** (default)
      * *   **false**
@@ -726,7 +730,21 @@ export declare class CreateDomainRequestRedirect extends $dara.Model {
     });
 }
 export declare class CreateDomainRequestTag extends $dara.Model {
+    /**
+     * @remarks
+     * The key of the tag.
+     *
+     * @example
+     * Tagkey1
+     */
     key?: string;
+    /**
+     * @remarks
+     * The value of the tag.
+     *
+     * @example
+     * TagValue1
+     */
     value?: string;
     static names(): {
         [key: string]: string;
@@ -740,7 +758,21 @@ export declare class CreateDomainRequestTag extends $dara.Model {
     });
 }
 export declare class CreateDomainShrinkRequestTag extends $dara.Model {
+    /**
+     * @remarks
+     * The key of the tag.
+     *
+     * @example
+     * Tagkey1
+     */
     key?: string;
+    /**
+     * @remarks
+     * The value of the tag.
+     *
+     * @example
+     * TagValue1
+     */
     value?: string;
     static names(): {
         [key: string]: string;
@@ -770,6 +802,13 @@ export declare class CreateDomainResponseBodyDomainInfo extends $dara.Model {
      * www.aliyundoc.com
      */
     domain?: string;
+    /**
+     * @remarks
+     * The name of the protected object that is generated.
+     *
+     * @example
+     * www.aliyundoc.com-waf
+     */
     domainId?: string;
     static names(): {
         [key: string]: string;
@@ -1040,6 +1079,11 @@ export declare class DescribeApisecAbnormalsResponseBodyData extends $dara.Model
      * 1684252800
      */
     lastestTime?: number;
+    /**
+     * @example
+     * 1684252800
+     */
+    latestDiscoverTime?: number;
     /**
      * @remarks
      * The domain name or IP address of the API.
@@ -1307,6 +1351,11 @@ export declare class DescribeApisecApiResourcesResponseBodyData extends $dara.Mo
      * Password changed
      */
     note?: string;
+    /**
+     * @remarks
+     * The list of protection objects corresponding to this asset.
+     */
+    resources?: string[];
     static names(): {
         [key: string]: string;
     };
@@ -1418,6 +1467,7 @@ export declare class DescribeApisecEventsResponseBodyData extends $dara.Model {
     /**
      * @remarks
      * The number of attacks.
+     * >Notice: The parameter has been deprecated, please use the Attackips parameter.
      *
      * @example
      * 10
@@ -1486,6 +1536,11 @@ export declare class DescribeApisecEventsResponseBodyData extends $dara.Model {
      * [{\\"ip\\":\\"72.*.*.119\\",\\"country_id\\":\\"US\\",\\"region_id\\":\\"\\",\\"cnt\\":\\"2100\\"}]
      */
     attackIpInfo?: string;
+    /**
+     * @remarks
+     * The source IP addresses of the attacks.
+     */
+    attackIps?: string[];
     /**
      * @remarks
      * The end of the time range to query. This value is a UNIX timestamp in UTC. Unit: seconds.
@@ -1942,6 +1997,14 @@ export declare class DescribeApisecSensitiveDomainStatisticResponseBodyData exte
     });
 }
 export declare class DescribeApisecStatisticsResponseBodyData extends $dara.Model {
+    /**
+     * @remarks
+     * The number of handled events.
+     *
+     * @example
+     * 1
+     */
+    actioned?: number;
     /**
      * @remarks
      * The number of APIs.
@@ -2912,6 +2975,20 @@ export declare class DescribeDefaultHttpsResponseBodyDefaultHttps extends $dara.
         [key: string]: any;
     });
 }
+export declare class DescribeDefenseResourceResponseBodyResourceResponseHeaders extends $dara.Model {
+    key?: string;
+    value?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    validate(): void;
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class DescribeDefenseResourceResponseBodyResource extends $dara.Model {
     /**
      * @remarks
@@ -3049,6 +3126,7 @@ export declare class DescribeDefenseResourceResponseBodyResource extends $dara.M
      * custom
      */
     resourceOrigin?: string;
+    responseHeaders?: DescribeDefenseResourceResponseBodyResourceResponseHeaders[];
     /**
      * @remarks
      * Indicates whether a Layer 7 proxy is deployed in front of WAF, such as Anti-DDoS Proxy and Alibaba Cloud CDN. Valid values:
@@ -3308,6 +3386,20 @@ export declare class DescribeDefenseResourcesRequestTag extends $dara.Model {
         [key: string]: any;
     });
 }
+export declare class DescribeDefenseResourcesResponseBodyResourcesResponseHeaders extends $dara.Model {
+    key?: string;
+    value?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    validate(): void;
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class DescribeDefenseResourcesResponseBodyResources extends $dara.Model {
     /**
      * @remarks
@@ -3434,6 +3526,7 @@ export declare class DescribeDefenseResourcesResponseBodyResources extends $dara
      * custom
      */
     resourceOrigin?: string;
+    responseHeaders?: DescribeDefenseResourcesResponseBodyResourcesResponseHeaders[];
     /**
      * @remarks
      * Indicates whether the X-Forwarded-For (XFF) header is used.
@@ -7407,10 +7500,19 @@ export declare class DescribeSensitiveRequestLogResponseBodyData extends $dara.M
     requestTime?: number;
     /**
      * @remarks
-     * The sensitive data.
+     * The sensitive data. The value of this parameter is a JSON string that contains multiple parameters. The Key of JSON is the sensitive information type identifier (including default and custom types), and the Value is the sensitive information data list.
+     * >  You can call the [DescribeApisecRules](https://help.aliyun.com/document_detail/2859155.html) operation to query the supported types of sensitive data.
      *
      * @example
-     * A0Y5MPH3P
+     * {
+     *           "1000":[
+     *               "90.88.49.19",
+     *               "90.88.49.19"
+     *           ],
+     *           "835436":[
+     *               "www.abc.com"
+     *           ]
+     * }
      */
     sensitiveList?: string;
     /**
@@ -8366,6 +8468,20 @@ export declare class ModifyCloudResourceRequestRedirect extends $dara.Model {
         [key: string]: any;
     });
 }
+export declare class ModifyDefenseResourceXffRequestResponseHeaders extends $dara.Model {
+    key?: string;
+    value?: string;
+    static names(): {
+        [key: string]: string;
+    };
+    static types(): {
+        [key: string]: any;
+    };
+    validate(): void;
+    constructor(map?: {
+        [key: string]: any;
+    });
+}
 export declare class ModifyDomainRequestListen extends $dara.Model {
     /**
      * @remarks
@@ -8377,11 +8493,11 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     certId?: string;
     /**
      * @remarks
-     * The type of cipher suite that you want to add. This parameter is available only when you specify the **HttpsPorts** parameter. Valid values:
+     * The type of the cipher suites that you want to add. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
-     * *   **1:** all cipher suites.
-     * *   **2:** strong cipher suites. You can select this value only when you set the **TLSVersion** parameter to **tlsv1.2**.
-     * *   **99:** custom cipher suites.
+     * *   **1**: all cipher suites.
+     * *   **2**: strong cipher suites. This value is available only if you set **TLSVersion** to **tlsv1.2**.
+     * *   **99**: custom cipher suites.
      *
      * @example
      * 2
@@ -8389,15 +8505,15 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     cipherSuite?: number;
     /**
      * @remarks
-     * The custom cipher suites that you want to add. This parameter is available only when you set the **CipherSuite** parameter to **99**.
+     * The custom cipher suites that you want to add. This parameter is available only if you set **CipherSuite** to **99**.
      */
     customCiphers?: string[];
     /**
      * @remarks
-     * Specifies whether to support TLS 1.3. This parameter is available only when you specify the **HttpsPorts** parameter. Valid values:
+     * Specifies whether to support TLS 1.3. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
-     * *   **true:** supports TLS 1.3.
-     * *   **false:** does not support TLS 1.3.
+     * *   **true**
+     * *   **false**
      *
      * @example
      * true
@@ -8405,10 +8521,10 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     enableTLSv3?: boolean;
     /**
      * @remarks
-     * Specifies whether to enable an exclusive IP address for the domain name. This parameter is available only when you set the **IPv6Enabled** parameter to false and the **ProtectionResource** parameter to **share**. Valid values:
+     * Specifies whether to enable the exclusive IP address feature. This parameter is available only if you set **IPv6Enabled** to false and **ProtectionResource** to **share**. Valid values:
      *
-     * *   **true:** enables an exclusive IP address for the domain name.
-     * *   **false:** does not enable an exclusive IP address for the domain name. This is the default value.
+     * *   **true**
+     * *   **false** (default)
      *
      * @example
      * true
@@ -8416,10 +8532,10 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     exclusiveIp?: boolean;
     /**
      * @remarks
-     * Specifies whether to enable HTTP to HTTPS redirection for the domain name. This parameter is available only when you specify the **HttpsPorts** parameter and leave the **HttpPorts** parameter empty. Valid values:
+     * Specifies whether to enable force redirect from HTTP to HTTPS for received requests. This parameter is available only if you specify **HttpsPorts** and leave **HttpPorts** empty. Valid values:
      *
-     * *   **true:** enables HTTP to HTTPS redirection.
-     * *   **false:** disables HTTP to HTTPS redirection.
+     * *   **true**
+     * *   **false**
      *
      * @example
      * true
@@ -8427,10 +8543,10 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     focusHttps?: boolean;
     /**
      * @remarks
-     * Specifies whether to enable HTTP/2. This parameter is available only when you specify the **HttpsPorts** parameter. Valid values:
+     * Specifies whether to enable HTTP/2. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
-     * *   **true:** enables HTTP/2.
-     * *   **false:** disables HTTP/2. This is the default value.
+     * *   **true**
+     * *   **false** (default)
      *
      * @example
      * true
@@ -8438,20 +8554,20 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     http2Enabled?: boolean;
     /**
      * @remarks
-     * An array of HTTP listener ports. Specify the value of this parameter in the [port1,port2,...] format.
+     * The HTTP listener ports. Specify the value in the [**port1,port2,...**] format.
      */
     httpPorts?: number[];
     /**
      * @remarks
-     * An array of HTTPS listener ports. Specify the value of this parameter in the [port1,port2,...] format.
+     * The HTTPS listener ports. Specify the value in the [**port1,port2,...**] format.
      */
     httpsPorts?: number[];
     /**
      * @remarks
-     * Specifies whether to enable IPv6. Valid values:
+     * Specifies whether to enable IPv6 protection. Valid values:
      *
-     * *   **true:** enables IPv6.
-     * *   **false:** disables IPv6. This is the default value.
+     * *   **true**
+     * *   **false** (default)
      *
      * @example
      * true
@@ -8459,10 +8575,10 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     IPv6Enabled?: boolean;
     /**
      * @remarks
-     * The type of the protection resource that you want to use. Valid values:
+     * The type of the protection resource. Valid values:
      *
-     * *   **share:** shared cluster. This is the default value.
-     * *   **gslb:** shared cluster-based intelligent load balancing.
+     * *   **share** (default): a shared cluster.
+     * *   **gslb**: shared cluster-based intelligent load balancing.
      *
      * @example
      * share
@@ -8489,10 +8605,7 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     SM2CertId?: string;
     /**
      * @remarks
-     * Indicates whether SM certificate-based verification is enabled. Valid values:
-     *
-     * *   **true**
-     * *   **false**
+     * Specifies whether to add an SM certificate.
      *
      * @example
      * true
@@ -8500,7 +8613,7 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     SM2Enabled?: boolean;
     /**
      * @remarks
-     * The version of the Transport Layer Security (TLS) protocol. This parameter is available only when you specify the **HttpsPorts** parameter. Valid values:
+     * The Transport Layer Security (TLS) version that you want to add. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
      * *   **tlsv1**
      * *   **tlsv1.1**
@@ -8512,11 +8625,11 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     TLSVersion?: string;
     /**
      * @remarks
-     * The method that you want WAF to use to obtain the actual IP address of a client. Valid values:
+     * The method that is used to obtain the originating IP address of a client. Valid values:
      *
-     * *   **0:** No Layer 7 proxies are deployed in front of WAF. This is the default value.
-     * *   **1:** WAF reads the first value of the X-Forwarded-For (XFF) header field as the actual IP address of the client.
-     * *   **2:** WAF reads the value of a custom header field as the actual IP address of the client.
+     * *   **0** (default): Client traffic is not filtered by a Layer 7 proxy before the traffic reaches WAF.
+     * *   **1**: WAF reads the first value of the X-Forwarded-For (XFF) header field as the originating IP address of the client.
+     * *   **2**: WAF reads the value of a custom header field as the originating IP address of the client.
      *
      * @example
      * 2
@@ -8524,9 +8637,9 @@ export declare class ModifyDomainRequestListen extends $dara.Model {
     xffHeaderMode?: number;
     /**
      * @remarks
-     * The custom header fields that you want to use to obtain the actual IP address of a client. Specify the value of this parameter in the ["header1","header2",...] format.
+     * The custom header fields that are used to obtain the originating IP address of a client. Specify the value in the **["header1","header2",...]** format.
      *
-     * >  If you set the **XffHeaderMode** parameter to 2, this parameter is required.
+     * >  This parameter is required only if you set **XffHeaderMode** to 2.
      */
     xffHeaders?: string[];
     static names(): {
@@ -8571,12 +8684,16 @@ export declare class ModifyDomainRequestRedirectRequestHeaders extends $dara.Mod
 export declare class ModifyDomainRequestRedirect extends $dara.Model {
     /**
      * @remarks
-     * The IP addresses or domain names of the origin server. You can use only one of the address types. If you use the domain name type, the domain name can be resolved only to an IPv4 address.
+     * The IP addresses or domain names of the origin server. You cannot specify both IP addresses and domain names. If you specify domain names, the domain names can be resolved only to IPv4 addresses.
      *
-     * *   If you use the IP address type, specify the value in the ["ip1","ip2",...] format. You can enter up to 20 IP addresses.
-     * *   If you use the domain name type, specify the value in the ["domain"] format. You can enter up to 20 domain names.
+     * *   If you specify IP addresses, specify the value in the **["ip1","ip2",...]** format. You can enter up to 20 IP addresses.
+     * *   If you specify domain names, specify the value in the **["domain"]** format. You can enter up to 20 domain names.
      */
     backends?: string[];
+    /**
+     * @remarks
+     * The secondary IP addresses or domain names of the origin server.
+     */
     backupBackends?: string[];
     /**
      * @remarks
@@ -8591,7 +8708,7 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     cnameEnabled?: boolean;
     /**
      * @remarks
-     * The timeout period for connections. Unit: seconds. Valid values: 1 to 3600.
+     * The timeout period of connections. Unit: seconds. Valid values: 1 to 3600.
      *
      * @example
      * 120
@@ -8599,7 +8716,7 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     connectTimeout?: number;
     /**
      * @remarks
-     * Specifies whether to enable HTTPS to HTTP redirection for back-to-origin requests. This parameter is available only if you specify **HttpsPorts**. Valid values:
+     * Specifies whether to enable force redirect from HTTPS to HTTP for back-to-origin requests. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
      * *   **true**
      * *   **false**
@@ -8623,7 +8740,7 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
      * @remarks
      * The number of reused persistent connections. Valid values: 60 to 1000.
      *
-     * >  This parameter specifies the number of reused persistent connections after you enable the persistent connection feature.
+     * >  This parameter specifies the number of persistent connections that can be reused after you enable the persistent connection feature.
      *
      * @example
      * 1000
@@ -8631,9 +8748,9 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     keepaliveRequests?: number;
     /**
      * @remarks
-     * The timeout period for idle persistent connections. Valid values: 1 to 60. Default value: 15. Unit: seconds.
+     * The timeout period of idle persistent connections. Valid values: 1 to 60. Default value: 15. Unit: seconds.
      *
-     * >  This parameter specifies the time for which a reused persistent connection can remain in the Idle state before the persistent connection is released.
+     * >  This parameter specifies the period of time after which an idle persistent connection is closed.
      *
      * @example
      * 15
@@ -8643,9 +8760,9 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
      * @remarks
      * The load balancing algorithm that you want to use to forward requests to the origin server. Valid values:
      *
-     * *   **ip_hash**
+     * *   **iphash**
      * *   **roundRobin**
-     * *   **leastTime** You can set the parameter to this value only if you set **ProtectionResource** to **gslb**.
+     * *   **leastTime**: This value is available only if you set **ProtectionResource** to **gslb**.
      *
      * This parameter is required.
      *
@@ -8655,7 +8772,7 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     loadbalance?: string;
     /**
      * @remarks
-     * The timeout period for read connections. Unit: seconds. Valid values: 1 to 3600.
+     * The timeout period of read connections. Unit: seconds. Valid values: 1 to 3600.
      *
      * @example
      * 200
@@ -8663,14 +8780,14 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     readTimeout?: number;
     /**
      * @remarks
-     * The custom header field that you want to use to label requests that are processed by WAF.
+     * The custom header fields, which are key-value pairs. The fields are used to mark requests that pass through WAF.
      *
-     * When a request passes through WAF, the custom header field is automatically used to label the request. This way, the backend service can identify requests that are processed by WAF.
+     * When a request passes through WAF, WAF automatically adds the custom header fields to the request to mark the request. This way, the backend service can identify requests that are processed by WAF.
      */
     requestHeaders?: ModifyDomainRequestRedirectRequestHeaders[];
     /**
      * @remarks
-     * Specifies whether WAF retries forwarding requests to the origin server when the requests fail to be forwarded to the origin server. Valid values:
+     * Specifies whether WAF retries if WAF fails to forward requests to the origin server. Valid values:
      *
      * *   **true** (default)
      * *   **false**
@@ -8681,11 +8798,11 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     retry?: boolean;
     /**
      * @remarks
-     * The forwarding rules that you want to configure for the domain name that you want to add to WAF in hybrid cloud mode. This parameter is a string that consists of JSON arrays. Each element in a JSON array is a JSON struct that contains the following fields:
+     * The forwarding rules for the hybrid cloud mode. The value is a string that consists of JSON arrays. Each element in a JSON array is a JSON struct that contains the following fields:
      *
-     * *   **rs**: the back-to-origin IP addresses or CNAMEs. The value must be of the ARRAY type.
-     * *   **location**: the name of the protection node. The value must be of the STRING type.
-     * *   **locationId**: the ID of the protection node. The value must be of the LONG type.
+     * *   **rs**: the back-to-origin IP addresses or CNAMEs. Data type: array.
+     * *   **location**: the name of the protection node. Data type: string.
+     * *   **locationId**: the ID of the protection node. Data type: long.
      *
      * @example
      * [
@@ -8701,7 +8818,7 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     routingRules?: string;
     /**
      * @remarks
-     * Specifies whether to enable origin Server Name Indication (SNI). This parameter is available only if you specify **HttpsPorts**. Valid values:
+     * Specifies whether to enable the Server Name Indication (SNI) feature for back-to-origin requests. This parameter is available only if you specify **HttpsPorts**. Valid values:
      *
      * *   **true**
      * *   **false** (default)
@@ -8712,9 +8829,9 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     sniEnabled?: boolean;
     /**
      * @remarks
-     * The value of the SNI field. If you do not specify this parameter, the value of the **Host** field is automatically used. This parameter is optional. If you want WAF to use an SNI field value that is different from the Host field value in back-to-origin requests, you can specify a custom value for the SNI field.
+     * The custom value of the SNI field. If you do not specify this parameter, the value of the **Host** header field is automatically used. In most cases, you do not need to specify a custom value for the SNI field. However, if you want WAF to use an SNI field whose value is different from the value of the Host header field in back-to-origin requests, you can specify a custom value for the SNI field.
      *
-     * >  This parameter is required only if you set **SniEnalbed** to xxx.
+     * >  This parameter is required only if you set **SniEnabled** to true.
      *
      * @example
      * www.aliyundoc.com
@@ -8722,7 +8839,7 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     sniHost?: string;
     /**
      * @remarks
-     * The timeout period for write connections. Unit: seconds. Valid values: 1 to 3600.
+     * The timeout period of write connections. Unit: seconds. Valid values: 1 to 3600.
      *
      * @example
      * 200
@@ -8730,7 +8847,7 @@ export declare class ModifyDomainRequestRedirect extends $dara.Model {
     writeTimeout?: number;
     /**
      * @remarks
-     * Specifies whether to use the X-Forward-For-Proto header to identify the protocol used by WAF to forward requests to the origin server. Valid values:
+     * Specifies whether to use the X-Forward-For-Proto header field to pass the protocol used by WAF to forward requests to the origin server. Valid values:
      *
      * *   **true** (default)
      * *   **false**
@@ -9849,14 +9966,14 @@ export declare class CreateDomainRequest extends $dara.Model {
     instanceId?: string;
     /**
      * @remarks
-     * The configurations of the listeners.
+     * The listener configurations.
      *
      * This parameter is required.
      */
     listen?: CreateDomainRequestListen;
     /**
      * @remarks
-     * The configurations of the forwarding rule.
+     * The forwarding configurations.
      *
      * This parameter is required.
      */
@@ -9882,6 +9999,10 @@ export declare class CreateDomainRequest extends $dara.Model {
      * rg-acfm***q
      */
     resourceManagerResourceGroupId?: string;
+    /**
+     * @remarks
+     * The tags. You can specify up to 20 tags.
+     */
     tag?: CreateDomainRequestTag[];
     static names(): {
         [key: string]: string;
@@ -9930,14 +10051,14 @@ export declare class CreateDomainShrinkRequest extends $dara.Model {
     instanceId?: string;
     /**
      * @remarks
-     * The configurations of the listeners.
+     * The listener configurations.
      *
      * This parameter is required.
      */
     listenShrink?: string;
     /**
      * @remarks
-     * The configurations of the forwarding rule.
+     * The forwarding configurations.
      *
      * This parameter is required.
      */
@@ -9963,6 +10084,10 @@ export declare class CreateDomainShrinkRequest extends $dara.Model {
      * rg-acfm***q
      */
     resourceManagerResourceGroupId?: string;
+    /**
+     * @remarks
+     * The tags. You can specify up to 20 tags.
+     */
     tag?: CreateDomainShrinkRequestTag[];
     static names(): {
         [key: string]: string;
@@ -9978,7 +10103,7 @@ export declare class CreateDomainShrinkRequest extends $dara.Model {
 export declare class CreateDomainResponseBody extends $dara.Model {
     /**
      * @remarks
-     * The information about the domain name.
+     * The information about the domain name that is added.
      */
     domainInfo?: CreateDomainResponseBodyDomainInfo;
     /**
@@ -11944,7 +12069,8 @@ export declare class DescribeApisecAbnormalsRequest extends $dara.Model {
     /**
      * @remarks
      * The ID of the hybrid cloud cluster.
-     * >For hybrid cloud scenarios only, you can call the [DescribeHybridCloudClusters](https://help.aliyun.com/document_detail/2849376.html) operation to query the hybrid cloud clusters.
+     *
+     * >  This parameter is available only in hybrid cloud scenarios. You can call the [DescribeHybridCloudClusters](https://help.aliyun.com/document_detail/2849376.html) operation to query hybrid cloud clusters.
      *
      * @example
      * 546
@@ -11960,7 +12086,7 @@ export declare class DescribeApisecAbnormalsRequest extends $dara.Model {
     endTime?: string;
     /**
      * @remarks
-     * The ID of the Web Application Firewall (WAF) instance.
+     * The ID of the WAF instance.
      *
      * >  You can call the [DescribeInstance](https://help.aliyun.com/document_detail/433756.html) operation to query the ID of the WAF instance.
      *
@@ -12029,11 +12155,10 @@ export declare class DescribeApisecAbnormalsRequest extends $dara.Model {
     pageSize?: number;
     /**
      * @remarks
-     * The region in which the Web Application Firewall (WAF) instance is deployed. Valid values:
+     * The region ID of the WAF instance. Valid value:
      *
-     * * **cn-hangzhou**: Chinese mainland
-     *
-     * * **ap-southeast-1**: outside the Chinese mainland
+     * *   **cn-hangzhou**: Chinese mainland.
+     * *   **ap-southeast-1**: outside the Chinese mainland.
      *
      * @example
      * cn-qingdao
@@ -19346,7 +19471,7 @@ export declare class DescribeProductInstancesResponse extends $dara.Model {
 export declare class DescribePunishedDomainsRequest extends $dara.Model {
     /**
      * @remarks
-     * The domain names.
+     * The domain names that are added to WAF.
      */
     domains?: string[];
     /**
@@ -19361,6 +19486,10 @@ export declare class DescribePunishedDomainsRequest extends $dara.Model {
      * waf_v3prepaid_public_cn-uqm****qa07
      */
     instanceId?: string;
+    /**
+     * @example
+     * beian
+     */
     punishType?: string;
     /**
      * @remarks
@@ -21680,10 +21809,10 @@ export declare class DescribeSensitiveRequestLogRequest extends $dara.Model {
     pageSize?: number;
     /**
      * @remarks
-     * The region in which the Web Application Firewall (WAF) instance is deployed. Valid values:
+     * The region ID of the WAF instance. Valid value:
      *
-     * *   **cn-hangzhou**: Chinese mainland
-     * *   **ap-southeast-1**: outside the Chinese mainland
+     * *   **cn-hangzhou**: Chinese mainland.
+     * *   **ap-southeast-1**: outside the Chinese mainland.
      *
      * @example
      * cn-hangzhou
@@ -25420,6 +25549,7 @@ export declare class ModifyDefenseResourceXffRequest extends $dara.Model {
      * rg-acfm2kie2****wq
      */
     resourceManagerResourceGroupId?: string;
+    responseHeaders?: ModifyDefenseResourceXffRequestResponseHeaders[];
     /**
      * @remarks
      * Specifies whether a Layer 7 proxy is deployed in front of WAF. Layer 7 proxies include Anti-DDoS Proxy and Alibaba Cloud CDN. Valid values:
@@ -26045,14 +26175,14 @@ export declare class ModifyDomainRequest extends $dara.Model {
     instanceId?: string;
     /**
      * @remarks
-     * The configurations of the listeners.
+     * The listener configurations.
      *
      * This parameter is required.
      */
     listen?: ModifyDomainRequestListen;
     /**
      * @remarks
-     * The configurations of the forwarding rule.
+     * The forwarding configurations.
      *
      * This parameter is required.
      */
@@ -26116,14 +26246,14 @@ export declare class ModifyDomainShrinkRequest extends $dara.Model {
     instanceId?: string;
     /**
      * @remarks
-     * The configurations of the listeners.
+     * The listener configurations.
      *
      * This parameter is required.
      */
     listenShrink?: string;
     /**
      * @remarks
-     * The configurations of the forwarding rule.
+     * The forwarding configurations.
      *
      * This parameter is required.
      */
@@ -26160,7 +26290,7 @@ export declare class ModifyDomainResponseBody extends $dara.Model {
     domainInfo?: ModifyDomainResponseBodyDomainInfo;
     /**
      * @remarks
-     * The ID of the request.
+     * The request ID.
      *
      * @example
      * D7861F61-5B61-46CE-A47C-6B19160D5EB0