@robinmordasiewicz/f5xc-terraform-mcp 3.0.2 → 3.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/certificate.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/data-sources/workload.md +2 -2
- package/dist/docs/resources/certificate.md +4 -56
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/irule.md +7 -5
- package/dist/docs/resources/network_policy.md +210 -37
- package/dist/docs/resources/policer.md +10 -50
- package/dist/docs/resources/securemesh_site.md +1614 -253
- package/dist/docs/resources/site.md +12 -819
- package/dist/docs/resources/workload.md +9 -2951
- package/dist/docs/specifications/api/CHANGELOG.md +4 -4
- package/dist/docs/specifications/api/README.md +2 -2
- package/dist/docs/specifications/api/domains/admin_console_and_ui.json +29 -25
- package/dist/docs/specifications/api/domains/ai_services.json +23 -21
- package/dist/docs/specifications/api/domains/api.json +201 -173
- package/dist/docs/specifications/api/domains/authentication.json +57 -45
- package/dist/docs/specifications/api/domains/bigip.json +106 -94
- package/dist/docs/specifications/api/domains/billing_and_usage.json +71 -63
- package/dist/docs/specifications/api/domains/blindfold.json +141 -109
- package/dist/docs/specifications/api/domains/bot_and_threat_defense.json +77 -65
- package/dist/docs/specifications/api/domains/cdn.json +371 -177
- package/dist/docs/specifications/api/domains/ce_management.json +137 -111
- package/dist/docs/specifications/api/domains/certificates.json +81 -75
- package/dist/docs/specifications/api/domains/cloud_infrastructure.json +136 -112
- package/dist/docs/specifications/api/domains/container_services.json +123 -91
- package/dist/docs/specifications/api/domains/data_and_privacy_security.json +72 -66
- package/dist/docs/specifications/api/domains/data_intelligence.json +68 -62
- package/dist/docs/specifications/api/domains/ddos.json +168 -154
- package/dist/docs/specifications/api/domains/dns.json +160 -148
- package/dist/docs/specifications/api/domains/managed_kubernetes.json +91 -85
- package/dist/docs/specifications/api/domains/marketplace.json +111 -103
- package/dist/docs/specifications/api/domains/network.json +269 -230
- package/dist/docs/specifications/api/domains/network_security.json +243 -187
- package/dist/docs/specifications/api/domains/nginx_one.json +70 -62
- package/dist/docs/specifications/api/domains/object_storage.json +12 -12
- package/dist/docs/specifications/api/domains/observability.json +231 -102
- package/dist/docs/specifications/api/domains/rate_limiting.json +58 -52
- package/dist/docs/specifications/api/domains/secops_and_incident_response.json +42 -36
- package/dist/docs/specifications/api/domains/service_mesh.json +143 -119
- package/dist/docs/specifications/api/domains/shape.json +327 -313
- package/dist/docs/specifications/api/domains/sites.json +536 -349
- package/dist/docs/specifications/api/domains/statistics.json +401 -225
- package/dist/docs/specifications/api/domains/support.json +116 -108
- package/dist/docs/specifications/api/domains/telemetry_and_insights.json +118 -72
- package/dist/docs/specifications/api/domains/tenant_and_identity.json +298 -268
- package/dist/docs/specifications/api/domains/threat_campaign.json +126 -66
- package/dist/docs/specifications/api/domains/users.json +76 -66
- package/dist/docs/specifications/api/domains/virtual.json +492 -244
- package/dist/docs/specifications/api/domains/vpm_and_node_management.json +1 -1
- package/dist/docs/specifications/api/domains/waf.json +227 -139
- package/dist/docs/specifications/api/index.json +99 -4
- package/dist/docs/specifications/api/openapi.json +3409 -2616
- package/dist/docs/specifications/api/openapi.yaml +5304 -2616
- package/package.json +1 -1
- package/dist/docs/data-sources/addon_service.md +0 -143
- package/dist/docs/data-sources/addon_service_activation_status.md +0 -144
- package/dist/docs/data-sources/addon_subscription.md +0 -134
- package/dist/docs/data-sources/allowed_tenant.md +0 -134
- package/dist/docs/data-sources/api_credential.md +0 -134
- package/dist/docs/data-sources/bigip_irule.md +0 -134
- package/dist/docs/data-sources/child_tenant.md +0 -134
- package/dist/docs/data-sources/child_tenant_manager.md +0 -134
- package/dist/docs/data-sources/contact.md +0 -134
- package/dist/docs/data-sources/customer_support.md +0 -134
- package/dist/docs/data-sources/dns_lb_health_check.md +0 -134
- package/dist/docs/data-sources/dns_lb_pool.md +0 -134
- package/dist/docs/data-sources/dns_load_balancer.md +0 -134
- package/dist/docs/data-sources/dns_zone.md +0 -145
- package/dist/docs/data-sources/geo_location_set.md +0 -134
- package/dist/docs/data-sources/ike1.md +0 -134
- package/dist/docs/data-sources/ike2.md +0 -134
- package/dist/docs/data-sources/ike_phase1_profile.md +0 -134
- package/dist/docs/data-sources/ike_phase2_profile.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +0 -134
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +0 -134
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +0 -134
- package/dist/docs/data-sources/infraprotect_tunnel.md +0 -134
- package/dist/docs/data-sources/k8s_cluster.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_admission.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_policy.md +0 -134
- package/dist/docs/data-sources/managed_tenant.md +0 -134
- package/dist/docs/data-sources/namespace.md +0 -141
- package/dist/docs/data-sources/oidc_provider.md +0 -134
- package/dist/docs/data-sources/quota.md +0 -134
- package/dist/docs/data-sources/registration.md +0 -134
- package/dist/docs/data-sources/report_config.md +0 -134
- package/dist/docs/data-sources/role.md +0 -134
- package/dist/docs/data-sources/secret_policy.md +0 -134
- package/dist/docs/data-sources/secret_policy_rule.md +0 -134
- package/dist/docs/data-sources/securemesh_site_v2.md +0 -134
- package/dist/docs/data-sources/srv6_network_slice.md +0 -134
- package/dist/docs/data-sources/tenant_profile.md +0 -134
- package/dist/docs/data-sources/ticket_tracking_system.md +0 -134
- package/dist/docs/data-sources/token.md +0 -134
- package/dist/docs/data-sources/tpm_api_key.md +0 -134
- package/dist/docs/data-sources/tpm_category.md +0 -134
- package/dist/docs/data-sources/tpm_manager.md +0 -134
- package/dist/docs/data-sources/virtual_k8s.md +0 -134
- package/dist/docs/data-sources/voltshare_admin_policy.md +0 -134
- package/dist/docs/resources/addon_subscription.md +0 -213
- package/dist/docs/resources/allowed_tenant.md +0 -181
- package/dist/docs/resources/api_credential.md +0 -184
- package/dist/docs/resources/bigip_irule.md +0 -173
- package/dist/docs/resources/child_tenant.md +0 -237
- package/dist/docs/resources/child_tenant_manager.md +0 -201
- package/dist/docs/resources/contact.md +0 -187
- package/dist/docs/resources/customer_support.md +0 -253
- package/dist/docs/resources/dns_lb_health_check.md +0 -249
- package/dist/docs/resources/dns_lb_pool.md +0 -310
- package/dist/docs/resources/dns_load_balancer.md +0 -309
- package/dist/docs/resources/dns_zone.md +0 -790
- package/dist/docs/resources/geo_location_set.md +0 -180
- package/dist/docs/resources/ike1.md +0 -216
- package/dist/docs/resources/ike2.md +0 -210
- package/dist/docs/resources/ike_phase1_profile.md +0 -224
- package/dist/docs/resources/ike_phase2_profile.md +0 -214
- package/dist/docs/resources/infraprotect_asn.md +0 -183
- package/dist/docs/resources/infraprotect_asn_prefix.md +0 -181
- package/dist/docs/resources/infraprotect_deny_list_rule.md +0 -191
- package/dist/docs/resources/infraprotect_firewall_rule.md +0 -288
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +0 -169
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +0 -191
- package/dist/docs/resources/infraprotect_tunnel.md +0 -289
- package/dist/docs/resources/k8s_cluster.md +0 -326
- package/dist/docs/resources/k8s_cluster_role.md +0 -222
- package/dist/docs/resources/k8s_cluster_role_binding.md +0 -207
- package/dist/docs/resources/k8s_pod_security_admission.md +0 -199
- package/dist/docs/resources/k8s_pod_security_policy.md +0 -337
- package/dist/docs/resources/managed_tenant.md +0 -193
- package/dist/docs/resources/namespace.md +0 -170
- package/dist/docs/resources/oidc_provider.md +0 -291
- package/dist/docs/resources/quota.md +0 -187
- package/dist/docs/resources/registration.md +0 -489
- package/dist/docs/resources/report_config.md +0 -237
- package/dist/docs/resources/role.md +0 -183
- package/dist/docs/resources/secret_policy.md +0 -240
- package/dist/docs/resources/secret_policy_rule.md +0 -198
- package/dist/docs/resources/securemesh_site_v2.md +0 -2027
- package/dist/docs/resources/srv6_network_slice.md +0 -175
- package/dist/docs/resources/tenant_profile.md +0 -233
- package/dist/docs/resources/ticket_tracking_system.md +0 -195
- package/dist/docs/resources/token.md +0 -170
- package/dist/docs/resources/tpm_api_key.md +0 -191
- package/dist/docs/resources/tpm_category.md +0 -191
- package/dist/docs/resources/tpm_manager.md +0 -167
- package/dist/docs/resources/virtual_k8s.md +0 -209
- package/dist/docs/resources/voltshare_admin_policy.md +0 -271
|
@@ -1,224 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_ike_phase1_profile Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "VPN"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages a IKE Phase1 Profile resource in F5 Distributed Cloud for ike phase1 profile configuration.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_ike_phase1_profile (Resource)
|
|
9
|
-
|
|
10
|
-
Manages a IKE Phase1 Profile resource in F5 Distributed Cloud for ike phase1 profile configuration.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# IKE Phase1 Profile Resource Example
|
|
18
|
-
# Manages a IKE Phase1 Profile resource in F5 Distributed Cloud for ike phase1 profile configuration.
|
|
19
|
-
|
|
20
|
-
# Basic IKE Phase1 Profile configuration
|
|
21
|
-
resource "f5xc_ike_phase1_profile" "example" {
|
|
22
|
-
name = "example-ike-phase1-profile"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# [OneOf: ike_keylifetime_hours, ike_keylifetime_minutes, u...
|
|
36
|
-
ike_keylifetime_hours {
|
|
37
|
-
# Configure ike_keylifetime_hours settings
|
|
38
|
-
}
|
|
39
|
-
# Minutes. Set IKE Key Lifetime in minutes
|
|
40
|
-
ike_keylifetime_minutes {
|
|
41
|
-
# Configure ike_keylifetime_minutes settings
|
|
42
|
-
}
|
|
43
|
-
# [OneOf: reauth_disabled, reauth_timeout_days, reauth_time...
|
|
44
|
-
reauth_disabled {
|
|
45
|
-
# Configure reauth_disabled settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the IKE Phase1 Profile. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the IKE Phase1 Profile will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
<a id="authentication-algos"></a>• [`authentication_algos`](#authentication-algos) - Optional List Defaults to `AUTH_ALG_DEFAULT`<br>Possible values are `AUTH_ALG_DEFAULT`, `SHA256_HMAC`, `SHA384_HMAC`, `SHA512_HMAC`, `AUTH_ALG_NONE`<br>[Enum: AUTH_ALG_DEFAULT|SHA256_HMAC|SHA384_HMAC|SHA512_HMAC|AUTH_ALG_NONE] Authentication Algorithms. Choose one or more Authentication Algorithm. Use None option when using the AES-gcm or AES-ccm encryption algorithms
|
|
70
|
-
|
|
71
|
-
<a id="dh-group"></a>• [`dh_group`](#dh-group) - Optional List Defaults to `DH_GROUP_DEFAULT`<br>Possible values are `DH_GROUP_DEFAULT`, `DH_GROUP_14`, `DH_GROUP_15`, `DH_GROUP_16`, `DH_GROUP_17`, `DH_GROUP_18`, `DH_GROUP_19`, `DH_GROUP_20`, `DH_GROUP_21`, `DH_GROUP_26`<br>[Enum: DH_GROUP_DEFAULT|DH_GROUP_14|DH_GROUP_15|DH_GROUP_16|DH_GROUP_17|DH_GROUP_18|DH_GROUP_19|DH_GROUP_20|DH_GROUP_21|DH_GROUP_26] Diffie Hellman Groups. Choose the acceptable Diffie Hellman (DH) Group or Groups that you are willing to accept as part of this profile
|
|
72
|
-
|
|
73
|
-
<a id="encryption-algos"></a>• [`encryption_algos`](#encryption-algos) - Optional List Defaults to `ENC_ALG_DEFAULT`<br>Possible values are `ENC_ALG_DEFAULT`, `AES128_CBC`, `AES192_CBC`, `AES256_CBC`, `TRIPLE_DES_CBC`, `AES128_GCM`, `AES192_GCM`, `AES256_GCM`<br>[Enum: ENC_ALG_DEFAULT|AES128_CBC|AES192_CBC|AES256_CBC|TRIPLE_DES_CBC|AES128_GCM|AES192_GCM|AES256_GCM] Configure Encryption Algorithms. Choose one or more encryption algorithms
|
|
74
|
-
|
|
75
|
-
-> **One of the following:**
|
|
76
|
-
• <a id="ike-keylifetime-hours"></a>[`ike_keylifetime_hours`](#ike-keylifetime-hours) - Optional Block<br>Hours. Input Hours<br>See [IKE Keylifetime Hours](#ike-keylifetime-hours) below for details.
|
|
77
|
-
<br><br>• <a id="ike-keylifetime-minutes"></a>[`ike_keylifetime_minutes`](#ike-keylifetime-minutes) - Optional Block<br>Minutes. Set IKE Key Lifetime in minutes<br>See [IKE Keylifetime Minutes](#ike-keylifetime-minutes) below for details.
|
|
78
|
-
|
|
79
|
-
<a id="prf"></a>• [`prf`](#prf) - Optional List Defaults to `PRF_DEFAULT`<br>Possible values are `PRF_DEFAULT`, `PRFSHA256`, `PRFSHA384`, `PRFSHA512`<br>[Enum: PRF_DEFAULT|PRFSHA256|PRFSHA384|PRFSHA512] PseudoRandomFunction. Select PseudoRandomFunction for IKE SA
|
|
80
|
-
|
|
81
|
-
-> **One of the following:**
|
|
82
|
-
• <a id="reauth-disabled"></a>[`reauth_disabled`](#reauth-disabled) - Optional Block<br>Enable this option
|
|
83
|
-
<br><br>• <a id="reauth-timeout-days"></a>[`reauth_timeout_days`](#reauth-timeout-days) - Optional Block<br>Days. Set Duration in days<br>See [Reauth Timeout Days](#reauth-timeout-days) below for details.
|
|
84
|
-
<br><br>• <a id="reauth-timeout-hours"></a>[`reauth_timeout_hours`](#reauth-timeout-hours) - Optional Block<br>Hours. Input Hours<br>See [Reauth Timeout Hours](#reauth-timeout-hours) below for details.
|
|
85
|
-
|
|
86
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
87
|
-
|
|
88
|
-
<a id="use-default-keylifetime"></a>• [`use_default_keylifetime`](#use-default-keylifetime) - Optional Block<br>Enable this option
|
|
89
|
-
|
|
90
|
-
### Attributes Reference
|
|
91
|
-
|
|
92
|
-
In addition to all arguments above, the following attributes are exported:
|
|
93
|
-
|
|
94
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
95
|
-
|
|
96
|
-
---
|
|
97
|
-
|
|
98
|
-
#### IKE Keylifetime Hours
|
|
99
|
-
|
|
100
|
-
An [`ike_keylifetime_hours`](#ike-keylifetime-hours) block supports the following:
|
|
101
|
-
|
|
102
|
-
<a id="ike-keylifetime-hours-duration"></a>• [`duration`](#ike-keylifetime-hours-duration) - Optional Number<br>Duration
|
|
103
|
-
|
|
104
|
-
#### IKE Keylifetime Minutes
|
|
105
|
-
|
|
106
|
-
An [`ike_keylifetime_minutes`](#ike-keylifetime-minutes) block supports the following:
|
|
107
|
-
|
|
108
|
-
<a id="ike-keylifetime-minutes-duration"></a>• [`duration`](#ike-keylifetime-minutes-duration) - Optional Number<br>Duration
|
|
109
|
-
|
|
110
|
-
#### Reauth Timeout Days
|
|
111
|
-
|
|
112
|
-
A [`reauth_timeout_days`](#reauth-timeout-days) block supports the following:
|
|
113
|
-
|
|
114
|
-
<a id="reauth-timeout-days-duration"></a>• [`duration`](#reauth-timeout-days-duration) - Optional Number<br>Duration
|
|
115
|
-
|
|
116
|
-
#### Reauth Timeout Hours
|
|
117
|
-
|
|
118
|
-
A [`reauth_timeout_hours`](#reauth-timeout-hours) block supports the following:
|
|
119
|
-
|
|
120
|
-
<a id="reauth-timeout-hours-duration"></a>• [`duration`](#reauth-timeout-hours-duration) - Optional Number<br>Duration
|
|
121
|
-
|
|
122
|
-
#### Timeouts
|
|
123
|
-
|
|
124
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
125
|
-
|
|
126
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
127
|
-
|
|
128
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
129
|
-
|
|
130
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
131
|
-
|
|
132
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
133
|
-
|
|
134
|
-
---
|
|
135
|
-
|
|
136
|
-
## Common Types
|
|
137
|
-
|
|
138
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
139
|
-
|
|
140
|
-
### Object Reference {#common-object-reference}
|
|
141
|
-
|
|
142
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
143
|
-
|
|
144
|
-
| Field | Type | Description |
|
|
145
|
-
| ----- | ---- | ----------- |
|
|
146
|
-
| `name` | String | Name of the referenced object |
|
|
147
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
148
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
149
|
-
|
|
150
|
-
### Transformers {#common-transformers}
|
|
151
|
-
|
|
152
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
153
|
-
|
|
154
|
-
| Value | Description |
|
|
155
|
-
| ----- | ----------- |
|
|
156
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
157
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
158
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
159
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
160
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
161
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
162
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
163
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
164
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
165
|
-
|
|
166
|
-
### HTTP Methods {#common-http-methods}
|
|
167
|
-
|
|
168
|
-
HTTP methods used for request matching.
|
|
169
|
-
|
|
170
|
-
| Value | Description |
|
|
171
|
-
| ----- | ----------- |
|
|
172
|
-
| `ANY` | Match any HTTP method |
|
|
173
|
-
| `GET` | HTTP GET request |
|
|
174
|
-
| `HEAD` | HTTP HEAD request |
|
|
175
|
-
| `POST` | HTTP POST request |
|
|
176
|
-
| `PUT` | HTTP PUT request |
|
|
177
|
-
| `DELETE` | HTTP DELETE request |
|
|
178
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
179
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
180
|
-
| `TRACE` | HTTP TRACE request |
|
|
181
|
-
| `PATCH` | HTTP PATCH request |
|
|
182
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
183
|
-
|
|
184
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
185
|
-
|
|
186
|
-
TLS fingerprint categories for malicious client detection.
|
|
187
|
-
|
|
188
|
-
| Value | Description |
|
|
189
|
-
| ----- | ----------- |
|
|
190
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
191
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
192
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
193
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
194
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
195
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
196
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
197
|
-
|
|
198
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
199
|
-
|
|
200
|
-
IP address threat categories for security filtering.
|
|
201
|
-
|
|
202
|
-
| Value | Description |
|
|
203
|
-
| ----- | ----------- |
|
|
204
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
205
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
206
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
207
|
-
| `BOTNETS` | Known botnet IPs |
|
|
208
|
-
| `SCANNERS` | Network scanner IPs |
|
|
209
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
210
|
-
| `PHISHING` | Phishing-related IPs |
|
|
211
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
212
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
213
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
214
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
215
|
-
| `NETWORK` | Known bad network ranges |
|
|
216
|
-
|
|
217
|
-
## Import
|
|
218
|
-
|
|
219
|
-
Import is supported using the following syntax:
|
|
220
|
-
|
|
221
|
-
```shell
|
|
222
|
-
# Import using namespace/name format
|
|
223
|
-
terraform import f5xc_ike_phase1_profile.example system/example
|
|
224
|
-
```
|
|
@@ -1,214 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_ike_phase2_profile Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "VPN"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages a IKE Phase2 Profile resource in F5 Distributed Cloud for ike phase2 profile configuration.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_ike_phase2_profile (Resource)
|
|
9
|
-
|
|
10
|
-
Manages a IKE Phase2 Profile resource in F5 Distributed Cloud for ike phase2 profile configuration.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# IKE Phase2 Profile Resource Example
|
|
18
|
-
# Manages a IKE Phase2 Profile resource in F5 Distributed Cloud for ike phase2 profile configuration.
|
|
19
|
-
|
|
20
|
-
# Basic IKE Phase2 Profile configuration
|
|
21
|
-
resource "f5xc_ike_phase2_profile" "example" {
|
|
22
|
-
name = "example-ike-phase2-profile"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# [OneOf: dh_group_set, disable_pfs; Default: disable_pfs] ...
|
|
36
|
-
dh_group_set {
|
|
37
|
-
# Configure dh_group_set settings
|
|
38
|
-
}
|
|
39
|
-
# Enable this option
|
|
40
|
-
disable_pfs {
|
|
41
|
-
# Configure disable_pfs settings
|
|
42
|
-
}
|
|
43
|
-
# [OneOf: ike_keylifetime_hours, ike_keylifetime_minutes, u...
|
|
44
|
-
ike_keylifetime_hours {
|
|
45
|
-
# Configure ike_keylifetime_hours settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the IKE Phase2 Profile. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the IKE Phase2 Profile will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
<a id="authentication-algos"></a>• [`authentication_algos`](#authentication-algos) - Optional List Defaults to `AUTH_ALG_DEFAULT`<br>Possible values are `AUTH_ALG_DEFAULT`, `SHA256_HMAC`, `SHA384_HMAC`, `SHA512_HMAC`, `AUTH_ALG_NONE`<br>[Enum: AUTH_ALG_DEFAULT|SHA256_HMAC|SHA384_HMAC|SHA512_HMAC|AUTH_ALG_NONE] Authentication Algorithms. Choose one or more Authentication Algorithm. Use None option when using the AES-gcm or AES-ccm encryption algorithms
|
|
70
|
-
|
|
71
|
-
-> **One of the following:**
|
|
72
|
-
• <a id="dh-group-set"></a>[`dh_group_set`](#dh-group-set) - Optional Block<br>Diffie Hellman Groups. Choose the acceptable Diffie Hellman(DH) Group or Groups that you are willing to accept as part of this profile<br>See [Dh Group Set](#dh-group-set) below for details.
|
|
73
|
-
|
|
74
|
-
<a id="disable-pfs"></a>• [`disable_pfs`](#disable-pfs) - Optional Block<br>Enable this option
|
|
75
|
-
|
|
76
|
-
<a id="encryption-algos"></a>• [`encryption_algos`](#encryption-algos) - Optional List Defaults to `ENC_ALG_DEFAULT`<br>Possible values are `ENC_ALG_DEFAULT`, `AES128_CBC`, `AES192_CBC`, `AES256_CBC`, `TRIPLE_DES_CBC`, `AES128_GCM`, `AES192_GCM`, `AES256_GCM`<br>[Enum: ENC_ALG_DEFAULT|AES128_CBC|AES192_CBC|AES256_CBC|TRIPLE_DES_CBC|AES128_GCM|AES192_GCM|AES256_GCM] Encryption Algorithms. Choose one or more encryption algorithms
|
|
77
|
-
|
|
78
|
-
-> **One of the following:**
|
|
79
|
-
• <a id="ike-keylifetime-hours"></a>[`ike_keylifetime_hours`](#ike-keylifetime-hours) - Optional Block<br>Hours. Input Hours<br>See [IKE Keylifetime Hours](#ike-keylifetime-hours) below for details.
|
|
80
|
-
<br><br>• <a id="ike-keylifetime-minutes"></a>[`ike_keylifetime_minutes`](#ike-keylifetime-minutes) - Optional Block<br>Minutes. Set IKE Key Lifetime in minutes<br>See [IKE Keylifetime Minutes](#ike-keylifetime-minutes) below for details.
|
|
81
|
-
|
|
82
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
83
|
-
|
|
84
|
-
<a id="use-default-keylifetime"></a>• [`use_default_keylifetime`](#use-default-keylifetime) - Optional Block<br>Enable this option
|
|
85
|
-
|
|
86
|
-
### Attributes Reference
|
|
87
|
-
|
|
88
|
-
In addition to all arguments above, the following attributes are exported:
|
|
89
|
-
|
|
90
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
91
|
-
|
|
92
|
-
---
|
|
93
|
-
|
|
94
|
-
#### Dh Group Set
|
|
95
|
-
|
|
96
|
-
A [`dh_group_set`](#dh-group-set) block supports the following:
|
|
97
|
-
|
|
98
|
-
<a id="dh-group-set-dh-groups"></a>• [`dh_groups`](#dh-group-set-dh-groups) - Optional List Defaults to `DH_GROUP_DEFAULT`<br>Possible values are `DH_GROUP_DEFAULT`, `DH_GROUP_14`, `DH_GROUP_15`, `DH_GROUP_16`, `DH_GROUP_17`, `DH_GROUP_18`, `DH_GROUP_19`, `DH_GROUP_20`, `DH_GROUP_21`, `DH_GROUP_26`<br>[Enum: DH_GROUP_DEFAULT|DH_GROUP_14|DH_GROUP_15|DH_GROUP_16|DH_GROUP_17|DH_GROUP_18|DH_GROUP_19|DH_GROUP_20|DH_GROUP_21|DH_GROUP_26] Diffie Hellman Groups. Choose the acceptable Diffie Hellman(DH) Group or Groups that you are willing to accept as part of this profile
|
|
99
|
-
|
|
100
|
-
#### IKE Keylifetime Hours
|
|
101
|
-
|
|
102
|
-
An [`ike_keylifetime_hours`](#ike-keylifetime-hours) block supports the following:
|
|
103
|
-
|
|
104
|
-
<a id="ike-keylifetime-hours-duration"></a>• [`duration`](#ike-keylifetime-hours-duration) - Optional Number<br>Duration
|
|
105
|
-
|
|
106
|
-
#### IKE Keylifetime Minutes
|
|
107
|
-
|
|
108
|
-
An [`ike_keylifetime_minutes`](#ike-keylifetime-minutes) block supports the following:
|
|
109
|
-
|
|
110
|
-
<a id="ike-keylifetime-minutes-duration"></a>• [`duration`](#ike-keylifetime-minutes-duration) - Optional Number<br>Duration
|
|
111
|
-
|
|
112
|
-
#### Timeouts
|
|
113
|
-
|
|
114
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
115
|
-
|
|
116
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
117
|
-
|
|
118
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
119
|
-
|
|
120
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
121
|
-
|
|
122
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
123
|
-
|
|
124
|
-
---
|
|
125
|
-
|
|
126
|
-
## Common Types
|
|
127
|
-
|
|
128
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
129
|
-
|
|
130
|
-
### Object Reference {#common-object-reference}
|
|
131
|
-
|
|
132
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
133
|
-
|
|
134
|
-
| Field | Type | Description |
|
|
135
|
-
| ----- | ---- | ----------- |
|
|
136
|
-
| `name` | String | Name of the referenced object |
|
|
137
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
138
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
139
|
-
|
|
140
|
-
### Transformers {#common-transformers}
|
|
141
|
-
|
|
142
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
143
|
-
|
|
144
|
-
| Value | Description |
|
|
145
|
-
| ----- | ----------- |
|
|
146
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
147
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
148
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
149
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
150
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
151
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
152
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
153
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
154
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
155
|
-
|
|
156
|
-
### HTTP Methods {#common-http-methods}
|
|
157
|
-
|
|
158
|
-
HTTP methods used for request matching.
|
|
159
|
-
|
|
160
|
-
| Value | Description |
|
|
161
|
-
| ----- | ----------- |
|
|
162
|
-
| `ANY` | Match any HTTP method |
|
|
163
|
-
| `GET` | HTTP GET request |
|
|
164
|
-
| `HEAD` | HTTP HEAD request |
|
|
165
|
-
| `POST` | HTTP POST request |
|
|
166
|
-
| `PUT` | HTTP PUT request |
|
|
167
|
-
| `DELETE` | HTTP DELETE request |
|
|
168
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
169
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
170
|
-
| `TRACE` | HTTP TRACE request |
|
|
171
|
-
| `PATCH` | HTTP PATCH request |
|
|
172
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
173
|
-
|
|
174
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
175
|
-
|
|
176
|
-
TLS fingerprint categories for malicious client detection.
|
|
177
|
-
|
|
178
|
-
| Value | Description |
|
|
179
|
-
| ----- | ----------- |
|
|
180
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
181
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
182
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
183
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
184
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
185
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
186
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
187
|
-
|
|
188
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
189
|
-
|
|
190
|
-
IP address threat categories for security filtering.
|
|
191
|
-
|
|
192
|
-
| Value | Description |
|
|
193
|
-
| ----- | ----------- |
|
|
194
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
195
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
196
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
197
|
-
| `BOTNETS` | Known botnet IPs |
|
|
198
|
-
| `SCANNERS` | Network scanner IPs |
|
|
199
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
200
|
-
| `PHISHING` | Phishing-related IPs |
|
|
201
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
202
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
203
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
204
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
205
|
-
| `NETWORK` | Known bad network ranges |
|
|
206
|
-
|
|
207
|
-
## Import
|
|
208
|
-
|
|
209
|
-
Import is supported using the following syntax:
|
|
210
|
-
|
|
211
|
-
```shell
|
|
212
|
-
# Import using namespace/name format
|
|
213
|
-
terraform import f5xc_ike_phase2_profile.example system/example
|
|
214
|
-
```
|
|
@@ -1,183 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_infraprotect_asn Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Infrastructure Protection"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages DDoS transit ASN in F5 Distributed Cloud.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_infraprotect_asn (Resource)
|
|
9
|
-
|
|
10
|
-
Manages DDoS transit ASN in F5 Distributed Cloud.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Infraprotect Asn Resource Example
|
|
18
|
-
# Manages DDoS transit ASN in F5 Distributed Cloud.
|
|
19
|
-
|
|
20
|
-
# Basic Infraprotect Asn configuration
|
|
21
|
-
resource "f5xc_infraprotect_asn" "example" {
|
|
22
|
-
name = "example-infraprotect-asn"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# [OneOf: bgp_session_disabled, bgp_session_enabled] Enable...
|
|
36
|
-
bgp_session_disabled {
|
|
37
|
-
# Configure bgp_session_disabled settings
|
|
38
|
-
}
|
|
39
|
-
# Enable this option
|
|
40
|
-
bgp_session_enabled {
|
|
41
|
-
# Configure bgp_session_enabled settings
|
|
42
|
-
}
|
|
43
|
-
}
|
|
44
|
-
```
|
|
45
|
-
|
|
46
|
-
<!-- schema generated by tfplugindocs -->
|
|
47
|
-
## Argument Reference
|
|
48
|
-
|
|
49
|
-
### Metadata Argument Reference
|
|
50
|
-
|
|
51
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Infraprotect Asn. Must be unique within the namespace
|
|
52
|
-
|
|
53
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Infraprotect Asn will be created
|
|
54
|
-
|
|
55
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
56
|
-
|
|
57
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
58
|
-
|
|
59
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
60
|
-
|
|
61
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
62
|
-
|
|
63
|
-
### Spec Argument Reference
|
|
64
|
-
|
|
65
|
-
<a id="asn"></a>• [`asn`](#asn) - Optional Number<br>ASN. 2-byte or 4-byte Autonomous System Number (ASN)
|
|
66
|
-
|
|
67
|
-
-> **One of the following:**
|
|
68
|
-
• <a id="bgp-session-disabled"></a>[`bgp_session_disabled`](#bgp-session-disabled) - Optional Block<br>Enable this option
|
|
69
|
-
<br><br>• <a id="bgp-session-enabled"></a>[`bgp_session_enabled`](#bgp-session-enabled) - Optional Block<br>Enable this option
|
|
70
|
-
|
|
71
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
72
|
-
|
|
73
|
-
### Attributes Reference
|
|
74
|
-
|
|
75
|
-
In addition to all arguments above, the following attributes are exported:
|
|
76
|
-
|
|
77
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
78
|
-
|
|
79
|
-
---
|
|
80
|
-
|
|
81
|
-
#### Timeouts
|
|
82
|
-
|
|
83
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
84
|
-
|
|
85
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
86
|
-
|
|
87
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
88
|
-
|
|
89
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
90
|
-
|
|
91
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
92
|
-
|
|
93
|
-
---
|
|
94
|
-
|
|
95
|
-
## Common Types
|
|
96
|
-
|
|
97
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
98
|
-
|
|
99
|
-
### Object Reference {#common-object-reference}
|
|
100
|
-
|
|
101
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
102
|
-
|
|
103
|
-
| Field | Type | Description |
|
|
104
|
-
| ----- | ---- | ----------- |
|
|
105
|
-
| `name` | String | Name of the referenced object |
|
|
106
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
107
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
108
|
-
|
|
109
|
-
### Transformers {#common-transformers}
|
|
110
|
-
|
|
111
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
112
|
-
|
|
113
|
-
| Value | Description |
|
|
114
|
-
| ----- | ----------- |
|
|
115
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
116
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
117
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
118
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
119
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
120
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
121
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
122
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
123
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
124
|
-
|
|
125
|
-
### HTTP Methods {#common-http-methods}
|
|
126
|
-
|
|
127
|
-
HTTP methods used for request matching.
|
|
128
|
-
|
|
129
|
-
| Value | Description |
|
|
130
|
-
| ----- | ----------- |
|
|
131
|
-
| `ANY` | Match any HTTP method |
|
|
132
|
-
| `GET` | HTTP GET request |
|
|
133
|
-
| `HEAD` | HTTP HEAD request |
|
|
134
|
-
| `POST` | HTTP POST request |
|
|
135
|
-
| `PUT` | HTTP PUT request |
|
|
136
|
-
| `DELETE` | HTTP DELETE request |
|
|
137
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
138
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
139
|
-
| `TRACE` | HTTP TRACE request |
|
|
140
|
-
| `PATCH` | HTTP PATCH request |
|
|
141
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
142
|
-
|
|
143
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
144
|
-
|
|
145
|
-
TLS fingerprint categories for malicious client detection.
|
|
146
|
-
|
|
147
|
-
| Value | Description |
|
|
148
|
-
| ----- | ----------- |
|
|
149
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
150
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
151
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
152
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
153
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
154
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
155
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
156
|
-
|
|
157
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
158
|
-
|
|
159
|
-
IP address threat categories for security filtering.
|
|
160
|
-
|
|
161
|
-
| Value | Description |
|
|
162
|
-
| ----- | ----------- |
|
|
163
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
164
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
165
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
166
|
-
| `BOTNETS` | Known botnet IPs |
|
|
167
|
-
| `SCANNERS` | Network scanner IPs |
|
|
168
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
169
|
-
| `PHISHING` | Phishing-related IPs |
|
|
170
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
171
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
172
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
173
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
174
|
-
| `NETWORK` | Known bad network ranges |
|
|
175
|
-
|
|
176
|
-
## Import
|
|
177
|
-
|
|
178
|
-
Import is supported using the following syntax:
|
|
179
|
-
|
|
180
|
-
```shell
|
|
181
|
-
# Import using namespace/name format
|
|
182
|
-
terraform import f5xc_infraprotect_asn.example system/example
|
|
183
|
-
```
|