@robinmordasiewicz/f5xc-terraform-mcp 3.0.2 → 3.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/certificate.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/data-sources/workload.md +2 -2
- package/dist/docs/resources/certificate.md +4 -56
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/irule.md +7 -5
- package/dist/docs/resources/network_policy.md +210 -37
- package/dist/docs/resources/policer.md +10 -50
- package/dist/docs/resources/securemesh_site.md +1614 -253
- package/dist/docs/resources/site.md +12 -819
- package/dist/docs/resources/workload.md +9 -2951
- package/dist/docs/specifications/api/CHANGELOG.md +4 -4
- package/dist/docs/specifications/api/README.md +2 -2
- package/dist/docs/specifications/api/domains/admin_console_and_ui.json +29 -25
- package/dist/docs/specifications/api/domains/ai_services.json +23 -21
- package/dist/docs/specifications/api/domains/api.json +201 -173
- package/dist/docs/specifications/api/domains/authentication.json +57 -45
- package/dist/docs/specifications/api/domains/bigip.json +106 -94
- package/dist/docs/specifications/api/domains/billing_and_usage.json +71 -63
- package/dist/docs/specifications/api/domains/blindfold.json +141 -109
- package/dist/docs/specifications/api/domains/bot_and_threat_defense.json +77 -65
- package/dist/docs/specifications/api/domains/cdn.json +371 -177
- package/dist/docs/specifications/api/domains/ce_management.json +137 -111
- package/dist/docs/specifications/api/domains/certificates.json +81 -75
- package/dist/docs/specifications/api/domains/cloud_infrastructure.json +136 -112
- package/dist/docs/specifications/api/domains/container_services.json +123 -91
- package/dist/docs/specifications/api/domains/data_and_privacy_security.json +72 -66
- package/dist/docs/specifications/api/domains/data_intelligence.json +68 -62
- package/dist/docs/specifications/api/domains/ddos.json +168 -154
- package/dist/docs/specifications/api/domains/dns.json +160 -148
- package/dist/docs/specifications/api/domains/managed_kubernetes.json +91 -85
- package/dist/docs/specifications/api/domains/marketplace.json +111 -103
- package/dist/docs/specifications/api/domains/network.json +269 -230
- package/dist/docs/specifications/api/domains/network_security.json +243 -187
- package/dist/docs/specifications/api/domains/nginx_one.json +70 -62
- package/dist/docs/specifications/api/domains/object_storage.json +12 -12
- package/dist/docs/specifications/api/domains/observability.json +231 -102
- package/dist/docs/specifications/api/domains/rate_limiting.json +58 -52
- package/dist/docs/specifications/api/domains/secops_and_incident_response.json +42 -36
- package/dist/docs/specifications/api/domains/service_mesh.json +143 -119
- package/dist/docs/specifications/api/domains/shape.json +327 -313
- package/dist/docs/specifications/api/domains/sites.json +536 -349
- package/dist/docs/specifications/api/domains/statistics.json +401 -225
- package/dist/docs/specifications/api/domains/support.json +116 -108
- package/dist/docs/specifications/api/domains/telemetry_and_insights.json +118 -72
- package/dist/docs/specifications/api/domains/tenant_and_identity.json +298 -268
- package/dist/docs/specifications/api/domains/threat_campaign.json +126 -66
- package/dist/docs/specifications/api/domains/users.json +76 -66
- package/dist/docs/specifications/api/domains/virtual.json +492 -244
- package/dist/docs/specifications/api/domains/vpm_and_node_management.json +1 -1
- package/dist/docs/specifications/api/domains/waf.json +227 -139
- package/dist/docs/specifications/api/index.json +99 -4
- package/dist/docs/specifications/api/openapi.json +3409 -2616
- package/dist/docs/specifications/api/openapi.yaml +5304 -2616
- package/package.json +1 -1
- package/dist/docs/data-sources/addon_service.md +0 -143
- package/dist/docs/data-sources/addon_service_activation_status.md +0 -144
- package/dist/docs/data-sources/addon_subscription.md +0 -134
- package/dist/docs/data-sources/allowed_tenant.md +0 -134
- package/dist/docs/data-sources/api_credential.md +0 -134
- package/dist/docs/data-sources/bigip_irule.md +0 -134
- package/dist/docs/data-sources/child_tenant.md +0 -134
- package/dist/docs/data-sources/child_tenant_manager.md +0 -134
- package/dist/docs/data-sources/contact.md +0 -134
- package/dist/docs/data-sources/customer_support.md +0 -134
- package/dist/docs/data-sources/dns_lb_health_check.md +0 -134
- package/dist/docs/data-sources/dns_lb_pool.md +0 -134
- package/dist/docs/data-sources/dns_load_balancer.md +0 -134
- package/dist/docs/data-sources/dns_zone.md +0 -145
- package/dist/docs/data-sources/geo_location_set.md +0 -134
- package/dist/docs/data-sources/ike1.md +0 -134
- package/dist/docs/data-sources/ike2.md +0 -134
- package/dist/docs/data-sources/ike_phase1_profile.md +0 -134
- package/dist/docs/data-sources/ike_phase2_profile.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +0 -134
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +0 -134
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +0 -134
- package/dist/docs/data-sources/infraprotect_tunnel.md +0 -134
- package/dist/docs/data-sources/k8s_cluster.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_admission.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_policy.md +0 -134
- package/dist/docs/data-sources/managed_tenant.md +0 -134
- package/dist/docs/data-sources/namespace.md +0 -141
- package/dist/docs/data-sources/oidc_provider.md +0 -134
- package/dist/docs/data-sources/quota.md +0 -134
- package/dist/docs/data-sources/registration.md +0 -134
- package/dist/docs/data-sources/report_config.md +0 -134
- package/dist/docs/data-sources/role.md +0 -134
- package/dist/docs/data-sources/secret_policy.md +0 -134
- package/dist/docs/data-sources/secret_policy_rule.md +0 -134
- package/dist/docs/data-sources/securemesh_site_v2.md +0 -134
- package/dist/docs/data-sources/srv6_network_slice.md +0 -134
- package/dist/docs/data-sources/tenant_profile.md +0 -134
- package/dist/docs/data-sources/ticket_tracking_system.md +0 -134
- package/dist/docs/data-sources/token.md +0 -134
- package/dist/docs/data-sources/tpm_api_key.md +0 -134
- package/dist/docs/data-sources/tpm_category.md +0 -134
- package/dist/docs/data-sources/tpm_manager.md +0 -134
- package/dist/docs/data-sources/virtual_k8s.md +0 -134
- package/dist/docs/data-sources/voltshare_admin_policy.md +0 -134
- package/dist/docs/resources/addon_subscription.md +0 -213
- package/dist/docs/resources/allowed_tenant.md +0 -181
- package/dist/docs/resources/api_credential.md +0 -184
- package/dist/docs/resources/bigip_irule.md +0 -173
- package/dist/docs/resources/child_tenant.md +0 -237
- package/dist/docs/resources/child_tenant_manager.md +0 -201
- package/dist/docs/resources/contact.md +0 -187
- package/dist/docs/resources/customer_support.md +0 -253
- package/dist/docs/resources/dns_lb_health_check.md +0 -249
- package/dist/docs/resources/dns_lb_pool.md +0 -310
- package/dist/docs/resources/dns_load_balancer.md +0 -309
- package/dist/docs/resources/dns_zone.md +0 -790
- package/dist/docs/resources/geo_location_set.md +0 -180
- package/dist/docs/resources/ike1.md +0 -216
- package/dist/docs/resources/ike2.md +0 -210
- package/dist/docs/resources/ike_phase1_profile.md +0 -224
- package/dist/docs/resources/ike_phase2_profile.md +0 -214
- package/dist/docs/resources/infraprotect_asn.md +0 -183
- package/dist/docs/resources/infraprotect_asn_prefix.md +0 -181
- package/dist/docs/resources/infraprotect_deny_list_rule.md +0 -191
- package/dist/docs/resources/infraprotect_firewall_rule.md +0 -288
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +0 -169
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +0 -191
- package/dist/docs/resources/infraprotect_tunnel.md +0 -289
- package/dist/docs/resources/k8s_cluster.md +0 -326
- package/dist/docs/resources/k8s_cluster_role.md +0 -222
- package/dist/docs/resources/k8s_cluster_role_binding.md +0 -207
- package/dist/docs/resources/k8s_pod_security_admission.md +0 -199
- package/dist/docs/resources/k8s_pod_security_policy.md +0 -337
- package/dist/docs/resources/managed_tenant.md +0 -193
- package/dist/docs/resources/namespace.md +0 -170
- package/dist/docs/resources/oidc_provider.md +0 -291
- package/dist/docs/resources/quota.md +0 -187
- package/dist/docs/resources/registration.md +0 -489
- package/dist/docs/resources/report_config.md +0 -237
- package/dist/docs/resources/role.md +0 -183
- package/dist/docs/resources/secret_policy.md +0 -240
- package/dist/docs/resources/secret_policy_rule.md +0 -198
- package/dist/docs/resources/securemesh_site_v2.md +0 -2027
- package/dist/docs/resources/srv6_network_slice.md +0 -175
- package/dist/docs/resources/tenant_profile.md +0 -233
- package/dist/docs/resources/ticket_tracking_system.md +0 -195
- package/dist/docs/resources/token.md +0 -170
- package/dist/docs/resources/tpm_api_key.md +0 -191
- package/dist/docs/resources/tpm_category.md +0 -191
- package/dist/docs/resources/tpm_manager.md +0 -167
- package/dist/docs/resources/virtual_k8s.md +0 -209
- package/dist/docs/resources/voltshare_admin_policy.md +0 -271
|
@@ -1,169 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_infraprotect_firewall_rule_group Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Security"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages a Infraprotect Firewall Rule Group resource in F5 Distributed Cloud for amends a ddos transit firewall rule group configuration.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_infraprotect_firewall_rule_group (Resource)
|
|
9
|
-
|
|
10
|
-
Manages a Infraprotect Firewall Rule Group resource in F5 Distributed Cloud for amends a ddos transit firewall rule group configuration.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Infraprotect Firewall Rule Group Resource Example
|
|
18
|
-
# Manages a Infraprotect Firewall Rule Group resource in F5 Distributed Cloud for amends a ddos transit firewall rule group configuration.
|
|
19
|
-
|
|
20
|
-
# Basic Infraprotect Firewall Rule Group configuration
|
|
21
|
-
resource "f5xc_infraprotect_firewall_rule_group" "example" {
|
|
22
|
-
name = "example-infraprotect-firewall-rule-group"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
}
|
|
34
|
-
```
|
|
35
|
-
|
|
36
|
-
<!-- schema generated by tfplugindocs -->
|
|
37
|
-
## Argument Reference
|
|
38
|
-
|
|
39
|
-
### Metadata Argument Reference
|
|
40
|
-
|
|
41
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Infraprotect Firewall Rule Group. Must be unique within the namespace
|
|
42
|
-
|
|
43
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Infraprotect Firewall Rule Group will be created
|
|
44
|
-
|
|
45
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
46
|
-
|
|
47
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
48
|
-
|
|
49
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
50
|
-
|
|
51
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
52
|
-
|
|
53
|
-
### Spec Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="firewall-rule-group-name"></a>• [`firewall_rule_group_name`](#firewall-rule-group-name) - Optional String<br>Firewall Rule Group Name. Firewall Rule Group Name
|
|
56
|
-
|
|
57
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
58
|
-
|
|
59
|
-
### Attributes Reference
|
|
60
|
-
|
|
61
|
-
In addition to all arguments above, the following attributes are exported:
|
|
62
|
-
|
|
63
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
64
|
-
|
|
65
|
-
---
|
|
66
|
-
|
|
67
|
-
#### Timeouts
|
|
68
|
-
|
|
69
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
70
|
-
|
|
71
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
72
|
-
|
|
73
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
74
|
-
|
|
75
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
76
|
-
|
|
77
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
78
|
-
|
|
79
|
-
---
|
|
80
|
-
|
|
81
|
-
## Common Types
|
|
82
|
-
|
|
83
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
84
|
-
|
|
85
|
-
### Object Reference {#common-object-reference}
|
|
86
|
-
|
|
87
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
88
|
-
|
|
89
|
-
| Field | Type | Description |
|
|
90
|
-
| ----- | ---- | ----------- |
|
|
91
|
-
| `name` | String | Name of the referenced object |
|
|
92
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
93
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
94
|
-
|
|
95
|
-
### Transformers {#common-transformers}
|
|
96
|
-
|
|
97
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
98
|
-
|
|
99
|
-
| Value | Description |
|
|
100
|
-
| ----- | ----------- |
|
|
101
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
102
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
103
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
104
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
105
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
106
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
107
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
108
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
109
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
110
|
-
|
|
111
|
-
### HTTP Methods {#common-http-methods}
|
|
112
|
-
|
|
113
|
-
HTTP methods used for request matching.
|
|
114
|
-
|
|
115
|
-
| Value | Description |
|
|
116
|
-
| ----- | ----------- |
|
|
117
|
-
| `ANY` | Match any HTTP method |
|
|
118
|
-
| `GET` | HTTP GET request |
|
|
119
|
-
| `HEAD` | HTTP HEAD request |
|
|
120
|
-
| `POST` | HTTP POST request |
|
|
121
|
-
| `PUT` | HTTP PUT request |
|
|
122
|
-
| `DELETE` | HTTP DELETE request |
|
|
123
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
124
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
125
|
-
| `TRACE` | HTTP TRACE request |
|
|
126
|
-
| `PATCH` | HTTP PATCH request |
|
|
127
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
128
|
-
|
|
129
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
130
|
-
|
|
131
|
-
TLS fingerprint categories for malicious client detection.
|
|
132
|
-
|
|
133
|
-
| Value | Description |
|
|
134
|
-
| ----- | ----------- |
|
|
135
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
136
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
137
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
138
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
139
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
140
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
141
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
142
|
-
|
|
143
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
144
|
-
|
|
145
|
-
IP address threat categories for security filtering.
|
|
146
|
-
|
|
147
|
-
| Value | Description |
|
|
148
|
-
| ----- | ----------- |
|
|
149
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
150
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
151
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
152
|
-
| `BOTNETS` | Known botnet IPs |
|
|
153
|
-
| `SCANNERS` | Network scanner IPs |
|
|
154
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
155
|
-
| `PHISHING` | Phishing-related IPs |
|
|
156
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
157
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
158
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
159
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
160
|
-
| `NETWORK` | Known bad network ranges |
|
|
161
|
-
|
|
162
|
-
## Import
|
|
163
|
-
|
|
164
|
-
Import is supported using the following syntax:
|
|
165
|
-
|
|
166
|
-
```shell
|
|
167
|
-
# Import using namespace/name format
|
|
168
|
-
terraform import f5xc_infraprotect_firewall_rule_group.example system/example
|
|
169
|
-
```
|
|
@@ -1,191 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_infraprotect_internet_prefix_advertisement Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Infrastructure Protection"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages DDoS transit Internet Prefix in F5 Distributed Cloud.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_infraprotect_internet_prefix_advertisement (Resource)
|
|
9
|
-
|
|
10
|
-
Manages DDoS transit Internet Prefix in F5 Distributed Cloud.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Infraprotect Internet Prefix Advertisement Resource Example
|
|
18
|
-
# Manages DDoS transit Internet Prefix in F5 Distributed Cloud.
|
|
19
|
-
|
|
20
|
-
# Basic Infraprotect Internet Prefix Advertisement configuration
|
|
21
|
-
resource "f5xc_infraprotect_internet_prefix_advertisement" "example" {
|
|
22
|
-
name = "example-infraprotect-internet-prefix-advertisement"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# [OneOf: activation_announce, activation_withdraw] Enable ...
|
|
36
|
-
activation_announce {
|
|
37
|
-
# Configure activation_announce settings
|
|
38
|
-
}
|
|
39
|
-
# Enable this option
|
|
40
|
-
activation_withdraw {
|
|
41
|
-
# Configure activation_withdraw settings
|
|
42
|
-
}
|
|
43
|
-
# [OneOf: expiration_never, expiration_timestamp] Enable th...
|
|
44
|
-
expiration_never {
|
|
45
|
-
# Configure expiration_never settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Infraprotect Internet Prefix Advertisement. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Infraprotect Internet Prefix Advertisement will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
-> **One of the following:**
|
|
70
|
-
• <a id="activation-announce"></a>[`activation_announce`](#activation-announce) - Optional Block<br>Enable this option
|
|
71
|
-
<br><br>• <a id="activation-withdraw"></a>[`activation_withdraw`](#activation-withdraw) - Optional Block<br>Enable this option
|
|
72
|
-
|
|
73
|
-
-> **One of the following:**
|
|
74
|
-
• <a id="expiration-never"></a>[`expiration_never`](#expiration-never) - Optional Block<br>Enable this option
|
|
75
|
-
<br><br>• <a id="expiration-timestamp"></a>[`expiration_timestamp`](#expiration-timestamp) - Optional String<br>Expiration Time (UTC). This advertisement will expire at the given timestamp and will be removed from the system afterwards
|
|
76
|
-
|
|
77
|
-
<a id="prefix"></a>• [`prefix`](#prefix) - Optional String<br>Prefix. Advertisement Prefix Advertisement prefix lookup depending on type
|
|
78
|
-
|
|
79
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
80
|
-
|
|
81
|
-
### Attributes Reference
|
|
82
|
-
|
|
83
|
-
In addition to all arguments above, the following attributes are exported:
|
|
84
|
-
|
|
85
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
86
|
-
|
|
87
|
-
---
|
|
88
|
-
|
|
89
|
-
#### Timeouts
|
|
90
|
-
|
|
91
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
92
|
-
|
|
93
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
94
|
-
|
|
95
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
96
|
-
|
|
97
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
98
|
-
|
|
99
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
100
|
-
|
|
101
|
-
---
|
|
102
|
-
|
|
103
|
-
## Common Types
|
|
104
|
-
|
|
105
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
106
|
-
|
|
107
|
-
### Object Reference {#common-object-reference}
|
|
108
|
-
|
|
109
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
110
|
-
|
|
111
|
-
| Field | Type | Description |
|
|
112
|
-
| ----- | ---- | ----------- |
|
|
113
|
-
| `name` | String | Name of the referenced object |
|
|
114
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
115
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
116
|
-
|
|
117
|
-
### Transformers {#common-transformers}
|
|
118
|
-
|
|
119
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
120
|
-
|
|
121
|
-
| Value | Description |
|
|
122
|
-
| ----- | ----------- |
|
|
123
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
124
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
125
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
126
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
127
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
128
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
129
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
130
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
131
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
132
|
-
|
|
133
|
-
### HTTP Methods {#common-http-methods}
|
|
134
|
-
|
|
135
|
-
HTTP methods used for request matching.
|
|
136
|
-
|
|
137
|
-
| Value | Description |
|
|
138
|
-
| ----- | ----------- |
|
|
139
|
-
| `ANY` | Match any HTTP method |
|
|
140
|
-
| `GET` | HTTP GET request |
|
|
141
|
-
| `HEAD` | HTTP HEAD request |
|
|
142
|
-
| `POST` | HTTP POST request |
|
|
143
|
-
| `PUT` | HTTP PUT request |
|
|
144
|
-
| `DELETE` | HTTP DELETE request |
|
|
145
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
146
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
147
|
-
| `TRACE` | HTTP TRACE request |
|
|
148
|
-
| `PATCH` | HTTP PATCH request |
|
|
149
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
150
|
-
|
|
151
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
152
|
-
|
|
153
|
-
TLS fingerprint categories for malicious client detection.
|
|
154
|
-
|
|
155
|
-
| Value | Description |
|
|
156
|
-
| ----- | ----------- |
|
|
157
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
158
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
159
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
160
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
161
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
162
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
163
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
164
|
-
|
|
165
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
166
|
-
|
|
167
|
-
IP address threat categories for security filtering.
|
|
168
|
-
|
|
169
|
-
| Value | Description |
|
|
170
|
-
| ----- | ----------- |
|
|
171
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
172
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
173
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
174
|
-
| `BOTNETS` | Known botnet IPs |
|
|
175
|
-
| `SCANNERS` | Network scanner IPs |
|
|
176
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
177
|
-
| `PHISHING` | Phishing-related IPs |
|
|
178
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
179
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
180
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
181
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
182
|
-
| `NETWORK` | Known bad network ranges |
|
|
183
|
-
|
|
184
|
-
## Import
|
|
185
|
-
|
|
186
|
-
Import is supported using the following syntax:
|
|
187
|
-
|
|
188
|
-
```shell
|
|
189
|
-
# Import using namespace/name format
|
|
190
|
-
terraform import f5xc_infraprotect_internet_prefix_advertisement.example system/example
|
|
191
|
-
```
|
|
@@ -1,289 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_infraprotect_tunnel Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Infrastructure Protection"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages DDoS transit tunnel in F5 Distributed Cloud.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_infraprotect_tunnel (Resource)
|
|
9
|
-
|
|
10
|
-
Manages DDoS transit tunnel in F5 Distributed Cloud.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Infraprotect Tunnel Resource Example
|
|
18
|
-
# Manages DDoS transit tunnel in F5 Distributed Cloud.
|
|
19
|
-
|
|
20
|
-
# Basic Infraprotect Tunnel configuration
|
|
21
|
-
resource "f5xc_infraprotect_tunnel" "example" {
|
|
22
|
-
name = "example-infraprotect-tunnel"
|
|
23
|
-
namespace = "staging"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# Bandwidth Speed Configuration. Bandwidth max allowed
|
|
36
|
-
bandwidth {
|
|
37
|
-
# Configure bandwidth settings
|
|
38
|
-
}
|
|
39
|
-
# BGP. BGP information associated with a DDoS transit tunnel.
|
|
40
|
-
bgp_information {
|
|
41
|
-
# Configure bgp_information settings
|
|
42
|
-
}
|
|
43
|
-
# Object reference. This type establishes a direct referenc...
|
|
44
|
-
asn {
|
|
45
|
-
# Configure asn settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Infraprotect Tunnel. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Infraprotect Tunnel will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
<a id="bandwidth"></a>• [`bandwidth`](#bandwidth) - Optional Block<br>Bandwidth Speed Configuration. Bandwidth max allowed<br>See [Bandwidth](#bandwidth) below for details.
|
|
70
|
-
|
|
71
|
-
<a id="bgp-information"></a>• [`bgp_information`](#bgp-information) - Optional Block<br>BGP. BGP information associated with a DDOS transit tunnel<br>See [BGP Information](#bgp-information) below for details.
|
|
72
|
-
|
|
73
|
-
<a id="firewall-rule-group"></a>• [`firewall_rule_group`](#firewall-rule-group) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Firewall Rule Group](#firewall-rule-group) below for details.
|
|
74
|
-
|
|
75
|
-
-> **One of the following:**
|
|
76
|
-
• <a id="gre-ipv4"></a>[`gre_ipv4`](#gre-ipv4) - Optional Block<br>GRE IPv4 Tunnel. IPv4 Tunnel<br>See [Gre IPv4](#gre-ipv4) below for details.
|
|
77
|
-
<br><br>• <a id="gre-ipv6"></a>[`gre_ipv6`](#gre-ipv6) - Optional Block<br>GRE IPv6 Tunnel. IPv6 Tunnel<br>See [Gre IPv6](#gre-ipv6) below for details.
|
|
78
|
-
<br><br>• <a id="ip-in-ip"></a>[`ip_in_ip`](#ip-in-ip) - Optional Block<br>IP in IP Tunnel. IP in IP Tunnel<br>See [IP In IP](#ip-in-ip) below for details.
|
|
79
|
-
<br><br>• <a id="ipv6-to-ipv6"></a>[`ipv6_to_ipv6`](#ipv6-to-ipv6) - Optional Block<br>IPv6 to IPv6 Tunnel. IPv6 to IPv6 Tunnel<br>See [IPv6 To IPv6](#ipv6-to-ipv6) below for details.
|
|
80
|
-
|
|
81
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
82
|
-
|
|
83
|
-
<a id="tunnel-location"></a>• [`tunnel_location`](#tunnel-location) - Optional Block<br>Location. Location of a DDOS transit tunnel<br>See [Tunnel Location](#tunnel-location) below for details.
|
|
84
|
-
|
|
85
|
-
### Attributes Reference
|
|
86
|
-
|
|
87
|
-
In addition to all arguments above, the following attributes are exported:
|
|
88
|
-
|
|
89
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
90
|
-
|
|
91
|
-
---
|
|
92
|
-
|
|
93
|
-
#### Bandwidth
|
|
94
|
-
|
|
95
|
-
A [`bandwidth`](#bandwidth) block supports the following:
|
|
96
|
-
|
|
97
|
-
<a id="bandwidth-bandwidth-max-mb"></a>• [`bandwidth_max_mb`](#bandwidth-bandwidth-max-mb) - Optional Number<br>Bandwidth Max in MB. Bandwidth max allowed
|
|
98
|
-
|
|
99
|
-
#### BGP Information
|
|
100
|
-
|
|
101
|
-
A [`bgp_information`](#bgp-information) block supports the following:
|
|
102
|
-
|
|
103
|
-
<a id="bgp-information-asn"></a>• [`asn`](#bgp-information-asn) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Asn](#bgp-information-asn) below.
|
|
104
|
-
|
|
105
|
-
<a id="bgp-information-holddown-timer-seconds"></a>• [`holddown_timer_seconds`](#bgp-information-holddown-timer-seconds) - Optional Number<br>Hold down Timer. BGP hold down timer, in seconds
|
|
106
|
-
|
|
107
|
-
<a id="bgp-information-no-secret"></a>• [`no_secret`](#bgp-information-no-secret) - Optional Block<br>Enable this option
|
|
108
|
-
|
|
109
|
-
<a id="bgp-information-peer-secret-override"></a>• [`peer_secret_override`](#bgp-information-peer-secret-override) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Peer Secret Override](#bgp-information-peer-secret-override) below.
|
|
110
|
-
|
|
111
|
-
<a id="bgp-information-use-default-secret"></a>• [`use_default_secret`](#bgp-information-use-default-secret) - Optional Block<br>Enable this option
|
|
112
|
-
|
|
113
|
-
#### BGP Information Asn
|
|
114
|
-
|
|
115
|
-
<a id="objref-0bd30b"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
116
|
-
|
|
117
|
-
#### BGP Information Peer Secret Override
|
|
118
|
-
|
|
119
|
-
A [`peer_secret_override`](#bgp-information-peer-secret-override) block (within [`bgp_information`](#bgp-information)) supports the following:
|
|
120
|
-
|
|
121
|
-
<a id="info-6d3a2a"></a>• [`blindfold_secret_info`](#info-6d3a2a) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-6d3a2a) below.
|
|
122
|
-
|
|
123
|
-
<a id="info-586fa4"></a>• [`clear_secret_info`](#info-586fa4) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-586fa4) below.
|
|
124
|
-
|
|
125
|
-
#### BGP Information Peer Secret Override Blindfold Secret Info
|
|
126
|
-
|
|
127
|
-
<a id="deep-f359e1"></a>Deeply nested **Info** block collapsed for readability.
|
|
128
|
-
|
|
129
|
-
#### BGP Information Peer Secret Override Clear Secret Info
|
|
130
|
-
|
|
131
|
-
<a id="deep-6a3361"></a>Deeply nested **Info** block collapsed for readability.
|
|
132
|
-
|
|
133
|
-
#### Firewall Rule Group
|
|
134
|
-
|
|
135
|
-
<a id="objref-65bdfc"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
136
|
-
|
|
137
|
-
#### Gre IPv4
|
|
138
|
-
|
|
139
|
-
A [`gre_ipv4`](#gre-ipv4) block supports the following:
|
|
140
|
-
|
|
141
|
-
<a id="gre-ipv4-customer-endpoint-ipv4"></a>• [`customer_endpoint_ipv4`](#gre-ipv4-customer-endpoint-ipv4) - Optional String<br>Customer Endpoint IP. IPv4 address for the customer endpoint of the tunnel
|
|
142
|
-
|
|
143
|
-
<a id="gre-ipv4-fragmentation-disabled"></a>• [`fragmentation_disabled`](#gre-ipv4-fragmentation-disabled) - Optional Block<br>Enable this option
|
|
144
|
-
|
|
145
|
-
<a id="gre-ipv4-fragmentation-enabled"></a>• [`fragmentation_enabled`](#gre-ipv4-fragmentation-enabled) - Optional Block<br>Enable this option
|
|
146
|
-
|
|
147
|
-
<a id="gre-ipv4-ipv6-interconnect-disabled"></a>• [`ipv6_interconnect_disabled`](#gre-ipv4-ipv6-interconnect-disabled) - Optional Block<br>Enable this option
|
|
148
|
-
|
|
149
|
-
<a id="gre-ipv4-ipv6-interconnect-enabled"></a>• [`ipv6_interconnect_enabled`](#gre-ipv4-ipv6-interconnect-enabled) - Optional Block<br>Enable this option
|
|
150
|
-
|
|
151
|
-
<a id="gre-ipv4-keepalive-disabled"></a>• [`keepalive_disabled`](#gre-ipv4-keepalive-disabled) - Optional Block<br>Enable this option
|
|
152
|
-
|
|
153
|
-
<a id="gre-ipv4-keepalive-enabled"></a>• [`keepalive_enabled`](#gre-ipv4-keepalive-enabled) - Optional Block<br>Enable this option
|
|
154
|
-
|
|
155
|
-
#### Gre IPv6
|
|
156
|
-
|
|
157
|
-
A [`gre_ipv6`](#gre-ipv6) block supports the following:
|
|
158
|
-
|
|
159
|
-
<a id="gre-ipv6-customer-endpoint-ipv6"></a>• [`customer_endpoint_ipv6`](#gre-ipv6-customer-endpoint-ipv6) - Optional String<br>Customer Endpoint IP. IPv6 address for the customer endpoint of the tunnel
|
|
160
|
-
|
|
161
|
-
<a id="gre-ipv6-ipv4-interconnect-disabled"></a>• [`ipv4_interconnect_disabled`](#gre-ipv6-ipv4-interconnect-disabled) - Optional Block<br>Enable this option
|
|
162
|
-
|
|
163
|
-
<a id="gre-ipv6-ipv4-interconnect-enabled"></a>• [`ipv4_interconnect_enabled`](#gre-ipv6-ipv4-interconnect-enabled) - Optional Block<br>Enable this option
|
|
164
|
-
|
|
165
|
-
#### IP In IP
|
|
166
|
-
|
|
167
|
-
An [`ip_in_ip`](#ip-in-ip) block supports the following:
|
|
168
|
-
|
|
169
|
-
<a id="ip-in-ip-customer-endpoint-ipv4"></a>• [`customer_endpoint_ipv4`](#ip-in-ip-customer-endpoint-ipv4) - Optional String<br>Customer Endpoint IP. IPv4 address for the customer endpoint of the tunnel
|
|
170
|
-
|
|
171
|
-
#### IPv6 To IPv6
|
|
172
|
-
|
|
173
|
-
An [`ipv6_to_ipv6`](#ipv6-to-ipv6) block supports the following:
|
|
174
|
-
|
|
175
|
-
<a id="ipv6-to-ipv6-customer-endpoint-ipv6"></a>• [`customer_endpoint_ipv6`](#ipv6-to-ipv6-customer-endpoint-ipv6) - Optional String<br>Customer Endpoint IP. IPv6 address for the customer endpoint of the tunnel
|
|
176
|
-
|
|
177
|
-
#### Timeouts
|
|
178
|
-
|
|
179
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
180
|
-
|
|
181
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `10 minutes`)<br>Used when creating the resource
|
|
182
|
-
|
|
183
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `10 minutes`)<br>Used when deleting the resource
|
|
184
|
-
|
|
185
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
186
|
-
|
|
187
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `10 minutes`)<br>Used when updating the resource
|
|
188
|
-
|
|
189
|
-
#### Tunnel Location
|
|
190
|
-
|
|
191
|
-
A [`tunnel_location`](#tunnel-location) block supports the following:
|
|
192
|
-
|
|
193
|
-
<a id="tunnel-location-name"></a>• [`name`](#tunnel-location-name) - Optional String<br>Location Name. Destination tunnel Location
|
|
194
|
-
|
|
195
|
-
<a id="tunnel-location-zone1"></a>• [`zone1`](#tunnel-location-zone1) - Optional Block<br>Enable this option
|
|
196
|
-
|
|
197
|
-
<a id="tunnel-location-zone2"></a>• [`zone2`](#tunnel-location-zone2) - Optional Block<br>Enable this option
|
|
198
|
-
|
|
199
|
-
---
|
|
200
|
-
|
|
201
|
-
## Common Types
|
|
202
|
-
|
|
203
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
204
|
-
|
|
205
|
-
### Object Reference {#common-object-reference}
|
|
206
|
-
|
|
207
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
208
|
-
|
|
209
|
-
| Field | Type | Description |
|
|
210
|
-
| ----- | ---- | ----------- |
|
|
211
|
-
| `name` | String | Name of the referenced object |
|
|
212
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
213
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
214
|
-
|
|
215
|
-
### Transformers {#common-transformers}
|
|
216
|
-
|
|
217
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
218
|
-
|
|
219
|
-
| Value | Description |
|
|
220
|
-
| ----- | ----------- |
|
|
221
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
222
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
223
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
224
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
225
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
226
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
227
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
228
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
229
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
230
|
-
|
|
231
|
-
### HTTP Methods {#common-http-methods}
|
|
232
|
-
|
|
233
|
-
HTTP methods used for request matching.
|
|
234
|
-
|
|
235
|
-
| Value | Description |
|
|
236
|
-
| ----- | ----------- |
|
|
237
|
-
| `ANY` | Match any HTTP method |
|
|
238
|
-
| `GET` | HTTP GET request |
|
|
239
|
-
| `HEAD` | HTTP HEAD request |
|
|
240
|
-
| `POST` | HTTP POST request |
|
|
241
|
-
| `PUT` | HTTP PUT request |
|
|
242
|
-
| `DELETE` | HTTP DELETE request |
|
|
243
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
244
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
245
|
-
| `TRACE` | HTTP TRACE request |
|
|
246
|
-
| `PATCH` | HTTP PATCH request |
|
|
247
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
248
|
-
|
|
249
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
250
|
-
|
|
251
|
-
TLS fingerprint categories for malicious client detection.
|
|
252
|
-
|
|
253
|
-
| Value | Description |
|
|
254
|
-
| ----- | ----------- |
|
|
255
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
256
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
257
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
258
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
259
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
260
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
261
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
262
|
-
|
|
263
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
264
|
-
|
|
265
|
-
IP address threat categories for security filtering.
|
|
266
|
-
|
|
267
|
-
| Value | Description |
|
|
268
|
-
| ----- | ----------- |
|
|
269
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
270
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
271
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
272
|
-
| `BOTNETS` | Known botnet IPs |
|
|
273
|
-
| `SCANNERS` | Network scanner IPs |
|
|
274
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
275
|
-
| `PHISHING` | Phishing-related IPs |
|
|
276
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
277
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
278
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
279
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
280
|
-
| `NETWORK` | Known bad network ranges |
|
|
281
|
-
|
|
282
|
-
## Import
|
|
283
|
-
|
|
284
|
-
Import is supported using the following syntax:
|
|
285
|
-
|
|
286
|
-
```shell
|
|
287
|
-
# Import using namespace/name format
|
|
288
|
-
terraform import f5xc_infraprotect_tunnel.example system/example
|
|
289
|
-
```
|