set service ids ddos-protection direction 'in'
set service ids ddos-protection listen-interface 'eth1'
set service ids ddos-protection mode mirror
set service ids ddos-protection threshold general fps '1000'
set service ids ddos-protection threshold general mbps '200'
set service ids ddos-protection threshold general pps '150000'
set service ids ddos-protection threshold tcp fps '25'
set service ids ddos-protection threshold tcp mbps '55'
set service ids ddos-protection threshold tcp pps '155'
set service ids ddos-protection threshold udp fps '100'
set service ids ddos-protection threshold udp mbps '100'
set service ids ddos-protection threshold udp pps '100'
set service ids ddos-protection threshold icmp fps '200'
set service ids ddos-protection threshold icmp mbps '210'
set service ids ddos-protection threshold icmp pps '2040'

# General threshold
ban_for_flows = on
threshold_flows = 1000
ban_for_bandwidth = on
threshold_mbps = 200
ban_for_pps = on
threshold_pps = 150000

#!/bin/vbash

set firewall interface ethXvX

if [ "$(id -g -n)" != 'vyattacfg' ] ; then
    exec sg vyattacfg -c "/bin/vbash $(readlink -f $0) $@"
fi

vyos@r14# commit
[ interfaces openvpn vtun2 ]

vyos@r14# set service ids ddos-protection threshold 
Possible completions:
   fps                  Flows per second
   mbps                 Megabits per second
   pps                  Packets per second

set system update-check auto-check
set system update-check url 'http://192.168.122.14:8080/download/image-version.json'

05:47:04  DEBUG - ======================================================================
05:47:04  DEBUG - FAIL: test_add_multiple_ip_addresses (__main__.BondingInterfaceTest)
05:47:04  DEBUG - ----------------------------------------------------------------------
05:47:04  DEBUG - Traceback (most recent call last):
05:47:04  DEBUG -   File "/usr/libexec/vyos/tests/smoke/cli/base_interfaces_test.py", line 109, in tearDown
05:47:04  DEBUG -     self.assertFalse(process_named_running(daemon))
05:47:04  DEBUG - AssertionError: 8769 is not false
05:47:04  DEBUG - 
05:47:04  DEBUG - ------------------

nft add table MYRAW
nft -- add chain ip MYRAW  my_chain '{ type filter hook prerouting priority raw; policy accept; }'
nft add rule ip MYRAW my_chain ip saddr 192.0.2.5 counter drop

{
    "images": {
        "rolling": {
            "latest": {
                "arch": "amd64",
                "flavors": ["azure"],
                "image": "vyos-rolling-latest.iso",
                "latest": True,
                "lts": False,
                "release_date": "2022-09-02",
                "release_train": "sagitta",
                "version": "1.4-rolling-202209020217"
            },
            "1.4-rolling-202209020217": {
                "arch": "amd64",
                "flavors": ["generic"],
                "image": "vyos-1.4-rolling-202209020217-amd64.iso",
                "latest": True,
                "lts": False,
                "release_date": "2022-09-02",
                "release_train": "sagitta",
                "version": "1.4-rolling-202209020217"
            },
            "1.4-rolling-202208291850": {
                "arch": "amd64",
                "flavors": ["openstack"],
                "image": "vyos-1.4-rolling-202208291850-amd64.iso",
                "latest": False,
                "lts": False,
                "release_date": "2022-08-29",
                "release_train": "sagitta",
                "version": "1.4-rolling-20220829850"
            }
        },
        "lts": {
            "latest": {
                "arch": "amd64",
                "flavors": ["generic"],
                "image": "vyos-1.3-x.iso",
                "latest": True,
                "lts": True,
                "release_date": "2022-xx-xx",
                "release_train": "equuleus",
                "version": "1.3-stable-202208230511"
            }
        }
    }
}