--- title: TCP Flow Protection --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/python) [DDoS Protection](https://developers.cloudflare.com/api/python/resources/ddos_protection) [Advanced TCP Protection](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # TCP Flow Protection #### TCP Flow ProtectionFilters ##### [List all TCP Flow Protection filters.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/filters/methods/list) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.filters.list(FilterListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[FilterListResponse]()] GET/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/filters ##### [Create a TCP Flow Protection filter.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/filters/methods/create) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.filters.create(FilterCreateParams\*\*kwargs) -> [FilterCreateResponse]() POST/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/filters ##### [Delete all TCP Flow Protection filters.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/filters/methods/bulk_delete) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.filters.bulk\_delete(FilterBulkDeleteParams\*\*kwargs) -> [FilterBulkDeleteResponse]() DELETE/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/filters ##### ModelsExpand Collapse
class FilterListResponse: … id: str The unique ID of the expression filter. Link to this property created\_on: datetime The creation timestamp of the expression filter. formatdate-time Link to this property expression: str The filter expression. Link to this property mode: str The filter’s mode. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the expression filter. formatdate-time Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.filters%20%3E%20(model)%20filter_list_response%20%3E%20(schema)>)
class FilterCreateResponse: … id: str The unique ID of the expression filter. Link to this property created\_on: datetime The creation timestamp of the expression filter. formatdate-time Link to this property expression: str The filter expression. Link to this property mode: str The filter’s mode. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the expression filter. formatdate-time Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.filters%20%3E%20(model)%20filter_create_response%20%3E%20(schema)>)
class FilterBulkDeleteResponse: …
errors: List\[Error] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[ErrorSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property
messages: List\[Message] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[MessageSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property success: Literal\[true] Whether the API call was successful. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.filters%20%3E%20(model)%20filter_bulk_delete_response%20%3E%20(schema)>) #### TCP Flow ProtectionFiltersItems ##### [Get TCP Flow Protection filter.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/filters/subresources/items/methods/get) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.filters.items.get(strfilter\_id, ItemGetParams\*\*kwargs) -> [ItemGetResponse]() GET/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/filters/{filter\_id} ##### [Update TCP Flow Protection filter.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/filters/subresources/items/methods/edit) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.filters.items.edit(strfilter\_id, ItemEditParams\*\*kwargs) -> [ItemEditResponse]() PATCH/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/filters/{filter\_id} ##### [Delete TCP Flow Protection filter.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/filters/subresources/items/methods/delete) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.filters.items.delete(strfilter\_id, ItemDeleteParams\*\*kwargs) -> [ItemDeleteResponse]() DELETE/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/filters/{filter\_id} ##### ModelsExpand Collapse
class ItemGetResponse: … id: str The unique ID of the expression filter. Link to this property created\_on: datetime The creation timestamp of the expression filter. formatdate-time Link to this property expression: str The filter expression. Link to this property mode: str The filter’s mode. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the expression filter. formatdate-time Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.filters.items%20%3E%20(model)%20item_get_response%20%3E%20(schema)>)
class ItemEditResponse: … id: str The unique ID of the expression filter. Link to this property created\_on: datetime The creation timestamp of the expression filter. formatdate-time Link to this property expression: str The filter expression. Link to this property mode: str The filter’s mode. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the expression filter. formatdate-time Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.filters.items%20%3E%20(model)%20item_edit_response%20%3E%20(schema)>)
class ItemDeleteResponse: …
errors: List\[Error] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[ErrorSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property
messages: List\[Message] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[MessageSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property success: Literal\[true] Whether the API call was successful. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.filters.items%20%3E%20(model)%20item_delete_response%20%3E%20(schema)>) #### TCP Flow ProtectionRules ##### [List all TCP Flow Protection rules.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/rules/methods/list) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.rules.list(RuleListParams\*\*kwargs) -> SyncV4PagePaginationArray\[[RuleListResponse]()] GET/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/rules ##### [Create TCP Flow Protection rule.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/rules/methods/create) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.rules.create(RuleCreateParams\*\*kwargs) -> [RuleCreateResponse]() POST/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/rules ##### [Delete all TCP Flow Protection rules.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/rules/methods/bulk_delete) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.rules.bulk\_delete(RuleBulkDeleteParams\*\*kwargs) -> [RuleBulkDeleteResponse]() DELETE/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/rules ##### ModelsExpand Collapse
class RuleListResponse: … id: str The unique ID of the TCP Flow Protection rule. Link to this property burst\_sensitivity: str The burst sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property created\_on: datetime The creation timestamp of the TCP Flow Protection rule. formatdate-time Link to this property mode: str The mode for TCP Flow Protection. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the TCP Flow Protection rule. formatdate-time Link to this property name: str The name of the TCP Flow Protection rule. Value is relative to the ‘scope’ setting. For ‘global’ scope, name should be ‘global’. For either the ‘region’ or ‘datacenter’ scope, name should be the actual name of the region or datacenter, e.g., ‘wnam’ or ‘lax’. Link to this property rate\_sensitivity: str The rate sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property scope: str The scope for the TCP Flow Protection rule. Must be one of ‘global’, ‘region’, or ‘datacenter’. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.rules%20%3E%20(model)%20rule_list_response%20%3E%20(schema)>)
class RuleCreateResponse: … id: str The unique ID of the TCP Flow Protection rule. Link to this property burst\_sensitivity: str The burst sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property created\_on: datetime The creation timestamp of the TCP Flow Protection rule. formatdate-time Link to this property mode: str The mode for TCP Flow Protection. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the TCP Flow Protection rule. formatdate-time Link to this property name: str The name of the TCP Flow Protection rule. Value is relative to the ‘scope’ setting. For ‘global’ scope, name should be ‘global’. For either the ‘region’ or ‘datacenter’ scope, name should be the actual name of the region or datacenter, e.g., ‘wnam’ or ‘lax’. Link to this property rate\_sensitivity: str The rate sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property scope: str The scope for the TCP Flow Protection rule. Must be one of ‘global’, ‘region’, or ‘datacenter’. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.rules%20%3E%20(model)%20rule_create_response%20%3E%20(schema)>)
class RuleBulkDeleteResponse: …
errors: List\[Error] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[ErrorSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property
messages: List\[Message] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[MessageSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property success: Literal\[true] Whether the API call was successful. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.rules%20%3E%20(model)%20rule_bulk_delete_response%20%3E%20(schema)>) #### TCP Flow ProtectionRulesItems ##### [Get TCP Flow Protection rule.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/rules/subresources/items/methods/get) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.rules.items.get(strrule\_id, ItemGetParams\*\*kwargs) -> [ItemGetResponse]() GET/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/rules/{rule\_id} ##### [Update TCP Flow Protection rule.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/rules/subresources/items/methods/edit) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.rules.items.edit(strrule\_id, ItemEditParams\*\*kwargs) -> [ItemEditResponse]() PATCH/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/rules/{rule\_id} ##### [Delete TCP Flow Protection rule.](https://developers.cloudflare.com/api/python/resources/ddos_protection/subresources/advanced_tcp_protection/subresources/tcp_flow_protection/subresources/rules/subresources/items/methods/delete) ddos\_protection.advanced\_tcp\_protection.tcp\_flow\_protection.rules.items.delete(strrule\_id, ItemDeleteParams\*\*kwargs) -> [ItemDeleteResponse]() DELETE/accounts/{account\_id}/magic/advanced\_tcp\_protection/configs/tcp\_flow\_protection/rules/{rule\_id} ##### ModelsExpand Collapse
class ItemGetResponse: … id: str The unique ID of the TCP Flow Protection rule. Link to this property burst\_sensitivity: str The burst sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property created\_on: datetime The creation timestamp of the TCP Flow Protection rule. formatdate-time Link to this property mode: str The mode for TCP Flow Protection. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the TCP Flow Protection rule. formatdate-time Link to this property name: str The name of the TCP Flow Protection rule. Value is relative to the ‘scope’ setting. For ‘global’ scope, name should be ‘global’. For either the ‘region’ or ‘datacenter’ scope, name should be the actual name of the region or datacenter, e.g., ‘wnam’ or ‘lax’. Link to this property rate\_sensitivity: str The rate sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property scope: str The scope for the TCP Flow Protection rule. Must be one of ‘global’, ‘region’, or ‘datacenter’. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.rules.items%20%3E%20(model)%20item_get_response%20%3E%20(schema)>)
class ItemEditResponse: … id: str The unique ID of the TCP Flow Protection rule. Link to this property burst\_sensitivity: str The burst sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property created\_on: datetime The creation timestamp of the TCP Flow Protection rule. formatdate-time Link to this property mode: str The mode for TCP Flow Protection. Must be one of ‘enabled’, ‘disabled’, ‘monitoring’. Link to this property modified\_on: datetime The last modification timestamp of the TCP Flow Protection rule. formatdate-time Link to this property name: str The name of the TCP Flow Protection rule. Value is relative to the ‘scope’ setting. For ‘global’ scope, name should be ‘global’. For either the ‘region’ or ‘datacenter’ scope, name should be the actual name of the region or datacenter, e.g., ‘wnam’ or ‘lax’. Link to this property rate\_sensitivity: str The rate sensitivity. Must be one of ‘low’, ‘medium’, ‘high’. Link to this property scope: str The scope for the TCP Flow Protection rule. Must be one of ‘global’, ‘region’, or ‘datacenter’. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.rules.items%20%3E%20(model)%20item_edit_response%20%3E%20(schema)>)
class ItemDeleteResponse: …
errors: List\[Error] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[ErrorSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property
messages: List\[Message] code: int minimum1000 Link to this property message: str Link to this property documentation\_url: Optional\[str] Link to this property
source: Optional\[MessageSource] pointer: Optional\[str] Link to this property
Link to this property
Link to this property success: Literal\[true] Whether the API call was successful. Link to this property
[Link to this property](<#(resource)%20ddos_protection.advanced_tcp_protection.tcp_flow_protection.rules.items%20%3E%20(model)%20item_delete_response%20%3E%20(schema)>)