@robinmordasiewicz/f5xc-terraform-mcp 2.6.1 → 2.6.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/addon_subscription.md +85 -2
- package/dist/docs/data-sources/address_allocator.md +85 -2
- package/dist/docs/data-sources/advertise_policy.md +85 -2
- package/dist/docs/data-sources/alert_policy.md +85 -2
- package/dist/docs/data-sources/alert_receiver.md +85 -2
- package/dist/docs/data-sources/allowed_tenant.md +85 -2
- package/dist/docs/data-sources/api_crawler.md +85 -2
- package/dist/docs/data-sources/api_credential.md +85 -2
- package/dist/docs/data-sources/api_definition.md +85 -2
- package/dist/docs/data-sources/api_discovery.md +85 -2
- package/dist/docs/data-sources/api_testing.md +85 -2
- package/dist/docs/data-sources/apm.md +85 -2
- package/dist/docs/data-sources/app_api_group.md +85 -2
- package/dist/docs/data-sources/app_firewall.md +85 -2
- package/dist/docs/data-sources/app_setting.md +85 -2
- package/dist/docs/data-sources/app_type.md +85 -2
- package/dist/docs/data-sources/authentication.md +85 -2
- package/dist/docs/data-sources/aws_tgw_site.md +85 -2
- package/dist/docs/data-sources/aws_vpc_site.md +85 -2
- package/dist/docs/data-sources/azure_vnet_site.md +85 -2
- package/dist/docs/data-sources/bgp.md +85 -2
- package/dist/docs/data-sources/bgp_asn_set.md +85 -2
- package/dist/docs/data-sources/bgp_routing_policy.md +85 -2
- package/dist/docs/data-sources/bigip_irule.md +85 -2
- package/dist/docs/data-sources/bot_defense_app_infrastructure.md +85 -2
- package/dist/docs/data-sources/cdn_cache_rule.md +85 -2
- package/dist/docs/data-sources/cdn_loadbalancer.md +85 -2
- package/dist/docs/data-sources/certificate.md +85 -2
- package/dist/docs/data-sources/certificate_chain.md +85 -2
- package/dist/docs/data-sources/child_tenant.md +85 -2
- package/dist/docs/data-sources/child_tenant_manager.md +85 -2
- package/dist/docs/data-sources/cloud_connect.md +85 -2
- package/dist/docs/data-sources/cloud_credentials.md +85 -2
- package/dist/docs/data-sources/cloud_elastic_ip.md +85 -2
- package/dist/docs/data-sources/cloud_link.md +85 -2
- package/dist/docs/data-sources/cluster.md +85 -2
- package/dist/docs/data-sources/cminstance.md +85 -2
- package/dist/docs/data-sources/code_base_integration.md +85 -2
- package/dist/docs/data-sources/contact.md +85 -2
- package/dist/docs/data-sources/container_registry.md +85 -2
- package/dist/docs/data-sources/crl.md +85 -2
- package/dist/docs/data-sources/customer_support.md +85 -2
- package/dist/docs/data-sources/data_group.md +85 -2
- package/dist/docs/data-sources/data_type.md +85 -2
- package/dist/docs/data-sources/dc_cluster_group.md +85 -2
- package/dist/docs/data-sources/discovery.md +85 -2
- package/dist/docs/data-sources/dns_compliance_checks.md +85 -2
- package/dist/docs/data-sources/dns_domain.md +85 -2
- package/dist/docs/data-sources/dns_lb_health_check.md +85 -2
- package/dist/docs/data-sources/dns_lb_pool.md +85 -2
- package/dist/docs/data-sources/dns_load_balancer.md +85 -2
- package/dist/docs/data-sources/dns_zone.md +85 -2
- package/dist/docs/data-sources/endpoint.md +85 -2
- package/dist/docs/data-sources/enhanced_firewall_policy.md +85 -2
- package/dist/docs/data-sources/external_connector.md +85 -2
- package/dist/docs/data-sources/fast_acl.md +85 -2
- package/dist/docs/data-sources/fast_acl_rule.md +85 -2
- package/dist/docs/data-sources/filter_set.md +85 -2
- package/dist/docs/data-sources/fleet.md +85 -2
- package/dist/docs/data-sources/forward_proxy_policy.md +85 -2
- package/dist/docs/data-sources/forwarding_class.md +85 -2
- package/dist/docs/data-sources/gcp_vpc_site.md +85 -2
- package/dist/docs/data-sources/geo_location_set.md +85 -2
- package/dist/docs/data-sources/global_log_receiver.md +85 -2
- package/dist/docs/data-sources/healthcheck.md +85 -2
- package/dist/docs/data-sources/http_loadbalancer.md +85 -2
- package/dist/docs/data-sources/ike1.md +85 -2
- package/dist/docs/data-sources/ike2.md +85 -2
- package/dist/docs/data-sources/ike_phase1_profile.md +85 -2
- package/dist/docs/data-sources/ike_phase2_profile.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn.md +85 -2
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +85 -2
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +85 -2
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +85 -2
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +85 -2
- package/dist/docs/data-sources/infraprotect_tunnel.md +85 -2
- package/dist/docs/data-sources/ip_prefix_set.md +85 -2
- package/dist/docs/data-sources/irule.md +85 -2
- package/dist/docs/data-sources/k8s_cluster.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role.md +85 -2
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_admission.md +85 -2
- package/dist/docs/data-sources/k8s_pod_security_policy.md +85 -2
- package/dist/docs/data-sources/log_receiver.md +85 -2
- package/dist/docs/data-sources/malicious_user_mitigation.md +85 -2
- package/dist/docs/data-sources/managed_tenant.md +85 -2
- package/dist/docs/data-sources/namespace.md +85 -2
- package/dist/docs/data-sources/nat_policy.md +85 -2
- package/dist/docs/data-sources/network_connector.md +85 -2
- package/dist/docs/data-sources/network_firewall.md +85 -2
- package/dist/docs/data-sources/network_interface.md +85 -2
- package/dist/docs/data-sources/network_policy.md +85 -2
- package/dist/docs/data-sources/network_policy_rule.md +85 -2
- package/dist/docs/data-sources/network_policy_view.md +85 -2
- package/dist/docs/data-sources/nfv_service.md +85 -2
- package/dist/docs/data-sources/oidc_provider.md +85 -2
- package/dist/docs/data-sources/origin_pool.md +85 -2
- package/dist/docs/data-sources/policer.md +85 -2
- package/dist/docs/data-sources/policy_based_routing.md +85 -2
- package/dist/docs/data-sources/protocol_inspection.md +85 -2
- package/dist/docs/data-sources/protocol_policer.md +85 -2
- package/dist/docs/data-sources/proxy.md +85 -2
- package/dist/docs/data-sources/quota.md +85 -2
- package/dist/docs/data-sources/rate_limiter.md +85 -2
- package/dist/docs/data-sources/rate_limiter_policy.md +85 -2
- package/dist/docs/data-sources/registration.md +85 -2
- package/dist/docs/data-sources/report_config.md +85 -2
- package/dist/docs/data-sources/role.md +85 -2
- package/dist/docs/data-sources/route.md +85 -2
- package/dist/docs/data-sources/secret_management_access.md +85 -2
- package/dist/docs/data-sources/secret_policy.md +85 -2
- package/dist/docs/data-sources/secret_policy_rule.md +85 -2
- package/dist/docs/data-sources/securemesh_site.md +85 -2
- package/dist/docs/data-sources/securemesh_site_v2.md +85 -2
- package/dist/docs/data-sources/segment.md +85 -2
- package/dist/docs/data-sources/sensitive_data_policy.md +85 -2
- package/dist/docs/data-sources/service_policy.md +85 -2
- package/dist/docs/data-sources/service_policy_rule.md +85 -2
- package/dist/docs/data-sources/site_mesh_group.md +85 -2
- package/dist/docs/data-sources/srv6_network_slice.md +85 -2
- package/dist/docs/data-sources/subnet.md +85 -2
- package/dist/docs/data-sources/tcp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/tenant_configuration.md +85 -2
- package/dist/docs/data-sources/tenant_profile.md +85 -2
- package/dist/docs/data-sources/ticket_tracking_system.md +85 -2
- package/dist/docs/data-sources/token.md +85 -2
- package/dist/docs/data-sources/tpm_api_key.md +85 -2
- package/dist/docs/data-sources/tpm_category.md +85 -2
- package/dist/docs/data-sources/tpm_manager.md +85 -2
- package/dist/docs/data-sources/trusted_ca_list.md +85 -2
- package/dist/docs/data-sources/tunnel.md +85 -2
- package/dist/docs/data-sources/udp_loadbalancer.md +85 -2
- package/dist/docs/data-sources/usb_policy.md +85 -2
- package/dist/docs/data-sources/user_identification.md +85 -2
- package/dist/docs/data-sources/virtual_host.md +85 -2
- package/dist/docs/data-sources/virtual_k8s.md +85 -2
- package/dist/docs/data-sources/virtual_network.md +85 -2
- package/dist/docs/data-sources/virtual_site.md +85 -2
- package/dist/docs/data-sources/voltshare_admin_policy.md +85 -2
- package/dist/docs/data-sources/voltstack_site.md +85 -2
- package/dist/docs/data-sources/waf_exclusion_policy.md +85 -2
- package/dist/docs/data-sources/workload.md +85 -2
- package/dist/docs/data-sources/workload_flavor.md +85 -2
- package/dist/docs/resources/addon_subscription.md +87 -10
- package/dist/docs/resources/address_allocator.md +86 -3
- package/dist/docs/resources/advertise_policy.md +112 -57
- package/dist/docs/resources/alert_policy.md +91 -8
- package/dist/docs/resources/alert_receiver.md +94 -55
- package/dist/docs/resources/allowed_tenant.md +87 -10
- package/dist/docs/resources/api_crawler.md +86 -3
- package/dist/docs/resources/api_credential.md +88 -5
- package/dist/docs/resources/api_definition.md +89 -6
- package/dist/docs/resources/api_discovery.md +86 -3
- package/dist/docs/resources/api_testing.md +95 -52
- package/dist/docs/resources/apm.md +156 -519
- package/dist/docs/resources/app_api_group.md +90 -25
- package/dist/docs/resources/app_firewall.md +87 -6
- package/dist/docs/resources/app_setting.md +97 -66
- package/dist/docs/resources/app_type.md +86 -3
- package/dist/docs/resources/authentication.md +90 -27
- package/dist/docs/resources/aws_tgw_site.md +125 -222
- package/dist/docs/resources/aws_vpc_site.md +149 -352
- package/dist/docs/resources/azure_vnet_site.md +233 -860
- package/dist/docs/resources/bgp.md +103 -32
- package/dist/docs/resources/bgp_asn_set.md +86 -3
- package/dist/docs/resources/bgp_routing_policy.md +86 -3
- package/dist/docs/resources/bigip_irule.md +86 -3
- package/dist/docs/resources/bot_defense_app_infrastructure.md +86 -3
- package/dist/docs/resources/cdn_cache_rule.md +97 -120
- package/dist/docs/resources/cdn_loadbalancer.md +325 -1620
- package/dist/docs/resources/certificate.md +87 -10
- package/dist/docs/resources/certificate_chain.md +86 -3
- package/dist/docs/resources/child_tenant.md +88 -17
- package/dist/docs/resources/child_tenant_manager.md +88 -17
- package/dist/docs/resources/cloud_connect.md +98 -63
- package/dist/docs/resources/cloud_credentials.md +92 -39
- package/dist/docs/resources/cloud_elastic_ip.md +91 -8
- package/dist/docs/resources/cloud_link.md +90 -29
- package/dist/docs/resources/cluster.md +109 -66
- package/dist/docs/resources/cminstance.md +86 -3
- package/dist/docs/resources/code_base_integration.md +100 -87
- package/dist/docs/resources/contact.md +86 -3
- package/dist/docs/resources/container_registry.md +86 -3
- package/dist/docs/resources/crl.md +86 -3
- package/dist/docs/resources/customer_support.md +91 -8
- package/dist/docs/resources/data_group.md +86 -3
- package/dist/docs/resources/data_type.md +88 -9
- package/dist/docs/resources/dc_cluster_group.md +86 -3
- package/dist/docs/resources/discovery.md +115 -104
- package/dist/docs/resources/dns_compliance_checks.md +86 -3
- package/dist/docs/resources/dns_domain.md +86 -3
- package/dist/docs/resources/dns_lb_health_check.md +86 -3
- package/dist/docs/resources/dns_lb_pool.md +87 -10
- package/dist/docs/resources/dns_load_balancer.md +95 -40
- package/dist/docs/resources/dns_zone.md +111 -926
- package/dist/docs/resources/endpoint.md +101 -18
- package/dist/docs/resources/enhanced_firewall_policy.md +89 -32
- package/dist/docs/resources/external_connector.md +94 -29
- package/dist/docs/resources/fast_acl.md +100 -101
- package/dist/docs/resources/fast_acl_rule.md +101 -18
- package/dist/docs/resources/filter_set.md +86 -3
- package/dist/docs/resources/fleet.md +170 -541
- package/dist/docs/resources/forward_proxy_policy.md +90 -31
- package/dist/docs/resources/forwarding_class.md +87 -10
- package/dist/docs/resources/gcp_vpc_site.md +141 -328
- package/dist/docs/resources/geo_location_set.md +86 -3
- package/dist/docs/resources/global_log_receiver.md +116 -181
- package/dist/docs/resources/healthcheck.md +86 -3
- package/dist/docs/resources/http_loadbalancer.md +523 -2778
- package/dist/docs/resources/ike1.md +86 -3
- package/dist/docs/resources/ike2.md +86 -3
- package/dist/docs/resources/ike_phase1_profile.md +86 -3
- package/dist/docs/resources/ike_phase2_profile.md +86 -3
- package/dist/docs/resources/infraprotect_asn.md +86 -3
- package/dist/docs/resources/infraprotect_asn_prefix.md +87 -10
- package/dist/docs/resources/infraprotect_deny_list_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule.md +86 -3
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +86 -3
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +86 -3
- package/dist/docs/resources/infraprotect_tunnel.md +90 -29
- package/dist/docs/resources/ip_prefix_set.md +86 -3
- package/dist/docs/resources/irule.md +86 -3
- package/dist/docs/resources/k8s_cluster.md +93 -58
- package/dist/docs/resources/k8s_cluster_role.md +87 -8
- package/dist/docs/resources/k8s_cluster_role_binding.md +87 -10
- package/dist/docs/resources/k8s_pod_security_admission.md +86 -3
- package/dist/docs/resources/k8s_pod_security_policy.md +87 -8
- package/dist/docs/resources/log_receiver.md +88 -15
- package/dist/docs/resources/malicious_user_mitigation.md +86 -3
- package/dist/docs/resources/managed_tenant.md +89 -12
- package/dist/docs/resources/namespace.md +86 -3
- package/dist/docs/resources/nat_policy.md +126 -43
- package/dist/docs/resources/network_connector.md +94 -51
- package/dist/docs/resources/network_firewall.md +90 -31
- package/dist/docs/resources/network_interface.md +93 -46
- package/dist/docs/resources/network_policy.md +96 -13
- package/dist/docs/resources/network_policy_rule.md +91 -8
- package/dist/docs/resources/network_policy_view.md +96 -13
- package/dist/docs/resources/nfv_service.md +153 -446
- package/dist/docs/resources/oidc_provider.md +86 -3
- package/dist/docs/resources/origin_pool.md +108 -145
- package/dist/docs/resources/policer.md +86 -3
- package/dist/docs/resources/policy_based_routing.md +100 -89
- package/dist/docs/resources/protocol_inspection.md +87 -10
- package/dist/docs/resources/protocol_policer.md +91 -8
- package/dist/docs/resources/proxy.md +154 -571
- package/dist/docs/resources/quota.md +86 -3
- package/dist/docs/resources/rate_limiter.md +91 -8
- package/dist/docs/resources/rate_limiter_policy.md +100 -23
- package/dist/docs/resources/registration.md +86 -3
- package/dist/docs/resources/report_config.md +87 -10
- package/dist/docs/resources/role.md +86 -3
- package/dist/docs/resources/route.md +113 -82
- package/dist/docs/resources/secret_management_access.md +127 -156
- package/dist/docs/resources/secret_policy.md +87 -4
- package/dist/docs/resources/secret_policy_rule.md +86 -3
- package/dist/docs/resources/securemesh_site.md +137 -380
- package/dist/docs/resources/securemesh_site_v2.md +289 -1204
- package/dist/docs/resources/segment.md +86 -3
- package/dist/docs/resources/sensitive_data_policy.md +87 -10
- package/dist/docs/resources/service_policy.md +115 -122
- package/dist/docs/resources/service_policy_rule.md +110 -59
- package/dist/docs/resources/site_mesh_group.md +92 -15
- package/dist/docs/resources/srv6_network_slice.md +86 -3
- package/dist/docs/resources/subnet.md +89 -20
- package/dist/docs/resources/tcp_loadbalancer.md +114 -185
- package/dist/docs/resources/tenant_configuration.md +86 -3
- package/dist/docs/resources/tenant_profile.md +87 -10
- package/dist/docs/resources/ticket_tracking_system.md +86 -3
- package/dist/docs/resources/token.md +86 -3
- package/dist/docs/resources/tpm_api_key.md +91 -8
- package/dist/docs/resources/tpm_category.md +91 -8
- package/dist/docs/resources/tpm_manager.md +86 -3
- package/dist/docs/resources/trusted_ca_list.md +86 -3
- package/dist/docs/resources/tunnel.md +91 -8
- package/dist/docs/resources/udp_loadbalancer.md +97 -80
- package/dist/docs/resources/usb_policy.md +86 -3
- package/dist/docs/resources/user_identification.md +86 -3
- package/dist/docs/resources/virtual_host.md +152 -177
- package/dist/docs/resources/virtual_k8s.md +92 -15
- package/dist/docs/resources/virtual_network.md +91 -8
- package/dist/docs/resources/virtual_site.md +86 -3
- package/dist/docs/resources/voltshare_admin_policy.md +86 -11
- package/dist/docs/resources/voltstack_site.md +380 -1365
- package/dist/docs/resources/waf_exclusion_policy.md +91 -28
- package/dist/docs/resources/workload.md +1189 -4148
- package/dist/docs/resources/workload_flavor.md +86 -3
- package/package.json +1 -1
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_network_connector Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Networking"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages a Network Connector resource in F5 Distributed Cloud for network connector is created by users in system namespace configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_network_connector (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages a Network Connector resource in F5 Distributed Cloud for network connector is created by users in system namespace configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Network Connector API docs](https://docs.cloud.f5.com/docs-v2/api/network-connector) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Network Connector Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages a Network Connector resource in F5 Distributed Cloud for network connector is created by users in system namespace configuration.
|
|
19
19
|
|
|
20
20
|
# Basic Network Connector configuration
|
|
21
21
|
resource "f5xc_network_connector" "example" {
|
|
@@ -134,35 +134,19 @@ A [`custom_certificate`](#certificate-1f025c) block (within [`enable_forward_pro
|
|
|
134
134
|
|
|
135
135
|
#### Enable Forward Proxy TLS Intercept Custom Certificate Custom Hash Algorithms
|
|
136
136
|
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
<a id="algorithms-a9b03c"></a>• [`hash_algorithms`](#algorithms-a9b03c) - Optional List Defaults to `INVALID_HASH_ALGORITHM`<br>Possible values are `INVALID_HASH_ALGORITHM`, `SHA256`, `SHA1`<br>[Enum: INVALID_HASH_ALGORITHM|SHA256|SHA1] Hash Algorithms. Ordered list of hash algorithms to be used
|
|
137
|
+
<a id="deep-6c6e2f"></a>Deeply nested **Algorithms** block collapsed for readability.
|
|
140
138
|
|
|
141
139
|
#### Enable Forward Proxy TLS Intercept Custom Certificate Private Key
|
|
142
140
|
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
<a id="info-6eeb5b"></a>• [`blindfold_secret_info`](#info-6eeb5b) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-6eeb5b) below.
|
|
146
|
-
|
|
147
|
-
<a id="info-9a0968"></a>• [`clear_secret_info`](#info-9a0968) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-9a0968) below.
|
|
141
|
+
<a id="deep-4fd3d2"></a>Deeply nested **Key** block collapsed for readability.
|
|
148
142
|
|
|
149
143
|
#### Enable Forward Proxy TLS Intercept Custom Certificate Private Key Blindfold Secret Info
|
|
150
144
|
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
<a id="provider-37674c"></a>• [`decryption_provider`](#provider-37674c) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
154
|
-
|
|
155
|
-
<a id="location-cd381c"></a>• [`location`](#location-cd381c) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
156
|
-
|
|
157
|
-
<a id="provider-87c69a"></a>• [`store_provider`](#provider-87c69a) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
145
|
+
<a id="deep-6645c5"></a>Deeply nested **Info** block collapsed for readability.
|
|
158
146
|
|
|
159
147
|
#### Enable Forward Proxy TLS Intercept Custom Certificate Private Key Clear Secret Info
|
|
160
148
|
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
<a id="ref-10c196"></a>• [`provider_ref`](#ref-10c196) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
164
|
-
|
|
165
|
-
<a id="url-c964f8"></a>• [`url`](#url-c964f8) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
149
|
+
<a id="deep-221ddd"></a>Deeply nested **Info** block collapsed for readability.
|
|
166
150
|
|
|
167
151
|
#### Enable Forward Proxy TLS Intercept Policy
|
|
168
152
|
|
|
@@ -172,23 +156,11 @@ A [`policy`](#policy-3a19ff) block (within [`enable_forward_proxy.tls_intercept`
|
|
|
172
156
|
|
|
173
157
|
#### Enable Forward Proxy TLS Intercept Policy Interception Rules
|
|
174
158
|
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
<a id="interception-56a6e3"></a>• [`disable_interception`](#interception-56a6e3) - Optional Block<br>Enable this option
|
|
178
|
-
|
|
179
|
-
<a id="match-4943d0"></a>• [`domain_match`](#match-4943d0) - Optional Block<br>Domains. Domains names<br>See [Domain Match](#match-4943d0) below.
|
|
180
|
-
|
|
181
|
-
<a id="interception-efdc2a"></a>• [`enable_interception`](#interception-efdc2a) - Optional Block<br>Enable this option
|
|
159
|
+
<a id="deep-a7a09a"></a>Deeply nested **Rules** block collapsed for readability.
|
|
182
160
|
|
|
183
161
|
#### Enable Forward Proxy TLS Intercept Policy Interception Rules Domain Match
|
|
184
162
|
|
|
185
|
-
|
|
186
|
-
|
|
187
|
-
<a id="value-3ef7b1"></a>• [`exact_value`](#value-3ef7b1) - Optional String<br>Exact Value. Exact domain name
|
|
188
|
-
|
|
189
|
-
<a id="value-abfb47"></a>• [`regex_value`](#value-abfb47) - Optional String<br>Regex Values of Domains. Regular Expression value for the domain name
|
|
190
|
-
|
|
191
|
-
<a id="value-87b156"></a>• [`suffix_value`](#value-87b156) - Optional String<br>Suffix Value. Suffix of domain name e.g 'xyz.com' will match '*.xyz.com' and 'xyz.com'
|
|
163
|
+
<a id="deep-bd11da"></a>Deeply nested **Match** block collapsed for readability.
|
|
192
164
|
|
|
193
165
|
#### SLI To Global DR
|
|
194
166
|
|
|
@@ -198,13 +170,7 @@ A [`sli_to_global_dr`](#sli-to-global-dr) block supports the following:
|
|
|
198
170
|
|
|
199
171
|
#### SLI To Global DR Global Vn
|
|
200
172
|
|
|
201
|
-
|
|
202
|
-
|
|
203
|
-
<a id="sli-to-global-dr-global-vn-name"></a>• [`name`](#sli-to-global-dr-global-vn-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
204
|
-
|
|
205
|
-
<a id="sli-to-global-dr-global-vn-namespace"></a>• [`namespace`](#sli-to-global-dr-global-vn-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
206
|
-
|
|
207
|
-
<a id="sli-to-global-dr-global-vn-tenant"></a>• [`tenant`](#sli-to-global-dr-global-vn-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
173
|
+
<a id="objref-d5c083"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
208
174
|
|
|
209
175
|
#### SLI To Slo Snat
|
|
210
176
|
|
|
@@ -222,13 +188,7 @@ A [`slo_to_global_dr`](#slo-to-global-dr) block supports the following:
|
|
|
222
188
|
|
|
223
189
|
#### Slo To Global DR Global Vn
|
|
224
190
|
|
|
225
|
-
|
|
226
|
-
|
|
227
|
-
<a id="slo-to-global-dr-global-vn-name"></a>• [`name`](#slo-to-global-dr-global-vn-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
228
|
-
|
|
229
|
-
<a id="slo-to-global-dr-global-vn-namespace"></a>• [`namespace`](#slo-to-global-dr-global-vn-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
230
|
-
|
|
231
|
-
<a id="slo-to-global-dr-global-vn-tenant"></a>• [`tenant`](#slo-to-global-dr-global-vn-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
191
|
+
<a id="objref-df6523"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
232
192
|
|
|
233
193
|
#### Timeouts
|
|
234
194
|
|
|
@@ -242,6 +202,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
242
202
|
|
|
243
203
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
244
204
|
|
|
205
|
+
---
|
|
206
|
+
|
|
207
|
+
## Common Types
|
|
208
|
+
|
|
209
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
210
|
+
|
|
211
|
+
### Object Reference {#common-object-reference}
|
|
212
|
+
|
|
213
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
214
|
+
|
|
215
|
+
| Field | Type | Description |
|
|
216
|
+
| ----- | ---- | ----------- |
|
|
217
|
+
| `name` | String | Name of the referenced object |
|
|
218
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
219
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
220
|
+
|
|
221
|
+
### Transformers {#common-transformers}
|
|
222
|
+
|
|
223
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
224
|
+
|
|
225
|
+
| Value | Description |
|
|
226
|
+
| ----- | ----------- |
|
|
227
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
228
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
229
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
230
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
231
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
232
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
233
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
234
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
235
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
236
|
+
|
|
237
|
+
### HTTP Methods {#common-http-methods}
|
|
238
|
+
|
|
239
|
+
HTTP methods used for request matching.
|
|
240
|
+
|
|
241
|
+
| Value | Description |
|
|
242
|
+
| ----- | ----------- |
|
|
243
|
+
| `ANY` | Match any HTTP method |
|
|
244
|
+
| `GET` | HTTP GET request |
|
|
245
|
+
| `HEAD` | HTTP HEAD request |
|
|
246
|
+
| `POST` | HTTP POST request |
|
|
247
|
+
| `PUT` | HTTP PUT request |
|
|
248
|
+
| `DELETE` | HTTP DELETE request |
|
|
249
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
250
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
251
|
+
| `TRACE` | HTTP TRACE request |
|
|
252
|
+
| `PATCH` | HTTP PATCH request |
|
|
253
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
254
|
+
|
|
255
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
256
|
+
|
|
257
|
+
TLS fingerprint categories for malicious client detection.
|
|
258
|
+
|
|
259
|
+
| Value | Description |
|
|
260
|
+
| ----- | ----------- |
|
|
261
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
262
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
263
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
264
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
265
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
266
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
267
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
268
|
+
|
|
269
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
270
|
+
|
|
271
|
+
IP address threat categories for security filtering.
|
|
272
|
+
|
|
273
|
+
| Value | Description |
|
|
274
|
+
| ----- | ----------- |
|
|
275
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
276
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
277
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
278
|
+
| `BOTNETS` | Known botnet IPs |
|
|
279
|
+
| `SCANNERS` | Network scanner IPs |
|
|
280
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
281
|
+
| `PHISHING` | Phishing-related IPs |
|
|
282
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
283
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
284
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
285
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
286
|
+
| `NETWORK` | Known bad network ranges |
|
|
287
|
+
|
|
245
288
|
## Import
|
|
246
289
|
|
|
247
290
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_network_firewall Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages a Network Firewall resource in F5 Distributed Cloud for network firewall is created by users in system namespace configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_network_firewall (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages a Network Firewall resource in F5 Distributed Cloud for network firewall is created by users in system namespace configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Network Firewall API docs](https://docs.cloud.f5.com/docs-v2/api/network-firewall) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Network Firewall Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages a Network Firewall resource in F5 Distributed Cloud for network firewall is created by users in system namespace configuration.
|
|
19
19
|
|
|
20
20
|
# Basic Network Firewall configuration
|
|
21
21
|
resource "f5xc_network_firewall" "example" {
|
|
@@ -100,13 +100,7 @@ An [`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) blo
|
|
|
100
100
|
|
|
101
101
|
#### Active Enhanced Firewall Policies Enhanced Firewall Policies
|
|
102
102
|
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
<a id="name-09fc53"></a>• [`name`](#name-09fc53) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
106
|
-
|
|
107
|
-
<a id="namespace-102d99"></a>• [`namespace`](#namespace-102d99) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
108
|
-
|
|
109
|
-
<a id="tenant-0eef96"></a>• [`tenant`](#tenant-0eef96) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
103
|
+
<a id="objref-0d92c3"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
110
104
|
|
|
111
105
|
#### Active Fast Acls
|
|
112
106
|
|
|
@@ -116,13 +110,7 @@ An [`active_fast_acls`](#active-fast-acls) block supports the following:
|
|
|
116
110
|
|
|
117
111
|
#### Active Fast Acls Fast Acls
|
|
118
112
|
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
<a id="active-fast-acls-fast-acls-name"></a>• [`name`](#active-fast-acls-fast-acls-name) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
122
|
-
|
|
123
|
-
<a id="active-fast-acls-fast-acls-namespace"></a>• [`namespace`](#active-fast-acls-fast-acls-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
124
|
-
|
|
125
|
-
<a id="active-fast-acls-fast-acls-tenant"></a>• [`tenant`](#active-fast-acls-fast-acls-tenant) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
113
|
+
<a id="objref-d793c7"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
126
114
|
|
|
127
115
|
#### Active Forward Proxy Policies
|
|
128
116
|
|
|
@@ -132,13 +120,7 @@ An [`active_forward_proxy_policies`](#active-forward-proxy-policies) block suppo
|
|
|
132
120
|
|
|
133
121
|
#### Active Forward Proxy Policies Forward Proxy Policies
|
|
134
122
|
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
<a id="name-c2d06e"></a>• [`name`](#name-c2d06e) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
138
|
-
|
|
139
|
-
<a id="namespace-63e125"></a>• [`namespace`](#namespace-63e125) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
140
|
-
|
|
141
|
-
<a id="tenant-e68ab4"></a>• [`tenant`](#tenant-e68ab4) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
123
|
+
<a id="objref-42e2f7"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
142
124
|
|
|
143
125
|
#### Active Network Policies
|
|
144
126
|
|
|
@@ -148,13 +130,7 @@ An [`active_network_policies`](#active-network-policies) block supports the foll
|
|
|
148
130
|
|
|
149
131
|
#### Active Network Policies Network Policies
|
|
150
132
|
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
<a id="name-ad293f"></a>• [`name`](#name-ad293f) - Optional String<br>Name. When a configuration object(e.g. virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. route's) name
|
|
154
|
-
|
|
155
|
-
<a id="namespace-3f338a"></a>• [`namespace`](#namespace-3f338a) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
156
|
-
|
|
157
|
-
<a id="tenant-6ccfde"></a>• [`tenant`](#tenant-6ccfde) - Optional String<br>Tenant. When a configuration object(e.g. virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. route's) tenant
|
|
133
|
+
<a id="objref-502cd4"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
158
134
|
|
|
159
135
|
#### Timeouts
|
|
160
136
|
|
|
@@ -168,6 +144,89 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
168
144
|
|
|
169
145
|
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
170
146
|
|
|
147
|
+
---
|
|
148
|
+
|
|
149
|
+
## Common Types
|
|
150
|
+
|
|
151
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
152
|
+
|
|
153
|
+
### Object Reference {#common-object-reference}
|
|
154
|
+
|
|
155
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
156
|
+
|
|
157
|
+
| Field | Type | Description |
|
|
158
|
+
| ----- | ---- | ----------- |
|
|
159
|
+
| `name` | String | Name of the referenced object |
|
|
160
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
161
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
162
|
+
|
|
163
|
+
### Transformers {#common-transformers}
|
|
164
|
+
|
|
165
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
166
|
+
|
|
167
|
+
| Value | Description |
|
|
168
|
+
| ----- | ----------- |
|
|
169
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
170
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
171
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
172
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
173
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
174
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
175
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
176
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
177
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
178
|
+
|
|
179
|
+
### HTTP Methods {#common-http-methods}
|
|
180
|
+
|
|
181
|
+
HTTP methods used for request matching.
|
|
182
|
+
|
|
183
|
+
| Value | Description |
|
|
184
|
+
| ----- | ----------- |
|
|
185
|
+
| `ANY` | Match any HTTP method |
|
|
186
|
+
| `GET` | HTTP GET request |
|
|
187
|
+
| `HEAD` | HTTP HEAD request |
|
|
188
|
+
| `POST` | HTTP POST request |
|
|
189
|
+
| `PUT` | HTTP PUT request |
|
|
190
|
+
| `DELETE` | HTTP DELETE request |
|
|
191
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
192
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
193
|
+
| `TRACE` | HTTP TRACE request |
|
|
194
|
+
| `PATCH` | HTTP PATCH request |
|
|
195
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
196
|
+
|
|
197
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
198
|
+
|
|
199
|
+
TLS fingerprint categories for malicious client detection.
|
|
200
|
+
|
|
201
|
+
| Value | Description |
|
|
202
|
+
| ----- | ----------- |
|
|
203
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
204
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
205
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
206
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
207
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
208
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
209
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
210
|
+
|
|
211
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
212
|
+
|
|
213
|
+
IP address threat categories for security filtering.
|
|
214
|
+
|
|
215
|
+
| Value | Description |
|
|
216
|
+
| ----- | ----------- |
|
|
217
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
218
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
219
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
220
|
+
| `BOTNETS` | Known botnet IPs |
|
|
221
|
+
| `SCANNERS` | Network scanner IPs |
|
|
222
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
223
|
+
| `PHISHING` | Phishing-related IPs |
|
|
224
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
225
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
226
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
227
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
228
|
+
| `NETWORK` | Known bad network ranges |
|
|
229
|
+
|
|
171
230
|
## Import
|
|
172
231
|
|
|
173
232
|
Import is supported using the following syntax:
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_network_interface Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Networking"
|
|
4
4
|
description: |-
|
|
5
|
-
|
|
5
|
+
Manages a Network Interface resource in F5 Distributed Cloud for network interface represents configuration of a network device. it is created by users in system namespace. configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_network_interface (Resource)
|
|
9
9
|
|
|
10
|
-
|
|
10
|
+
Manages a Network Interface resource in F5 Distributed Cloud for network interface represents configuration of a network device. it is created by users in system namespace. configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** Please refer to [Network Interface API docs](https://docs.cloud.f5.com/docs-v2/api/network-interface) to learn more.
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ description: |-
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Network Interface Resource Example
|
|
18
|
-
#
|
|
18
|
+
# Manages a Network Interface resource in F5 Distributed Cloud for network interface represents configuration of a network device. it is created by users in system namespace. configuration.
|
|
19
19
|
|
|
20
20
|
# Basic Network Interface configuration
|
|
21
21
|
resource "f5xc_network_interface" "example" {
|
|
@@ -229,27 +229,15 @@ A [`router`](#router-6def67) block (within [`ethernet_interface.ipv6_auto_config
|
|
|
229
229
|
|
|
230
230
|
#### Ethernet Interface IPv6 Auto Config Router DNS Config
|
|
231
231
|
|
|
232
|
-
|
|
233
|
-
|
|
234
|
-
<a id="list-97dc97"></a>• [`configured_list`](#list-97dc97) - Optional Block<br>IPV6DnsList<br>See [Configured List](#list-97dc97) below.
|
|
235
|
-
|
|
236
|
-
<a id="dns-4f2edd"></a>• [`local_dns`](#dns-4f2edd) - Optional Block<br>IPV6LocalDnsAddress<br>See [Local DNS](#dns-4f2edd) below.
|
|
232
|
+
<a id="deep-855d8b"></a>Deeply nested **Config** block collapsed for readability.
|
|
237
233
|
|
|
238
234
|
#### Ethernet Interface IPv6 Auto Config Router DNS Config Configured List
|
|
239
235
|
|
|
240
|
-
|
|
241
|
-
|
|
242
|
-
<a id="list-d2555f"></a>• [`dns_list`](#list-d2555f) - Optional List<br>DNS List. List of IPv6 Addresses acting as DNS servers
|
|
236
|
+
<a id="deep-9a771b"></a>Deeply nested **List** block collapsed for readability.
|
|
243
237
|
|
|
244
238
|
#### Ethernet Interface IPv6 Auto Config Router DNS Config Local DNS
|
|
245
239
|
|
|
246
|
-
|
|
247
|
-
|
|
248
|
-
<a id="address-e28f23"></a>• [`configured_address`](#address-e28f23) - Optional String<br>Configured Address. Configured address from the network prefix is chosen as DNS server
|
|
249
|
-
|
|
250
|
-
<a id="address-2afc2b"></a>• [`first_address`](#address-2afc2b) - Optional Block<br>Enable this option
|
|
251
|
-
|
|
252
|
-
<a id="address-dcd04c"></a>• [`last_address`](#address-dcd04c) - Optional Block<br>Enable this option
|
|
240
|
+
<a id="deep-13bdeb"></a>Deeply nested **DNS** block collapsed for readability.
|
|
253
241
|
|
|
254
242
|
#### Ethernet Interface IPv6 Auto Config Router Stateful
|
|
255
243
|
|
|
@@ -267,27 +255,15 @@ A [`stateful`](#stateful-79d901) block (within [`ethernet_interface.ipv6_auto_co
|
|
|
267
255
|
|
|
268
256
|
#### Ethernet Interface IPv6 Auto Config Router Stateful DHCP Networks
|
|
269
257
|
|
|
270
|
-
|
|
271
|
-
|
|
272
|
-
<a id="prefix-565b87"></a>• [`network_prefix`](#prefix-565b87) - Optional String<br>Network Prefix. Network Prefix to be used for IPv6 address auto configuration
|
|
273
|
-
|
|
274
|
-
<a id="settings-33d269"></a>• [`pool_settings`](#settings-33d269) - Optional String Defaults to `INCLUDE_IP_ADDRESSES_FROM_DHCP_POOLS`<br>Possible values are `INCLUDE_IP_ADDRESSES_FROM_DHCP_POOLS`, `EXCLUDE_IP_ADDRESSES_FROM_DHCP_POOLS`<br>[Enum: INCLUDE_IP_ADDRESSES_FROM_DHCP_POOLS|EXCLUDE_IP_ADDRESSES_FROM_DHCP_POOLS] Interface Network Type. Identifies the how to pick the network for Interface. Address ranges in DHCP pool list are used for IP Address allocation Address ranges in DHCP pool list are excluded from IP Address allocation
|
|
275
|
-
|
|
276
|
-
<a id="pools-4f3a5b"></a>• [`pools`](#pools-4f3a5b) - Optional Block<br>DHCP Pools. List of non overlapping IP address ranges<br>See [Pools](#pools-4f3a5b) below.
|
|
258
|
+
<a id="deep-fbbc37"></a>Deeply nested **Networks** block collapsed for readability.
|
|
277
259
|
|
|
278
260
|
#### Ethernet Interface IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
279
261
|
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
<a id="end-ip-8f8c63"></a>• [`end_ip`](#end-ip-8f8c63) - Optional String<br>Ending IPv6. Ending IPv6 address of the pool range. In case of address allocator, offset is derived based on network prefix
|
|
283
|
-
|
|
284
|
-
<a id="start-ip-c200b0"></a>• [`start_ip`](#start-ip-c200b0) - Optional String<br>Starting IPv6. Starting IPv6 address of the pool range. In case of address allocator, offset is derived based on network prefix. 2001::1 with prefix length of 64, start offset is 5
|
|
262
|
+
<a id="deep-2b5c2c"></a>Deeply nested **Pools** block collapsed for readability.
|
|
285
263
|
|
|
286
264
|
#### Ethernet Interface IPv6 Auto Config Router Stateful Interface IP Map
|
|
287
265
|
|
|
288
|
-
|
|
289
|
-
|
|
290
|
-
<a id="map-e391fe"></a>• [`interface_ip_map`](#map-e391fe) - Optional Block<br>Site:Node to IPv6 Mapping. Map of Site:Node to IPv6 address
|
|
266
|
+
<a id="deep-1f1e49"></a>Deeply nested **Map** block collapsed for readability.
|
|
291
267
|
|
|
292
268
|
#### Ethernet Interface Static IP
|
|
293
269
|
|
|
@@ -321,17 +297,11 @@ A [`static_ipv6_address`](#ethernet-interface-static-ipv6-address) block (within
|
|
|
321
297
|
|
|
322
298
|
#### Ethernet Interface Static IPv6 Address Cluster Static IP
|
|
323
299
|
|
|
324
|
-
|
|
325
|
-
|
|
326
|
-
<a id="map-fe379f"></a>• [`interface_ip_map`](#map-fe379f) - Optional Block<br>Node to IP Mapping. Map of Node to Static IP configuration value, Key:Node, Value:IP Address
|
|
300
|
+
<a id="deep-1cbe36"></a>Deeply nested **IP** block collapsed for readability.
|
|
327
301
|
|
|
328
302
|
#### Ethernet Interface Static IPv6 Address Node Static IP
|
|
329
303
|
|
|
330
|
-
|
|
331
|
-
|
|
332
|
-
<a id="default-gw-97edac"></a>• [`default_gw`](#default-gw-97edac) - Optional String<br>Default Gateway. IP address of the default gateway
|
|
333
|
-
|
|
334
|
-
<a id="address-237e0d"></a>• [`ip_address`](#address-237e0d) - Optional String<br>IP address/Prefix Length. IP address of the interface and prefix length
|
|
304
|
+
<a id="deep-f967cc"></a>Deeply nested **IP** block collapsed for readability.
|
|
335
305
|
|
|
336
306
|
#### Layer2 Interface
|
|
337
307
|
|
|
@@ -421,13 +391,90 @@ A [`node_static_ip`](#static-ip-b510ab) block (within [`tunnel_interface.static_
|
|
|
421
391
|
|
|
422
392
|
#### Tunnel Interface Tunnel
|
|
423
393
|
|
|
424
|
-
|
|
394
|
+
<a id="objref-42545e"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
425
395
|
|
|
426
|
-
|
|
427
|
-
|
|
428
|
-
<a id="tunnel-interface-tunnel-namespace"></a>• [`namespace`](#tunnel-interface-tunnel-namespace) - Optional String<br>Namespace. When a configuration object(e.g. virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. route's) namespace
|
|
396
|
+
---
|
|
429
397
|
|
|
430
|
-
|
|
398
|
+
## Common Types
|
|
399
|
+
|
|
400
|
+
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
401
|
+
|
|
402
|
+
### Object Reference {#common-object-reference}
|
|
403
|
+
|
|
404
|
+
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
405
|
+
|
|
406
|
+
| Field | Type | Description |
|
|
407
|
+
| ----- | ---- | ----------- |
|
|
408
|
+
| `name` | String | Name of the referenced object |
|
|
409
|
+
| `namespace` | String | Namespace containing the referenced object |
|
|
410
|
+
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
411
|
+
|
|
412
|
+
### Transformers {#common-transformers}
|
|
413
|
+
|
|
414
|
+
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
415
|
+
|
|
416
|
+
| Value | Description |
|
|
417
|
+
| ----- | ----------- |
|
|
418
|
+
| `LOWER_CASE` | Convert to lowercase |
|
|
419
|
+
| `UPPER_CASE` | Convert to uppercase |
|
|
420
|
+
| `BASE64_DECODE` | Decode base64 content |
|
|
421
|
+
| `NORMALIZE_PATH` | Normalize URL path |
|
|
422
|
+
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
423
|
+
| `URL_DECODE` | Decode URL-encoded characters |
|
|
424
|
+
| `TRIM_LEFT` | Trim leading whitespace |
|
|
425
|
+
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
426
|
+
| `TRIM` | Trim both leading and trailing whitespace |
|
|
427
|
+
|
|
428
|
+
### HTTP Methods {#common-http-methods}
|
|
429
|
+
|
|
430
|
+
HTTP methods used for request matching.
|
|
431
|
+
|
|
432
|
+
| Value | Description |
|
|
433
|
+
| ----- | ----------- |
|
|
434
|
+
| `ANY` | Match any HTTP method |
|
|
435
|
+
| `GET` | HTTP GET request |
|
|
436
|
+
| `HEAD` | HTTP HEAD request |
|
|
437
|
+
| `POST` | HTTP POST request |
|
|
438
|
+
| `PUT` | HTTP PUT request |
|
|
439
|
+
| `DELETE` | HTTP DELETE request |
|
|
440
|
+
| `CONNECT` | HTTP CONNECT request |
|
|
441
|
+
| `OPTIONS` | HTTP OPTIONS request |
|
|
442
|
+
| `TRACE` | HTTP TRACE request |
|
|
443
|
+
| `PATCH` | HTTP PATCH request |
|
|
444
|
+
| `COPY` | HTTP COPY request (WebDAV) |
|
|
445
|
+
|
|
446
|
+
### TLS Fingerprints {#common-tls-fingerprints}
|
|
447
|
+
|
|
448
|
+
TLS fingerprint categories for malicious client detection.
|
|
449
|
+
|
|
450
|
+
| Value | Description |
|
|
451
|
+
| ----- | ----------- |
|
|
452
|
+
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
453
|
+
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
454
|
+
| `ADWARE` | Adware-associated fingerprints |
|
|
455
|
+
| `DRIDEX` | Dridex malware fingerprints |
|
|
456
|
+
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
457
|
+
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
458
|
+
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
459
|
+
|
|
460
|
+
### IP Threat Categories {#common-ip-threat-categories}
|
|
461
|
+
|
|
462
|
+
IP address threat categories for security filtering.
|
|
463
|
+
|
|
464
|
+
| Value | Description |
|
|
465
|
+
| ----- | ----------- |
|
|
466
|
+
| `SPAM_SOURCES` | Known spam sources |
|
|
467
|
+
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
468
|
+
| `WEB_ATTACKS` | Web attack sources |
|
|
469
|
+
| `BOTNETS` | Known botnet IPs |
|
|
470
|
+
| `SCANNERS` | Network scanner IPs |
|
|
471
|
+
| `REPUTATION` | Poor reputation IPs |
|
|
472
|
+
| `PHISHING` | Phishing-related IPs |
|
|
473
|
+
| `PROXY` | Anonymous proxy IPs |
|
|
474
|
+
| `MOBILE_THREATS` | Mobile threat sources |
|
|
475
|
+
| `TOR_PROXY` | Tor exit nodes |
|
|
476
|
+
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
477
|
+
| `NETWORK` | Known bad network ranges |
|
|
431
478
|
|
|
432
479
|
## Import
|
|
433
480
|
|