Review changes to AP_HA-7

  3. QoS parameterisation.

* **AP_HA-6** The product shall implement recovery or failover mechanisms.

* **AP_HA-7** The product shall implement DDoS mitigations including at minimum:

  1. port switching

  2. traffic redirections

  3. service termination for a recommended and configurable time

  4. disabling of the affected ports and interfaces for a configurable time

  1. detection and logging of volumetric or protocol abuse affecting product availability;

  2. active mitigation actions that preserve or restore essential management functions within a configurable timeframe;

  3. rate limiting, traffic shaping, connection throttling, or temporary blocking of abusive sources;

  4. controlled degradation, traffic redirection, or temporary suspension of non-essential services or interfaces for a configurable time;

  5. coordination with external DDoS defence or scrubbing systems where documented as part of the operational environment (see CYB_OPS-1).

  * This requirement applies to products which can be exposed to DDoS.

## 5.11 Non-interference