@robinmordasiewicz/f5xc-terraform-mcp 2.4.8 → 2.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/addon_subscription.md +85 -2
- package/dist/docs/data-sources/address_allocator.md +85 -2
- package/dist/docs/data-sources/advertise_policy.md +85 -2
- package/dist/docs/data-sources/alert_policy.md +85 -2
- package/dist/docs/data-sources/alert_receiver.md +85 -2
- package/dist/docs/data-sources/allowed_tenant.md +85 -2
- package/dist/docs/data-sources/api_crawler.md +85 -2
- package/dist/docs/data-sources/api_credential.md +85 -2
- package/dist/docs/data-sources/api_definition.md +85 -2
- package/dist/docs/data-sources/api_discovery.md +85 -2
- package/dist/docs/data-sources/api_testing.md +85 -2
- package/dist/docs/data-sources/apm.md +85 -2
- package/dist/docs/data-sources/app_api_group.md +85 -2
- package/dist/docs/data-sources/app_firewall.md +85 -2
- package/dist/docs/data-sources/app_setting.md +85 -2
- package/dist/docs/data-sources/app_type.md +85 -2
- package/dist/docs/data-sources/authentication.md +85 -2
- package/dist/docs/data-sources/aws_tgw_site.md +85 -2
- package/dist/docs/data-sources/aws_vpc_site.md +85 -2
- package/dist/docs/data-sources/azure_vnet_site.md +85 -2
- package/dist/docs/data-sources/bgp.md +85 -2
- package/dist/docs/data-sources/bgp_asn_set.md +85 -2
- package/dist/docs/data-sources/bgp_routing_policy.md +85 -2
- package/dist/docs/data-sources/bigip_irule.md +85 -2
- package/dist/docs/data-sources/bot_defense_app_infrastructure.md +85 -2
- package/dist/docs/data-sources/cdn_cache_rule.md +85 -2
- package/dist/docs/data-sources/cdn_loadbalancer.md +85 -2
- package/dist/docs/data-sources/certificate.md +85 -2
- package/dist/docs/data-sources/certificate_chain.md +85 -2
- package/dist/docs/data-sources/child_tenant.md +85 -2
- package/dist/docs/data-sources/child_tenant_manager.md +85 -2
- package/dist/docs/data-sources/cloud_connect.md +85 -2
- package/dist/docs/data-sources/cloud_credentials.md +85 -2
- package/dist/docs/data-sources/cloud_elastic_ip.md +85 -2
- package/dist/docs/data-sources/cloud_link.md +85 -2
- package/dist/docs/data-sources/cluster.md +85 -2
- package/dist/docs/data-sources/cminstance.md +85 -2
- package/dist/docs/data-sources/code_base_integration.md +85 -2
- package/dist/docs/data-sources/contact.md +85 -2
- package/dist/docs/data-sources/container_registry.md +85 -2
- package/dist/docs/data-sources/crl.md +85 -2
- package/dist/docs/data-sources/customer_support.md +85 -2
- package/dist/docs/data-sources/data_group.md +85 -2
- package/dist/docs/data-sources/data_type.md +85 -2
- package/dist/docs/data-sources/dc_cluster_group.md +85 -2
- package/dist/docs/data-sources/discovery.md +85 -2
- package/dist/docs/data-sources/dns_compliance_checks.md +85 -2
- package/dist/docs/data-sources/dns_domain.md +85 -2
- package/dist/docs/data-sources/dns_lb_health_check.md +85 -2
- package/dist/docs/data-sources/dns_lb_pool.md +85 -2
- package/dist/docs/data-sources/dns_load_balancer.md +85 -2
- package/dist/docs/data-sources/dns_zone.md +85 -2
- package/dist/docs/data-sources/endpoint.md +85 -2
- package/dist/docs/data-sources/enhanced_firewall_policy.md +85 -2
- package/dist/docs/data-sources/external_connector.md +85 -2
- package/dist/docs/data-sources/fast_acl.md +85 -2
- package/dist/docs/data-sources/fast_acl_rule.md +85 -2
- package/dist/docs/data-sources/filter_set.md +85 -2
- package/dist/docs/data-sources/fleet.md +85 -2
- package/dist/docs/data-sources/forward_proxy_policy.md +85 -2
- package/dist/docs/data-sources/forwarding_class.md +85 -2
- package/dist/docs/data-sources/gcp_vpc_site.md +85 -2
- package/dist/docs/data-sources/geo_location_set.md +85 -2
- package/dist/docs/data-sources/global_log_receiver.md +85 -2
- package/dist/docs/data-sources/healthcheck.md +85 -2
- package/dist/docs/data-sources/http_loadbalancer.md +85 -2
- package/dist/docs/data-sources/ike1.md +85 -2
- package/dist/docs/data-sources/ike2.md +85 -2
- package/dist/docs/data-sources/ike_phase1_profile.md +85 -2
- package/dist/docs/data-sources/ike_phase2_profile.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +85 -2
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +85 -2
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +85 -2
- package/dist/docs/data-sources/infraprotect_tunnel.md +85 -2
- package/dist/docs/data-sources/ip_prefix_set.md +85 -2
- package/dist/docs/data-sources/irule.md +85 -2
- package/dist/docs/data-sources/k8s_cluster.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_admission.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_policy.md +85 -2
- package/dist/docs/data-sources/log_receiver.md +85 -2
- package/dist/docs/data-sources/malicious_user_mitigation.md +85 -2
- package/dist/docs/data-sources/managed_tenant.md +85 -2
- package/dist/docs/data-sources/namespace.md +85 -2
- package/dist/docs/data-sources/nat_policy.md +85 -2
- package/dist/docs/data-sources/network_connector.md +85 -2
- package/dist/docs/data-sources/network_firewall.md +85 -2
- package/dist/docs/data-sources/network_interface.md +85 -2
- package/dist/docs/data-sources/network_policy.md +85 -2
- package/dist/docs/data-sources/network_policy_rule.md +85 -2
- package/dist/docs/data-sources/network_policy_view.md +85 -2
- package/dist/docs/data-sources/nfv_service.md +85 -2
- package/dist/docs/data-sources/oidc_provider.md +85 -2
- package/dist/docs/data-sources/origin_pool.md +85 -2
- package/dist/docs/data-sources/policer.md +85 -2
- package/dist/docs/data-sources/policy_based_routing.md +85 -2
- package/dist/docs/data-sources/protocol_inspection.md +85 -2
- package/dist/docs/data-sources/protocol_policer.md +85 -2
- package/dist/docs/data-sources/proxy.md +85 -2
- package/dist/docs/data-sources/quota.md +85 -2
- package/dist/docs/data-sources/rate_limiter.md +85 -2
- package/dist/docs/data-sources/rate_limiter_policy.md +85 -2
- package/dist/docs/data-sources/registration.md +85 -2
- package/dist/docs/data-sources/report_config.md +85 -2
- package/dist/docs/data-sources/role.md +85 -2
- package/dist/docs/data-sources/route.md +85 -2
- package/dist/docs/data-sources/secret_management_access.md +85 -2
- package/dist/docs/data-sources/secret_policy.md +85 -2
- package/dist/docs/data-sources/secret_policy_rule.md +85 -2
- package/dist/docs/data-sources/securemesh_site.md +85 -2
- package/dist/docs/data-sources/securemesh_site_v2.md +85 -2
- package/dist/docs/data-sources/segment.md +85 -2
- package/dist/docs/data-sources/sensitive_data_policy.md +85 -2
- package/dist/docs/data-sources/service_policy.md +85 -2
- package/dist/docs/data-sources/service_policy_rule.md +85 -2
- package/dist/docs/data-sources/site_mesh_group.md +85 -2
- package/dist/docs/data-sources/srv6_network_slice.md +85 -2
- package/dist/docs/data-sources/subnet.md +85 -2
- package/dist/docs/data-sources/tcp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/tenant_configuration.md +85 -2
- package/dist/docs/data-sources/tenant_profile.md +85 -2
- package/dist/docs/data-sources/ticket_tracking_system.md +85 -2
- package/dist/docs/data-sources/token.md +85 -2
- package/dist/docs/data-sources/tpm_api_key.md +85 -2
- package/dist/docs/data-sources/tpm_category.md +85 -2
- package/dist/docs/data-sources/tpm_manager.md +85 -2
- package/dist/docs/data-sources/trusted_ca_list.md +85 -2
- package/dist/docs/data-sources/tunnel.md +85 -2
- package/dist/docs/data-sources/udp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/usb_policy.md +85 -2
- package/dist/docs/data-sources/user_identification.md +85 -2
- package/dist/docs/data-sources/virtual_host.md +85 -2
- package/dist/docs/data-sources/virtual_k8s.md +85 -2
- package/dist/docs/data-sources/virtual_network.md +85 -2
- package/dist/docs/data-sources/virtual_site.md +85 -2
- package/dist/docs/data-sources/voltshare_admin_policy.md +85 -2
- package/dist/docs/data-sources/voltstack_site.md +85 -2
- package/dist/docs/data-sources/waf_exclusion_policy.md +85 -2
- package/dist/docs/data-sources/workload.md +85 -2
- package/dist/docs/data-sources/workload_flavor.md +85 -2
- package/dist/docs/guides/advanced-http-loadbalancer.md +569 -0
- package/dist/docs/resources/addon_subscription.md +87 -10
- package/dist/docs/resources/address_allocator.md +86 -3
- package/dist/docs/resources/advertise_policy.md +112 -57
- package/dist/docs/resources/alert_policy.md +91 -8
- package/dist/docs/resources/alert_receiver.md +94 -55
- package/dist/docs/resources/allowed_tenant.md +87 -10
- package/dist/docs/resources/api_crawler.md +86 -3
- package/dist/docs/resources/api_credential.md +86 -3
- package/dist/docs/resources/api_definition.md +89 -6
- package/dist/docs/resources/api_discovery.md +86 -3
- package/dist/docs/resources/api_testing.md +95 -52
- package/dist/docs/resources/apm.md +156 -519
- package/dist/docs/resources/app_api_group.md +90 -25
- package/dist/docs/resources/app_firewall.md +87 -6
- package/dist/docs/resources/app_setting.md +97 -66
- package/dist/docs/resources/app_type.md +86 -3
- package/dist/docs/resources/authentication.md +90 -27
- package/dist/docs/resources/aws_tgw_site.md +125 -222
- package/dist/docs/resources/aws_vpc_site.md +149 -352
- package/dist/docs/resources/azure_vnet_site.md +233 -860
- package/dist/docs/resources/bgp.md +103 -32
- package/dist/docs/resources/bgp_asn_set.md +86 -3
- package/dist/docs/resources/bgp_routing_policy.md +86 -3
- package/dist/docs/resources/bigip_irule.md +86 -3
- package/dist/docs/resources/bot_defense_app_infrastructure.md +86 -3
- package/dist/docs/resources/cdn_cache_rule.md +97 -120
- package/dist/docs/resources/cdn_loadbalancer.md +325 -1620
- package/dist/docs/resources/certificate.md +87 -10
- package/dist/docs/resources/certificate_chain.md +86 -3
- package/dist/docs/resources/child_tenant.md +88 -17
- package/dist/docs/resources/child_tenant_manager.md +88 -17
- package/dist/docs/resources/cloud_connect.md +98 -63
- package/dist/docs/resources/cloud_credentials.md +92 -39
- package/dist/docs/resources/cloud_elastic_ip.md +91 -8
- package/dist/docs/resources/cloud_link.md +90 -29
- package/dist/docs/resources/cluster.md +109 -66
- package/dist/docs/resources/cminstance.md +86 -3
- package/dist/docs/resources/code_base_integration.md +100 -87
- package/dist/docs/resources/contact.md +86 -3
- package/dist/docs/resources/container_registry.md +86 -3
- package/dist/docs/resources/crl.md +86 -3
- package/dist/docs/resources/customer_support.md +91 -8
- package/dist/docs/resources/data_group.md +86 -3
- package/dist/docs/resources/data_type.md +88 -9
- package/dist/docs/resources/dc_cluster_group.md +86 -3
- package/dist/docs/resources/discovery.md +115 -104
- package/dist/docs/resources/dns_compliance_checks.md +86 -3
- package/dist/docs/resources/dns_domain.md +86 -3
- package/dist/docs/resources/dns_lb_health_check.md +86 -3
- package/dist/docs/resources/dns_lb_pool.md +87 -10
- package/dist/docs/resources/dns_load_balancer.md +95 -40
- package/dist/docs/resources/dns_zone.md +86 -3
- package/dist/docs/resources/endpoint.md +101 -18
- package/dist/docs/resources/enhanced_firewall_policy.md +89 -32
- package/dist/docs/resources/external_connector.md +94 -29
- package/dist/docs/resources/fast_acl.md +100 -101
- package/dist/docs/resources/fast_acl_rule.md +101 -18
- package/dist/docs/resources/filter_set.md +86 -3
- package/dist/docs/resources/fleet.md +170 -541
- package/dist/docs/resources/forward_proxy_policy.md +90 -31
- package/dist/docs/resources/forwarding_class.md +87 -10
- package/dist/docs/resources/gcp_vpc_site.md +141 -328
- package/dist/docs/resources/geo_location_set.md +86 -3
- package/dist/docs/resources/global_log_receiver.md +116 -181
- package/dist/docs/resources/healthcheck.md +86 -3
- package/dist/docs/resources/http_loadbalancer.md +523 -2778
- package/dist/docs/resources/ike1.md +86 -3
- package/dist/docs/resources/ike2.md +86 -3
- package/dist/docs/resources/ike_phase1_profile.md +86 -3
- package/dist/docs/resources/ike_phase2_profile.md +86 -3
- package/dist/docs/resources/infraprotect_asn.md +86 -3
- package/dist/docs/resources/infraprotect_asn_prefix.md +87 -10
- package/dist/docs/resources/infraprotect_deny_list_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +86 -3
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +86 -3
- package/dist/docs/resources/infraprotect_tunnel.md +90 -29
- package/dist/docs/resources/ip_prefix_set.md +86 -3
- package/dist/docs/resources/irule.md +86 -3
- package/dist/docs/resources/k8s_cluster.md +93 -58
- package/dist/docs/resources/k8s_cluster_role.md +87 -8
- package/dist/docs/resources/k8s_cluster_role_binding.md +87 -10
- package/dist/docs/resources/k8s_pod_security_admission.md +86 -3
- package/dist/docs/resources/k8s_pod_security_policy.md +87 -8
- package/dist/docs/resources/log_receiver.md +88 -15
- package/dist/docs/resources/malicious_user_mitigation.md +86 -3
- package/dist/docs/resources/managed_tenant.md +89 -12
- package/dist/docs/resources/namespace.md +86 -3
- package/dist/docs/resources/nat_policy.md +126 -43
- package/dist/docs/resources/network_connector.md +94 -51
- package/dist/docs/resources/network_firewall.md +90 -31
- package/dist/docs/resources/network_interface.md +93 -46
- package/dist/docs/resources/network_policy.md +96 -13
- package/dist/docs/resources/network_policy_rule.md +91 -8
- package/dist/docs/resources/network_policy_view.md +96 -13
- package/dist/docs/resources/nfv_service.md +153 -446
- package/dist/docs/resources/oidc_provider.md +86 -3
- package/dist/docs/resources/origin_pool.md +108 -145
- package/dist/docs/resources/policer.md +86 -3
- package/dist/docs/resources/policy_based_routing.md +100 -89
- package/dist/docs/resources/protocol_inspection.md +87 -10
- package/dist/docs/resources/protocol_policer.md +91 -8
- package/dist/docs/resources/proxy.md +154 -571
- package/dist/docs/resources/quota.md +86 -3
- package/dist/docs/resources/rate_limiter.md +91 -8
- package/dist/docs/resources/rate_limiter_policy.md +100 -23
- package/dist/docs/resources/registration.md +86 -3
- package/dist/docs/resources/report_config.md +87 -10
- package/dist/docs/resources/role.md +86 -3
- package/dist/docs/resources/route.md +113 -82
- package/dist/docs/resources/secret_management_access.md +127 -156
- package/dist/docs/resources/secret_policy.md +87 -4
- package/dist/docs/resources/secret_policy_rule.md +86 -3
- package/dist/docs/resources/securemesh_site.md +137 -380
- package/dist/docs/resources/securemesh_site_v2.md +289 -1204
- package/dist/docs/resources/segment.md +86 -3
- package/dist/docs/resources/sensitive_data_policy.md +87 -10
- package/dist/docs/resources/service_policy.md +115 -122
- package/dist/docs/resources/service_policy_rule.md +110 -59
- package/dist/docs/resources/site_mesh_group.md +92 -15
- package/dist/docs/resources/srv6_network_slice.md +86 -3
- package/dist/docs/resources/subnet.md +89 -20
- package/dist/docs/resources/tcp_loadbalancer.md +114 -185
- package/dist/docs/resources/tenant_configuration.md +86 -3
- package/dist/docs/resources/tenant_profile.md +87 -10
- package/dist/docs/resources/ticket_tracking_system.md +86 -3
- package/dist/docs/resources/token.md +86 -3
- package/dist/docs/resources/tpm_api_key.md +91 -8
- package/dist/docs/resources/tpm_category.md +91 -8
- package/dist/docs/resources/tpm_manager.md +86 -3
- package/dist/docs/resources/trusted_ca_list.md +86 -3
- package/dist/docs/resources/tunnel.md +91 -8
- package/dist/docs/resources/udp_loadbalancer.md +97 -80
- package/dist/docs/resources/usb_policy.md +86 -3
- package/dist/docs/resources/user_identification.md +86 -3
- package/dist/docs/resources/virtual_host.md +152 -177
- package/dist/docs/resources/virtual_k8s.md +92 -15
- package/dist/docs/resources/virtual_network.md +91 -8
- package/dist/docs/resources/virtual_site.md +86 -3
- package/dist/docs/resources/voltshare_admin_policy.md +86 -11
- package/dist/docs/resources/voltstack_site.md +380 -1365
- package/dist/docs/resources/waf_exclusion_policy.md +91 -28
- package/dist/docs/resources/workload.md +1189 -4148
- package/dist/docs/resources/workload_flavor.md +86 -3
- package/package.json +1 -1
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_fast_acl Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages fast_acl object, fast_acl object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to fast_acl_rule in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_fast_acl (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages `fast_acl` object, `fast_acl` object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to `fast_acl_rule` in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Fast ACL API docs](https://docs.cloud.f5.com/docs-v2/api/fast-acl) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Fast ACL Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages `fast_acl` object, `fast_acl` object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to `fast_acl_rule` in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Fast ACL configuration
|
|
21
21
|
resource "f5xc_fast_acl" "example" {
|
|
@@ -84,13 +84,7 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
84
84
|
|
|
85
85
|
#### Protocol Policer
|
|
86
86
|
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
<a id="protocol-policer-name"></a>• [`name`](#protocol-policer-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
90
|
-
|
|
91
|
-
<a id="protocol-policer-namespace"></a>• [`namespace`](#protocol-policer-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
92
|
-
|
|
93
|
-
<a id="protocol-policer-tenant"></a>• [`tenant`](#protocol-policer-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
87
|
+
<a id="objref-1f70c8"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
94
88
|
|
|
95
89
|
#### RE ACL
|
|
96
90
|
|
|
@@ -130,63 +124,27 @@ An [`action`](#re-acl-fast-acl-rules-action) block (within [`re_acl.fast_acl_rul
|
|
|
130
124
|
|
|
131
125
|
#### RE ACL Fast ACL Rules Action Policer Action
|
|
132
126
|
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
<a id="ref-d8c8e7"></a>• [`ref`](#ref-d8c8e7) - Optional Block<br>Reference. A policer direct reference<br>See [Ref](#ref-d8c8e7) below.
|
|
127
|
+
<a id="deep-64211b"></a>Deeply nested **Action** block collapsed for readability.
|
|
136
128
|
|
|
137
129
|
#### RE ACL Fast ACL Rules Action Policer Action Ref
|
|
138
130
|
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
<a id="kind-4b43e9"></a>• [`kind`](#kind-4b43e9) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
142
|
-
|
|
143
|
-
<a id="name-d8f2b2"></a>• [`name`](#name-d8f2b2) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
144
|
-
|
|
145
|
-
<a id="namespace-415e68"></a>• [`namespace`](#namespace-415e68) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
146
|
-
|
|
147
|
-
<a id="tenant-9381b2"></a>• [`tenant`](#tenant-9381b2) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
148
|
-
|
|
149
|
-
<a id="uid-932414"></a>• [`uid`](#uid-932414) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
131
|
+
<a id="deep-f6253f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
150
132
|
|
|
151
133
|
#### RE ACL Fast ACL Rules Action Protocol Policer Action
|
|
152
134
|
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
<a id="ref-cdffd0"></a>• [`ref`](#ref-cdffd0) - Optional Block<br>Protocol policer Reference. Reference to protocol policer object<br>See [Ref](#ref-cdffd0) below.
|
|
135
|
+
<a id="deep-eb61a3"></a>Deeply nested **Action** block collapsed for readability.
|
|
156
136
|
|
|
157
137
|
#### RE ACL Fast ACL Rules Action Protocol Policer Action Ref
|
|
158
138
|
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
<a id="kind-7e34dc"></a>• [`kind`](#kind-7e34dc) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
162
|
-
|
|
163
|
-
<a id="name-f104c6"></a>• [`name`](#name-f104c6) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
164
|
-
|
|
165
|
-
<a id="namespace-d67b0b"></a>• [`namespace`](#namespace-d67b0b) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
166
|
-
|
|
167
|
-
<a id="tenant-194246"></a>• [`tenant`](#tenant-194246) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
168
|
-
|
|
169
|
-
<a id="uid-f50fa2"></a>• [`uid`](#uid-f50fa2) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
139
|
+
<a id="deep-8ac143"></a>Deeply nested **Ref** block collapsed for readability.
|
|
170
140
|
|
|
171
141
|
#### RE ACL Fast ACL Rules IP Prefix Set
|
|
172
142
|
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
<a id="re-acl-fast-acl-rules-ip-prefix-set-ref"></a>• [`ref`](#re-acl-fast-acl-rules-ip-prefix-set-ref) - Optional Block<br>Reference. A list of references to ip_prefix_set objects<br>See [Ref](#re-acl-fast-acl-rules-ip-prefix-set-ref) below.
|
|
143
|
+
<a id="deep-5eb942"></a>Deeply nested **Set** block collapsed for readability.
|
|
176
144
|
|
|
177
145
|
#### RE ACL Fast ACL Rules IP Prefix Set Ref
|
|
178
146
|
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
<a id="kind-05b7d3"></a>• [`kind`](#kind-05b7d3) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
182
|
-
|
|
183
|
-
<a id="name-694068"></a>• [`name`](#name-694068) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
184
|
-
|
|
185
|
-
<a id="namespace-74785c"></a>• [`namespace`](#namespace-74785c) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
186
|
-
|
|
187
|
-
<a id="tenant-361760"></a>• [`tenant`](#tenant-361760) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
188
|
-
|
|
189
|
-
<a id="uid-49617d"></a>• [`uid`](#uid-49617d) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
147
|
+
<a id="deep-8005c0"></a>Deeply nested **Ref** block collapsed for readability.
|
|
190
148
|
|
|
191
149
|
#### RE ACL Fast ACL Rules Metadata
|
|
192
150
|
|
|
@@ -222,13 +180,7 @@ A [`selected_tenant_vip`](#re-acl-selected-tenant-vip) block (within [`re_acl`](
|
|
|
222
180
|
|
|
223
181
|
#### RE ACL Selected Tenant VIP Public IP Refs
|
|
224
182
|
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
<a id="name-b5b290"></a>• [`name`](#name-b5b290) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
228
|
-
|
|
229
|
-
<a id="namespace-8f0128"></a>• [`namespace`](#namespace-8f0128) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
230
|
-
|
|
231
|
-
<a id="tenant-e04a6a"></a>• [`tenant`](#tenant-e04a6a) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
183
|
+
<a id="deep-2edc68"></a>Deeply nested **Refs** block collapsed for readability.
|
|
232
184
|
|
|
233
185
|
#### Site ACL
|
|
234
186
|
|
|
@@ -272,63 +224,27 @@ An [`action`](#site-acl-fast-acl-rules-action) block (within [`site_acl.fast_acl
|
|
|
272
224
|
|
|
273
225
|
#### Site ACL Fast ACL Rules Action Policer Action
|
|
274
226
|
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
<a id="ref-5b6a78"></a>• [`ref`](#ref-5b6a78) - Optional Block<br>Reference. A policer direct reference<br>See [Ref](#ref-5b6a78) below.
|
|
227
|
+
<a id="deep-a4b94e"></a>Deeply nested **Action** block collapsed for readability.
|
|
278
228
|
|
|
279
229
|
#### Site ACL Fast ACL Rules Action Policer Action Ref
|
|
280
230
|
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
<a id="kind-13e0fe"></a>• [`kind`](#kind-13e0fe) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
284
|
-
|
|
285
|
-
<a id="name-33192d"></a>• [`name`](#name-33192d) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
286
|
-
|
|
287
|
-
<a id="namespace-25dff1"></a>• [`namespace`](#namespace-25dff1) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
288
|
-
|
|
289
|
-
<a id="tenant-fdf4db"></a>• [`tenant`](#tenant-fdf4db) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
290
|
-
|
|
291
|
-
<a id="uid-6bc021"></a>• [`uid`](#uid-6bc021) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
231
|
+
<a id="deep-e41b5f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
292
232
|
|
|
293
233
|
#### Site ACL Fast ACL Rules Action Protocol Policer Action
|
|
294
234
|
|
|
295
|
-
|
|
296
|
-
|
|
297
|
-
<a id="ref-314bc6"></a>• [`ref`](#ref-314bc6) - Optional Block<br>Protocol policer Reference. Reference to protocol policer object<br>See [Ref](#ref-314bc6) below.
|
|
235
|
+
<a id="deep-a68215"></a>Deeply nested **Action** block collapsed for readability.
|
|
298
236
|
|
|
299
237
|
#### Site ACL Fast ACL Rules Action Protocol Policer Action Ref
|
|
300
238
|
|
|
301
|
-
|
|
302
|
-
|
|
303
|
-
<a id="kind-714795"></a>• [`kind`](#kind-714795) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
304
|
-
|
|
305
|
-
<a id="name-e70af0"></a>• [`name`](#name-e70af0) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
306
|
-
|
|
307
|
-
<a id="namespace-8d624d"></a>• [`namespace`](#namespace-8d624d) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
308
|
-
|
|
309
|
-
<a id="tenant-ea9c33"></a>• [`tenant`](#tenant-ea9c33) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
310
|
-
|
|
311
|
-
<a id="uid-3e18f0"></a>• [`uid`](#uid-3e18f0) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
239
|
+
<a id="deep-9ef6c0"></a>Deeply nested **Ref** block collapsed for readability.
|
|
312
240
|
|
|
313
241
|
#### Site ACL Fast ACL Rules IP Prefix Set
|
|
314
242
|
|
|
315
|
-
|
|
316
|
-
|
|
317
|
-
<a id="ref-68170b"></a>• [`ref`](#ref-68170b) - Optional Block<br>Reference. A list of references to ip_prefix_set objects<br>See [Ref](#ref-68170b) below.
|
|
243
|
+
<a id="deep-176f71"></a>Deeply nested **Set** block collapsed for readability.
|
|
318
244
|
|
|
319
245
|
#### Site ACL Fast ACL Rules IP Prefix Set Ref
|
|
320
246
|
|
|
321
|
-
|
|
322
|
-
|
|
323
|
-
<a id="kind-ecdd5b"></a>• [`kind`](#kind-ecdd5b) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
324
|
-
|
|
325
|
-
<a id="name-bbef63"></a>• [`name`](#name-bbef63) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
326
|
-
|
|
327
|
-
<a id="namespace-5d2796"></a>• [`namespace`](#namespace-5d2796) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
328
|
-
|
|
329
|
-
<a id="tenant-fe7f3f"></a>• [`tenant`](#tenant-fe7f3f) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
330
|
-
|
|
331
|
-
<a id="uid-0e5bde"></a>• [`uid`](#uid-0e5bde) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
247
|
+
<a id="deep-be6e78"></a>Deeply nested **Ref** block collapsed for readability.
|
|
332
248
|
|
|
333
249
|
#### Site ACL Fast ACL Rules Metadata
|
|
334
250
|
|
|
@@ -366,6 +282,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
366
282
|
|
|
367
283
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
368
284
|
|
|
285
|
+
---
|
|
286
|
+
|
|
287
|
+
## Common Types
|
|
288
|
+
|
|
289
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
290
|
+
|
|
291
|
+
### Object Reference {#common-object-reference}
|
|
292
|
+
|
|
293
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
294
|
+
|
|
295
|
+
| Field | Type | Description |
|
|
296
|
+
| ----- | ---- | ----------- |
|
|
297
|
+
| `name` | String | Name of the referenced object |
|
|
298
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
299
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
300
|
+
|
|
301
|
+
### Transformers {#common-transformers}
|
|
302
|
+
|
|
303
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
304
|
+
|
|
305
|
+
| Value | Description |
|
|
306
|
+
| ----- | ----------- |
|
|
307
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
308
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
309
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
310
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
311
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
312
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
313
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
314
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
315
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
316
|
+
|
|
317
|
+
### HTTP Methods {#common-http-methods}
|
|
318
|
+
|
|
319
|
+
HTTP methods used for request matching.
|
|
320
|
+
|
|
321
|
+
| Value | Description |
|
|
322
|
+
| ----- | ----------- |
|
|
323
|
+
| `ANY` | Match any HTTP method |
|
|
324
|
+
| `GET` | HTTP GET request |
|
|
325
|
+
| `HEAD` | HTTP HEAD request |
|
|
326
|
+
| `POST` | HTTP POST request |
|
|
327
|
+
| `PUT` | HTTP PUT request |
|
|
328
|
+
| `DELETE` | HTTP DELETE request |
|
|
329
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
330
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
331
|
+
| `TRACE` | HTTP TRACE request |
|
|
332
|
+
| `PATCH` | HTTP PATCH request |
|
|
333
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
334
|
+
|
|
335
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
336
|
+
|
|
337
|
+
TLS fingerprint categories for malicious client detection.
|
|
338
|
+
|
|
339
|
+
| Value | Description |
|
|
340
|
+
| ----- | ----------- |
|
|
341
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
342
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
343
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
344
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
345
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
346
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
347
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
348
|
+
|
|
349
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
350
|
+
|
|
351
|
+
IP address threat categories for security filtering.
|
|
352
|
+
|
|
353
|
+
| Value | Description |
|
|
354
|
+
| ----- | ----------- |
|
|
355
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
356
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
357
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
358
|
+
| `BOTNETS` | Known botnet IPs |
|
|
359
|
+
| `SCANNERS` | Network scanner IPs |
|
|
360
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
361
|
+
| `PHISHING` | Phishing-related IPs |
|
|
362
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
363
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
364
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
365
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
366
|
+
| `NETWORK` | Known bad network ranges |
|
|
367
|
+
|
|
369
368
|
## Import
|
|
370
369
|
|
|
371
370
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_fast_acl_rule Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages new Fast ACL rule, fast_acl_rule has specification to match source IP, source port and action to apply in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_fast_acl_rule (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages new Fast ACL rule, `fast_acl_rule` has specification to match source IP, source port and action to apply in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Fast ACL Rule API docs](https://docs.cloud.f5.com/docs-v2/api/fast-acl-rule) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Fast ACL Rule Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages new Fast ACL rule, `fast_acl_rule` has specification to match source IP, source port and action to apply in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Fast ACL Rule configuration
|
|
21
21
|
resource "f5xc_fast_acl_rule" "example" {
|
|
@@ -104,15 +104,15 @@ A [`policer_action`](#action-policer-action) block (within [`action`](#action))
|
|
|
104
104
|
|
|
105
105
|
A [`ref`](#action-policer-action-ref) block (within [`action.policer_action`](#action-policer-action)) supports the following:
|
|
106
106
|
|
|
107
|
-
<a id="action-policer-action-ref-kind"></a>• [`kind`](#action-policer-action-ref-kind) - Optional String<br>
|
|
107
|
+
<a id="action-policer-action-ref-kind"></a>• [`kind`](#action-policer-action-ref-kind) - Optional String<br>Object reference kind
|
|
108
108
|
|
|
109
|
-
<a id="action-policer-action-ref-name"></a>• [`name`](#action-policer-action-ref-name) - Optional String<br>
|
|
109
|
+
<a id="action-policer-action-ref-name"></a>• [`name`](#action-policer-action-ref-name) - Optional String<br>Object reference name
|
|
110
110
|
|
|
111
|
-
<a id="action-policer-action-ref-namespace"></a>• [`namespace`](#action-policer-action-ref-namespace) - Optional String<br>
|
|
111
|
+
<a id="action-policer-action-ref-namespace"></a>• [`namespace`](#action-policer-action-ref-namespace) - Optional String<br>Object reference namespace
|
|
112
112
|
|
|
113
|
-
<a id="action-policer-action-ref-tenant"></a>• [`tenant`](#action-policer-action-ref-tenant) - Optional String<br>
|
|
113
|
+
<a id="action-policer-action-ref-tenant"></a>• [`tenant`](#action-policer-action-ref-tenant) - Optional String<br>Object reference tenant
|
|
114
114
|
|
|
115
|
-
<a id="action-policer-action-ref-uid"></a>• [`uid`](#action-policer-action-ref-uid) - Optional String<br>
|
|
115
|
+
<a id="action-policer-action-ref-uid"></a>• [`uid`](#action-policer-action-ref-uid) - Optional String<br>Object reference UID
|
|
116
116
|
|
|
117
117
|
#### Action Protocol Policer Action
|
|
118
118
|
|
|
@@ -124,15 +124,15 @@ A [`protocol_policer_action`](#action-protocol-policer-action) block (within [`a
|
|
|
124
124
|
|
|
125
125
|
A [`ref`](#action-protocol-policer-action-ref) block (within [`action.protocol_policer_action`](#action-protocol-policer-action)) supports the following:
|
|
126
126
|
|
|
127
|
-
<a id="action-protocol-policer-action-ref-kind"></a>• [`kind`](#action-protocol-policer-action-ref-kind) - Optional String<br>
|
|
127
|
+
<a id="action-protocol-policer-action-ref-kind"></a>• [`kind`](#action-protocol-policer-action-ref-kind) - Optional String<br>Object reference kind
|
|
128
128
|
|
|
129
|
-
<a id="action-protocol-policer-action-ref-name"></a>• [`name`](#action-protocol-policer-action-ref-name) - Optional String<br>
|
|
129
|
+
<a id="action-protocol-policer-action-ref-name"></a>• [`name`](#action-protocol-policer-action-ref-name) - Optional String<br>Object reference name
|
|
130
130
|
|
|
131
|
-
<a id="namespace-b31006"></a>• [`namespace`](#namespace-b31006) - Optional String<br>
|
|
131
|
+
<a id="namespace-b31006"></a>• [`namespace`](#namespace-b31006) - Optional String<br>Object reference namespace
|
|
132
132
|
|
|
133
|
-
<a id="tenant-2622a3"></a>• [`tenant`](#tenant-2622a3) - Optional String<br>
|
|
133
|
+
<a id="tenant-2622a3"></a>• [`tenant`](#tenant-2622a3) - Optional String<br>Object reference tenant
|
|
134
134
|
|
|
135
|
-
<a id="action-protocol-policer-action-ref-uid"></a>• [`uid`](#action-protocol-policer-action-ref-uid) - Optional String<br>
|
|
135
|
+
<a id="action-protocol-policer-action-ref-uid"></a>• [`uid`](#action-protocol-policer-action-ref-uid) - Optional String<br>Object reference UID
|
|
136
136
|
|
|
137
137
|
#### IP Prefix Set
|
|
138
138
|
|
|
@@ -144,15 +144,15 @@ An [`ip_prefix_set`](#ip-prefix-set) block supports the following:
|
|
|
144
144
|
|
|
145
145
|
A [`ref`](#ip-prefix-set-ref) block (within [`ip_prefix_set`](#ip-prefix-set)) supports the following:
|
|
146
146
|
|
|
147
|
-
<a id="ip-prefix-set-ref-kind"></a>• [`kind`](#ip-prefix-set-ref-kind) - Optional String<br>
|
|
147
|
+
<a id="ip-prefix-set-ref-kind"></a>• [`kind`](#ip-prefix-set-ref-kind) - Optional String<br>Object reference kind
|
|
148
148
|
|
|
149
|
-
<a id="ip-prefix-set-ref-name"></a>• [`name`](#ip-prefix-set-ref-name) - Optional String<br>
|
|
149
|
+
<a id="ip-prefix-set-ref-name"></a>• [`name`](#ip-prefix-set-ref-name) - Optional String<br>Object reference name
|
|
150
150
|
|
|
151
|
-
<a id="ip-prefix-set-ref-namespace"></a>• [`namespace`](#ip-prefix-set-ref-namespace) - Optional String<br>
|
|
151
|
+
<a id="ip-prefix-set-ref-namespace"></a>• [`namespace`](#ip-prefix-set-ref-namespace) - Optional String<br>Object reference namespace
|
|
152
152
|
|
|
153
|
-
<a id="ip-prefix-set-ref-tenant"></a>• [`tenant`](#ip-prefix-set-ref-tenant) - Optional String<br>
|
|
153
|
+
<a id="ip-prefix-set-ref-tenant"></a>• [`tenant`](#ip-prefix-set-ref-tenant) - Optional String<br>Object reference tenant
|
|
154
154
|
|
|
155
|
-
<a id="ip-prefix-set-ref-uid"></a>• [`uid`](#ip-prefix-set-ref-uid) - Optional String<br>
|
|
155
|
+
<a id="ip-prefix-set-ref-uid"></a>• [`uid`](#ip-prefix-set-ref-uid) - Optional String<br>Object reference UID
|
|
156
156
|
|
|
157
157
|
#### Port
|
|
158
158
|
|
|
@@ -182,6 +182,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
182
182
|
|
|
183
183
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
184
184
|
|
|
185
|
+
---
|
|
186
|
+
|
|
187
|
+
## Common Types
|
|
188
|
+
|
|
189
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
190
|
+
|
|
191
|
+
### Object Reference {#common-object-reference}
|
|
192
|
+
|
|
193
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
194
|
+
|
|
195
|
+
| Field | Type | Description |
|
|
196
|
+
| ----- | ---- | ----------- |
|
|
197
|
+
| `name` | String | Name of the referenced object |
|
|
198
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
199
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
200
|
+
|
|
201
|
+
### Transformers {#common-transformers}
|
|
202
|
+
|
|
203
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
204
|
+
|
|
205
|
+
| Value | Description |
|
|
206
|
+
| ----- | ----------- |
|
|
207
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
208
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
209
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
210
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
211
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
212
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
213
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
214
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
215
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
216
|
+
|
|
217
|
+
### HTTP Methods {#common-http-methods}
|
|
218
|
+
|
|
219
|
+
HTTP methods used for request matching.
|
|
220
|
+
|
|
221
|
+
| Value | Description |
|
|
222
|
+
| ----- | ----------- |
|
|
223
|
+
| `ANY` | Match any HTTP method |
|
|
224
|
+
| `GET` | HTTP GET request |
|
|
225
|
+
| `HEAD` | HTTP HEAD request |
|
|
226
|
+
| `POST` | HTTP POST request |
|
|
227
|
+
| `PUT` | HTTP PUT request |
|
|
228
|
+
| `DELETE` | HTTP DELETE request |
|
|
229
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
230
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
231
|
+
| `TRACE` | HTTP TRACE request |
|
|
232
|
+
| `PATCH` | HTTP PATCH request |
|
|
233
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
234
|
+
|
|
235
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
236
|
+
|
|
237
|
+
TLS fingerprint categories for malicious client detection.
|
|
238
|
+
|
|
239
|
+
| Value | Description |
|
|
240
|
+
| ----- | ----------- |
|
|
241
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
242
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
243
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
244
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
245
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
246
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
247
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
248
|
+
|
|
249
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
250
|
+
|
|
251
|
+
IP address threat categories for security filtering.
|
|
252
|
+
|
|
253
|
+
| Value | Description |
|
|
254
|
+
| ----- | ----------- |
|
|
255
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
256
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
257
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
258
|
+
| `BOTNETS` | Known botnet IPs |
|
|
259
|
+
| `SCANNERS` | Network scanner IPs |
|
|
260
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
261
|
+
| `PHISHING` | Phishing-related IPs |
|
|
262
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
263
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
264
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
265
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
266
|
+
| `NETWORK` | Known bad network ranges |
|
|
267
|
+
|
|
185
268
|
## Import
|
|
186
269
|
|
|
187
270
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_filter_set Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Applications"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages a Filter Set resource in F5 Distributed Cloud for create configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_filter_set (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages a Filter Set resource in F5 Distributed Cloud for create configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Filter Set API docs](https://docs.cloud.f5.com/docs-v2/api/filter-set) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Filter Set Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages a Filter Set resource in F5 Distributed Cloud for create configuration.
|
|
19
19
|
|
|
20
20
|
# Basic Filter Set configuration
|
|
21
21
|
resource "f5xc_filter_set" "example" {
|
|
@@ -132,6 +132,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
132
132
|
|
|
133
133
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
134
134
|
|
|
135
|
+
---
|
|
136
|
+
|
|
137
|
+
## Common Types
|
|
138
|
+
|
|
139
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
140
|
+
|
|
141
|
+
### Object Reference {#common-object-reference}
|
|
142
|
+
|
|
143
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
144
|
+
|
|
145
|
+
| Field | Type | Description |
|
|
146
|
+
| ----- | ---- | ----------- |
|
|
147
|
+
| `name` | String | Name of the referenced object |
|
|
148
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
149
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
150
|
+
|
|
151
|
+
### Transformers {#common-transformers}
|
|
152
|
+
|
|
153
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
154
|
+
|
|
155
|
+
| Value | Description |
|
|
156
|
+
| ----- | ----------- |
|
|
157
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
158
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
159
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
160
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
161
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
162
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
163
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
164
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
165
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
166
|
+
|
|
167
|
+
### HTTP Methods {#common-http-methods}
|
|
168
|
+
|
|
169
|
+
HTTP methods used for request matching.
|
|
170
|
+
|
|
171
|
+
| Value | Description |
|
|
172
|
+
| ----- | ----------- |
|
|
173
|
+
| `ANY` | Match any HTTP method |
|
|
174
|
+
| `GET` | HTTP GET request |
|
|
175
|
+
| `HEAD` | HTTP HEAD request |
|
|
176
|
+
| `POST` | HTTP POST request |
|
|
177
|
+
| `PUT` | HTTP PUT request |
|
|
178
|
+
| `DELETE` | HTTP DELETE request |
|
|
179
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
180
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
181
|
+
| `TRACE` | HTTP TRACE request |
|
|
182
|
+
| `PATCH` | HTTP PATCH request |
|
|
183
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
184
|
+
|
|
185
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
186
|
+
|
|
187
|
+
TLS fingerprint categories for malicious client detection.
|
|
188
|
+
|
|
189
|
+
| Value | Description |
|
|
190
|
+
| ----- | ----------- |
|
|
191
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
192
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
193
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
194
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
195
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
196
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
197
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
198
|
+
|
|
199
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
200
|
+
|
|
201
|
+
IP address threat categories for security filtering.
|
|
202
|
+
|
|
203
|
+
| Value | Description |
|
|
204
|
+
| ----- | ----------- |
|
|
205
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
206
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
207
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
208
|
+
| `BOTNETS` | Known botnet IPs |
|
|
209
|
+
| `SCANNERS` | Network scanner IPs |
|
|
210
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
211
|
+
| `PHISHING` | Phishing-related IPs |
|
|
212
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
213
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
214
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
215
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
216
|
+
| `NETWORK` | Known bad network ranges |
|
|
217
|
+
|
|
135
218
|
## Import
|
|
136
219
|
|
|
137
220
|
Import is supported using the following syntax:
|