@robinmordasiewicz/f5xc-terraform-mcp 2.4.8 → 2.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/addon_subscription.md +85 -2
- package/dist/docs/data-sources/address_allocator.md +85 -2
- package/dist/docs/data-sources/advertise_policy.md +85 -2
- package/dist/docs/data-sources/alert_policy.md +85 -2
- package/dist/docs/data-sources/alert_receiver.md +85 -2
- package/dist/docs/data-sources/allowed_tenant.md +85 -2
- package/dist/docs/data-sources/api_crawler.md +85 -2
- package/dist/docs/data-sources/api_credential.md +85 -2
- package/dist/docs/data-sources/api_definition.md +85 -2
- package/dist/docs/data-sources/api_discovery.md +85 -2
- package/dist/docs/data-sources/api_testing.md +85 -2
- package/dist/docs/data-sources/apm.md +85 -2
- package/dist/docs/data-sources/app_api_group.md +85 -2
- package/dist/docs/data-sources/app_firewall.md +85 -2
- package/dist/docs/data-sources/app_setting.md +85 -2
- package/dist/docs/data-sources/app_type.md +85 -2
- package/dist/docs/data-sources/authentication.md +85 -2
- package/dist/docs/data-sources/aws_tgw_site.md +85 -2
- package/dist/docs/data-sources/aws_vpc_site.md +85 -2
- package/dist/docs/data-sources/azure_vnet_site.md +85 -2
- package/dist/docs/data-sources/bgp.md +85 -2
- package/dist/docs/data-sources/bgp_asn_set.md +85 -2
- package/dist/docs/data-sources/bgp_routing_policy.md +85 -2
- package/dist/docs/data-sources/bigip_irule.md +85 -2
- package/dist/docs/data-sources/bot_defense_app_infrastructure.md +85 -2
- package/dist/docs/data-sources/cdn_cache_rule.md +85 -2
- package/dist/docs/data-sources/cdn_loadbalancer.md +85 -2
- package/dist/docs/data-sources/certificate.md +85 -2
- package/dist/docs/data-sources/certificate_chain.md +85 -2
- package/dist/docs/data-sources/child_tenant.md +85 -2
- package/dist/docs/data-sources/child_tenant_manager.md +85 -2
- package/dist/docs/data-sources/cloud_connect.md +85 -2
- package/dist/docs/data-sources/cloud_credentials.md +85 -2
- package/dist/docs/data-sources/cloud_elastic_ip.md +85 -2
- package/dist/docs/data-sources/cloud_link.md +85 -2
- package/dist/docs/data-sources/cluster.md +85 -2
- package/dist/docs/data-sources/cminstance.md +85 -2
- package/dist/docs/data-sources/code_base_integration.md +85 -2
- package/dist/docs/data-sources/contact.md +85 -2
- package/dist/docs/data-sources/container_registry.md +85 -2
- package/dist/docs/data-sources/crl.md +85 -2
- package/dist/docs/data-sources/customer_support.md +85 -2
- package/dist/docs/data-sources/data_group.md +85 -2
- package/dist/docs/data-sources/data_type.md +85 -2
- package/dist/docs/data-sources/dc_cluster_group.md +85 -2
- package/dist/docs/data-sources/discovery.md +85 -2
- package/dist/docs/data-sources/dns_compliance_checks.md +85 -2
- package/dist/docs/data-sources/dns_domain.md +85 -2
- package/dist/docs/data-sources/dns_lb_health_check.md +85 -2
- package/dist/docs/data-sources/dns_lb_pool.md +85 -2
- package/dist/docs/data-sources/dns_load_balancer.md +85 -2
- package/dist/docs/data-sources/dns_zone.md +85 -2
- package/dist/docs/data-sources/endpoint.md +85 -2
- package/dist/docs/data-sources/enhanced_firewall_policy.md +85 -2
- package/dist/docs/data-sources/external_connector.md +85 -2
- package/dist/docs/data-sources/fast_acl.md +85 -2
- package/dist/docs/data-sources/fast_acl_rule.md +85 -2
- package/dist/docs/data-sources/filter_set.md +85 -2
- package/dist/docs/data-sources/fleet.md +85 -2
- package/dist/docs/data-sources/forward_proxy_policy.md +85 -2
- package/dist/docs/data-sources/forwarding_class.md +85 -2
- package/dist/docs/data-sources/gcp_vpc_site.md +85 -2
- package/dist/docs/data-sources/geo_location_set.md +85 -2
- package/dist/docs/data-sources/global_log_receiver.md +85 -2
- package/dist/docs/data-sources/healthcheck.md +85 -2
- package/dist/docs/data-sources/http_loadbalancer.md +85 -2
- package/dist/docs/data-sources/ike1.md +85 -2
- package/dist/docs/data-sources/ike2.md +85 -2
- package/dist/docs/data-sources/ike_phase1_profile.md +85 -2
- package/dist/docs/data-sources/ike_phase2_profile.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +85 -2
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +85 -2
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +85 -2
- package/dist/docs/data-sources/infraprotect_tunnel.md +85 -2
- package/dist/docs/data-sources/ip_prefix_set.md +85 -2
- package/dist/docs/data-sources/irule.md +85 -2
- package/dist/docs/data-sources/k8s_cluster.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_admission.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_policy.md +85 -2
- package/dist/docs/data-sources/log_receiver.md +85 -2
- package/dist/docs/data-sources/malicious_user_mitigation.md +85 -2
- package/dist/docs/data-sources/managed_tenant.md +85 -2
- package/dist/docs/data-sources/namespace.md +85 -2
- package/dist/docs/data-sources/nat_policy.md +85 -2
- package/dist/docs/data-sources/network_connector.md +85 -2
- package/dist/docs/data-sources/network_firewall.md +85 -2
- package/dist/docs/data-sources/network_interface.md +85 -2
- package/dist/docs/data-sources/network_policy.md +85 -2
- package/dist/docs/data-sources/network_policy_rule.md +85 -2
- package/dist/docs/data-sources/network_policy_view.md +85 -2
- package/dist/docs/data-sources/nfv_service.md +85 -2
- package/dist/docs/data-sources/oidc_provider.md +85 -2
- package/dist/docs/data-sources/origin_pool.md +85 -2
- package/dist/docs/data-sources/policer.md +85 -2
- package/dist/docs/data-sources/policy_based_routing.md +85 -2
- package/dist/docs/data-sources/protocol_inspection.md +85 -2
- package/dist/docs/data-sources/protocol_policer.md +85 -2
- package/dist/docs/data-sources/proxy.md +85 -2
- package/dist/docs/data-sources/quota.md +85 -2
- package/dist/docs/data-sources/rate_limiter.md +85 -2
- package/dist/docs/data-sources/rate_limiter_policy.md +85 -2
- package/dist/docs/data-sources/registration.md +85 -2
- package/dist/docs/data-sources/report_config.md +85 -2
- package/dist/docs/data-sources/role.md +85 -2
- package/dist/docs/data-sources/route.md +85 -2
- package/dist/docs/data-sources/secret_management_access.md +85 -2
- package/dist/docs/data-sources/secret_policy.md +85 -2
- package/dist/docs/data-sources/secret_policy_rule.md +85 -2
- package/dist/docs/data-sources/securemesh_site.md +85 -2
- package/dist/docs/data-sources/securemesh_site_v2.md +85 -2
- package/dist/docs/data-sources/segment.md +85 -2
- package/dist/docs/data-sources/sensitive_data_policy.md +85 -2
- package/dist/docs/data-sources/service_policy.md +85 -2
- package/dist/docs/data-sources/service_policy_rule.md +85 -2
- package/dist/docs/data-sources/site_mesh_group.md +85 -2
- package/dist/docs/data-sources/srv6_network_slice.md +85 -2
- package/dist/docs/data-sources/subnet.md +85 -2
- package/dist/docs/data-sources/tcp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/tenant_configuration.md +85 -2
- package/dist/docs/data-sources/tenant_profile.md +85 -2
- package/dist/docs/data-sources/ticket_tracking_system.md +85 -2
- package/dist/docs/data-sources/token.md +85 -2
- package/dist/docs/data-sources/tpm_api_key.md +85 -2
- package/dist/docs/data-sources/tpm_category.md +85 -2
- package/dist/docs/data-sources/tpm_manager.md +85 -2
- package/dist/docs/data-sources/trusted_ca_list.md +85 -2
- package/dist/docs/data-sources/tunnel.md +85 -2
- package/dist/docs/data-sources/udp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/usb_policy.md +85 -2
- package/dist/docs/data-sources/user_identification.md +85 -2
- package/dist/docs/data-sources/virtual_host.md +85 -2
- package/dist/docs/data-sources/virtual_k8s.md +85 -2
- package/dist/docs/data-sources/virtual_network.md +85 -2
- package/dist/docs/data-sources/virtual_site.md +85 -2
- package/dist/docs/data-sources/voltshare_admin_policy.md +85 -2
- package/dist/docs/data-sources/voltstack_site.md +85 -2
- package/dist/docs/data-sources/waf_exclusion_policy.md +85 -2
- package/dist/docs/data-sources/workload.md +85 -2
- package/dist/docs/data-sources/workload_flavor.md +85 -2
- package/dist/docs/guides/advanced-http-loadbalancer.md +569 -0
- package/dist/docs/resources/addon_subscription.md +87 -10
- package/dist/docs/resources/address_allocator.md +86 -3
- package/dist/docs/resources/advertise_policy.md +112 -57
- package/dist/docs/resources/alert_policy.md +91 -8
- package/dist/docs/resources/alert_receiver.md +94 -55
- package/dist/docs/resources/allowed_tenant.md +87 -10
- package/dist/docs/resources/api_crawler.md +86 -3
- package/dist/docs/resources/api_credential.md +86 -3
- package/dist/docs/resources/api_definition.md +89 -6
- package/dist/docs/resources/api_discovery.md +86 -3
- package/dist/docs/resources/api_testing.md +95 -52
- package/dist/docs/resources/apm.md +156 -519
- package/dist/docs/resources/app_api_group.md +90 -25
- package/dist/docs/resources/app_firewall.md +87 -6
- package/dist/docs/resources/app_setting.md +97 -66
- package/dist/docs/resources/app_type.md +86 -3
- package/dist/docs/resources/authentication.md +90 -27
- package/dist/docs/resources/aws_tgw_site.md +125 -222
- package/dist/docs/resources/aws_vpc_site.md +149 -352
- package/dist/docs/resources/azure_vnet_site.md +233 -860
- package/dist/docs/resources/bgp.md +103 -32
- package/dist/docs/resources/bgp_asn_set.md +86 -3
- package/dist/docs/resources/bgp_routing_policy.md +86 -3
- package/dist/docs/resources/bigip_irule.md +86 -3
- package/dist/docs/resources/bot_defense_app_infrastructure.md +86 -3
- package/dist/docs/resources/cdn_cache_rule.md +97 -120
- package/dist/docs/resources/cdn_loadbalancer.md +325 -1620
- package/dist/docs/resources/certificate.md +87 -10
- package/dist/docs/resources/certificate_chain.md +86 -3
- package/dist/docs/resources/child_tenant.md +88 -17
- package/dist/docs/resources/child_tenant_manager.md +88 -17
- package/dist/docs/resources/cloud_connect.md +98 -63
- package/dist/docs/resources/cloud_credentials.md +92 -39
- package/dist/docs/resources/cloud_elastic_ip.md +91 -8
- package/dist/docs/resources/cloud_link.md +90 -29
- package/dist/docs/resources/cluster.md +109 -66
- package/dist/docs/resources/cminstance.md +86 -3
- package/dist/docs/resources/code_base_integration.md +100 -87
- package/dist/docs/resources/contact.md +86 -3
- package/dist/docs/resources/container_registry.md +86 -3
- package/dist/docs/resources/crl.md +86 -3
- package/dist/docs/resources/customer_support.md +91 -8
- package/dist/docs/resources/data_group.md +86 -3
- package/dist/docs/resources/data_type.md +88 -9
- package/dist/docs/resources/dc_cluster_group.md +86 -3
- package/dist/docs/resources/discovery.md +115 -104
- package/dist/docs/resources/dns_compliance_checks.md +86 -3
- package/dist/docs/resources/dns_domain.md +86 -3
- package/dist/docs/resources/dns_lb_health_check.md +86 -3
- package/dist/docs/resources/dns_lb_pool.md +87 -10
- package/dist/docs/resources/dns_load_balancer.md +95 -40
- package/dist/docs/resources/dns_zone.md +86 -3
- package/dist/docs/resources/endpoint.md +101 -18
- package/dist/docs/resources/enhanced_firewall_policy.md +89 -32
- package/dist/docs/resources/external_connector.md +94 -29
- package/dist/docs/resources/fast_acl.md +100 -101
- package/dist/docs/resources/fast_acl_rule.md +101 -18
- package/dist/docs/resources/filter_set.md +86 -3
- package/dist/docs/resources/fleet.md +170 -541
- package/dist/docs/resources/forward_proxy_policy.md +90 -31
- package/dist/docs/resources/forwarding_class.md +87 -10
- package/dist/docs/resources/gcp_vpc_site.md +141 -328
- package/dist/docs/resources/geo_location_set.md +86 -3
- package/dist/docs/resources/global_log_receiver.md +116 -181
- package/dist/docs/resources/healthcheck.md +86 -3
- package/dist/docs/resources/http_loadbalancer.md +523 -2778
- package/dist/docs/resources/ike1.md +86 -3
- package/dist/docs/resources/ike2.md +86 -3
- package/dist/docs/resources/ike_phase1_profile.md +86 -3
- package/dist/docs/resources/ike_phase2_profile.md +86 -3
- package/dist/docs/resources/infraprotect_asn.md +86 -3
- package/dist/docs/resources/infraprotect_asn_prefix.md +87 -10
- package/dist/docs/resources/infraprotect_deny_list_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +86 -3
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +86 -3
- package/dist/docs/resources/infraprotect_tunnel.md +90 -29
- package/dist/docs/resources/ip_prefix_set.md +86 -3
- package/dist/docs/resources/irule.md +86 -3
- package/dist/docs/resources/k8s_cluster.md +93 -58
- package/dist/docs/resources/k8s_cluster_role.md +87 -8
- package/dist/docs/resources/k8s_cluster_role_binding.md +87 -10
- package/dist/docs/resources/k8s_pod_security_admission.md +86 -3
- package/dist/docs/resources/k8s_pod_security_policy.md +87 -8
- package/dist/docs/resources/log_receiver.md +88 -15
- package/dist/docs/resources/malicious_user_mitigation.md +86 -3
- package/dist/docs/resources/managed_tenant.md +89 -12
- package/dist/docs/resources/namespace.md +86 -3
- package/dist/docs/resources/nat_policy.md +126 -43
- package/dist/docs/resources/network_connector.md +94 -51
- package/dist/docs/resources/network_firewall.md +90 -31
- package/dist/docs/resources/network_interface.md +93 -46
- package/dist/docs/resources/network_policy.md +96 -13
- package/dist/docs/resources/network_policy_rule.md +91 -8
- package/dist/docs/resources/network_policy_view.md +96 -13
- package/dist/docs/resources/nfv_service.md +153 -446
- package/dist/docs/resources/oidc_provider.md +86 -3
- package/dist/docs/resources/origin_pool.md +108 -145
- package/dist/docs/resources/policer.md +86 -3
- package/dist/docs/resources/policy_based_routing.md +100 -89
- package/dist/docs/resources/protocol_inspection.md +87 -10
- package/dist/docs/resources/protocol_policer.md +91 -8
- package/dist/docs/resources/proxy.md +154 -571
- package/dist/docs/resources/quota.md +86 -3
- package/dist/docs/resources/rate_limiter.md +91 -8
- package/dist/docs/resources/rate_limiter_policy.md +100 -23
- package/dist/docs/resources/registration.md +86 -3
- package/dist/docs/resources/report_config.md +87 -10
- package/dist/docs/resources/role.md +86 -3
- package/dist/docs/resources/route.md +113 -82
- package/dist/docs/resources/secret_management_access.md +127 -156
- package/dist/docs/resources/secret_policy.md +87 -4
- package/dist/docs/resources/secret_policy_rule.md +86 -3
- package/dist/docs/resources/securemesh_site.md +137 -380
- package/dist/docs/resources/securemesh_site_v2.md +289 -1204
- package/dist/docs/resources/segment.md +86 -3
- package/dist/docs/resources/sensitive_data_policy.md +87 -10
- package/dist/docs/resources/service_policy.md +115 -122
- package/dist/docs/resources/service_policy_rule.md +110 -59
- package/dist/docs/resources/site_mesh_group.md +92 -15
- package/dist/docs/resources/srv6_network_slice.md +86 -3
- package/dist/docs/resources/subnet.md +89 -20
- package/dist/docs/resources/tcp_loadbalancer.md +114 -185
- package/dist/docs/resources/tenant_configuration.md +86 -3
- package/dist/docs/resources/tenant_profile.md +87 -10
- package/dist/docs/resources/ticket_tracking_system.md +86 -3
- package/dist/docs/resources/token.md +86 -3
- package/dist/docs/resources/tpm_api_key.md +91 -8
- package/dist/docs/resources/tpm_category.md +91 -8
- package/dist/docs/resources/tpm_manager.md +86 -3
- package/dist/docs/resources/trusted_ca_list.md +86 -3
- package/dist/docs/resources/tunnel.md +91 -8
- package/dist/docs/resources/udp_loadbalancer.md +97 -80
- package/dist/docs/resources/usb_policy.md +86 -3
- package/dist/docs/resources/user_identification.md +86 -3
- package/dist/docs/resources/virtual_host.md +152 -177
- package/dist/docs/resources/virtual_k8s.md +92 -15
- package/dist/docs/resources/virtual_network.md +91 -8
- package/dist/docs/resources/virtual_site.md +86 -3
- package/dist/docs/resources/voltshare_admin_policy.md +86 -11
- package/dist/docs/resources/voltstack_site.md +380 -1365
- package/dist/docs/resources/waf_exclusion_policy.md +91 -28
- package/dist/docs/resources/workload.md +1189 -4148
- package/dist/docs/resources/workload_flavor.md +86 -3
- package/package.json +1 -1
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_policy_based_routing Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Networking"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages a Policy Based Routing resource in F5 Distributed Cloud for network policy based routing create configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_policy_based_routing (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages a Policy Based Routing resource in F5 Distributed Cloud for network policy based routing create configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Policy Based Routing API docs](https://docs.cloud.f5.com/docs-v2/api/views-policy-based-routing) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Policy Based Routing Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages a Policy Based Routing resource in F5 Distributed Cloud for network policy based routing create configuration.
|
|
19
19
|
|
|
20
20
|
# Basic Policy Based Routing configuration
|
|
21
21
|
resource "f5xc_policy_based_routing" "example" {
|
|
@@ -112,93 +112,43 @@ A [`forward_proxy_pbr_rules`](#rules-67a5cc) block (within [`forward_proxy_pbr`]
|
|
|
112
112
|
|
|
113
113
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules Forwarding Class List
|
|
114
114
|
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
<a id="name-fe76e8"></a>• [`name`](#name-fe76e8) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
118
|
-
|
|
119
|
-
<a id="namespace-af7869"></a>• [`namespace`](#namespace-af7869) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
120
|
-
|
|
121
|
-
<a id="tenant-32c32b"></a>• [`tenant`](#tenant-32c32b) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
115
|
+
<a id="deep-959403"></a>Deeply nested **List** block collapsed for readability.
|
|
122
116
|
|
|
123
117
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules HTTP List
|
|
124
118
|
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
<a id="list-50e680"></a>• [`http_list`](#list-50e680) - Optional Block<br>HTTP URLs. URLs for HTTP connections<br>See [HTTP List](#list-50e680) below.
|
|
119
|
+
<a id="deep-6e45a7"></a>Deeply nested **List** block collapsed for readability.
|
|
128
120
|
|
|
129
121
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules HTTP List HTTP List
|
|
130
122
|
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
<a id="path-d4e9bd"></a>• [`any_path`](#path-d4e9bd) - Optional Block<br>Enable this option
|
|
134
|
-
|
|
135
|
-
<a id="value-bc8def"></a>• [`exact_value`](#value-bc8def) - Optional String<br>Exact Values. Exact domain name
|
|
136
|
-
|
|
137
|
-
<a id="value-fb88ed"></a>• [`path_exact_value`](#value-fb88ed) - Optional String<br>Exact Path. Exact Path to match
|
|
138
|
-
|
|
139
|
-
<a id="value-9dc363"></a>• [`path_prefix_value`](#value-9dc363) - Optional String<br>Prefix of Path. Prefix of Path e.g '/abc/xyz' will match '/abc/xyz/.*'
|
|
140
|
-
|
|
141
|
-
<a id="value-769955"></a>• [`path_regex_value`](#value-769955) - Optional String<br>Regex of Path. Regular Expression value for the Path to match
|
|
142
|
-
|
|
143
|
-
<a id="value-b2b3b4"></a>• [`regex_value`](#value-b2b3b4) - Optional String<br>Regex Values of Domains. Regular Expression value for the domain name
|
|
144
|
-
|
|
145
|
-
<a id="value-abca78"></a>• [`suffix_value`](#value-abca78) - Optional String<br>Suffix Values. Suffix of domain names e.g 'xyz.com' will match '*.xyz.com'
|
|
123
|
+
<a id="deep-f6a812"></a>Deeply nested **List** block collapsed for readability.
|
|
146
124
|
|
|
147
125
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules IP Prefix Set
|
|
148
126
|
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
<a id="name-4e3e6d"></a>• [`name`](#name-4e3e6d) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
152
|
-
|
|
153
|
-
<a id="namespace-6b4355"></a>• [`namespace`](#namespace-6b4355) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
154
|
-
|
|
155
|
-
<a id="tenant-02a72b"></a>• [`tenant`](#tenant-02a72b) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
127
|
+
<a id="deep-362d64"></a>Deeply nested **Set** block collapsed for readability.
|
|
156
128
|
|
|
157
129
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules Label Selector
|
|
158
130
|
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
<a id="expressions-154d97"></a>• [`expressions`](#expressions-154d97) - Optional List<br>Selector Expression. expressions contains the kubernetes style label expression for selections
|
|
131
|
+
<a id="deep-2f3feb"></a>Deeply nested **Selector** block collapsed for readability.
|
|
162
132
|
|
|
163
133
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules Metadata
|
|
164
134
|
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
<a id="spec-521c82"></a>• [`description_spec`](#spec-521c82) - Optional String<br>Description. Human readable description
|
|
168
|
-
|
|
169
|
-
<a id="name-761134"></a>• [`name`](#name-761134) - Optional String<br>Name. This is the name of the message. The value of name has to follow DNS-1035 format
|
|
135
|
+
<a id="deep-879217"></a>Deeply nested **Metadata** block collapsed for readability.
|
|
170
136
|
|
|
171
137
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules Prefix List
|
|
172
138
|
|
|
173
|
-
|
|
174
|
-
|
|
175
|
-
<a id="prefixes-1dee6a"></a>• [`prefixes`](#prefixes-1dee6a) - Optional List<br>IPv4 Prefix List. List of IPv4 prefixes that represent an endpoint
|
|
139
|
+
<a id="deep-27b3a7"></a>Deeply nested **List** block collapsed for readability.
|
|
176
140
|
|
|
177
141
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules TLS List
|
|
178
142
|
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
<a id="list-a47a3e"></a>• [`tls_list`](#list-a47a3e) - Optional Block<br>TLS Domains. Domains in SNI for TLS connections<br>See [TLS List](#list-a47a3e) below.
|
|
143
|
+
<a id="deep-da01da"></a>Deeply nested **List** block collapsed for readability.
|
|
182
144
|
|
|
183
145
|
#### Forward Proxy Pbr Forward Proxy Pbr Rules TLS List TLS List
|
|
184
146
|
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
<a id="value-9b9cab"></a>• [`exact_value`](#value-9b9cab) - Optional String<br>Exact Value. Exact domain name
|
|
188
|
-
|
|
189
|
-
<a id="value-668061"></a>• [`regex_value`](#value-668061) - Optional String<br>Regex Values of Domains. Regular Expression value for the domain name
|
|
190
|
-
|
|
191
|
-
<a id="value-ec6bab"></a>• [`suffix_value`](#value-ec6bab) - Optional String<br>Suffix Value. Suffix of domain name e.g 'xyz.com' will match '*.xyz.com' and 'xyz.com'
|
|
147
|
+
<a id="deep-872ea2"></a>Deeply nested **List** block collapsed for readability.
|
|
192
148
|
|
|
193
149
|
#### Forwarding Class List
|
|
194
150
|
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
<a id="forwarding-class-list-name"></a>• [`name`](#forwarding-class-list-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
198
|
-
|
|
199
|
-
<a id="forwarding-class-list-namespace"></a>• [`namespace`](#forwarding-class-list-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
200
|
-
|
|
201
|
-
<a id="forwarding-class-list-tenant"></a>• [`tenant`](#forwarding-class-list-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
151
|
+
<a id="objref-95dabb"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
202
152
|
|
|
203
153
|
#### Network Pbr
|
|
204
154
|
|
|
@@ -252,33 +202,15 @@ An [`applications`](#applications-913ddd) block (within [`network_pbr.network_pb
|
|
|
252
202
|
|
|
253
203
|
#### Network Pbr Network Pbr Rules Forwarding Class List
|
|
254
204
|
|
|
255
|
-
|
|
256
|
-
|
|
257
|
-
<a id="name-2dd910"></a>• [`name`](#name-2dd910) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
258
|
-
|
|
259
|
-
<a id="namespace-0e4447"></a>• [`namespace`](#namespace-0e4447) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
260
|
-
|
|
261
|
-
<a id="tenant-2eb45f"></a>• [`tenant`](#tenant-2eb45f) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
205
|
+
<a id="deep-1ae93a"></a>Deeply nested **List** block collapsed for readability.
|
|
262
206
|
|
|
263
207
|
#### Network Pbr Network Pbr Rules IP Prefix Set
|
|
264
208
|
|
|
265
|
-
|
|
266
|
-
|
|
267
|
-
<a id="ref-95f97a"></a>• [`ref`](#ref-95f97a) - Optional Block<br>Reference. A list of references to ip_prefix_set objects<br>See [Ref](#ref-95f97a) below.
|
|
209
|
+
<a id="deep-047bc9"></a>Deeply nested **Set** block collapsed for readability.
|
|
268
210
|
|
|
269
211
|
#### Network Pbr Network Pbr Rules IP Prefix Set Ref
|
|
270
212
|
|
|
271
|
-
|
|
272
|
-
|
|
273
|
-
<a id="kind-9b23b9"></a>• [`kind`](#kind-9b23b9) - Optional String<br>Kind. When a configuration object(e.g. virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
274
|
-
|
|
275
|
-
<a id="name-c79c25"></a>• [`name`](#name-c79c25) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
276
|
-
|
|
277
|
-
<a id="namespace-f12e68"></a>• [`namespace`](#namespace-f12e68) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
278
|
-
|
|
279
|
-
<a id="tenant-528fcc"></a>• [`tenant`](#tenant-528fcc) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
280
|
-
|
|
281
|
-
<a id="uid-9367ed"></a>• [`uid`](#uid-9367ed) - Optional String<br>UID. When a configuration object(e.g. virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. route's) uid
|
|
213
|
+
<a id="deep-91066f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
282
214
|
|
|
283
215
|
#### Network Pbr Network Pbr Rules Metadata
|
|
284
216
|
|
|
@@ -296,11 +228,7 @@ A [`prefix_list`](#list-1fa06a) block (within [`network_pbr.network_pbr_rules`](
|
|
|
296
228
|
|
|
297
229
|
#### Network Pbr Network Pbr Rules Protocol Port Range
|
|
298
230
|
|
|
299
|
-
|
|
300
|
-
|
|
301
|
-
<a id="ranges-851a3b"></a>• [`port_ranges`](#ranges-851a3b) - Optional List<br>List of Port Ranges. List of port ranges. Each range is a single port or a pair of start and end ports e.g. 8080-8192
|
|
302
|
-
|
|
303
|
-
<a id="protocol-0bfac4"></a>• [`protocol`](#protocol-0bfac4) - Optional String<br>Protocol. Protocol in IP packet to be used as match criteria Values are TCP, UDP, and ICMP
|
|
231
|
+
<a id="deep-45860e"></a>Deeply nested **Range** block collapsed for readability.
|
|
304
232
|
|
|
305
233
|
#### Network Pbr Prefix List
|
|
306
234
|
|
|
@@ -320,6 +248,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
320
248
|
|
|
321
249
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
322
250
|
|
|
251
|
+
---
|
|
252
|
+
|
|
253
|
+
## Common Types
|
|
254
|
+
|
|
255
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
256
|
+
|
|
257
|
+
### Object Reference {#common-object-reference}
|
|
258
|
+
|
|
259
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
260
|
+
|
|
261
|
+
| Field | Type | Description |
|
|
262
|
+
| ----- | ---- | ----------- |
|
|
263
|
+
| `name` | String | Name of the referenced object |
|
|
264
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
265
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
266
|
+
|
|
267
|
+
### Transformers {#common-transformers}
|
|
268
|
+
|
|
269
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
270
|
+
|
|
271
|
+
| Value | Description |
|
|
272
|
+
| ----- | ----------- |
|
|
273
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
274
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
275
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
276
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
277
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
278
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
279
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
280
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
281
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
282
|
+
|
|
283
|
+
### HTTP Methods {#common-http-methods}
|
|
284
|
+
|
|
285
|
+
HTTP methods used for request matching.
|
|
286
|
+
|
|
287
|
+
| Value | Description |
|
|
288
|
+
| ----- | ----------- |
|
|
289
|
+
| `ANY` | Match any HTTP method |
|
|
290
|
+
| `GET` | HTTP GET request |
|
|
291
|
+
| `HEAD` | HTTP HEAD request |
|
|
292
|
+
| `POST` | HTTP POST request |
|
|
293
|
+
| `PUT` | HTTP PUT request |
|
|
294
|
+
| `DELETE` | HTTP DELETE request |
|
|
295
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
296
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
297
|
+
| `TRACE` | HTTP TRACE request |
|
|
298
|
+
| `PATCH` | HTTP PATCH request |
|
|
299
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
300
|
+
|
|
301
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
302
|
+
|
|
303
|
+
TLS fingerprint categories for malicious client detection.
|
|
304
|
+
|
|
305
|
+
| Value | Description |
|
|
306
|
+
| ----- | ----------- |
|
|
307
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
308
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
309
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
310
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
311
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
312
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
313
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
314
|
+
|
|
315
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
316
|
+
|
|
317
|
+
IP address threat categories for security filtering.
|
|
318
|
+
|
|
319
|
+
| Value | Description |
|
|
320
|
+
| ----- | ----------- |
|
|
321
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
322
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
323
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
324
|
+
| `BOTNETS` | Known botnet IPs |
|
|
325
|
+
| `SCANNERS` | Network scanner IPs |
|
|
326
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
327
|
+
| `PHISHING` | Phishing-related IPs |
|
|
328
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
329
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
330
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
331
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
332
|
+
| `NETWORK` | Known bad network ranges |
|
|
333
|
+
|
|
323
334
|
## Import
|
|
324
335
|
|
|
325
336
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_protocol_inspection Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages Protocol Inspection Specification in a given namespace. If one already exists it will give an error. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_protocol_inspection (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages Protocol Inspection Specification in a given namespace. If one already exists it will give an error. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Protocol Inspection API docs](https://docs.cloud.f5.com/docs-v2/api/protocol-inspection) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Protocol Inspection Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages Protocol Inspection Specification in a given namespace. If one already exists it will give an error. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Protocol Inspection configuration
|
|
21
21
|
resource "f5xc_protocol_inspection" "example" {
|
|
@@ -92,13 +92,7 @@ An [`enable_disable_compliance_checks`](#enable-disable-compliance-checks) block
|
|
|
92
92
|
|
|
93
93
|
#### Enable Disable Compliance Checks Enable Compliance Checks
|
|
94
94
|
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
<a id="name-8e6d21"></a>• [`name`](#name-8e6d21) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
98
|
-
|
|
99
|
-
<a id="namespace-93e0ee"></a>• [`namespace`](#namespace-93e0ee) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
100
|
-
|
|
101
|
-
<a id="tenant-67ac8b"></a>• [`tenant`](#tenant-67ac8b) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
95
|
+
<a id="objref-68d3e1"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
102
96
|
|
|
103
97
|
#### Enable Disable Signatures
|
|
104
98
|
|
|
@@ -120,6 +114,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
120
114
|
|
|
121
115
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
122
116
|
|
|
117
|
+
---
|
|
118
|
+
|
|
119
|
+
## Common Types
|
|
120
|
+
|
|
121
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
122
|
+
|
|
123
|
+
### Object Reference {#common-object-reference}
|
|
124
|
+
|
|
125
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
126
|
+
|
|
127
|
+
| Field | Type | Description |
|
|
128
|
+
| ----- | ---- | ----------- |
|
|
129
|
+
| `name` | String | Name of the referenced object |
|
|
130
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
131
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
132
|
+
|
|
133
|
+
### Transformers {#common-transformers}
|
|
134
|
+
|
|
135
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
136
|
+
|
|
137
|
+
| Value | Description |
|
|
138
|
+
| ----- | ----------- |
|
|
139
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
140
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
141
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
142
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
143
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
144
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
145
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
146
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
147
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
148
|
+
|
|
149
|
+
### HTTP Methods {#common-http-methods}
|
|
150
|
+
|
|
151
|
+
HTTP methods used for request matching.
|
|
152
|
+
|
|
153
|
+
| Value | Description |
|
|
154
|
+
| ----- | ----------- |
|
|
155
|
+
| `ANY` | Match any HTTP method |
|
|
156
|
+
| `GET` | HTTP GET request |
|
|
157
|
+
| `HEAD` | HTTP HEAD request |
|
|
158
|
+
| `POST` | HTTP POST request |
|
|
159
|
+
| `PUT` | HTTP PUT request |
|
|
160
|
+
| `DELETE` | HTTP DELETE request |
|
|
161
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
162
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
163
|
+
| `TRACE` | HTTP TRACE request |
|
|
164
|
+
| `PATCH` | HTTP PATCH request |
|
|
165
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
166
|
+
|
|
167
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
168
|
+
|
|
169
|
+
TLS fingerprint categories for malicious client detection.
|
|
170
|
+
|
|
171
|
+
| Value | Description |
|
|
172
|
+
| ----- | ----------- |
|
|
173
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
174
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
175
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
176
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
177
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
178
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
179
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
180
|
+
|
|
181
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
182
|
+
|
|
183
|
+
IP address threat categories for security filtering.
|
|
184
|
+
|
|
185
|
+
| Value | Description |
|
|
186
|
+
| ----- | ----------- |
|
|
187
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
188
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
189
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
190
|
+
| `BOTNETS` | Known botnet IPs |
|
|
191
|
+
| `SCANNERS` | Network scanner IPs |
|
|
192
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
193
|
+
| `PHISHING` | Phishing-related IPs |
|
|
194
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
195
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
196
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
197
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
198
|
+
| `NETWORK` | Known bad network ranges |
|
|
199
|
+
|
|
123
200
|
## Import
|
|
124
201
|
|
|
125
202
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_protocol_policer Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages protocol_policer object, protocol_policer object contains list of L4 protocol match condition and corresponding traffic rate limits in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_protocol_policer (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages protocol_policer object, protocol_policer object contains list of L4 protocol match condition and corresponding traffic rate limits in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Protocol Policer API docs](https://docs.cloud.f5.com/docs-v2/api/protocol-policer) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Protocol Policer Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages protocol_policer object, protocol_policer object contains list of L4 protocol match condition and corresponding traffic rate limits in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Protocol Policer configuration
|
|
21
21
|
resource "f5xc_protocol_policer" "example" {
|
|
@@ -90,15 +90,15 @@ A [`protocol_policer`](#protocol-policer) block supports the following:
|
|
|
90
90
|
|
|
91
91
|
A [`policer`](#protocol-policer-policer) block (within [`protocol_policer`](#protocol-policer)) supports the following:
|
|
92
92
|
|
|
93
|
-
<a id="protocol-policer-policer-kind"></a>• [`kind`](#protocol-policer-policer-kind) - Optional String<br>
|
|
93
|
+
<a id="protocol-policer-policer-kind"></a>• [`kind`](#protocol-policer-policer-kind) - Optional String<br>Object reference kind
|
|
94
94
|
|
|
95
|
-
<a id="protocol-policer-policer-name"></a>• [`name`](#protocol-policer-policer-name) - Optional String<br>
|
|
95
|
+
<a id="protocol-policer-policer-name"></a>• [`name`](#protocol-policer-policer-name) - Optional String<br>Object reference name
|
|
96
96
|
|
|
97
|
-
<a id="protocol-policer-policer-namespace"></a>• [`namespace`](#protocol-policer-policer-namespace) - Optional String<br>
|
|
97
|
+
<a id="protocol-policer-policer-namespace"></a>• [`namespace`](#protocol-policer-policer-namespace) - Optional String<br>Object reference namespace
|
|
98
98
|
|
|
99
|
-
<a id="protocol-policer-policer-tenant"></a>• [`tenant`](#protocol-policer-policer-tenant) - Optional String<br>
|
|
99
|
+
<a id="protocol-policer-policer-tenant"></a>• [`tenant`](#protocol-policer-policer-tenant) - Optional String<br>Object reference tenant
|
|
100
100
|
|
|
101
|
-
<a id="protocol-policer-policer-uid"></a>• [`uid`](#protocol-policer-policer-uid) - Optional String<br>
|
|
101
|
+
<a id="protocol-policer-policer-uid"></a>• [`uid`](#protocol-policer-policer-uid) - Optional String<br>Object reference UID
|
|
102
102
|
|
|
103
103
|
#### Protocol Policer Protocol
|
|
104
104
|
|
|
@@ -136,6 +136,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
136
136
|
|
|
137
137
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
138
138
|
|
|
139
|
+
---
|
|
140
|
+
|
|
141
|
+
## Common Types
|
|
142
|
+
|
|
143
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
144
|
+
|
|
145
|
+
### Object Reference {#common-object-reference}
|
|
146
|
+
|
|
147
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
148
|
+
|
|
149
|
+
| Field | Type | Description |
|
|
150
|
+
| ----- | ---- | ----------- |
|
|
151
|
+
| `name` | String | Name of the referenced object |
|
|
152
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
153
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
154
|
+
|
|
155
|
+
### Transformers {#common-transformers}
|
|
156
|
+
|
|
157
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
158
|
+
|
|
159
|
+
| Value | Description |
|
|
160
|
+
| ----- | ----------- |
|
|
161
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
162
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
163
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
164
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
165
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
166
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
167
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
168
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
169
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
170
|
+
|
|
171
|
+
### HTTP Methods {#common-http-methods}
|
|
172
|
+
|
|
173
|
+
HTTP methods used for request matching.
|
|
174
|
+
|
|
175
|
+
| Value | Description |
|
|
176
|
+
| ----- | ----------- |
|
|
177
|
+
| `ANY` | Match any HTTP method |
|
|
178
|
+
| `GET` | HTTP GET request |
|
|
179
|
+
| `HEAD` | HTTP HEAD request |
|
|
180
|
+
| `POST` | HTTP POST request |
|
|
181
|
+
| `PUT` | HTTP PUT request |
|
|
182
|
+
| `DELETE` | HTTP DELETE request |
|
|
183
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
184
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
185
|
+
| `TRACE` | HTTP TRACE request |
|
|
186
|
+
| `PATCH` | HTTP PATCH request |
|
|
187
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
188
|
+
|
|
189
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
190
|
+
|
|
191
|
+
TLS fingerprint categories for malicious client detection.
|
|
192
|
+
|
|
193
|
+
| Value | Description |
|
|
194
|
+
| ----- | ----------- |
|
|
195
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
196
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
197
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
198
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
199
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
200
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
201
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
202
|
+
|
|
203
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
204
|
+
|
|
205
|
+
IP address threat categories for security filtering.
|
|
206
|
+
|
|
207
|
+
| Value | Description |
|
|
208
|
+
| ----- | ----------- |
|
|
209
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
210
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
211
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
212
|
+
| `BOTNETS` | Known botnet IPs |
|
|
213
|
+
| `SCANNERS` | Network scanner IPs |
|
|
214
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
215
|
+
| `PHISHING` | Phishing-related IPs |
|
|
216
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
217
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
218
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
219
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
220
|
+
| `NETWORK` | Known bad network ranges |
|
|
221
|
+
|
|
139
222
|
## Import
|
|
140
223
|
|
|
141
224
|
Import is supported using the following syntax:
|