@robinmordasiewicz/f5xc-terraform-mcp 3.1.0 → 3.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/certificate.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/data-sources/workload.md +2 -2
- package/dist/docs/resources/certificate.md +4 -56
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/irule.md +7 -5
- package/dist/docs/resources/network_policy.md +210 -37
- package/dist/docs/resources/policer.md +10 -50
- package/dist/docs/resources/securemesh_site.md +1614 -253
- package/dist/docs/resources/site.md +12 -819
- package/dist/docs/resources/workload.md +9 -2951
- package/dist/docs/specifications/api/CHANGELOG.md +4 -4
- package/dist/docs/specifications/api/README.md +2 -2
- package/dist/docs/specifications/api/domains/admin_console_and_ui.json +29 -25
- package/dist/docs/specifications/api/domains/ai_services.json +23 -21
- package/dist/docs/specifications/api/domains/api.json +201 -173
- package/dist/docs/specifications/api/domains/authentication.json +57 -45
- package/dist/docs/specifications/api/domains/bigip.json +106 -94
- package/dist/docs/specifications/api/domains/billing_and_usage.json +71 -63
- package/dist/docs/specifications/api/domains/blindfold.json +141 -109
- package/dist/docs/specifications/api/domains/bot_and_threat_defense.json +77 -65
- package/dist/docs/specifications/api/domains/cdn.json +371 -177
- package/dist/docs/specifications/api/domains/ce_management.json +137 -111
- package/dist/docs/specifications/api/domains/certificates.json +81 -75
- package/dist/docs/specifications/api/domains/cloud_infrastructure.json +136 -112
- package/dist/docs/specifications/api/domains/container_services.json +123 -91
- package/dist/docs/specifications/api/domains/data_and_privacy_security.json +72 -66
- package/dist/docs/specifications/api/domains/data_intelligence.json +68 -62
- package/dist/docs/specifications/api/domains/ddos.json +168 -154
- package/dist/docs/specifications/api/domains/dns.json +160 -148
- package/dist/docs/specifications/api/domains/managed_kubernetes.json +91 -85
- package/dist/docs/specifications/api/domains/marketplace.json +111 -103
- package/dist/docs/specifications/api/domains/network.json +269 -230
- package/dist/docs/specifications/api/domains/network_security.json +243 -187
- package/dist/docs/specifications/api/domains/nginx_one.json +70 -62
- package/dist/docs/specifications/api/domains/object_storage.json +12 -12
- package/dist/docs/specifications/api/domains/observability.json +231 -102
- package/dist/docs/specifications/api/domains/rate_limiting.json +58 -52
- package/dist/docs/specifications/api/domains/secops_and_incident_response.json +42 -36
- package/dist/docs/specifications/api/domains/service_mesh.json +143 -119
- package/dist/docs/specifications/api/domains/shape.json +327 -313
- package/dist/docs/specifications/api/domains/sites.json +536 -349
- package/dist/docs/specifications/api/domains/statistics.json +401 -225
- package/dist/docs/specifications/api/domains/support.json +116 -108
- package/dist/docs/specifications/api/domains/telemetry_and_insights.json +118 -72
- package/dist/docs/specifications/api/domains/tenant_and_identity.json +298 -268
- package/dist/docs/specifications/api/domains/threat_campaign.json +126 -66
- package/dist/docs/specifications/api/domains/users.json +76 -66
- package/dist/docs/specifications/api/domains/virtual.json +492 -244
- package/dist/docs/specifications/api/domains/vpm_and_node_management.json +1 -1
- package/dist/docs/specifications/api/domains/waf.json +227 -139
- package/dist/docs/specifications/api/index.json +2 -2
- package/dist/docs/specifications/api/openapi.json +3409 -2616
- package/dist/docs/specifications/api/openapi.yaml +5304 -2616
- package/package.json +1 -1
- package/dist/docs/data-sources/addon_service.md +0 -143
- package/dist/docs/data-sources/addon_service_activation_status.md +0 -144
- package/dist/docs/data-sources/addon_subscription.md +0 -134
- package/dist/docs/data-sources/allowed_tenant.md +0 -134
- package/dist/docs/data-sources/api_credential.md +0 -134
- package/dist/docs/data-sources/bigip_irule.md +0 -134
- package/dist/docs/data-sources/child_tenant.md +0 -134
- package/dist/docs/data-sources/child_tenant_manager.md +0 -134
- package/dist/docs/data-sources/contact.md +0 -134
- package/dist/docs/data-sources/customer_support.md +0 -134
- package/dist/docs/data-sources/dns_lb_health_check.md +0 -134
- package/dist/docs/data-sources/dns_lb_pool.md +0 -134
- package/dist/docs/data-sources/dns_load_balancer.md +0 -134
- package/dist/docs/data-sources/dns_zone.md +0 -145
- package/dist/docs/data-sources/geo_location_set.md +0 -134
- package/dist/docs/data-sources/ike1.md +0 -134
- package/dist/docs/data-sources/ike2.md +0 -134
- package/dist/docs/data-sources/ike_phase1_profile.md +0 -134
- package/dist/docs/data-sources/ike_phase2_profile.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn.md +0 -134
- package/dist/docs/data-sources/infraprotect_asn_prefix.md +0 -134
- package/dist/docs/data-sources/infraprotect_deny_list_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule.md +0 -134
- package/dist/docs/data-sources/infraprotect_firewall_rule_group.md +0 -134
- package/dist/docs/data-sources/infraprotect_internet_prefix_advertisement.md +0 -134
- package/dist/docs/data-sources/infraprotect_tunnel.md +0 -134
- package/dist/docs/data-sources/k8s_cluster.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role.md +0 -134
- package/dist/docs/data-sources/k8s_cluster_role_binding.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_admission.md +0 -134
- package/dist/docs/data-sources/k8s_pod_security_policy.md +0 -134
- package/dist/docs/data-sources/managed_tenant.md +0 -134
- package/dist/docs/data-sources/namespace.md +0 -141
- package/dist/docs/data-sources/oidc_provider.md +0 -134
- package/dist/docs/data-sources/quota.md +0 -134
- package/dist/docs/data-sources/registration.md +0 -134
- package/dist/docs/data-sources/report_config.md +0 -134
- package/dist/docs/data-sources/role.md +0 -134
- package/dist/docs/data-sources/secret_policy.md +0 -134
- package/dist/docs/data-sources/secret_policy_rule.md +0 -134
- package/dist/docs/data-sources/securemesh_site_v2.md +0 -134
- package/dist/docs/data-sources/srv6_network_slice.md +0 -134
- package/dist/docs/data-sources/tenant_profile.md +0 -134
- package/dist/docs/data-sources/ticket_tracking_system.md +0 -134
- package/dist/docs/data-sources/token.md +0 -134
- package/dist/docs/data-sources/tpm_api_key.md +0 -134
- package/dist/docs/data-sources/tpm_category.md +0 -134
- package/dist/docs/data-sources/tpm_manager.md +0 -134
- package/dist/docs/data-sources/virtual_k8s.md +0 -134
- package/dist/docs/data-sources/voltshare_admin_policy.md +0 -134
- package/dist/docs/resources/addon_subscription.md +0 -213
- package/dist/docs/resources/allowed_tenant.md +0 -181
- package/dist/docs/resources/api_credential.md +0 -184
- package/dist/docs/resources/bigip_irule.md +0 -173
- package/dist/docs/resources/child_tenant.md +0 -237
- package/dist/docs/resources/child_tenant_manager.md +0 -201
- package/dist/docs/resources/contact.md +0 -187
- package/dist/docs/resources/customer_support.md +0 -253
- package/dist/docs/resources/dns_lb_health_check.md +0 -249
- package/dist/docs/resources/dns_lb_pool.md +0 -310
- package/dist/docs/resources/dns_load_balancer.md +0 -309
- package/dist/docs/resources/dns_zone.md +0 -790
- package/dist/docs/resources/geo_location_set.md +0 -180
- package/dist/docs/resources/ike1.md +0 -216
- package/dist/docs/resources/ike2.md +0 -210
- package/dist/docs/resources/ike_phase1_profile.md +0 -224
- package/dist/docs/resources/ike_phase2_profile.md +0 -214
- package/dist/docs/resources/infraprotect_asn.md +0 -183
- package/dist/docs/resources/infraprotect_asn_prefix.md +0 -181
- package/dist/docs/resources/infraprotect_deny_list_rule.md +0 -191
- package/dist/docs/resources/infraprotect_firewall_rule.md +0 -288
- package/dist/docs/resources/infraprotect_firewall_rule_group.md +0 -169
- package/dist/docs/resources/infraprotect_internet_prefix_advertisement.md +0 -191
- package/dist/docs/resources/infraprotect_tunnel.md +0 -289
- package/dist/docs/resources/k8s_cluster.md +0 -326
- package/dist/docs/resources/k8s_cluster_role.md +0 -222
- package/dist/docs/resources/k8s_cluster_role_binding.md +0 -207
- package/dist/docs/resources/k8s_pod_security_admission.md +0 -199
- package/dist/docs/resources/k8s_pod_security_policy.md +0 -337
- package/dist/docs/resources/managed_tenant.md +0 -193
- package/dist/docs/resources/namespace.md +0 -170
- package/dist/docs/resources/oidc_provider.md +0 -291
- package/dist/docs/resources/quota.md +0 -187
- package/dist/docs/resources/registration.md +0 -489
- package/dist/docs/resources/report_config.md +0 -237
- package/dist/docs/resources/role.md +0 -183
- package/dist/docs/resources/secret_policy.md +0 -240
- package/dist/docs/resources/secret_policy_rule.md +0 -198
- package/dist/docs/resources/securemesh_site_v2.md +0 -2027
- package/dist/docs/resources/srv6_network_slice.md +0 -175
- package/dist/docs/resources/tenant_profile.md +0 -233
- package/dist/docs/resources/ticket_tracking_system.md +0 -195
- package/dist/docs/resources/token.md +0 -170
- package/dist/docs/resources/tpm_api_key.md +0 -191
- package/dist/docs/resources/tpm_category.md +0 -191
- package/dist/docs/resources/tpm_manager.md +0 -167
- package/dist/docs/resources/virtual_k8s.md +0 -209
- package/dist/docs/resources/voltshare_admin_policy.md +0 -271
|
@@ -1,2027 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
page_title: "f5xc_securemesh_site_v2 Resource - terraform-provider-f5xc"
|
|
3
|
-
subcategory: "Sites"
|
|
4
|
-
description: |-
|
|
5
|
-
Manages a Securemesh Site V2 resource in F5 Distributed Cloud for deploying secure mesh edge sites with enhanced security and networking features.
|
|
6
|
-
---
|
|
7
|
-
|
|
8
|
-
# f5xc_securemesh_site_v2 (Resource)
|
|
9
|
-
|
|
10
|
-
Manages a Securemesh Site V2 resource in F5 Distributed Cloud for deploying secure mesh edge sites with enhanced security and networking features.
|
|
11
|
-
|
|
12
|
-
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
|
-
|
|
14
|
-
## Example Usage
|
|
15
|
-
|
|
16
|
-
```terraform
|
|
17
|
-
# Securemesh Site V2 Resource Example
|
|
18
|
-
# Manages a Securemesh Site V2 resource in F5 Distributed Cloud for deploying secure mesh edge sites with enhanced security and networking features.
|
|
19
|
-
|
|
20
|
-
# Basic Securemesh Site V2 configuration
|
|
21
|
-
resource "f5xc_securemesh_site_v2" "example" {
|
|
22
|
-
name = "example-securemesh-site-v2"
|
|
23
|
-
namespace = "system"
|
|
24
|
-
|
|
25
|
-
labels = {
|
|
26
|
-
environment = "production"
|
|
27
|
-
managed_by = "terraform"
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
annotations = {
|
|
31
|
-
"owner" = "platform-team"
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
# Resource-specific configuration
|
|
35
|
-
# [OneOf: active_enhanced_firewall_policies, no_network_pol...
|
|
36
|
-
active_enhanced_firewall_policies {
|
|
37
|
-
# Configure active_enhanced_firewall_policies settings
|
|
38
|
-
}
|
|
39
|
-
# Enhanced Firewall Policy. Ordered List of Enhanced Firewa...
|
|
40
|
-
enhanced_firewall_policies {
|
|
41
|
-
# Configure enhanced_firewall_policies settings
|
|
42
|
-
}
|
|
43
|
-
# [OneOf: active_forward_proxy_policies, no_forward_proxy; ...
|
|
44
|
-
active_forward_proxy_policies {
|
|
45
|
-
# Configure active_forward_proxy_policies settings
|
|
46
|
-
}
|
|
47
|
-
}
|
|
48
|
-
```
|
|
49
|
-
|
|
50
|
-
<!-- schema generated by tfplugindocs -->
|
|
51
|
-
## Argument Reference
|
|
52
|
-
|
|
53
|
-
### Metadata Argument Reference
|
|
54
|
-
|
|
55
|
-
<a id="name"></a>• [`name`](#name) - Required String<br>Name of the Securemesh Site V2. Must be unique within the namespace
|
|
56
|
-
|
|
57
|
-
<a id="namespace"></a>• [`namespace`](#namespace) - Required String<br>Namespace where the Securemesh Site V2 will be created
|
|
58
|
-
|
|
59
|
-
<a id="annotations"></a>• [`annotations`](#annotations) - Optional Map<br>Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata
|
|
60
|
-
|
|
61
|
-
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
62
|
-
|
|
63
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Bool<br>A value of true will administratively disable the object
|
|
64
|
-
|
|
65
|
-
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
66
|
-
|
|
67
|
-
### Spec Argument Reference
|
|
68
|
-
|
|
69
|
-
-> **One of the following:**
|
|
70
|
-
• <a id="active-enhanced-firewall-policies"></a>[`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) - Optional Block<br>Active Enhanced Network Policies Type. List of Enhanced Firewall Policies These policies use session-based rules and provide all options available under firewall policies with an additional option for service insertion<br>See [Active Enhanced Firewall Policies](#active-enhanced-firewall-policies) below for details.
|
|
71
|
-
|
|
72
|
-
-> **One of the following:**
|
|
73
|
-
• <a id="active-forward-proxy-policies"></a>[`active_forward_proxy_policies`](#active-forward-proxy-policies) - Optional Block<br>Active Forward Proxy Policies Type. Ordered List of Forward Proxy Policies active<br>See [Active Forward Proxy Policies](#active-forward-proxy-policies) below for details.
|
|
74
|
-
|
|
75
|
-
<a id="admin-user-credentials"></a>• [`admin_user_credentials`](#admin-user-credentials) - Optional Block<br>Admin User Credentials. Setup user credentials to manage access to nodes belonging to the site. When configured, 'admin' user will be setup and customers can access these nodes via either the node local WebUI or via SSH to access shell/CLI Ensure 'Node Local Services' are enabled to allow for required access<br>See [Admin User Credentials](#admin-user-credentials) below for details.
|
|
76
|
-
|
|
77
|
-
-> **One of the following:**
|
|
78
|
-
• <a id="aws"></a>[`aws`](#aws) - Optional Block<br>AWS Provider Type. AWS Provider Type<br>See [AWS](#aws) below for details.
|
|
79
|
-
<br><br>• <a id="azure"></a>[`azure`](#azure) - Optional Block<br>Azure Provider Type. Azure Provider Type<br>See [Azure](#azure) below for details.
|
|
80
|
-
<br><br>• <a id="baremetal"></a>[`baremetal`](#baremetal) - Optional Block<br>Baremetal Provider Type. Baremetal Provider Type
|
|
81
|
-
<br><br>• <a id="equinix"></a>[`equinix`](#equinix) - Optional Block<br>Equinix Provider Type. Equinix Provider Type
|
|
82
|
-
<br><br>• <a id="gcp"></a>[`gcp`](#gcp) - Optional Block<br>GCP Provider Type. GCP Provider Type
|
|
83
|
-
<br><br>• <a id="kvm"></a>[`kvm`](#kvm) - Optional Block<br>KVM Provider Type. KVM Provider Type
|
|
84
|
-
<br><br>• <a id="nutanix"></a>[`nutanix`](#nutanix) - Optional Block<br>Nutanix Provider Type. Nutanix Provider Type
|
|
85
|
-
<br><br>• <a id="oci"></a>[`oci`](#oci) - Optional Block<br>OCI Provider Type. OCI Provider Type
|
|
86
|
-
<br><br>• <a id="openstack"></a>[`openstack`](#openstack) - Optional Block<br>Openstack Provider Type. Openstack Provider Type
|
|
87
|
-
<br><br>• <a id="vmware"></a>[`vmware`](#vmware) - Optional Block<br>VMware Provider Type. VMware Provider Type
|
|
88
|
-
|
|
89
|
-
-> **One of the following:**
|
|
90
|
-
• <a id="block-all-services"></a>[`block_all_services`](#block-all-services) - Optional Block<br>Enable this option
|
|
91
|
-
<br><br>• <a id="blocked-services"></a>[`blocked_services`](#blocked-services) - Optional Block<br>Disable Node Local Services. Disable node local services on this site. Note: The chosen services will get disabled on all nodes in the site
|
|
92
|
-
|
|
93
|
-
-> **One of the following:**
|
|
94
|
-
• <a id="custom-proxy"></a>[`custom_proxy`](#custom-proxy) - Optional Block<br>Custom Enterprise Proxy. Custom Enterprise Proxy
|
|
95
|
-
<br><br>• <a id="f5-proxy"></a>[`f5_proxy`](#f5-proxy) - Optional Block<br>Enable this option
|
|
96
|
-
|
|
97
|
-
-> **One of the following:**
|
|
98
|
-
• <a id="custom-proxy-bypass"></a>[`custom_proxy_bypass`](#custom-proxy-bypass) - Optional Block<br>Proxy Bypass. List of domains to bypass the proxy
|
|
99
|
-
|
|
100
|
-
-> **One of the following:**
|
|
101
|
-
• <a id="dc-cluster-group-sli"></a>[`dc_cluster_group_sli`](#dc-cluster-group-sli) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
|
|
102
|
-
|
|
103
|
-
-> **One of the following:**
|
|
104
|
-
• <a id="dc-cluster-group-slo"></a>[`dc_cluster_group_slo`](#dc-cluster-group-slo) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
|
|
105
|
-
<br><br>• <a id="no-s2s-connectivity-slo"></a>[`no_s2s_connectivity_slo`](#no-s2s-connectivity-slo) - Optional Block<br>Enable this option
|
|
106
|
-
|
|
107
|
-
-> **One of the following:**
|
|
108
|
-
• <a id="disable-ha"></a>[`disable_ha`](#disable-ha) - Optional Block<br>Enable this option
|
|
109
|
-
|
|
110
|
-
-> **One of the following:**
|
|
111
|
-
• <a id="disable-url-categorization"></a>[`disable_url_categorization`](#disable-url-categorization) - Optional Block<br>Enable this option
|
|
112
|
-
|
|
113
|
-
<a id="dns-ntp-config"></a>• [`dns_ntp_config`](#dns-ntp-config) - Optional Block<br>DNS & NTP Servers Settings. Specify DNS and NTP servers that will be used by the nodes in this Customer Edge site
|
|
114
|
-
|
|
115
|
-
<a id="enable-ha"></a>• [`enable_ha`](#enable-ha) - Optional Block<br>Enable this option
|
|
116
|
-
|
|
117
|
-
<a id="enable-url-categorization"></a>• [`enable_url_categorization`](#enable-url-categorization) - Optional Block<br>Enable this option
|
|
118
|
-
|
|
119
|
-
<a id="load-balancing"></a>• [`load_balancing`](#load-balancing) - Optional Block<br>Load Balancing Settings. This section contains settings on the site that relate to Load Balancing functionality
|
|
120
|
-
|
|
121
|
-
<a id="local-vrf"></a>• [`local_vrf`](#local-vrf) - Optional Block<br>Local VRF Settings. There can be two local VRFs on each site. The Site Local Outside (SLO) local VRF is used to connect WAN side workloads to this site and to connect the site to F5 Distributed Cloud for management. All sites are required to have an SLO local VRF. The Site Local Inside (SLI) local VRF is used to connect LAN side workloads to this site. SLI local VRF is optional
|
|
122
|
-
|
|
123
|
-
-> **One of the following:**
|
|
124
|
-
• <a id="log-receiver"></a>[`log_receiver`](#log-receiver) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name
|
|
125
|
-
<br><br>• <a id="logs-streaming-disabled"></a>[`logs_streaming_disabled`](#logs-streaming-disabled) - Optional Block<br>Enable this option
|
|
126
|
-
|
|
127
|
-
<a id="no-forward-proxy"></a>• [`no_forward_proxy`](#no-forward-proxy) - Optional Block<br>Enable this option
|
|
128
|
-
|
|
129
|
-
<a id="no-network-policy"></a>• [`no_network_policy`](#no-network-policy) - Optional Block<br>Enable this option
|
|
130
|
-
|
|
131
|
-
<a id="no-proxy-bypass"></a>• [`no_proxy_bypass`](#no-proxy-bypass) - Optional Block<br>Enable this option
|
|
132
|
-
|
|
133
|
-
<a id="no-s2s-connectivity-sli"></a>• [`no_s2s_connectivity_sli`](#no-s2s-connectivity-sli) - Optional Block<br>Enable this option
|
|
134
|
-
|
|
135
|
-
<a id="offline-survivability-mode"></a>• [`offline_survivability_mode`](#offline-survivability-mode) - Optional Block<br>Offline Survivability Mode. Offline Survivability allows the Site to continue functioning normally without traffic loss during periods of connectivity loss to the Regional Edge (RE) or the Global Controller (GC). When this feature is enabled, a site can continue to function as is with existing configuration for upto 7 days, even when the site is offline. The certificates needed to keep the services running on this site are signed using a local CA. Secrets would also be cached locally to handle the connectivity loss. When the mode is toggled, services will restart and traffic disruption will be seen
|
|
136
|
-
|
|
137
|
-
<a id="performance-enhancement-mode"></a>• [`performance_enhancement_mode`](#performance-enhancement-mode) - Optional Block<br>Performance Enhancement Mode.Optimize the site for L3 or L7 traffic processing. L7 optimized is the default
|
|
138
|
-
|
|
139
|
-
<a id="re-select"></a>• [`re_select`](#re-select) - Optional Block<br>Regional Edge Selection. Selection criteria to connect the site with F5 Distributed Cloud Regional Edge(s)
|
|
140
|
-
|
|
141
|
-
<a id="site-mesh-group-on-slo"></a>• [`site_mesh_group_on_slo`](#site-mesh-group-on-slo) - Optional Block<br>Site Mesh Group Type. Select how the site mesh group will be connected. By default, public IPs of the control nodes of the site will be used
|
|
142
|
-
|
|
143
|
-
<a id="software-settings"></a>• [`software_settings`](#software-settings) - Optional Block<br>F5XC Software Settings. Select OS and Software version for the site. All nodes in the site will run the same OS and Software version. These settings cannot be changed after the site is created
|
|
144
|
-
|
|
145
|
-
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
146
|
-
|
|
147
|
-
<a id="tunnel-dead-timeout"></a>• [`tunnel_dead_timeout`](#tunnel-dead-timeout) - Optional Number<br>Tunnel Dead Timeout (msec). Time interval, in millisec, within which any ipsec / SSL connection from the site going down is detected. When not set (== 0), a default value of 10000 msec will be used
|
|
148
|
-
|
|
149
|
-
<a id="tunnel-type"></a>• [`tunnel_type`](#tunnel-type) - Optional String Defaults to `SITE_TO_SITE_TUNNEL_IPSEC_OR_SSL`<br>Possible values are `SITE_TO_SITE_TUNNEL_IPSEC_OR_SSL`, `SITE_TO_SITE_TUNNEL_IPSEC`, `SITE_TO_SITE_TUNNEL_SSL`<br>[Enum: SITE_TO_SITE_TUNNEL_IPSEC_OR_SSL|SITE_TO_SITE_TUNNEL_IPSEC|SITE_TO_SITE_TUNNEL_SSL] Tunnel type. Tunnel encapsulation to be used between sites Tunnel can operate in both IPsec and SSL, with IPsec being prefered over SSL. Tunnel is of type IPsec Tunnel is of type SSL
|
|
150
|
-
|
|
151
|
-
<a id="upgrade-settings"></a>• [`upgrade_settings`](#upgrade-settings) - Optional Block<br>Upgrade Settings. Specify how a site will be upgraded
|
|
152
|
-
|
|
153
|
-
### Attributes Reference
|
|
154
|
-
|
|
155
|
-
In addition to all arguments above, the following attributes are exported:
|
|
156
|
-
|
|
157
|
-
<a id="id"></a>• [`id`](#id) - Optional String<br>Unique identifier for the resource
|
|
158
|
-
|
|
159
|
-
---
|
|
160
|
-
|
|
161
|
-
#### Active Enhanced Firewall Policies
|
|
162
|
-
|
|
163
|
-
An [`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) block supports the following:
|
|
164
|
-
|
|
165
|
-
<a id="policies-0d92c3"></a>• [`enhanced_firewall_policies`](#policies-0d92c3) - Optional Block<br>Enhanced Firewall Policy. Ordered List of Enhanced Firewall Policies active<br>See [Enhanced Firewall Policies](#policies-0d92c3) below.
|
|
166
|
-
|
|
167
|
-
#### Active Enhanced Firewall Policies Enhanced Firewall Policies
|
|
168
|
-
|
|
169
|
-
<a id="objref-0d92c3"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
170
|
-
|
|
171
|
-
#### Active Forward Proxy Policies
|
|
172
|
-
|
|
173
|
-
An [`active_forward_proxy_policies`](#active-forward-proxy-policies) block supports the following:
|
|
174
|
-
|
|
175
|
-
<a id="policies-42e2f7"></a>• [`forward_proxy_policies`](#policies-42e2f7) - Optional Block<br>Forward Proxy Policies. Ordered List of Forward Proxy Policies active<br>See [Forward Proxy Policies](#policies-42e2f7) below.
|
|
176
|
-
|
|
177
|
-
#### Active Forward Proxy Policies Forward Proxy Policies
|
|
178
|
-
|
|
179
|
-
<a id="objref-42e2f7"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
180
|
-
|
|
181
|
-
#### Admin User Credentials
|
|
182
|
-
|
|
183
|
-
An [`admin_user_credentials`](#admin-user-credentials) block supports the following:
|
|
184
|
-
|
|
185
|
-
<a id="admin-user-credentials-admin-password"></a>• [`admin_password`](#admin-user-credentials-admin-password) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Admin Password](#admin-user-credentials-admin-password) below.
|
|
186
|
-
|
|
187
|
-
<a id="admin-user-credentials-ssh-key"></a>• [`ssh_key`](#admin-user-credentials-ssh-key) - Optional String<br>Public SSH key. Provided Public SSH key can be used for accessing nodes of the site. When provided, customers can SSH to the nodes of this Customer Edge site using admin as the user
|
|
188
|
-
|
|
189
|
-
#### Admin User Credentials Admin Password
|
|
190
|
-
|
|
191
|
-
An [`admin_password`](#admin-user-credentials-admin-password) block (within [`admin_user_credentials`](#admin-user-credentials)) supports the following:
|
|
192
|
-
|
|
193
|
-
<a id="info-710bcb"></a>• [`blindfold_secret_info`](#info-710bcb) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-710bcb) below.
|
|
194
|
-
|
|
195
|
-
<a id="info-32b90f"></a>• [`clear_secret_info`](#info-32b90f) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#info-32b90f) below.
|
|
196
|
-
|
|
197
|
-
#### Admin User Credentials Admin Password Blindfold Secret Info
|
|
198
|
-
|
|
199
|
-
<a id="deep-6962e1"></a>Deeply nested **Info** block collapsed for readability.
|
|
200
|
-
|
|
201
|
-
#### Admin User Credentials Admin Password Clear Secret Info
|
|
202
|
-
|
|
203
|
-
<a id="deep-463d43"></a>Deeply nested **Info** block collapsed for readability.
|
|
204
|
-
|
|
205
|
-
#### AWS
|
|
206
|
-
|
|
207
|
-
An [`aws`](#aws) block supports the following:
|
|
208
|
-
|
|
209
|
-
<a id="aws-not-managed"></a>• [`not_managed`](#aws-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#aws-not-managed) below.
|
|
210
|
-
|
|
211
|
-
#### AWS Not Managed
|
|
212
|
-
|
|
213
|
-
A [`not_managed`](#aws-not-managed) block (within [`aws`](#aws)) supports the following:
|
|
214
|
-
|
|
215
|
-
<a id="aws-not-managed-node-list"></a>• [`node_list`](#aws-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#aws-not-managed-node-list) below.
|
|
216
|
-
|
|
217
|
-
#### AWS Not Managed Node List
|
|
218
|
-
|
|
219
|
-
A [`node_list`](#aws-not-managed-node-list) block (within [`aws.not_managed`](#aws-not-managed)) supports the following:
|
|
220
|
-
|
|
221
|
-
<a id="aws-not-managed-node-list-hostname"></a>• [`hostname`](#aws-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
222
|
-
|
|
223
|
-
<a id="list-6c6298"></a>• [`interface_list`](#list-6c6298) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-6c6298) below.
|
|
224
|
-
|
|
225
|
-
<a id="aws-not-managed-node-list-public-ip"></a>• [`public_ip`](#aws-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
226
|
-
|
|
227
|
-
<a id="aws-not-managed-node-list-type"></a>• [`type`](#aws-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
228
|
-
|
|
229
|
-
#### AWS Not Managed Node List Interface List
|
|
230
|
-
|
|
231
|
-
An [`interface_list`](#list-6c6298) block (within [`aws.not_managed.node_list`](#aws-not-managed-node-list)) supports the following:
|
|
232
|
-
|
|
233
|
-
<a id="interface-f1858f"></a>• [`bond_interface`](#interface-f1858f) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-f1858f) below.
|
|
234
|
-
|
|
235
|
-
<a id="spec-f3edfe"></a>• [`description_spec`](#spec-f3edfe) - Optional String<br>Interface Description. Description for this Interface
|
|
236
|
-
|
|
237
|
-
<a id="client-35134d"></a>• [`dhcp_client`](#client-35134d) - Optional Block<br>Enable this option
|
|
238
|
-
|
|
239
|
-
<a id="interface-f28fa7"></a>• [`ethernet_interface`](#interface-f28fa7) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-f28fa7) below.
|
|
240
|
-
|
|
241
|
-
<a id="config-cd50c5"></a>• [`ipv6_auto_config`](#config-cd50c5) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-cd50c5) below.
|
|
242
|
-
|
|
243
|
-
<a id="labels-188d84"></a>• [`labels`](#labels-188d84) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
244
|
-
|
|
245
|
-
<a id="monitor-169def"></a>• [`monitor`](#monitor-169def) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
246
|
-
|
|
247
|
-
<a id="disabled-428eab"></a>• [`monitor_disabled`](#disabled-428eab) - Optional Block<br>Enable this option
|
|
248
|
-
|
|
249
|
-
<a id="mtu-9ea6fa"></a>• [`mtu`](#mtu-9ea6fa) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
250
|
-
|
|
251
|
-
<a id="name-7539f0"></a>• [`name`](#name-7539f0) - Optional String<br>Interface Name. Name of this Interface
|
|
252
|
-
|
|
253
|
-
<a id="option-4d9fd7"></a>• [`network_option`](#option-4d9fd7) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-4d9fd7) below.
|
|
254
|
-
|
|
255
|
-
<a id="address-95964e"></a>• [`no_ipv4_address`](#address-95964e) - Optional Block<br>Enable this option
|
|
256
|
-
|
|
257
|
-
<a id="address-b6fb0a"></a>• [`no_ipv6_address`](#address-b6fb0a) - Optional Block<br>Enable this option
|
|
258
|
-
|
|
259
|
-
<a id="priority-a786bf"></a>• [`priority`](#priority-a786bf) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
260
|
-
|
|
261
|
-
<a id="disabled-1942d4"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-1942d4) - Optional Block<br>Enable this option
|
|
262
|
-
|
|
263
|
-
<a id="enabled-850dad"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-850dad) - Optional Block<br>Enable this option
|
|
264
|
-
|
|
265
|
-
<a id="static-ip-f224ff"></a>• [`static_ip`](#static-ip-f224ff) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-f224ff) below.
|
|
266
|
-
|
|
267
|
-
<a id="address-fddb84"></a>• [`static_ipv6_address`](#address-fddb84) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-fddb84) below.
|
|
268
|
-
|
|
269
|
-
<a id="interface-70af4e"></a>• [`vlan_interface`](#interface-70af4e) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-70af4e) below.
|
|
270
|
-
|
|
271
|
-
#### AWS Not Managed Node List Interface List Bond Interface
|
|
272
|
-
|
|
273
|
-
<a id="deep-4224d9"></a>Deeply nested **Interface** block collapsed for readability.
|
|
274
|
-
|
|
275
|
-
#### AWS Not Managed Node List Interface List Bond Interface Lacp
|
|
276
|
-
|
|
277
|
-
<a id="deep-5560e6"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
278
|
-
|
|
279
|
-
#### AWS Not Managed Node List Interface List Ethernet Interface
|
|
280
|
-
|
|
281
|
-
<a id="deep-fc0694"></a>Deeply nested **Interface** block collapsed for readability.
|
|
282
|
-
|
|
283
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config
|
|
284
|
-
|
|
285
|
-
<a id="deep-72b9a7"></a>Deeply nested **Config** block collapsed for readability.
|
|
286
|
-
|
|
287
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router
|
|
288
|
-
|
|
289
|
-
<a id="deep-2b8f0a"></a>Deeply nested **Router** block collapsed for readability.
|
|
290
|
-
|
|
291
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
292
|
-
|
|
293
|
-
<a id="deep-ef4d0c"></a>Deeply nested **Config** block collapsed for readability.
|
|
294
|
-
|
|
295
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
296
|
-
|
|
297
|
-
<a id="deep-3084ba"></a>Deeply nested **List** block collapsed for readability.
|
|
298
|
-
|
|
299
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
300
|
-
|
|
301
|
-
<a id="deep-92f368"></a>Deeply nested **DNS** block collapsed for readability.
|
|
302
|
-
|
|
303
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
304
|
-
|
|
305
|
-
<a id="deep-1075b3"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
306
|
-
|
|
307
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
308
|
-
|
|
309
|
-
<a id="deep-19736c"></a>Deeply nested **Networks** block collapsed for readability.
|
|
310
|
-
|
|
311
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
312
|
-
|
|
313
|
-
<a id="deep-3590d4"></a>Deeply nested **Pools** block collapsed for readability.
|
|
314
|
-
|
|
315
|
-
#### AWS Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
316
|
-
|
|
317
|
-
<a id="deep-b470b4"></a>Deeply nested **Map** block collapsed for readability.
|
|
318
|
-
|
|
319
|
-
#### AWS Not Managed Node List Interface List Network Option
|
|
320
|
-
|
|
321
|
-
<a id="deep-ccc2da"></a>Deeply nested **Option** block collapsed for readability.
|
|
322
|
-
|
|
323
|
-
#### AWS Not Managed Node List Interface List Static IP
|
|
324
|
-
|
|
325
|
-
<a id="deep-28441a"></a>Deeply nested **IP** block collapsed for readability.
|
|
326
|
-
|
|
327
|
-
#### AWS Not Managed Node List Interface List Static IPv6 Address
|
|
328
|
-
|
|
329
|
-
<a id="deep-8f821d"></a>Deeply nested **Address** block collapsed for readability.
|
|
330
|
-
|
|
331
|
-
#### AWS Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
332
|
-
|
|
333
|
-
<a id="deep-2e1682"></a>Deeply nested **IP** block collapsed for readability.
|
|
334
|
-
|
|
335
|
-
#### AWS Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
336
|
-
|
|
337
|
-
<a id="deep-bbb483"></a>Deeply nested **IP** block collapsed for readability.
|
|
338
|
-
|
|
339
|
-
#### AWS Not Managed Node List Interface List VLAN Interface
|
|
340
|
-
|
|
341
|
-
<a id="deep-3f2db4"></a>Deeply nested **Interface** block collapsed for readability.
|
|
342
|
-
|
|
343
|
-
#### Azure
|
|
344
|
-
|
|
345
|
-
An [`azure`](#azure) block supports the following:
|
|
346
|
-
|
|
347
|
-
<a id="azure-not-managed"></a>• [`not_managed`](#azure-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#azure-not-managed) below.
|
|
348
|
-
|
|
349
|
-
#### Azure Not Managed
|
|
350
|
-
|
|
351
|
-
A [`not_managed`](#azure-not-managed) block (within [`azure`](#azure)) supports the following:
|
|
352
|
-
|
|
353
|
-
<a id="azure-not-managed-node-list"></a>• [`node_list`](#azure-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#azure-not-managed-node-list) below.
|
|
354
|
-
|
|
355
|
-
#### Azure Not Managed Node List
|
|
356
|
-
|
|
357
|
-
A [`node_list`](#azure-not-managed-node-list) block (within [`azure.not_managed`](#azure-not-managed)) supports the following:
|
|
358
|
-
|
|
359
|
-
<a id="azure-not-managed-node-list-hostname"></a>• [`hostname`](#azure-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
360
|
-
|
|
361
|
-
<a id="list-f42e50"></a>• [`interface_list`](#list-f42e50) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-f42e50) below.
|
|
362
|
-
|
|
363
|
-
<a id="azure-not-managed-node-list-public-ip"></a>• [`public_ip`](#azure-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
364
|
-
|
|
365
|
-
<a id="azure-not-managed-node-list-type"></a>• [`type`](#azure-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
366
|
-
|
|
367
|
-
#### Azure Not Managed Node List Interface List
|
|
368
|
-
|
|
369
|
-
An [`interface_list`](#list-f42e50) block (within [`azure.not_managed.node_list`](#azure-not-managed-node-list)) supports the following:
|
|
370
|
-
|
|
371
|
-
<a id="interface-dd8ceb"></a>• [`bond_interface`](#interface-dd8ceb) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-dd8ceb) below.
|
|
372
|
-
|
|
373
|
-
<a id="spec-4b4de9"></a>• [`description_spec`](#spec-4b4de9) - Optional String<br>Interface Description. Description for this Interface
|
|
374
|
-
|
|
375
|
-
<a id="client-b5ac25"></a>• [`dhcp_client`](#client-b5ac25) - Optional Block<br>Enable this option
|
|
376
|
-
|
|
377
|
-
<a id="interface-20c4ad"></a>• [`ethernet_interface`](#interface-20c4ad) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-20c4ad) below.
|
|
378
|
-
|
|
379
|
-
<a id="config-cc5378"></a>• [`ipv6_auto_config`](#config-cc5378) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-cc5378) below.
|
|
380
|
-
|
|
381
|
-
<a id="labels-e2a4c4"></a>• [`labels`](#labels-e2a4c4) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
382
|
-
|
|
383
|
-
<a id="monitor-a565a2"></a>• [`monitor`](#monitor-a565a2) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
384
|
-
|
|
385
|
-
<a id="disabled-7aa1a9"></a>• [`monitor_disabled`](#disabled-7aa1a9) - Optional Block<br>Enable this option
|
|
386
|
-
|
|
387
|
-
<a id="mtu-bfeae5"></a>• [`mtu`](#mtu-bfeae5) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
388
|
-
|
|
389
|
-
<a id="name-34ce39"></a>• [`name`](#name-34ce39) - Optional String<br>Interface Name. Name of this Interface
|
|
390
|
-
|
|
391
|
-
<a id="option-e15a34"></a>• [`network_option`](#option-e15a34) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-e15a34) below.
|
|
392
|
-
|
|
393
|
-
<a id="address-087ea1"></a>• [`no_ipv4_address`](#address-087ea1) - Optional Block<br>Enable this option
|
|
394
|
-
|
|
395
|
-
<a id="address-c7425d"></a>• [`no_ipv6_address`](#address-c7425d) - Optional Block<br>Enable this option
|
|
396
|
-
|
|
397
|
-
<a id="priority-0e03ad"></a>• [`priority`](#priority-0e03ad) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
398
|
-
|
|
399
|
-
<a id="disabled-34b2d0"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-34b2d0) - Optional Block<br>Enable this option
|
|
400
|
-
|
|
401
|
-
<a id="enabled-453c17"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-453c17) - Optional Block<br>Enable this option
|
|
402
|
-
|
|
403
|
-
<a id="static-ip-4b0611"></a>• [`static_ip`](#static-ip-4b0611) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-4b0611) below.
|
|
404
|
-
|
|
405
|
-
<a id="address-e1203e"></a>• [`static_ipv6_address`](#address-e1203e) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-e1203e) below.
|
|
406
|
-
|
|
407
|
-
<a id="interface-aa2f00"></a>• [`vlan_interface`](#interface-aa2f00) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-aa2f00) below.
|
|
408
|
-
|
|
409
|
-
#### Azure Not Managed Node List Interface List Bond Interface
|
|
410
|
-
|
|
411
|
-
<a id="deep-4cb273"></a>Deeply nested **Interface** block collapsed for readability.
|
|
412
|
-
|
|
413
|
-
#### Azure Not Managed Node List Interface List Bond Interface Lacp
|
|
414
|
-
|
|
415
|
-
<a id="deep-5db881"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
416
|
-
|
|
417
|
-
#### Azure Not Managed Node List Interface List Ethernet Interface
|
|
418
|
-
|
|
419
|
-
<a id="deep-293b55"></a>Deeply nested **Interface** block collapsed for readability.
|
|
420
|
-
|
|
421
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config
|
|
422
|
-
|
|
423
|
-
<a id="deep-435f70"></a>Deeply nested **Config** block collapsed for readability.
|
|
424
|
-
|
|
425
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router
|
|
426
|
-
|
|
427
|
-
<a id="deep-04f29f"></a>Deeply nested **Router** block collapsed for readability.
|
|
428
|
-
|
|
429
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
430
|
-
|
|
431
|
-
<a id="deep-5dc847"></a>Deeply nested **Config** block collapsed for readability.
|
|
432
|
-
|
|
433
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
434
|
-
|
|
435
|
-
<a id="deep-8352e0"></a>Deeply nested **List** block collapsed for readability.
|
|
436
|
-
|
|
437
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
438
|
-
|
|
439
|
-
<a id="deep-453621"></a>Deeply nested **DNS** block collapsed for readability.
|
|
440
|
-
|
|
441
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
442
|
-
|
|
443
|
-
<a id="deep-cd224b"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
444
|
-
|
|
445
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
446
|
-
|
|
447
|
-
<a id="deep-31b166"></a>Deeply nested **Networks** block collapsed for readability.
|
|
448
|
-
|
|
449
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
450
|
-
|
|
451
|
-
<a id="deep-91a116"></a>Deeply nested **Pools** block collapsed for readability.
|
|
452
|
-
|
|
453
|
-
#### Azure Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
454
|
-
|
|
455
|
-
<a id="deep-6e23fb"></a>Deeply nested **Map** block collapsed for readability.
|
|
456
|
-
|
|
457
|
-
#### Azure Not Managed Node List Interface List Network Option
|
|
458
|
-
|
|
459
|
-
<a id="deep-2a92f3"></a>Deeply nested **Option** block collapsed for readability.
|
|
460
|
-
|
|
461
|
-
#### Azure Not Managed Node List Interface List Static IP
|
|
462
|
-
|
|
463
|
-
<a id="deep-9df1d2"></a>Deeply nested **IP** block collapsed for readability.
|
|
464
|
-
|
|
465
|
-
#### Azure Not Managed Node List Interface List Static IPv6 Address
|
|
466
|
-
|
|
467
|
-
<a id="deep-7bc38a"></a>Deeply nested **Address** block collapsed for readability.
|
|
468
|
-
|
|
469
|
-
#### Azure Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
470
|
-
|
|
471
|
-
<a id="deep-32a2f7"></a>Deeply nested **IP** block collapsed for readability.
|
|
472
|
-
|
|
473
|
-
#### Azure Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
474
|
-
|
|
475
|
-
<a id="deep-a3e092"></a>Deeply nested **IP** block collapsed for readability.
|
|
476
|
-
|
|
477
|
-
#### Azure Not Managed Node List Interface List VLAN Interface
|
|
478
|
-
|
|
479
|
-
<a id="deep-63221f"></a>Deeply nested **Interface** block collapsed for readability.
|
|
480
|
-
|
|
481
|
-
#### Baremetal
|
|
482
|
-
|
|
483
|
-
A [`baremetal`](#baremetal) block supports the following:
|
|
484
|
-
|
|
485
|
-
<a id="baremetal-not-managed"></a>• [`not_managed`](#baremetal-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#baremetal-not-managed) below.
|
|
486
|
-
|
|
487
|
-
#### Baremetal Not Managed
|
|
488
|
-
|
|
489
|
-
A [`not_managed`](#baremetal-not-managed) block (within [`baremetal`](#baremetal)) supports the following:
|
|
490
|
-
|
|
491
|
-
<a id="baremetal-not-managed-node-list"></a>• [`node_list`](#baremetal-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#baremetal-not-managed-node-list) below.
|
|
492
|
-
|
|
493
|
-
#### Baremetal Not Managed Node List
|
|
494
|
-
|
|
495
|
-
A [`node_list`](#baremetal-not-managed-node-list) block (within [`baremetal.not_managed`](#baremetal-not-managed)) supports the following:
|
|
496
|
-
|
|
497
|
-
<a id="hostname-ff20c8"></a>• [`hostname`](#hostname-ff20c8) - Optional String<br>Hostname. Hostname for this Node
|
|
498
|
-
|
|
499
|
-
<a id="list-30e058"></a>• [`interface_list`](#list-30e058) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-30e058) below.
|
|
500
|
-
|
|
501
|
-
<a id="public-ip-acb6d6"></a>• [`public_ip`](#public-ip-acb6d6) - Optional String<br>Public IP. Public IP for this Node
|
|
502
|
-
|
|
503
|
-
<a id="baremetal-not-managed-node-list-type"></a>• [`type`](#baremetal-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
504
|
-
|
|
505
|
-
#### Baremetal Not Managed Node List Interface List
|
|
506
|
-
|
|
507
|
-
An [`interface_list`](#list-30e058) block (within [`baremetal.not_managed.node_list`](#baremetal-not-managed-node-list)) supports the following:
|
|
508
|
-
|
|
509
|
-
<a id="interface-b7e132"></a>• [`bond_interface`](#interface-b7e132) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-b7e132) below.
|
|
510
|
-
|
|
511
|
-
<a id="spec-b7ed1b"></a>• [`description_spec`](#spec-b7ed1b) - Optional String<br>Interface Description. Description for this Interface
|
|
512
|
-
|
|
513
|
-
<a id="client-829bf8"></a>• [`dhcp_client`](#client-829bf8) - Optional Block<br>Enable this option
|
|
514
|
-
|
|
515
|
-
<a id="interface-3933d2"></a>• [`ethernet_interface`](#interface-3933d2) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-3933d2) below.
|
|
516
|
-
|
|
517
|
-
<a id="config-88a239"></a>• [`ipv6_auto_config`](#config-88a239) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-88a239) below.
|
|
518
|
-
|
|
519
|
-
<a id="labels-816fbc"></a>• [`labels`](#labels-816fbc) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
520
|
-
|
|
521
|
-
<a id="monitor-1cb67f"></a>• [`monitor`](#monitor-1cb67f) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
522
|
-
|
|
523
|
-
<a id="disabled-1756b3"></a>• [`monitor_disabled`](#disabled-1756b3) - Optional Block<br>Enable this option
|
|
524
|
-
|
|
525
|
-
<a id="mtu-2d7f6c"></a>• [`mtu`](#mtu-2d7f6c) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
526
|
-
|
|
527
|
-
<a id="name-8c8a3d"></a>• [`name`](#name-8c8a3d) - Optional String<br>Interface Name. Name of this Interface
|
|
528
|
-
|
|
529
|
-
<a id="option-ad2bbb"></a>• [`network_option`](#option-ad2bbb) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-ad2bbb) below.
|
|
530
|
-
|
|
531
|
-
<a id="address-ac89d0"></a>• [`no_ipv4_address`](#address-ac89d0) - Optional Block<br>Enable this option
|
|
532
|
-
|
|
533
|
-
<a id="address-b8923c"></a>• [`no_ipv6_address`](#address-b8923c) - Optional Block<br>Enable this option
|
|
534
|
-
|
|
535
|
-
<a id="priority-d77987"></a>• [`priority`](#priority-d77987) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
536
|
-
|
|
537
|
-
<a id="disabled-309cd0"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-309cd0) - Optional Block<br>Enable this option
|
|
538
|
-
|
|
539
|
-
<a id="enabled-832872"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-832872) - Optional Block<br>Enable this option
|
|
540
|
-
|
|
541
|
-
<a id="static-ip-9bad70"></a>• [`static_ip`](#static-ip-9bad70) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-9bad70) below.
|
|
542
|
-
|
|
543
|
-
<a id="address-411954"></a>• [`static_ipv6_address`](#address-411954) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-411954) below.
|
|
544
|
-
|
|
545
|
-
<a id="interface-da3951"></a>• [`vlan_interface`](#interface-da3951) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-da3951) below.
|
|
546
|
-
|
|
547
|
-
#### Baremetal Not Managed Node List Interface List Bond Interface
|
|
548
|
-
|
|
549
|
-
<a id="deep-5827e6"></a>Deeply nested **Interface** block collapsed for readability.
|
|
550
|
-
|
|
551
|
-
#### Baremetal Not Managed Node List Interface List Bond Interface Lacp
|
|
552
|
-
|
|
553
|
-
<a id="deep-a0f77e"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
554
|
-
|
|
555
|
-
#### Baremetal Not Managed Node List Interface List Ethernet Interface
|
|
556
|
-
|
|
557
|
-
<a id="deep-8e9a1f"></a>Deeply nested **Interface** block collapsed for readability.
|
|
558
|
-
|
|
559
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config
|
|
560
|
-
|
|
561
|
-
<a id="deep-0dfce3"></a>Deeply nested **Config** block collapsed for readability.
|
|
562
|
-
|
|
563
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router
|
|
564
|
-
|
|
565
|
-
<a id="deep-781eec"></a>Deeply nested **Router** block collapsed for readability.
|
|
566
|
-
|
|
567
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
568
|
-
|
|
569
|
-
<a id="deep-0df42e"></a>Deeply nested **Config** block collapsed for readability.
|
|
570
|
-
|
|
571
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
572
|
-
|
|
573
|
-
<a id="deep-0dc91f"></a>Deeply nested **List** block collapsed for readability.
|
|
574
|
-
|
|
575
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
576
|
-
|
|
577
|
-
<a id="deep-88b0ae"></a>Deeply nested **DNS** block collapsed for readability.
|
|
578
|
-
|
|
579
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
580
|
-
|
|
581
|
-
<a id="deep-93e220"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
582
|
-
|
|
583
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
584
|
-
|
|
585
|
-
<a id="deep-fee53d"></a>Deeply nested **Networks** block collapsed for readability.
|
|
586
|
-
|
|
587
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
588
|
-
|
|
589
|
-
<a id="deep-8b3c2b"></a>Deeply nested **Pools** block collapsed for readability.
|
|
590
|
-
|
|
591
|
-
#### Baremetal Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
592
|
-
|
|
593
|
-
<a id="deep-7e8e06"></a>Deeply nested **Map** block collapsed for readability.
|
|
594
|
-
|
|
595
|
-
#### Baremetal Not Managed Node List Interface List Network Option
|
|
596
|
-
|
|
597
|
-
<a id="deep-485083"></a>Deeply nested **Option** block collapsed for readability.
|
|
598
|
-
|
|
599
|
-
#### Baremetal Not Managed Node List Interface List Static IP
|
|
600
|
-
|
|
601
|
-
<a id="deep-51a8ed"></a>Deeply nested **IP** block collapsed for readability.
|
|
602
|
-
|
|
603
|
-
#### Baremetal Not Managed Node List Interface List Static IPv6 Address
|
|
604
|
-
|
|
605
|
-
<a id="deep-4c97e1"></a>Deeply nested **Address** block collapsed for readability.
|
|
606
|
-
|
|
607
|
-
#### Baremetal Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
608
|
-
|
|
609
|
-
<a id="deep-aca84b"></a>Deeply nested **IP** block collapsed for readability.
|
|
610
|
-
|
|
611
|
-
#### Baremetal Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
612
|
-
|
|
613
|
-
<a id="deep-a0f5cd"></a>Deeply nested **IP** block collapsed for readability.
|
|
614
|
-
|
|
615
|
-
#### Baremetal Not Managed Node List Interface List VLAN Interface
|
|
616
|
-
|
|
617
|
-
<a id="deep-910d0a"></a>Deeply nested **Interface** block collapsed for readability.
|
|
618
|
-
|
|
619
|
-
#### Blocked Services
|
|
620
|
-
|
|
621
|
-
A [`blocked_services`](#blocked-services) block supports the following:
|
|
622
|
-
|
|
623
|
-
<a id="blocked-services-blocked-sevice"></a>• [`blocked_sevice`](#blocked-services-blocked-sevice) - Optional Block<br>Disable Node Local Services<br>See [Blocked Sevice](#blocked-services-blocked-sevice) below.
|
|
624
|
-
|
|
625
|
-
#### Blocked Services Blocked Sevice
|
|
626
|
-
|
|
627
|
-
A [`blocked_sevice`](#blocked-services-blocked-sevice) block (within [`blocked_services`](#blocked-services)) supports the following:
|
|
628
|
-
|
|
629
|
-
<a id="blocked-services-blocked-sevice-dns"></a>• [`dns`](#blocked-services-blocked-sevice-dns) - Optional Block<br>Enable this option
|
|
630
|
-
|
|
631
|
-
<a id="type-808ec9"></a>• [`network_type`](#type-808ec9) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Virtual Network Type. Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on CE sites. This network is created automatically and present on all sites Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL_INSIDE is a private network inside site. It is a secure network and is not connected to public network. Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on CE sites. This network is created during provisioning of site User defined per-site virtual network. Scope of this virtual network is limited to the site. This is not yet supported Virtual-network of type VIRTUAL_NETWORK_PUBLIC directly conects to the public internet. Virtual-network of this type is local to every site. Two virtual networks of this type on different sites are neither related nor connected. Constraints: There can be atmost one virtual network of this type in a given site. This network type is supported on RE sites only It is an internally created by the system. They must not be created by user Virtual Neworks with global scope across different sites in F5XC domain. An example global virtual-network called 'AIN Network' is created for every tenant. for volterra fabric Constraints: It is currently only supported as internally created by the system. vK8s service network for a given tenant. Used to advertise a virtual host only to vk8s pods for that tenant Constraints: It is an internally created by the system. Must not be created by user VER internal network for the site. It can only be used for virtual hosts with SMA_PROXY type proxy Constraints: It is an internally created by the system. Must not be created by user Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE represents both VIRTUAL_NETWORK_SITE_LOCAL and VIRTUAL_NETWORK_SITE_LOCAL_INSIDE Constraints: This network type is only meaningful in an advertise policy When virtual-network of type VIRTUAL_NETWORK_IP_AUTO is selected for an endpoint, VER will try to determine the network based on the provided IP address Constraints: This network type is only meaningful in an endpoint VoltADN Private Network is used on volterra RE(s) to connect to customer private networks This network is created by opening a support ticket This network is per site srv6 network VER IP Fabric network for the site. This Virtual network type is used for exposing virtual host on IP Fabric network on the VER site or for endpoint in IP Fabric network Constraints: It is an internally created by the system. Must not be created by user Network internally created for a segment Constraints: It is an internally created by the system. Must not be created by user
|
|
632
|
-
|
|
633
|
-
<a id="blocked-services-blocked-sevice-ssh"></a>• [`ssh`](#blocked-services-blocked-sevice-ssh) - Optional Block<br>Enable this option
|
|
634
|
-
|
|
635
|
-
<a id="interface-e57e21"></a>• [`web_user_interface`](#interface-e57e21) - Optional Block<br>Enable this option
|
|
636
|
-
|
|
637
|
-
#### Custom Proxy
|
|
638
|
-
|
|
639
|
-
A [`custom_proxy`](#custom-proxy) block supports the following:
|
|
640
|
-
|
|
641
|
-
<a id="custom-proxy-disable-re-tunnel"></a>• [`disable_re_tunnel`](#custom-proxy-disable-re-tunnel) - Optional Block<br>Enable this option
|
|
642
|
-
|
|
643
|
-
<a id="custom-proxy-enable-re-tunnel"></a>• [`enable_re_tunnel`](#custom-proxy-enable-re-tunnel) - Optional Block<br>Enable this option
|
|
644
|
-
|
|
645
|
-
<a id="custom-proxy-password"></a>• [`password`](#custom-proxy-password) - Optional Block<br>Secret. SecretType is used in an object to indicate a sensitive/confidential field<br>See [Password](#custom-proxy-password) below.
|
|
646
|
-
|
|
647
|
-
<a id="custom-proxy-proxy-ip-address"></a>• [`proxy_ip_address`](#custom-proxy-proxy-ip-address) - Optional String<br>Proxy IPv4 Address. Specify the IPv4 Address of the internal Enterprise Proxy
|
|
648
|
-
|
|
649
|
-
<a id="custom-proxy-proxy-port"></a>• [`proxy_port`](#custom-proxy-proxy-port) - Optional Number<br>Proxy Port. Specify the Port of the internal Enterprise Proxy
|
|
650
|
-
|
|
651
|
-
<a id="custom-proxy-username"></a>• [`username`](#custom-proxy-username) - Optional String<br>Username. If the internal Enterprise Proxy is using basic authentication, specify the username. This is an optional field
|
|
652
|
-
|
|
653
|
-
#### Custom Proxy Password
|
|
654
|
-
|
|
655
|
-
A [`password`](#custom-proxy-password) block (within [`custom_proxy`](#custom-proxy)) supports the following:
|
|
656
|
-
|
|
657
|
-
<a id="info-a3e566"></a>• [`blindfold_secret_info`](#info-a3e566) - Optional Block<br>Blindfold Secret. BlindfoldSecretInfoType specifies information about the Secret managed by F5XC Secret Management<br>See [Blindfold Secret Info](#info-a3e566) below.
|
|
658
|
-
|
|
659
|
-
<a id="custom-proxy-password-clear-secret-info"></a>• [`clear_secret_info`](#custom-proxy-password-clear-secret-info) - Optional Block<br>In-Clear Secret. ClearSecretInfoType specifies information about the Secret that is not encrypted<br>See [Clear Secret Info](#custom-proxy-password-clear-secret-info) below.
|
|
660
|
-
|
|
661
|
-
#### Custom Proxy Password Blindfold Secret Info
|
|
662
|
-
|
|
663
|
-
A [`blindfold_secret_info`](#info-a3e566) block (within [`custom_proxy.password`](#custom-proxy-password)) supports the following:
|
|
664
|
-
|
|
665
|
-
<a id="provider-4c379d"></a>• [`decryption_provider`](#provider-4c379d) - Optional String<br>Decryption Provider. Name of the Secret Management Access object that contains information about the backend Secret Management service
|
|
666
|
-
|
|
667
|
-
<a id="location-04599e"></a>• [`location`](#location-04599e) - Optional String<br>Location. Location is the uri_ref. It could be in URL format for string:/// Or it could be a path if the store provider is an HTTP/HTTPS location
|
|
668
|
-
|
|
669
|
-
<a id="provider-d70f6e"></a>• [`store_provider`](#provider-d70f6e) - Optional String<br>Store Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
670
|
-
|
|
671
|
-
#### Custom Proxy Password Clear Secret Info
|
|
672
|
-
|
|
673
|
-
A [`clear_secret_info`](#custom-proxy-password-clear-secret-info) block (within [`custom_proxy.password`](#custom-proxy-password)) supports the following:
|
|
674
|
-
|
|
675
|
-
<a id="ref-35707d"></a>• [`provider_ref`](#ref-35707d) - Optional String<br>Provider. Name of the Secret Management Access object that contains information about the store to get encrypted bytes This field needs to be provided only if the URL scheme is not string:///
|
|
676
|
-
|
|
677
|
-
<a id="url-0071f9"></a>• [`url`](#url-0071f9) - Optional String<br>URL. URL of the secret. Currently supported URL schemes is string:///. For string:/// scheme, Secret needs to be encoded Base64 format. When asked for this secret, caller will get Secret bytes after Base64 decoding
|
|
678
|
-
|
|
679
|
-
#### Custom Proxy Bypass
|
|
680
|
-
|
|
681
|
-
A [`custom_proxy_bypass`](#custom-proxy-bypass) block supports the following:
|
|
682
|
-
|
|
683
|
-
<a id="custom-proxy-bypass-proxy-bypass"></a>• [`proxy_bypass`](#custom-proxy-bypass-proxy-bypass) - Optional List<br>Proxy Bypass. List of domains to bypass the proxy
|
|
684
|
-
|
|
685
|
-
#### Dc Cluster Group SLI
|
|
686
|
-
|
|
687
|
-
<a id="objref-771424"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
688
|
-
|
|
689
|
-
#### Dc Cluster Group Slo
|
|
690
|
-
|
|
691
|
-
<a id="objref-ba138b"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
692
|
-
|
|
693
|
-
#### DNS NTP Config
|
|
694
|
-
|
|
695
|
-
A [`dns_ntp_config`](#dns-ntp-config) block supports the following:
|
|
696
|
-
|
|
697
|
-
<a id="dns-ntp-config-custom-dns"></a>• [`custom_dns`](#dns-ntp-config-custom-dns) - Optional Block<br>DNS Servers. DNS Servers<br>See [Custom DNS](#dns-ntp-config-custom-dns) below.
|
|
698
|
-
|
|
699
|
-
<a id="dns-ntp-config-custom-ntp"></a>• [`custom_ntp`](#dns-ntp-config-custom-ntp) - Optional Block<br>NTP Servers. NTP Servers<br>See [Custom NTP](#dns-ntp-config-custom-ntp) below.
|
|
700
|
-
|
|
701
|
-
<a id="dns-ntp-config-f5-dns-default"></a>• [`f5_dns_default`](#dns-ntp-config-f5-dns-default) - Optional Block<br>Enable this option
|
|
702
|
-
|
|
703
|
-
<a id="dns-ntp-config-f5-ntp-default"></a>• [`f5_ntp_default`](#dns-ntp-config-f5-ntp-default) - Optional Block<br>Enable this option
|
|
704
|
-
|
|
705
|
-
#### DNS NTP Config Custom DNS
|
|
706
|
-
|
|
707
|
-
A [`custom_dns`](#dns-ntp-config-custom-dns) block (within [`dns_ntp_config`](#dns-ntp-config)) supports the following:
|
|
708
|
-
|
|
709
|
-
<a id="dns-ntp-config-custom-dns-dns-servers"></a>• [`dns_servers`](#dns-ntp-config-custom-dns-dns-servers) - Optional List<br>DNS Servers. DNS Servers
|
|
710
|
-
|
|
711
|
-
#### DNS NTP Config Custom NTP
|
|
712
|
-
|
|
713
|
-
A [`custom_ntp`](#dns-ntp-config-custom-ntp) block (within [`dns_ntp_config`](#dns-ntp-config)) supports the following:
|
|
714
|
-
|
|
715
|
-
<a id="dns-ntp-config-custom-ntp-ntp-servers"></a>• [`ntp_servers`](#dns-ntp-config-custom-ntp-ntp-servers) - Optional List<br>NTP Servers. NTP Servers
|
|
716
|
-
|
|
717
|
-
#### Equinix
|
|
718
|
-
|
|
719
|
-
An [`equinix`](#equinix) block supports the following:
|
|
720
|
-
|
|
721
|
-
<a id="equinix-not-managed"></a>• [`not_managed`](#equinix-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#equinix-not-managed) below.
|
|
722
|
-
|
|
723
|
-
#### Equinix Not Managed
|
|
724
|
-
|
|
725
|
-
A [`not_managed`](#equinix-not-managed) block (within [`equinix`](#equinix)) supports the following:
|
|
726
|
-
|
|
727
|
-
<a id="equinix-not-managed-node-list"></a>• [`node_list`](#equinix-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#equinix-not-managed-node-list) below.
|
|
728
|
-
|
|
729
|
-
#### Equinix Not Managed Node List
|
|
730
|
-
|
|
731
|
-
A [`node_list`](#equinix-not-managed-node-list) block (within [`equinix.not_managed`](#equinix-not-managed)) supports the following:
|
|
732
|
-
|
|
733
|
-
<a id="equinix-not-managed-node-list-hostname"></a>• [`hostname`](#equinix-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
734
|
-
|
|
735
|
-
<a id="list-3a9b82"></a>• [`interface_list`](#list-3a9b82) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-3a9b82) below.
|
|
736
|
-
|
|
737
|
-
<a id="equinix-not-managed-node-list-public-ip"></a>• [`public_ip`](#equinix-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
738
|
-
|
|
739
|
-
<a id="equinix-not-managed-node-list-type"></a>• [`type`](#equinix-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
740
|
-
|
|
741
|
-
#### Equinix Not Managed Node List Interface List
|
|
742
|
-
|
|
743
|
-
An [`interface_list`](#list-3a9b82) block (within [`equinix.not_managed.node_list`](#equinix-not-managed-node-list)) supports the following:
|
|
744
|
-
|
|
745
|
-
<a id="interface-a1aaf8"></a>• [`bond_interface`](#interface-a1aaf8) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-a1aaf8) below.
|
|
746
|
-
|
|
747
|
-
<a id="spec-d32b48"></a>• [`description_spec`](#spec-d32b48) - Optional String<br>Interface Description. Description for this Interface
|
|
748
|
-
|
|
749
|
-
<a id="client-c83f23"></a>• [`dhcp_client`](#client-c83f23) - Optional Block<br>Enable this option
|
|
750
|
-
|
|
751
|
-
<a id="interface-a2d3e0"></a>• [`ethernet_interface`](#interface-a2d3e0) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-a2d3e0) below.
|
|
752
|
-
|
|
753
|
-
<a id="config-96da89"></a>• [`ipv6_auto_config`](#config-96da89) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-96da89) below.
|
|
754
|
-
|
|
755
|
-
<a id="labels-718666"></a>• [`labels`](#labels-718666) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
756
|
-
|
|
757
|
-
<a id="monitor-15c36b"></a>• [`monitor`](#monitor-15c36b) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
758
|
-
|
|
759
|
-
<a id="disabled-5d3350"></a>• [`monitor_disabled`](#disabled-5d3350) - Optional Block<br>Enable this option
|
|
760
|
-
|
|
761
|
-
<a id="mtu-80c067"></a>• [`mtu`](#mtu-80c067) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
762
|
-
|
|
763
|
-
<a id="name-5f1c00"></a>• [`name`](#name-5f1c00) - Optional String<br>Interface Name. Name of this Interface
|
|
764
|
-
|
|
765
|
-
<a id="option-1659e3"></a>• [`network_option`](#option-1659e3) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-1659e3) below.
|
|
766
|
-
|
|
767
|
-
<a id="address-e9c2b1"></a>• [`no_ipv4_address`](#address-e9c2b1) - Optional Block<br>Enable this option
|
|
768
|
-
|
|
769
|
-
<a id="address-278ecf"></a>• [`no_ipv6_address`](#address-278ecf) - Optional Block<br>Enable this option
|
|
770
|
-
|
|
771
|
-
<a id="priority-8326e4"></a>• [`priority`](#priority-8326e4) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
772
|
-
|
|
773
|
-
<a id="disabled-381ac6"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-381ac6) - Optional Block<br>Enable this option
|
|
774
|
-
|
|
775
|
-
<a id="enabled-ea35c6"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-ea35c6) - Optional Block<br>Enable this option
|
|
776
|
-
|
|
777
|
-
<a id="static-ip-bfc08c"></a>• [`static_ip`](#static-ip-bfc08c) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-bfc08c) below.
|
|
778
|
-
|
|
779
|
-
<a id="address-d74f42"></a>• [`static_ipv6_address`](#address-d74f42) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-d74f42) below.
|
|
780
|
-
|
|
781
|
-
<a id="interface-66fdd5"></a>• [`vlan_interface`](#interface-66fdd5) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-66fdd5) below.
|
|
782
|
-
|
|
783
|
-
#### Equinix Not Managed Node List Interface List Bond Interface
|
|
784
|
-
|
|
785
|
-
<a id="deep-b565ca"></a>Deeply nested **Interface** block collapsed for readability.
|
|
786
|
-
|
|
787
|
-
#### Equinix Not Managed Node List Interface List Bond Interface Lacp
|
|
788
|
-
|
|
789
|
-
<a id="deep-08a8f4"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
790
|
-
|
|
791
|
-
#### Equinix Not Managed Node List Interface List Ethernet Interface
|
|
792
|
-
|
|
793
|
-
<a id="deep-e260db"></a>Deeply nested **Interface** block collapsed for readability.
|
|
794
|
-
|
|
795
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config
|
|
796
|
-
|
|
797
|
-
<a id="deep-f79b98"></a>Deeply nested **Config** block collapsed for readability.
|
|
798
|
-
|
|
799
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router
|
|
800
|
-
|
|
801
|
-
<a id="deep-7e62f2"></a>Deeply nested **Router** block collapsed for readability.
|
|
802
|
-
|
|
803
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
804
|
-
|
|
805
|
-
<a id="deep-19d109"></a>Deeply nested **Config** block collapsed for readability.
|
|
806
|
-
|
|
807
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
808
|
-
|
|
809
|
-
<a id="deep-7c11b9"></a>Deeply nested **List** block collapsed for readability.
|
|
810
|
-
|
|
811
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
812
|
-
|
|
813
|
-
<a id="deep-d0977a"></a>Deeply nested **DNS** block collapsed for readability.
|
|
814
|
-
|
|
815
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
816
|
-
|
|
817
|
-
<a id="deep-c5835c"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
818
|
-
|
|
819
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
820
|
-
|
|
821
|
-
<a id="deep-de0480"></a>Deeply nested **Networks** block collapsed for readability.
|
|
822
|
-
|
|
823
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
824
|
-
|
|
825
|
-
<a id="deep-955ad2"></a>Deeply nested **Pools** block collapsed for readability.
|
|
826
|
-
|
|
827
|
-
#### Equinix Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
828
|
-
|
|
829
|
-
<a id="deep-27f6d9"></a>Deeply nested **Map** block collapsed for readability.
|
|
830
|
-
|
|
831
|
-
#### Equinix Not Managed Node List Interface List Network Option
|
|
832
|
-
|
|
833
|
-
<a id="deep-da1af1"></a>Deeply nested **Option** block collapsed for readability.
|
|
834
|
-
|
|
835
|
-
#### Equinix Not Managed Node List Interface List Static IP
|
|
836
|
-
|
|
837
|
-
<a id="deep-b26b58"></a>Deeply nested **IP** block collapsed for readability.
|
|
838
|
-
|
|
839
|
-
#### Equinix Not Managed Node List Interface List Static IPv6 Address
|
|
840
|
-
|
|
841
|
-
<a id="deep-a07f1e"></a>Deeply nested **Address** block collapsed for readability.
|
|
842
|
-
|
|
843
|
-
#### Equinix Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
844
|
-
|
|
845
|
-
<a id="deep-f0d7ec"></a>Deeply nested **IP** block collapsed for readability.
|
|
846
|
-
|
|
847
|
-
#### Equinix Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
848
|
-
|
|
849
|
-
<a id="deep-79432c"></a>Deeply nested **IP** block collapsed for readability.
|
|
850
|
-
|
|
851
|
-
#### Equinix Not Managed Node List Interface List VLAN Interface
|
|
852
|
-
|
|
853
|
-
<a id="deep-94cba8"></a>Deeply nested **Interface** block collapsed for readability.
|
|
854
|
-
|
|
855
|
-
#### GCP
|
|
856
|
-
|
|
857
|
-
A [`gcp`](#gcp) block supports the following:
|
|
858
|
-
|
|
859
|
-
<a id="gcp-not-managed"></a>• [`not_managed`](#gcp-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#gcp-not-managed) below.
|
|
860
|
-
|
|
861
|
-
#### GCP Not Managed
|
|
862
|
-
|
|
863
|
-
A [`not_managed`](#gcp-not-managed) block (within [`gcp`](#gcp)) supports the following:
|
|
864
|
-
|
|
865
|
-
<a id="gcp-not-managed-node-list"></a>• [`node_list`](#gcp-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#gcp-not-managed-node-list) below.
|
|
866
|
-
|
|
867
|
-
#### GCP Not Managed Node List
|
|
868
|
-
|
|
869
|
-
A [`node_list`](#gcp-not-managed-node-list) block (within [`gcp.not_managed`](#gcp-not-managed)) supports the following:
|
|
870
|
-
|
|
871
|
-
<a id="gcp-not-managed-node-list-hostname"></a>• [`hostname`](#gcp-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
872
|
-
|
|
873
|
-
<a id="list-2f49ff"></a>• [`interface_list`](#list-2f49ff) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-2f49ff) below.
|
|
874
|
-
|
|
875
|
-
<a id="gcp-not-managed-node-list-public-ip"></a>• [`public_ip`](#gcp-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
876
|
-
|
|
877
|
-
<a id="gcp-not-managed-node-list-type"></a>• [`type`](#gcp-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
878
|
-
|
|
879
|
-
#### GCP Not Managed Node List Interface List
|
|
880
|
-
|
|
881
|
-
An [`interface_list`](#list-2f49ff) block (within [`gcp.not_managed.node_list`](#gcp-not-managed-node-list)) supports the following:
|
|
882
|
-
|
|
883
|
-
<a id="interface-54ab03"></a>• [`bond_interface`](#interface-54ab03) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-54ab03) below.
|
|
884
|
-
|
|
885
|
-
<a id="spec-801a55"></a>• [`description_spec`](#spec-801a55) - Optional String<br>Interface Description. Description for this Interface
|
|
886
|
-
|
|
887
|
-
<a id="client-649578"></a>• [`dhcp_client`](#client-649578) - Optional Block<br>Enable this option
|
|
888
|
-
|
|
889
|
-
<a id="interface-fa1d2a"></a>• [`ethernet_interface`](#interface-fa1d2a) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-fa1d2a) below.
|
|
890
|
-
|
|
891
|
-
<a id="config-881893"></a>• [`ipv6_auto_config`](#config-881893) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-881893) below.
|
|
892
|
-
|
|
893
|
-
<a id="labels-43ee17"></a>• [`labels`](#labels-43ee17) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
894
|
-
|
|
895
|
-
<a id="monitor-986ba9"></a>• [`monitor`](#monitor-986ba9) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
896
|
-
|
|
897
|
-
<a id="disabled-33388b"></a>• [`monitor_disabled`](#disabled-33388b) - Optional Block<br>Enable this option
|
|
898
|
-
|
|
899
|
-
<a id="mtu-46e579"></a>• [`mtu`](#mtu-46e579) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
900
|
-
|
|
901
|
-
<a id="name-fc5cd2"></a>• [`name`](#name-fc5cd2) - Optional String<br>Interface Name. Name of this Interface
|
|
902
|
-
|
|
903
|
-
<a id="option-ca04ce"></a>• [`network_option`](#option-ca04ce) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-ca04ce) below.
|
|
904
|
-
|
|
905
|
-
<a id="address-c52373"></a>• [`no_ipv4_address`](#address-c52373) - Optional Block<br>Enable this option
|
|
906
|
-
|
|
907
|
-
<a id="address-40bebe"></a>• [`no_ipv6_address`](#address-40bebe) - Optional Block<br>Enable this option
|
|
908
|
-
|
|
909
|
-
<a id="priority-b17ea9"></a>• [`priority`](#priority-b17ea9) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
910
|
-
|
|
911
|
-
<a id="disabled-45fbad"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-45fbad) - Optional Block<br>Enable this option
|
|
912
|
-
|
|
913
|
-
<a id="enabled-b641ce"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-b641ce) - Optional Block<br>Enable this option
|
|
914
|
-
|
|
915
|
-
<a id="static-ip-b40b52"></a>• [`static_ip`](#static-ip-b40b52) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-b40b52) below.
|
|
916
|
-
|
|
917
|
-
<a id="address-6a68da"></a>• [`static_ipv6_address`](#address-6a68da) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-6a68da) below.
|
|
918
|
-
|
|
919
|
-
<a id="interface-bd3d44"></a>• [`vlan_interface`](#interface-bd3d44) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-bd3d44) below.
|
|
920
|
-
|
|
921
|
-
#### GCP Not Managed Node List Interface List Bond Interface
|
|
922
|
-
|
|
923
|
-
<a id="deep-afd6e8"></a>Deeply nested **Interface** block collapsed for readability.
|
|
924
|
-
|
|
925
|
-
#### GCP Not Managed Node List Interface List Bond Interface Lacp
|
|
926
|
-
|
|
927
|
-
<a id="deep-6c8fc7"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
928
|
-
|
|
929
|
-
#### GCP Not Managed Node List Interface List Ethernet Interface
|
|
930
|
-
|
|
931
|
-
<a id="deep-6a0162"></a>Deeply nested **Interface** block collapsed for readability.
|
|
932
|
-
|
|
933
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config
|
|
934
|
-
|
|
935
|
-
<a id="deep-f3d749"></a>Deeply nested **Config** block collapsed for readability.
|
|
936
|
-
|
|
937
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router
|
|
938
|
-
|
|
939
|
-
<a id="deep-21edde"></a>Deeply nested **Router** block collapsed for readability.
|
|
940
|
-
|
|
941
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
942
|
-
|
|
943
|
-
<a id="deep-484c91"></a>Deeply nested **Config** block collapsed for readability.
|
|
944
|
-
|
|
945
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
946
|
-
|
|
947
|
-
<a id="deep-85dbbe"></a>Deeply nested **List** block collapsed for readability.
|
|
948
|
-
|
|
949
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
950
|
-
|
|
951
|
-
<a id="deep-7cb154"></a>Deeply nested **DNS** block collapsed for readability.
|
|
952
|
-
|
|
953
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
954
|
-
|
|
955
|
-
<a id="deep-001e66"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
956
|
-
|
|
957
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
958
|
-
|
|
959
|
-
<a id="deep-f92dfa"></a>Deeply nested **Networks** block collapsed for readability.
|
|
960
|
-
|
|
961
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
962
|
-
|
|
963
|
-
<a id="deep-5e3307"></a>Deeply nested **Pools** block collapsed for readability.
|
|
964
|
-
|
|
965
|
-
#### GCP Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
966
|
-
|
|
967
|
-
<a id="deep-bd61fc"></a>Deeply nested **Map** block collapsed for readability.
|
|
968
|
-
|
|
969
|
-
#### GCP Not Managed Node List Interface List Network Option
|
|
970
|
-
|
|
971
|
-
<a id="deep-8d0ef6"></a>Deeply nested **Option** block collapsed for readability.
|
|
972
|
-
|
|
973
|
-
#### GCP Not Managed Node List Interface List Static IP
|
|
974
|
-
|
|
975
|
-
<a id="deep-3a7f7a"></a>Deeply nested **IP** block collapsed for readability.
|
|
976
|
-
|
|
977
|
-
#### GCP Not Managed Node List Interface List Static IPv6 Address
|
|
978
|
-
|
|
979
|
-
<a id="deep-b9548b"></a>Deeply nested **Address** block collapsed for readability.
|
|
980
|
-
|
|
981
|
-
#### GCP Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
982
|
-
|
|
983
|
-
<a id="deep-164e2f"></a>Deeply nested **IP** block collapsed for readability.
|
|
984
|
-
|
|
985
|
-
#### GCP Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
986
|
-
|
|
987
|
-
<a id="deep-39ec3e"></a>Deeply nested **IP** block collapsed for readability.
|
|
988
|
-
|
|
989
|
-
#### GCP Not Managed Node List Interface List VLAN Interface
|
|
990
|
-
|
|
991
|
-
<a id="deep-aef10c"></a>Deeply nested **Interface** block collapsed for readability.
|
|
992
|
-
|
|
993
|
-
#### Kvm
|
|
994
|
-
|
|
995
|
-
A [`kvm`](#kvm) block supports the following:
|
|
996
|
-
|
|
997
|
-
<a id="kvm-not-managed"></a>• [`not_managed`](#kvm-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#kvm-not-managed) below.
|
|
998
|
-
|
|
999
|
-
#### Kvm Not Managed
|
|
1000
|
-
|
|
1001
|
-
A [`not_managed`](#kvm-not-managed) block (within [`kvm`](#kvm)) supports the following:
|
|
1002
|
-
|
|
1003
|
-
<a id="kvm-not-managed-node-list"></a>• [`node_list`](#kvm-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#kvm-not-managed-node-list) below.
|
|
1004
|
-
|
|
1005
|
-
#### Kvm Not Managed Node List
|
|
1006
|
-
|
|
1007
|
-
A [`node_list`](#kvm-not-managed-node-list) block (within [`kvm.not_managed`](#kvm-not-managed)) supports the following:
|
|
1008
|
-
|
|
1009
|
-
<a id="kvm-not-managed-node-list-hostname"></a>• [`hostname`](#kvm-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
1010
|
-
|
|
1011
|
-
<a id="list-92338f"></a>• [`interface_list`](#list-92338f) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-92338f) below.
|
|
1012
|
-
|
|
1013
|
-
<a id="kvm-not-managed-node-list-public-ip"></a>• [`public_ip`](#kvm-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
1014
|
-
|
|
1015
|
-
<a id="kvm-not-managed-node-list-type"></a>• [`type`](#kvm-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
1016
|
-
|
|
1017
|
-
#### Kvm Not Managed Node List Interface List
|
|
1018
|
-
|
|
1019
|
-
An [`interface_list`](#list-92338f) block (within [`kvm.not_managed.node_list`](#kvm-not-managed-node-list)) supports the following:
|
|
1020
|
-
|
|
1021
|
-
<a id="interface-e24728"></a>• [`bond_interface`](#interface-e24728) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-e24728) below.
|
|
1022
|
-
|
|
1023
|
-
<a id="spec-c3f95c"></a>• [`description_spec`](#spec-c3f95c) - Optional String<br>Interface Description. Description for this Interface
|
|
1024
|
-
|
|
1025
|
-
<a id="client-59a349"></a>• [`dhcp_client`](#client-59a349) - Optional Block<br>Enable this option
|
|
1026
|
-
|
|
1027
|
-
<a id="interface-0aad1d"></a>• [`ethernet_interface`](#interface-0aad1d) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-0aad1d) below.
|
|
1028
|
-
|
|
1029
|
-
<a id="config-ab0775"></a>• [`ipv6_auto_config`](#config-ab0775) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-ab0775) below.
|
|
1030
|
-
|
|
1031
|
-
<a id="labels-36ae51"></a>• [`labels`](#labels-36ae51) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
1032
|
-
|
|
1033
|
-
<a id="monitor-1bfade"></a>• [`monitor`](#monitor-1bfade) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
1034
|
-
|
|
1035
|
-
<a id="disabled-2ad250"></a>• [`monitor_disabled`](#disabled-2ad250) - Optional Block<br>Enable this option
|
|
1036
|
-
|
|
1037
|
-
<a id="mtu-d603a1"></a>• [`mtu`](#mtu-d603a1) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
1038
|
-
|
|
1039
|
-
<a id="name-4d7867"></a>• [`name`](#name-4d7867) - Optional String<br>Interface Name. Name of this Interface
|
|
1040
|
-
|
|
1041
|
-
<a id="option-437c33"></a>• [`network_option`](#option-437c33) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-437c33) below.
|
|
1042
|
-
|
|
1043
|
-
<a id="address-4c9457"></a>• [`no_ipv4_address`](#address-4c9457) - Optional Block<br>Enable this option
|
|
1044
|
-
|
|
1045
|
-
<a id="address-e9ec91"></a>• [`no_ipv6_address`](#address-e9ec91) - Optional Block<br>Enable this option
|
|
1046
|
-
|
|
1047
|
-
<a id="priority-931ade"></a>• [`priority`](#priority-931ade) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
1048
|
-
|
|
1049
|
-
<a id="disabled-320aad"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-320aad) - Optional Block<br>Enable this option
|
|
1050
|
-
|
|
1051
|
-
<a id="enabled-390b0a"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-390b0a) - Optional Block<br>Enable this option
|
|
1052
|
-
|
|
1053
|
-
<a id="static-ip-f20c45"></a>• [`static_ip`](#static-ip-f20c45) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-f20c45) below.
|
|
1054
|
-
|
|
1055
|
-
<a id="address-41524b"></a>• [`static_ipv6_address`](#address-41524b) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-41524b) below.
|
|
1056
|
-
|
|
1057
|
-
<a id="interface-5ffabb"></a>• [`vlan_interface`](#interface-5ffabb) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-5ffabb) below.
|
|
1058
|
-
|
|
1059
|
-
#### Kvm Not Managed Node List Interface List Bond Interface
|
|
1060
|
-
|
|
1061
|
-
<a id="deep-fc631b"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1062
|
-
|
|
1063
|
-
#### Kvm Not Managed Node List Interface List Bond Interface Lacp
|
|
1064
|
-
|
|
1065
|
-
<a id="deep-1326df"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
1066
|
-
|
|
1067
|
-
#### Kvm Not Managed Node List Interface List Ethernet Interface
|
|
1068
|
-
|
|
1069
|
-
<a id="deep-6ad367"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1070
|
-
|
|
1071
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config
|
|
1072
|
-
|
|
1073
|
-
<a id="deep-c39ea2"></a>Deeply nested **Config** block collapsed for readability.
|
|
1074
|
-
|
|
1075
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router
|
|
1076
|
-
|
|
1077
|
-
<a id="deep-ef2730"></a>Deeply nested **Router** block collapsed for readability.
|
|
1078
|
-
|
|
1079
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
1080
|
-
|
|
1081
|
-
<a id="deep-1c527f"></a>Deeply nested **Config** block collapsed for readability.
|
|
1082
|
-
|
|
1083
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
1084
|
-
|
|
1085
|
-
<a id="deep-83e89b"></a>Deeply nested **List** block collapsed for readability.
|
|
1086
|
-
|
|
1087
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
1088
|
-
|
|
1089
|
-
<a id="deep-ca2600"></a>Deeply nested **DNS** block collapsed for readability.
|
|
1090
|
-
|
|
1091
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
1092
|
-
|
|
1093
|
-
<a id="deep-0e9ec4"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
1094
|
-
|
|
1095
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
1096
|
-
|
|
1097
|
-
<a id="deep-8029ba"></a>Deeply nested **Networks** block collapsed for readability.
|
|
1098
|
-
|
|
1099
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
1100
|
-
|
|
1101
|
-
<a id="deep-faf0d9"></a>Deeply nested **Pools** block collapsed for readability.
|
|
1102
|
-
|
|
1103
|
-
#### Kvm Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
1104
|
-
|
|
1105
|
-
<a id="deep-4a6bec"></a>Deeply nested **Map** block collapsed for readability.
|
|
1106
|
-
|
|
1107
|
-
#### Kvm Not Managed Node List Interface List Network Option
|
|
1108
|
-
|
|
1109
|
-
<a id="deep-62e6b3"></a>Deeply nested **Option** block collapsed for readability.
|
|
1110
|
-
|
|
1111
|
-
#### Kvm Not Managed Node List Interface List Static IP
|
|
1112
|
-
|
|
1113
|
-
<a id="deep-a6cf32"></a>Deeply nested **IP** block collapsed for readability.
|
|
1114
|
-
|
|
1115
|
-
#### Kvm Not Managed Node List Interface List Static IPv6 Address
|
|
1116
|
-
|
|
1117
|
-
<a id="deep-91a5c5"></a>Deeply nested **Address** block collapsed for readability.
|
|
1118
|
-
|
|
1119
|
-
#### Kvm Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
1120
|
-
|
|
1121
|
-
<a id="deep-b4aa6e"></a>Deeply nested **IP** block collapsed for readability.
|
|
1122
|
-
|
|
1123
|
-
#### Kvm Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
1124
|
-
|
|
1125
|
-
<a id="deep-abe515"></a>Deeply nested **IP** block collapsed for readability.
|
|
1126
|
-
|
|
1127
|
-
#### Kvm Not Managed Node List Interface List VLAN Interface
|
|
1128
|
-
|
|
1129
|
-
<a id="deep-964e06"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1130
|
-
|
|
1131
|
-
#### Load Balancing
|
|
1132
|
-
|
|
1133
|
-
A [`load_balancing`](#load-balancing) block supports the following:
|
|
1134
|
-
|
|
1135
|
-
<a id="load-balancing-vip-vrrp-mode"></a>• [`vip_vrrp_mode`](#load-balancing-vip-vrrp-mode) - Optional String Defaults to `VIP_VRRP_INVALID`<br>Possible values are `VIP_VRRP_INVALID`, `VIP_VRRP_ENABLE`, `VIP_VRRP_DISABLE`<br>[Enum: VIP_VRRP_INVALID|VIP_VRRP_ENABLE|VIP_VRRP_DISABLE] VRRP Virtual-IP. VRRP advertisement mode for VIP Invalid VRRP mode
|
|
1136
|
-
|
|
1137
|
-
#### Local Vrf
|
|
1138
|
-
|
|
1139
|
-
A [`local_vrf`](#local-vrf) block supports the following:
|
|
1140
|
-
|
|
1141
|
-
<a id="local-vrf-default-config"></a>• [`default_config`](#local-vrf-default-config) - Optional Block<br>Enable this option
|
|
1142
|
-
|
|
1143
|
-
<a id="local-vrf-default-sli-config"></a>• [`default_sli_config`](#local-vrf-default-sli-config) - Optional Block<br>Enable this option
|
|
1144
|
-
|
|
1145
|
-
<a id="local-vrf-sli-config"></a>• [`sli_config`](#local-vrf-sli-config) - Optional Block<br>Site Local Network Configuration. Site local network configuration<br>See [SLI Config](#local-vrf-sli-config) below.
|
|
1146
|
-
|
|
1147
|
-
<a id="local-vrf-slo-config"></a>• [`slo_config`](#local-vrf-slo-config) - Optional Block<br>Site Local Network Configuration. Site local network configuration<br>See [Slo Config](#local-vrf-slo-config) below.
|
|
1148
|
-
|
|
1149
|
-
#### Local Vrf SLI Config
|
|
1150
|
-
|
|
1151
|
-
A [`sli_config`](#local-vrf-sli-config) block (within [`local_vrf`](#local-vrf)) supports the following:
|
|
1152
|
-
|
|
1153
|
-
<a id="local-vrf-sli-config-labels"></a>• [`labels`](#local-vrf-sli-config-labels) - Optional Block<br>Network Labels. Add Labels for this network, these labels can be used in firewall policy
|
|
1154
|
-
|
|
1155
|
-
<a id="local-vrf-sli-config-nameserver"></a>• [`nameserver`](#local-vrf-sli-config-nameserver) - Optional String<br>DNS V4 Server. Optional DNS V4 server IP to be used for name resolution
|
|
1156
|
-
|
|
1157
|
-
<a id="local-vrf-sli-config-no-static-routes"></a>• [`no_static_routes`](#local-vrf-sli-config-no-static-routes) - Optional Block<br>Enable this option
|
|
1158
|
-
|
|
1159
|
-
<a id="routes-53016e"></a>• [`no_v6_static_routes`](#routes-53016e) - Optional Block<br>Enable this option
|
|
1160
|
-
|
|
1161
|
-
<a id="local-vrf-sli-config-static-routes"></a>• [`static_routes`](#local-vrf-sli-config-static-routes) - Optional Block<br>Static Routes List<br>See [Static Routes](#local-vrf-sli-config-static-routes) below.
|
|
1162
|
-
|
|
1163
|
-
<a id="local-vrf-sli-config-static-v6-routes"></a>• [`static_v6_routes`](#local-vrf-sli-config-static-v6-routes) - Optional Block<br>Static IPv6 Routes List. List of IPv6 static routes<br>See [Static V6 Routes](#local-vrf-sli-config-static-v6-routes) below.
|
|
1164
|
-
|
|
1165
|
-
<a id="local-vrf-sli-config-vip"></a>• [`vip`](#local-vrf-sli-config-vip) - Optional String<br>Common V4 VIP. Optional common virtual V4 IP across all nodes to be used as automatic VIP
|
|
1166
|
-
|
|
1167
|
-
#### Local Vrf SLI Config Static Routes
|
|
1168
|
-
|
|
1169
|
-
A [`static_routes`](#local-vrf-sli-config-static-routes) block (within [`local_vrf.sli_config`](#local-vrf-sli-config)) supports the following:
|
|
1170
|
-
|
|
1171
|
-
<a id="routes-159447"></a>• [`static_routes`](#routes-159447) - Optional Block<br>Static Routes<br>See [Static Routes](#routes-159447) below.
|
|
1172
|
-
|
|
1173
|
-
#### Local Vrf SLI Config Static Routes Static Routes
|
|
1174
|
-
|
|
1175
|
-
<a id="deep-0b00a5"></a>Deeply nested **Routes** block collapsed for readability.
|
|
1176
|
-
|
|
1177
|
-
#### Local Vrf SLI Config Static Routes Static Routes Node Interface
|
|
1178
|
-
|
|
1179
|
-
<a id="deep-c36771"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1180
|
-
|
|
1181
|
-
#### Local Vrf SLI Config Static Routes Static Routes Node Interface List
|
|
1182
|
-
|
|
1183
|
-
<a id="deep-9295ad"></a>Deeply nested **List** block collapsed for readability.
|
|
1184
|
-
|
|
1185
|
-
#### Local Vrf SLI Config Static Routes Static Routes Node Interface List Interface
|
|
1186
|
-
|
|
1187
|
-
<a id="deep-3a649b"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1188
|
-
|
|
1189
|
-
#### Local Vrf SLI Config Static V6 Routes
|
|
1190
|
-
|
|
1191
|
-
A [`static_v6_routes`](#local-vrf-sli-config-static-v6-routes) block (within [`local_vrf.sli_config`](#local-vrf-sli-config)) supports the following:
|
|
1192
|
-
|
|
1193
|
-
<a id="routes-b75018"></a>• [`static_routes`](#routes-b75018) - Optional Block<br>Static IPv6 Routes. List of IPv6 static routes<br>See [Static Routes](#routes-b75018) below.
|
|
1194
|
-
|
|
1195
|
-
#### Local Vrf SLI Config Static V6 Routes Static Routes
|
|
1196
|
-
|
|
1197
|
-
<a id="deep-26bfb4"></a>Deeply nested **Routes** block collapsed for readability.
|
|
1198
|
-
|
|
1199
|
-
#### Local Vrf SLI Config Static V6 Routes Static Routes Node Interface
|
|
1200
|
-
|
|
1201
|
-
<a id="deep-989f5e"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1202
|
-
|
|
1203
|
-
#### Local Vrf SLI Config Static V6 Routes Static Routes Node Interface List
|
|
1204
|
-
|
|
1205
|
-
<a id="deep-94960c"></a>Deeply nested **List** block collapsed for readability.
|
|
1206
|
-
|
|
1207
|
-
#### Local Vrf SLI Config Static V6 Routes Static Routes Node Interface List Interface
|
|
1208
|
-
|
|
1209
|
-
<a id="deep-6ebb7a"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1210
|
-
|
|
1211
|
-
#### Local Vrf Slo Config
|
|
1212
|
-
|
|
1213
|
-
A [`slo_config`](#local-vrf-slo-config) block (within [`local_vrf`](#local-vrf)) supports the following:
|
|
1214
|
-
|
|
1215
|
-
<a id="local-vrf-slo-config-labels"></a>• [`labels`](#local-vrf-slo-config-labels) - Optional Block<br>Network Labels. Add Labels for this network, these labels can be used in firewall policy
|
|
1216
|
-
|
|
1217
|
-
<a id="local-vrf-slo-config-nameserver"></a>• [`nameserver`](#local-vrf-slo-config-nameserver) - Optional String<br>DNS V4 Server. Optional DNS V4 server IP to be used for name resolution
|
|
1218
|
-
|
|
1219
|
-
<a id="local-vrf-slo-config-no-static-routes"></a>• [`no_static_routes`](#local-vrf-slo-config-no-static-routes) - Optional Block<br>Enable this option
|
|
1220
|
-
|
|
1221
|
-
<a id="routes-a47310"></a>• [`no_v6_static_routes`](#routes-a47310) - Optional Block<br>Enable this option
|
|
1222
|
-
|
|
1223
|
-
<a id="local-vrf-slo-config-static-routes"></a>• [`static_routes`](#local-vrf-slo-config-static-routes) - Optional Block<br>Static Routes List<br>See [Static Routes](#local-vrf-slo-config-static-routes) below.
|
|
1224
|
-
|
|
1225
|
-
<a id="local-vrf-slo-config-static-v6-routes"></a>• [`static_v6_routes`](#local-vrf-slo-config-static-v6-routes) - Optional Block<br>Static IPv6 Routes List. List of IPv6 static routes<br>See [Static V6 Routes](#local-vrf-slo-config-static-v6-routes) below.
|
|
1226
|
-
|
|
1227
|
-
<a id="local-vrf-slo-config-vip"></a>• [`vip`](#local-vrf-slo-config-vip) - Optional String<br>Common V4 VIP. Optional common virtual V4 IP across all nodes to be used as automatic VIP
|
|
1228
|
-
|
|
1229
|
-
#### Local Vrf Slo Config Static Routes
|
|
1230
|
-
|
|
1231
|
-
A [`static_routes`](#local-vrf-slo-config-static-routes) block (within [`local_vrf.slo_config`](#local-vrf-slo-config)) supports the following:
|
|
1232
|
-
|
|
1233
|
-
<a id="routes-07ae6c"></a>• [`static_routes`](#routes-07ae6c) - Optional Block<br>Static Routes<br>See [Static Routes](#routes-07ae6c) below.
|
|
1234
|
-
|
|
1235
|
-
#### Local Vrf Slo Config Static Routes Static Routes
|
|
1236
|
-
|
|
1237
|
-
<a id="deep-c4ba70"></a>Deeply nested **Routes** block collapsed for readability.
|
|
1238
|
-
|
|
1239
|
-
#### Local Vrf Slo Config Static Routes Static Routes Node Interface
|
|
1240
|
-
|
|
1241
|
-
<a id="deep-9a77b8"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1242
|
-
|
|
1243
|
-
#### Local Vrf Slo Config Static Routes Static Routes Node Interface List
|
|
1244
|
-
|
|
1245
|
-
<a id="deep-778bc9"></a>Deeply nested **List** block collapsed for readability.
|
|
1246
|
-
|
|
1247
|
-
#### Local Vrf Slo Config Static Routes Static Routes Node Interface List Interface
|
|
1248
|
-
|
|
1249
|
-
<a id="deep-8ea40a"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1250
|
-
|
|
1251
|
-
#### Local Vrf Slo Config Static V6 Routes
|
|
1252
|
-
|
|
1253
|
-
A [`static_v6_routes`](#local-vrf-slo-config-static-v6-routes) block (within [`local_vrf.slo_config`](#local-vrf-slo-config)) supports the following:
|
|
1254
|
-
|
|
1255
|
-
<a id="routes-5b5639"></a>• [`static_routes`](#routes-5b5639) - Optional Block<br>Static IPv6 Routes. List of IPv6 static routes<br>See [Static Routes](#routes-5b5639) below.
|
|
1256
|
-
|
|
1257
|
-
#### Local Vrf Slo Config Static V6 Routes Static Routes
|
|
1258
|
-
|
|
1259
|
-
<a id="deep-69c74f"></a>Deeply nested **Routes** block collapsed for readability.
|
|
1260
|
-
|
|
1261
|
-
#### Local Vrf Slo Config Static V6 Routes Static Routes Node Interface
|
|
1262
|
-
|
|
1263
|
-
<a id="deep-c59810"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1264
|
-
|
|
1265
|
-
#### Local Vrf Slo Config Static V6 Routes Static Routes Node Interface List
|
|
1266
|
-
|
|
1267
|
-
<a id="deep-753f28"></a>Deeply nested **List** block collapsed for readability.
|
|
1268
|
-
|
|
1269
|
-
#### Local Vrf Slo Config Static V6 Routes Static Routes Node Interface List Interface
|
|
1270
|
-
|
|
1271
|
-
<a id="deep-86b9dc"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1272
|
-
|
|
1273
|
-
#### Log Receiver
|
|
1274
|
-
|
|
1275
|
-
<a id="objref-0da9d9"></a>Uses standard [Object Reference](#common-object-reference) fields (name, namespace, tenant).
|
|
1276
|
-
|
|
1277
|
-
#### Nutanix
|
|
1278
|
-
|
|
1279
|
-
A [`nutanix`](#nutanix) block supports the following:
|
|
1280
|
-
|
|
1281
|
-
<a id="nutanix-not-managed"></a>• [`not_managed`](#nutanix-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#nutanix-not-managed) below.
|
|
1282
|
-
|
|
1283
|
-
#### Nutanix Not Managed
|
|
1284
|
-
|
|
1285
|
-
A [`not_managed`](#nutanix-not-managed) block (within [`nutanix`](#nutanix)) supports the following:
|
|
1286
|
-
|
|
1287
|
-
<a id="nutanix-not-managed-node-list"></a>• [`node_list`](#nutanix-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#nutanix-not-managed-node-list) below.
|
|
1288
|
-
|
|
1289
|
-
#### Nutanix Not Managed Node List
|
|
1290
|
-
|
|
1291
|
-
A [`node_list`](#nutanix-not-managed-node-list) block (within [`nutanix.not_managed`](#nutanix-not-managed)) supports the following:
|
|
1292
|
-
|
|
1293
|
-
<a id="nutanix-not-managed-node-list-hostname"></a>• [`hostname`](#nutanix-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
1294
|
-
|
|
1295
|
-
<a id="list-b40ceb"></a>• [`interface_list`](#list-b40ceb) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-b40ceb) below.
|
|
1296
|
-
|
|
1297
|
-
<a id="nutanix-not-managed-node-list-public-ip"></a>• [`public_ip`](#nutanix-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
1298
|
-
|
|
1299
|
-
<a id="nutanix-not-managed-node-list-type"></a>• [`type`](#nutanix-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
1300
|
-
|
|
1301
|
-
#### Nutanix Not Managed Node List Interface List
|
|
1302
|
-
|
|
1303
|
-
An [`interface_list`](#list-b40ceb) block (within [`nutanix.not_managed.node_list`](#nutanix-not-managed-node-list)) supports the following:
|
|
1304
|
-
|
|
1305
|
-
<a id="interface-2d0b01"></a>• [`bond_interface`](#interface-2d0b01) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-2d0b01) below.
|
|
1306
|
-
|
|
1307
|
-
<a id="spec-baa727"></a>• [`description_spec`](#spec-baa727) - Optional String<br>Interface Description. Description for this Interface
|
|
1308
|
-
|
|
1309
|
-
<a id="client-112522"></a>• [`dhcp_client`](#client-112522) - Optional Block<br>Enable this option
|
|
1310
|
-
|
|
1311
|
-
<a id="interface-d78243"></a>• [`ethernet_interface`](#interface-d78243) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-d78243) below.
|
|
1312
|
-
|
|
1313
|
-
<a id="config-08cb50"></a>• [`ipv6_auto_config`](#config-08cb50) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-08cb50) below.
|
|
1314
|
-
|
|
1315
|
-
<a id="labels-c91cb8"></a>• [`labels`](#labels-c91cb8) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
1316
|
-
|
|
1317
|
-
<a id="monitor-824921"></a>• [`monitor`](#monitor-824921) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
1318
|
-
|
|
1319
|
-
<a id="disabled-1b5f4c"></a>• [`monitor_disabled`](#disabled-1b5f4c) - Optional Block<br>Enable this option
|
|
1320
|
-
|
|
1321
|
-
<a id="mtu-9286d4"></a>• [`mtu`](#mtu-9286d4) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
1322
|
-
|
|
1323
|
-
<a id="name-f9abff"></a>• [`name`](#name-f9abff) - Optional String<br>Interface Name. Name of this Interface
|
|
1324
|
-
|
|
1325
|
-
<a id="option-40de75"></a>• [`network_option`](#option-40de75) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-40de75) below.
|
|
1326
|
-
|
|
1327
|
-
<a id="address-768ec8"></a>• [`no_ipv4_address`](#address-768ec8) - Optional Block<br>Enable this option
|
|
1328
|
-
|
|
1329
|
-
<a id="address-9dd875"></a>• [`no_ipv6_address`](#address-9dd875) - Optional Block<br>Enable this option
|
|
1330
|
-
|
|
1331
|
-
<a id="priority-e54ce8"></a>• [`priority`](#priority-e54ce8) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
1332
|
-
|
|
1333
|
-
<a id="disabled-a3014f"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-a3014f) - Optional Block<br>Enable this option
|
|
1334
|
-
|
|
1335
|
-
<a id="enabled-47989b"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-47989b) - Optional Block<br>Enable this option
|
|
1336
|
-
|
|
1337
|
-
<a id="static-ip-09302a"></a>• [`static_ip`](#static-ip-09302a) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-09302a) below.
|
|
1338
|
-
|
|
1339
|
-
<a id="address-2a34d1"></a>• [`static_ipv6_address`](#address-2a34d1) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-2a34d1) below.
|
|
1340
|
-
|
|
1341
|
-
<a id="interface-e23d44"></a>• [`vlan_interface`](#interface-e23d44) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-e23d44) below.
|
|
1342
|
-
|
|
1343
|
-
#### Nutanix Not Managed Node List Interface List Bond Interface
|
|
1344
|
-
|
|
1345
|
-
<a id="deep-a0d86e"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1346
|
-
|
|
1347
|
-
#### Nutanix Not Managed Node List Interface List Bond Interface Lacp
|
|
1348
|
-
|
|
1349
|
-
<a id="deep-452ac2"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
1350
|
-
|
|
1351
|
-
#### Nutanix Not Managed Node List Interface List Ethernet Interface
|
|
1352
|
-
|
|
1353
|
-
<a id="deep-c19cdf"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1354
|
-
|
|
1355
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config
|
|
1356
|
-
|
|
1357
|
-
<a id="deep-ae55a4"></a>Deeply nested **Config** block collapsed for readability.
|
|
1358
|
-
|
|
1359
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router
|
|
1360
|
-
|
|
1361
|
-
<a id="deep-1e40a4"></a>Deeply nested **Router** block collapsed for readability.
|
|
1362
|
-
|
|
1363
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
1364
|
-
|
|
1365
|
-
<a id="deep-1a1f28"></a>Deeply nested **Config** block collapsed for readability.
|
|
1366
|
-
|
|
1367
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
1368
|
-
|
|
1369
|
-
<a id="deep-51b635"></a>Deeply nested **List** block collapsed for readability.
|
|
1370
|
-
|
|
1371
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
1372
|
-
|
|
1373
|
-
<a id="deep-d92def"></a>Deeply nested **DNS** block collapsed for readability.
|
|
1374
|
-
|
|
1375
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
1376
|
-
|
|
1377
|
-
<a id="deep-be66c9"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
1378
|
-
|
|
1379
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
1380
|
-
|
|
1381
|
-
<a id="deep-5a9d54"></a>Deeply nested **Networks** block collapsed for readability.
|
|
1382
|
-
|
|
1383
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
1384
|
-
|
|
1385
|
-
<a id="deep-7af73e"></a>Deeply nested **Pools** block collapsed for readability.
|
|
1386
|
-
|
|
1387
|
-
#### Nutanix Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
1388
|
-
|
|
1389
|
-
<a id="deep-138aec"></a>Deeply nested **Map** block collapsed for readability.
|
|
1390
|
-
|
|
1391
|
-
#### Nutanix Not Managed Node List Interface List Network Option
|
|
1392
|
-
|
|
1393
|
-
<a id="deep-bd2504"></a>Deeply nested **Option** block collapsed for readability.
|
|
1394
|
-
|
|
1395
|
-
#### Nutanix Not Managed Node List Interface List Static IP
|
|
1396
|
-
|
|
1397
|
-
<a id="deep-0fbd56"></a>Deeply nested **IP** block collapsed for readability.
|
|
1398
|
-
|
|
1399
|
-
#### Nutanix Not Managed Node List Interface List Static IPv6 Address
|
|
1400
|
-
|
|
1401
|
-
<a id="deep-822c9a"></a>Deeply nested **Address** block collapsed for readability.
|
|
1402
|
-
|
|
1403
|
-
#### Nutanix Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
1404
|
-
|
|
1405
|
-
<a id="deep-7b95c4"></a>Deeply nested **IP** block collapsed for readability.
|
|
1406
|
-
|
|
1407
|
-
#### Nutanix Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
1408
|
-
|
|
1409
|
-
<a id="deep-ab1035"></a>Deeply nested **IP** block collapsed for readability.
|
|
1410
|
-
|
|
1411
|
-
#### Nutanix Not Managed Node List Interface List VLAN Interface
|
|
1412
|
-
|
|
1413
|
-
<a id="deep-30c686"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1414
|
-
|
|
1415
|
-
#### Oci
|
|
1416
|
-
|
|
1417
|
-
An [`oci`](#oci) block supports the following:
|
|
1418
|
-
|
|
1419
|
-
<a id="oci-not-managed"></a>• [`not_managed`](#oci-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#oci-not-managed) below.
|
|
1420
|
-
|
|
1421
|
-
#### Oci Not Managed
|
|
1422
|
-
|
|
1423
|
-
A [`not_managed`](#oci-not-managed) block (within [`oci`](#oci)) supports the following:
|
|
1424
|
-
|
|
1425
|
-
<a id="oci-not-managed-node-list"></a>• [`node_list`](#oci-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#oci-not-managed-node-list) below.
|
|
1426
|
-
|
|
1427
|
-
#### Oci Not Managed Node List
|
|
1428
|
-
|
|
1429
|
-
A [`node_list`](#oci-not-managed-node-list) block (within [`oci.not_managed`](#oci-not-managed)) supports the following:
|
|
1430
|
-
|
|
1431
|
-
<a id="oci-not-managed-node-list-hostname"></a>• [`hostname`](#oci-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
1432
|
-
|
|
1433
|
-
<a id="list-af4877"></a>• [`interface_list`](#list-af4877) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-af4877) below.
|
|
1434
|
-
|
|
1435
|
-
<a id="oci-not-managed-node-list-public-ip"></a>• [`public_ip`](#oci-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
1436
|
-
|
|
1437
|
-
<a id="oci-not-managed-node-list-type"></a>• [`type`](#oci-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
1438
|
-
|
|
1439
|
-
#### Oci Not Managed Node List Interface List
|
|
1440
|
-
|
|
1441
|
-
An [`interface_list`](#list-af4877) block (within [`oci.not_managed.node_list`](#oci-not-managed-node-list)) supports the following:
|
|
1442
|
-
|
|
1443
|
-
<a id="interface-8f5f59"></a>• [`bond_interface`](#interface-8f5f59) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-8f5f59) below.
|
|
1444
|
-
|
|
1445
|
-
<a id="spec-6e395f"></a>• [`description_spec`](#spec-6e395f) - Optional String<br>Interface Description. Description for this Interface
|
|
1446
|
-
|
|
1447
|
-
<a id="client-29509c"></a>• [`dhcp_client`](#client-29509c) - Optional Block<br>Enable this option
|
|
1448
|
-
|
|
1449
|
-
<a id="interface-e66013"></a>• [`ethernet_interface`](#interface-e66013) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-e66013) below.
|
|
1450
|
-
|
|
1451
|
-
<a id="config-5531bb"></a>• [`ipv6_auto_config`](#config-5531bb) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-5531bb) below.
|
|
1452
|
-
|
|
1453
|
-
<a id="labels-66a173"></a>• [`labels`](#labels-66a173) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
1454
|
-
|
|
1455
|
-
<a id="monitor-2b293c"></a>• [`monitor`](#monitor-2b293c) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
1456
|
-
|
|
1457
|
-
<a id="disabled-773f90"></a>• [`monitor_disabled`](#disabled-773f90) - Optional Block<br>Enable this option
|
|
1458
|
-
|
|
1459
|
-
<a id="mtu-314a9f"></a>• [`mtu`](#mtu-314a9f) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
1460
|
-
|
|
1461
|
-
<a id="name-600128"></a>• [`name`](#name-600128) - Optional String<br>Interface Name. Name of this Interface
|
|
1462
|
-
|
|
1463
|
-
<a id="option-747ef7"></a>• [`network_option`](#option-747ef7) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-747ef7) below.
|
|
1464
|
-
|
|
1465
|
-
<a id="address-23b964"></a>• [`no_ipv4_address`](#address-23b964) - Optional Block<br>Enable this option
|
|
1466
|
-
|
|
1467
|
-
<a id="address-009f48"></a>• [`no_ipv6_address`](#address-009f48) - Optional Block<br>Enable this option
|
|
1468
|
-
|
|
1469
|
-
<a id="priority-aeec59"></a>• [`priority`](#priority-aeec59) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
1470
|
-
|
|
1471
|
-
<a id="disabled-91e657"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-91e657) - Optional Block<br>Enable this option
|
|
1472
|
-
|
|
1473
|
-
<a id="enabled-9b24dc"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-9b24dc) - Optional Block<br>Enable this option
|
|
1474
|
-
|
|
1475
|
-
<a id="static-ip-bd24d4"></a>• [`static_ip`](#static-ip-bd24d4) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-bd24d4) below.
|
|
1476
|
-
|
|
1477
|
-
<a id="address-eabfe8"></a>• [`static_ipv6_address`](#address-eabfe8) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-eabfe8) below.
|
|
1478
|
-
|
|
1479
|
-
<a id="interface-cb2c85"></a>• [`vlan_interface`](#interface-cb2c85) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-cb2c85) below.
|
|
1480
|
-
|
|
1481
|
-
#### Oci Not Managed Node List Interface List Bond Interface
|
|
1482
|
-
|
|
1483
|
-
<a id="deep-446af8"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1484
|
-
|
|
1485
|
-
#### Oci Not Managed Node List Interface List Bond Interface Lacp
|
|
1486
|
-
|
|
1487
|
-
<a id="deep-4ae1cd"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
1488
|
-
|
|
1489
|
-
#### Oci Not Managed Node List Interface List Ethernet Interface
|
|
1490
|
-
|
|
1491
|
-
<a id="deep-dc3621"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1492
|
-
|
|
1493
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config
|
|
1494
|
-
|
|
1495
|
-
<a id="deep-a7e52b"></a>Deeply nested **Config** block collapsed for readability.
|
|
1496
|
-
|
|
1497
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router
|
|
1498
|
-
|
|
1499
|
-
<a id="deep-e27180"></a>Deeply nested **Router** block collapsed for readability.
|
|
1500
|
-
|
|
1501
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
1502
|
-
|
|
1503
|
-
<a id="deep-4067cc"></a>Deeply nested **Config** block collapsed for readability.
|
|
1504
|
-
|
|
1505
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
1506
|
-
|
|
1507
|
-
<a id="deep-fa8fac"></a>Deeply nested **List** block collapsed for readability.
|
|
1508
|
-
|
|
1509
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
1510
|
-
|
|
1511
|
-
<a id="deep-d366cc"></a>Deeply nested **DNS** block collapsed for readability.
|
|
1512
|
-
|
|
1513
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
1514
|
-
|
|
1515
|
-
<a id="deep-41029f"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
1516
|
-
|
|
1517
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
1518
|
-
|
|
1519
|
-
<a id="deep-6d3c92"></a>Deeply nested **Networks** block collapsed for readability.
|
|
1520
|
-
|
|
1521
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
1522
|
-
|
|
1523
|
-
<a id="deep-a574c6"></a>Deeply nested **Pools** block collapsed for readability.
|
|
1524
|
-
|
|
1525
|
-
#### Oci Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
1526
|
-
|
|
1527
|
-
<a id="deep-108398"></a>Deeply nested **Map** block collapsed for readability.
|
|
1528
|
-
|
|
1529
|
-
#### Oci Not Managed Node List Interface List Network Option
|
|
1530
|
-
|
|
1531
|
-
<a id="deep-4dc97a"></a>Deeply nested **Option** block collapsed for readability.
|
|
1532
|
-
|
|
1533
|
-
#### Oci Not Managed Node List Interface List Static IP
|
|
1534
|
-
|
|
1535
|
-
<a id="deep-d328a9"></a>Deeply nested **IP** block collapsed for readability.
|
|
1536
|
-
|
|
1537
|
-
#### Oci Not Managed Node List Interface List Static IPv6 Address
|
|
1538
|
-
|
|
1539
|
-
<a id="deep-b8c38e"></a>Deeply nested **Address** block collapsed for readability.
|
|
1540
|
-
|
|
1541
|
-
#### Oci Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
1542
|
-
|
|
1543
|
-
<a id="deep-6986c2"></a>Deeply nested **IP** block collapsed for readability.
|
|
1544
|
-
|
|
1545
|
-
#### Oci Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
1546
|
-
|
|
1547
|
-
<a id="deep-02be06"></a>Deeply nested **IP** block collapsed for readability.
|
|
1548
|
-
|
|
1549
|
-
#### Oci Not Managed Node List Interface List VLAN Interface
|
|
1550
|
-
|
|
1551
|
-
<a id="deep-395474"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1552
|
-
|
|
1553
|
-
#### Offline Survivability Mode
|
|
1554
|
-
|
|
1555
|
-
An [`offline_survivability_mode`](#offline-survivability-mode) block supports the following:
|
|
1556
|
-
|
|
1557
|
-
<a id="mode-565021"></a>• [`enable_offline_survivability_mode`](#mode-565021) - Optional Block<br>Enable this option
|
|
1558
|
-
|
|
1559
|
-
<a id="mode-02f0c8"></a>• [`no_offline_survivability_mode`](#mode-02f0c8) - Optional Block<br>Enable this option
|
|
1560
|
-
|
|
1561
|
-
#### Openstack
|
|
1562
|
-
|
|
1563
|
-
An [`openstack`](#openstack) block supports the following:
|
|
1564
|
-
|
|
1565
|
-
<a id="openstack-not-managed"></a>• [`not_managed`](#openstack-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#openstack-not-managed) below.
|
|
1566
|
-
|
|
1567
|
-
#### Openstack Not Managed
|
|
1568
|
-
|
|
1569
|
-
A [`not_managed`](#openstack-not-managed) block (within [`openstack`](#openstack)) supports the following:
|
|
1570
|
-
|
|
1571
|
-
<a id="openstack-not-managed-node-list"></a>• [`node_list`](#openstack-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#openstack-not-managed-node-list) below.
|
|
1572
|
-
|
|
1573
|
-
#### Openstack Not Managed Node List
|
|
1574
|
-
|
|
1575
|
-
A [`node_list`](#openstack-not-managed-node-list) block (within [`openstack.not_managed`](#openstack-not-managed)) supports the following:
|
|
1576
|
-
|
|
1577
|
-
<a id="hostname-6b3cf2"></a>• [`hostname`](#hostname-6b3cf2) - Optional String<br>Hostname. Hostname for this Node
|
|
1578
|
-
|
|
1579
|
-
<a id="list-08a137"></a>• [`interface_list`](#list-08a137) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-08a137) below.
|
|
1580
|
-
|
|
1581
|
-
<a id="public-ip-1602e3"></a>• [`public_ip`](#public-ip-1602e3) - Optional String<br>Public IP. Public IP for this Node
|
|
1582
|
-
|
|
1583
|
-
<a id="openstack-not-managed-node-list-type"></a>• [`type`](#openstack-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
1584
|
-
|
|
1585
|
-
#### Openstack Not Managed Node List Interface List
|
|
1586
|
-
|
|
1587
|
-
An [`interface_list`](#list-08a137) block (within [`openstack.not_managed.node_list`](#openstack-not-managed-node-list)) supports the following:
|
|
1588
|
-
|
|
1589
|
-
<a id="interface-795887"></a>• [`bond_interface`](#interface-795887) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-795887) below.
|
|
1590
|
-
|
|
1591
|
-
<a id="spec-6e2a64"></a>• [`description_spec`](#spec-6e2a64) - Optional String<br>Interface Description. Description for this Interface
|
|
1592
|
-
|
|
1593
|
-
<a id="client-3f6d38"></a>• [`dhcp_client`](#client-3f6d38) - Optional Block<br>Enable this option
|
|
1594
|
-
|
|
1595
|
-
<a id="interface-b6bf86"></a>• [`ethernet_interface`](#interface-b6bf86) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-b6bf86) below.
|
|
1596
|
-
|
|
1597
|
-
<a id="config-3546e4"></a>• [`ipv6_auto_config`](#config-3546e4) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-3546e4) below.
|
|
1598
|
-
|
|
1599
|
-
<a id="labels-f228d0"></a>• [`labels`](#labels-f228d0) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
1600
|
-
|
|
1601
|
-
<a id="monitor-430458"></a>• [`monitor`](#monitor-430458) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
1602
|
-
|
|
1603
|
-
<a id="disabled-7cde43"></a>• [`monitor_disabled`](#disabled-7cde43) - Optional Block<br>Enable this option
|
|
1604
|
-
|
|
1605
|
-
<a id="mtu-12e85c"></a>• [`mtu`](#mtu-12e85c) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
1606
|
-
|
|
1607
|
-
<a id="name-a4611b"></a>• [`name`](#name-a4611b) - Optional String<br>Interface Name. Name of this Interface
|
|
1608
|
-
|
|
1609
|
-
<a id="option-c423fd"></a>• [`network_option`](#option-c423fd) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-c423fd) below.
|
|
1610
|
-
|
|
1611
|
-
<a id="address-96a5c5"></a>• [`no_ipv4_address`](#address-96a5c5) - Optional Block<br>Enable this option
|
|
1612
|
-
|
|
1613
|
-
<a id="address-9ee17d"></a>• [`no_ipv6_address`](#address-9ee17d) - Optional Block<br>Enable this option
|
|
1614
|
-
|
|
1615
|
-
<a id="priority-34866f"></a>• [`priority`](#priority-34866f) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
1616
|
-
|
|
1617
|
-
<a id="disabled-006035"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-006035) - Optional Block<br>Enable this option
|
|
1618
|
-
|
|
1619
|
-
<a id="enabled-f181b0"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-f181b0) - Optional Block<br>Enable this option
|
|
1620
|
-
|
|
1621
|
-
<a id="static-ip-458635"></a>• [`static_ip`](#static-ip-458635) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-458635) below.
|
|
1622
|
-
|
|
1623
|
-
<a id="address-170d5f"></a>• [`static_ipv6_address`](#address-170d5f) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-170d5f) below.
|
|
1624
|
-
|
|
1625
|
-
<a id="interface-1fd835"></a>• [`vlan_interface`](#interface-1fd835) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-1fd835) below.
|
|
1626
|
-
|
|
1627
|
-
#### Openstack Not Managed Node List Interface List Bond Interface
|
|
1628
|
-
|
|
1629
|
-
<a id="deep-63720a"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1630
|
-
|
|
1631
|
-
#### Openstack Not Managed Node List Interface List Bond Interface Lacp
|
|
1632
|
-
|
|
1633
|
-
<a id="deep-40e69b"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
1634
|
-
|
|
1635
|
-
#### Openstack Not Managed Node List Interface List Ethernet Interface
|
|
1636
|
-
|
|
1637
|
-
<a id="deep-ce3b3d"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1638
|
-
|
|
1639
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config
|
|
1640
|
-
|
|
1641
|
-
<a id="deep-961f80"></a>Deeply nested **Config** block collapsed for readability.
|
|
1642
|
-
|
|
1643
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router
|
|
1644
|
-
|
|
1645
|
-
<a id="deep-ed028d"></a>Deeply nested **Router** block collapsed for readability.
|
|
1646
|
-
|
|
1647
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
1648
|
-
|
|
1649
|
-
<a id="deep-28e629"></a>Deeply nested **Config** block collapsed for readability.
|
|
1650
|
-
|
|
1651
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
1652
|
-
|
|
1653
|
-
<a id="deep-914680"></a>Deeply nested **List** block collapsed for readability.
|
|
1654
|
-
|
|
1655
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
1656
|
-
|
|
1657
|
-
<a id="deep-f991e0"></a>Deeply nested **DNS** block collapsed for readability.
|
|
1658
|
-
|
|
1659
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
1660
|
-
|
|
1661
|
-
<a id="deep-3b5b14"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
1662
|
-
|
|
1663
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
1664
|
-
|
|
1665
|
-
<a id="deep-c5338f"></a>Deeply nested **Networks** block collapsed for readability.
|
|
1666
|
-
|
|
1667
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
1668
|
-
|
|
1669
|
-
<a id="deep-2f69f3"></a>Deeply nested **Pools** block collapsed for readability.
|
|
1670
|
-
|
|
1671
|
-
#### Openstack Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
1672
|
-
|
|
1673
|
-
<a id="deep-4f6a88"></a>Deeply nested **Map** block collapsed for readability.
|
|
1674
|
-
|
|
1675
|
-
#### Openstack Not Managed Node List Interface List Network Option
|
|
1676
|
-
|
|
1677
|
-
<a id="deep-f60961"></a>Deeply nested **Option** block collapsed for readability.
|
|
1678
|
-
|
|
1679
|
-
#### Openstack Not Managed Node List Interface List Static IP
|
|
1680
|
-
|
|
1681
|
-
<a id="deep-d09a62"></a>Deeply nested **IP** block collapsed for readability.
|
|
1682
|
-
|
|
1683
|
-
#### Openstack Not Managed Node List Interface List Static IPv6 Address
|
|
1684
|
-
|
|
1685
|
-
<a id="deep-dd6bdf"></a>Deeply nested **Address** block collapsed for readability.
|
|
1686
|
-
|
|
1687
|
-
#### Openstack Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
1688
|
-
|
|
1689
|
-
<a id="deep-38b9de"></a>Deeply nested **IP** block collapsed for readability.
|
|
1690
|
-
|
|
1691
|
-
#### Openstack Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
1692
|
-
|
|
1693
|
-
<a id="deep-8da7bf"></a>Deeply nested **IP** block collapsed for readability.
|
|
1694
|
-
|
|
1695
|
-
#### Openstack Not Managed Node List Interface List VLAN Interface
|
|
1696
|
-
|
|
1697
|
-
<a id="deep-68a558"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1698
|
-
|
|
1699
|
-
#### Performance Enhancement Mode
|
|
1700
|
-
|
|
1701
|
-
A [`performance_enhancement_mode`](#performance-enhancement-mode) block supports the following:
|
|
1702
|
-
|
|
1703
|
-
<a id="enhanced-31b8ac"></a>• [`perf_mode_l3_enhanced`](#enhanced-31b8ac) - Optional Block<br>L3 Mode Enhanced Performance.L3 enhanced performance mode options<br>See [Perf Mode L3 Enhanced](#enhanced-31b8ac) below.
|
|
1704
|
-
|
|
1705
|
-
<a id="enhanced-38f174"></a>• [`perf_mode_l7_enhanced`](#enhanced-38f174) - Optional Block<br>Enable this option
|
|
1706
|
-
|
|
1707
|
-
#### Performance Enhancement Mode Perf Mode L3 Enhanced
|
|
1708
|
-
|
|
1709
|
-
A [`perf_mode_l3_enhanced`](#enhanced-31b8ac) block (within [`performance_enhancement_mode`](#performance-enhancement-mode)) supports the following:
|
|
1710
|
-
|
|
1711
|
-
<a id="jumbo-7ba5b8"></a>• [`jumbo`](#jumbo-7ba5b8) - Optional Block<br>Enable this option
|
|
1712
|
-
|
|
1713
|
-
<a id="jumbo-95338e"></a>• [`no_jumbo`](#jumbo-95338e) - Optional Block<br>Enable this option
|
|
1714
|
-
|
|
1715
|
-
#### RE Select
|
|
1716
|
-
|
|
1717
|
-
A [`re_select`](#re-select) block supports the following:
|
|
1718
|
-
|
|
1719
|
-
<a id="re-select-geo-proximity"></a>• [`geo_proximity`](#re-select-geo-proximity) - Optional Block<br>Enable this option
|
|
1720
|
-
|
|
1721
|
-
<a id="re-select-specific-re"></a>• [`specific_re`](#re-select-specific-re) - Optional Block<br>Specific RE. Select specific REs. This is useful when a site needs to deterministically connect to a set of REs. A site will always be connected to 2 REs<br>See [Specific RE](#re-select-specific-re) below.
|
|
1722
|
-
|
|
1723
|
-
#### RE Select Specific RE
|
|
1724
|
-
|
|
1725
|
-
A [`specific_re`](#re-select-specific-re) block (within [`re_select`](#re-select)) supports the following:
|
|
1726
|
-
|
|
1727
|
-
<a id="re-select-specific-re-primary-re"></a>• [`primary_re`](#re-select-specific-re-primary-re) - Optional String<br>Primary RE Geography. Select primary RE for this site
|
|
1728
|
-
|
|
1729
|
-
#### Site Mesh Group On Slo
|
|
1730
|
-
|
|
1731
|
-
A [`site_mesh_group_on_slo`](#site-mesh-group-on-slo) block supports the following:
|
|
1732
|
-
|
|
1733
|
-
<a id="group-0918cc"></a>• [`no_site_mesh_group`](#group-0918cc) - Optional Block<br>Enable this option
|
|
1734
|
-
|
|
1735
|
-
<a id="site-mesh-group-on-slo-site-mesh-group"></a>• [`site_mesh_group`](#site-mesh-group-on-slo-site-mesh-group) - Optional Block<br>Object reference. This type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Site Mesh Group](#site-mesh-group-on-slo-site-mesh-group) below.
|
|
1736
|
-
|
|
1737
|
-
<a id="public-ip-ebd29c"></a>• [`sm_connection_public_ip`](#public-ip-ebd29c) - Optional Block<br>Enable this option
|
|
1738
|
-
|
|
1739
|
-
<a id="pvt-ip-9317b2"></a>• [`sm_connection_pvt_ip`](#pvt-ip-9317b2) - Optional Block<br>Enable this option
|
|
1740
|
-
|
|
1741
|
-
#### Site Mesh Group On Slo Site Mesh Group
|
|
1742
|
-
|
|
1743
|
-
<a id="deep-e180b6"></a>Deeply nested **Group** block collapsed for readability.
|
|
1744
|
-
|
|
1745
|
-
#### Software Settings
|
|
1746
|
-
|
|
1747
|
-
A [`software_settings`](#software-settings) block supports the following:
|
|
1748
|
-
|
|
1749
|
-
<a id="software-settings-os"></a>• [`os`](#software-settings-os) - Optional Block<br>Operating System Version. Select the F5XC Operating System Version for the site. By default, latest available OS Version will be used. Refer to release notes to find required released OS versions<br>See [OS](#software-settings-os) below.
|
|
1750
|
-
|
|
1751
|
-
<a id="software-settings-sw"></a>• [`sw`](#software-settings-sw) - Optional Block<br>F5XC Software Version. Select the F5XC Software Version for the site. By default, latest available F5XC Software Version will be used. Refer to release notes to find required released SW versions<br>See [Sw](#software-settings-sw) below.
|
|
1752
|
-
|
|
1753
|
-
#### Software Settings OS
|
|
1754
|
-
|
|
1755
|
-
An [`os`](#software-settings-os) block (within [`software_settings`](#software-settings)) supports the following:
|
|
1756
|
-
|
|
1757
|
-
<a id="software-settings-os-default-os-version"></a>• [`default_os_version`](#software-settings-os-default-os-version) - Optional Block<br>Enable this option
|
|
1758
|
-
|
|
1759
|
-
<a id="version-dbab0c"></a>• [`operating_system_version`](#version-dbab0c) - Optional String<br>Operating System Version. Specify a OS version to be used e.g. 9.2024.6
|
|
1760
|
-
|
|
1761
|
-
#### Software Settings Sw
|
|
1762
|
-
|
|
1763
|
-
A [`sw`](#software-settings-sw) block (within [`software_settings`](#software-settings)) supports the following:
|
|
1764
|
-
|
|
1765
|
-
<a id="software-settings-sw-default-sw-version"></a>• [`default_sw_version`](#software-settings-sw-default-sw-version) - Optional Block<br>Enable this option
|
|
1766
|
-
|
|
1767
|
-
<a id="version-0a788c"></a>• [`volterra_software_version`](#version-0a788c) - Optional String<br>F5XC Software Version. Specify a F5XC Software Version to be used e.g. crt-20210329-1002
|
|
1768
|
-
|
|
1769
|
-
#### Timeouts
|
|
1770
|
-
|
|
1771
|
-
A [`timeouts`](#timeouts) block supports the following:
|
|
1772
|
-
|
|
1773
|
-
<a id="timeouts-create"></a>• [`create`](#timeouts-create) - Optional String (Defaults to `30 minutes`)<br>Used when creating the resource
|
|
1774
|
-
|
|
1775
|
-
<a id="timeouts-delete"></a>• [`delete`](#timeouts-delete) - Optional String (Defaults to `30 minutes`)<br>Used when deleting the resource
|
|
1776
|
-
|
|
1777
|
-
<a id="timeouts-read"></a>• [`read`](#timeouts-read) - Optional String (Defaults to `5 minutes`)<br>Used when retrieving the resource
|
|
1778
|
-
|
|
1779
|
-
<a id="timeouts-update"></a>• [`update`](#timeouts-update) - Optional String (Defaults to `30 minutes`)<br>Used when updating the resource
|
|
1780
|
-
|
|
1781
|
-
#### Upgrade Settings
|
|
1782
|
-
|
|
1783
|
-
An [`upgrade_settings`](#upgrade-settings) block supports the following:
|
|
1784
|
-
|
|
1785
|
-
<a id="drain-bb0463"></a>• [`kubernetes_upgrade_drain`](#drain-bb0463) - Optional Block<br>Node by Node Upgrade. Specify how worker nodes within a site will be upgraded<br>See [Kubernetes Upgrade Drain](#drain-bb0463) below.
|
|
1786
|
-
|
|
1787
|
-
#### Upgrade Settings Kubernetes Upgrade Drain
|
|
1788
|
-
|
|
1789
|
-
A [`kubernetes_upgrade_drain`](#drain-bb0463) block (within [`upgrade_settings`](#upgrade-settings)) supports the following:
|
|
1790
|
-
|
|
1791
|
-
<a id="drain-897b77"></a>• [`disable_upgrade_drain`](#drain-897b77) - Optional Block<br>Enable this option
|
|
1792
|
-
|
|
1793
|
-
<a id="drain-817909"></a>• [`enable_upgrade_drain`](#drain-817909) - Optional Block<br>Enable Node by Node Upgrade. Specify batch upgrade settings for worker nodes within a site<br>See [Enable Upgrade Drain](#drain-817909) below.
|
|
1794
|
-
|
|
1795
|
-
#### Upgrade Settings Kubernetes Upgrade Drain Enable Upgrade Drain
|
|
1796
|
-
|
|
1797
|
-
<a id="deep-c91971"></a>Deeply nested **Drain** block collapsed for readability.
|
|
1798
|
-
|
|
1799
|
-
#### Vmware
|
|
1800
|
-
|
|
1801
|
-
A [`vmware`](#vmware) block supports the following:
|
|
1802
|
-
|
|
1803
|
-
<a id="vmware-not-managed"></a>• [`not_managed`](#vmware-not-managed) - Optional Block<br>List of Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Not Managed](#vmware-not-managed) below.
|
|
1804
|
-
|
|
1805
|
-
#### Vmware Not Managed
|
|
1806
|
-
|
|
1807
|
-
A [`not_managed`](#vmware-not-managed) block (within [`vmware`](#vmware)) supports the following:
|
|
1808
|
-
|
|
1809
|
-
<a id="vmware-not-managed-node-list"></a>• [`node_list`](#vmware-not-managed-node-list) - Optional Block<br>Nodes. This section will show nodes associated with this site. Note: For sites that are not orchestrated by F5XC, create nodes in the chosen provider. Once a node is created and registers with the site, it will be shown in this section<br>See [Node List](#vmware-not-managed-node-list) below.
|
|
1810
|
-
|
|
1811
|
-
#### Vmware Not Managed Node List
|
|
1812
|
-
|
|
1813
|
-
A [`node_list`](#vmware-not-managed-node-list) block (within [`vmware.not_managed`](#vmware-not-managed)) supports the following:
|
|
1814
|
-
|
|
1815
|
-
<a id="vmware-not-managed-node-list-hostname"></a>• [`hostname`](#vmware-not-managed-node-list-hostname) - Optional String<br>Hostname. Hostname for this Node
|
|
1816
|
-
|
|
1817
|
-
<a id="list-7c5ba9"></a>• [`interface_list`](#list-7c5ba9) - Optional Block<br>Interfaces. Manage interfaces belonging to this node<br>See [Interface List](#list-7c5ba9) below.
|
|
1818
|
-
|
|
1819
|
-
<a id="vmware-not-managed-node-list-public-ip"></a>• [`public_ip`](#vmware-not-managed-node-list-public-ip) - Optional String<br>Public IP. Public IP for this Node
|
|
1820
|
-
|
|
1821
|
-
<a id="vmware-not-managed-node-list-type"></a>• [`type`](#vmware-not-managed-node-list-type) - Optional String<br>Type. Type for this Node, can be Control or Worker
|
|
1822
|
-
|
|
1823
|
-
#### Vmware Not Managed Node List Interface List
|
|
1824
|
-
|
|
1825
|
-
An [`interface_list`](#list-7c5ba9) block (within [`vmware.not_managed.node_list`](#vmware-not-managed-node-list)) supports the following:
|
|
1826
|
-
|
|
1827
|
-
<a id="interface-067b8c"></a>• [`bond_interface`](#interface-067b8c) - Optional Block<br>Bond Device. Bond devices configuration for fleet<br>See [Bond Interface](#interface-067b8c) below.
|
|
1828
|
-
|
|
1829
|
-
<a id="spec-2a2415"></a>• [`description_spec`](#spec-2a2415) - Optional String<br>Interface Description. Description for this Interface
|
|
1830
|
-
|
|
1831
|
-
<a id="client-c6d6b2"></a>• [`dhcp_client`](#client-c6d6b2) - Optional Block<br>Enable this option
|
|
1832
|
-
|
|
1833
|
-
<a id="interface-d5d7ec"></a>• [`ethernet_interface`](#interface-d5d7ec) - Optional Block<br>Ethernet Interface<br>See [Ethernet Interface](#interface-d5d7ec) below.
|
|
1834
|
-
|
|
1835
|
-
<a id="config-f79747"></a>• [`ipv6_auto_config`](#config-f79747) - Optional Block<br>IPV6AutoConfigType<br>See [IPv6 Auto Config](#config-f79747) below.
|
|
1836
|
-
|
|
1837
|
-
<a id="labels-2ed8c9"></a>• [`labels`](#labels-2ed8c9) - Optional Block<br>Interface Labels. Add Labels for this Interface, these labels can be used in firewall policy
|
|
1838
|
-
|
|
1839
|
-
<a id="monitor-ad3d04"></a>• [`monitor`](#monitor-ad3d04) - Optional Block<br>Link Quality Monitoring Configuration. Link Quality Monitoring configuration for a network interface
|
|
1840
|
-
|
|
1841
|
-
<a id="disabled-3f7207"></a>• [`monitor_disabled`](#disabled-3f7207) - Optional Block<br>Enable this option
|
|
1842
|
-
|
|
1843
|
-
<a id="mtu-2aef73"></a>• [`mtu`](#mtu-2aef73) - Optional Number<br>Maximum Packet Size (MTU). Maximum packet size (Maximum Transfer Unit) of the interface When configured, MTU must be between 512 and 16384
|
|
1844
|
-
|
|
1845
|
-
<a id="name-4830d8"></a>• [`name`](#name-4830d8) - Optional String<br>Interface Name. Name of this Interface
|
|
1846
|
-
|
|
1847
|
-
<a id="option-e71ea9"></a>• [`network_option`](#option-e71ea9) - Optional Block<br>Network Select.Select virtual network (VRF) for this interface. There are 2 kinds of VRFs, local VRFs which are local to the site and global VRFs which extend into multiple sites. A site can have 2 Local VRFs, Site Local Outside (SLO), which is required for every site and Site Local Inside (SLI) which is optional. Global VRFs are configured via Networking > Segments. A site can have multple Network Segments (global VRFs)<br>See [Network Option](#option-e71ea9) below.
|
|
1848
|
-
|
|
1849
|
-
<a id="address-208212"></a>• [`no_ipv4_address`](#address-208212) - Optional Block<br>Enable this option
|
|
1850
|
-
|
|
1851
|
-
<a id="address-b8f24d"></a>• [`no_ipv6_address`](#address-b8f24d) - Optional Block<br>Enable this option
|
|
1852
|
-
|
|
1853
|
-
<a id="priority-378726"></a>• [`priority`](#priority-378726) - Optional Number<br>Priority. For a node, if multiple interfaces are configured in a VRF, interfaces with highest priority will be used as active and interfaces with lower priority will be used as backup. If multiple interfaces have the same priority, ECMP will be used. Greater the value, higher the priority
|
|
1854
|
-
|
|
1855
|
-
<a id="disabled-dfbb95"></a>• [`site_to_site_connectivity_interface_disabled`](#disabled-dfbb95) - Optional Block<br>Enable this option
|
|
1856
|
-
|
|
1857
|
-
<a id="enabled-223030"></a>• [`site_to_site_connectivity_interface_enabled`](#enabled-223030) - Optional Block<br>Enable this option
|
|
1858
|
-
|
|
1859
|
-
<a id="static-ip-7bbfdd"></a>• [`static_ip`](#static-ip-7bbfdd) - Optional Block<br>Node: Static IP Parameters. Configure Static IP parameters for a node<br>See [Static IP](#static-ip-7bbfdd) below.
|
|
1860
|
-
|
|
1861
|
-
<a id="address-535454"></a>• [`static_ipv6_address`](#address-535454) - Optional Block<br>Static IP Parameters. Configure Static IP parameters<br>See [Static IPv6 Address](#address-535454) below.
|
|
1862
|
-
|
|
1863
|
-
<a id="interface-699e69"></a>• [`vlan_interface`](#interface-699e69) - Optional Block<br>VLAN Interface<br>See [VLAN Interface](#interface-699e69) below.
|
|
1864
|
-
|
|
1865
|
-
#### Vmware Not Managed Node List Interface List Bond Interface
|
|
1866
|
-
|
|
1867
|
-
<a id="deep-633873"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1868
|
-
|
|
1869
|
-
#### Vmware Not Managed Node List Interface List Bond Interface Lacp
|
|
1870
|
-
|
|
1871
|
-
<a id="deep-7afe62"></a>Deeply nested **Lacp** block collapsed for readability.
|
|
1872
|
-
|
|
1873
|
-
#### Vmware Not Managed Node List Interface List Ethernet Interface
|
|
1874
|
-
|
|
1875
|
-
<a id="deep-7dcc90"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1876
|
-
|
|
1877
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config
|
|
1878
|
-
|
|
1879
|
-
<a id="deep-c33317"></a>Deeply nested **Config** block collapsed for readability.
|
|
1880
|
-
|
|
1881
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router
|
|
1882
|
-
|
|
1883
|
-
<a id="deep-ac39e9"></a>Deeply nested **Router** block collapsed for readability.
|
|
1884
|
-
|
|
1885
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router DNS Config
|
|
1886
|
-
|
|
1887
|
-
<a id="deep-06eab4"></a>Deeply nested **Config** block collapsed for readability.
|
|
1888
|
-
|
|
1889
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Configured List
|
|
1890
|
-
|
|
1891
|
-
<a id="deep-16e9fa"></a>Deeply nested **List** block collapsed for readability.
|
|
1892
|
-
|
|
1893
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router DNS Config Local DNS
|
|
1894
|
-
|
|
1895
|
-
<a id="deep-45525f"></a>Deeply nested **DNS** block collapsed for readability.
|
|
1896
|
-
|
|
1897
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router Stateful
|
|
1898
|
-
|
|
1899
|
-
<a id="deep-c19fa0"></a>Deeply nested **Stateful** block collapsed for readability.
|
|
1900
|
-
|
|
1901
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks
|
|
1902
|
-
|
|
1903
|
-
<a id="deep-229092"></a>Deeply nested **Networks** block collapsed for readability.
|
|
1904
|
-
|
|
1905
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router Stateful DHCP Networks Pools
|
|
1906
|
-
|
|
1907
|
-
<a id="deep-ed0fd6"></a>Deeply nested **Pools** block collapsed for readability.
|
|
1908
|
-
|
|
1909
|
-
#### Vmware Not Managed Node List Interface List IPv6 Auto Config Router Stateful Interface IP Map
|
|
1910
|
-
|
|
1911
|
-
<a id="deep-949cb5"></a>Deeply nested **Map** block collapsed for readability.
|
|
1912
|
-
|
|
1913
|
-
#### Vmware Not Managed Node List Interface List Network Option
|
|
1914
|
-
|
|
1915
|
-
<a id="deep-995b74"></a>Deeply nested **Option** block collapsed for readability.
|
|
1916
|
-
|
|
1917
|
-
#### Vmware Not Managed Node List Interface List Static IP
|
|
1918
|
-
|
|
1919
|
-
<a id="deep-acfda1"></a>Deeply nested **IP** block collapsed for readability.
|
|
1920
|
-
|
|
1921
|
-
#### Vmware Not Managed Node List Interface List Static IPv6 Address
|
|
1922
|
-
|
|
1923
|
-
<a id="deep-ddcd86"></a>Deeply nested **Address** block collapsed for readability.
|
|
1924
|
-
|
|
1925
|
-
#### Vmware Not Managed Node List Interface List Static IPv6 Address Cluster Static IP
|
|
1926
|
-
|
|
1927
|
-
<a id="deep-a76954"></a>Deeply nested **IP** block collapsed for readability.
|
|
1928
|
-
|
|
1929
|
-
#### Vmware Not Managed Node List Interface List Static IPv6 Address Node Static IP
|
|
1930
|
-
|
|
1931
|
-
<a id="deep-e0fa74"></a>Deeply nested **IP** block collapsed for readability.
|
|
1932
|
-
|
|
1933
|
-
#### Vmware Not Managed Node List Interface List VLAN Interface
|
|
1934
|
-
|
|
1935
|
-
<a id="deep-a2b927"></a>Deeply nested **Interface** block collapsed for readability.
|
|
1936
|
-
|
|
1937
|
-
---
|
|
1938
|
-
|
|
1939
|
-
## Common Types
|
|
1940
|
-
|
|
1941
|
-
The following type definitions are used throughout this resource. See the full definition here rather than repeated inline.
|
|
1942
|
-
|
|
1943
|
-
### Object Reference {#common-object-reference}
|
|
1944
|
-
|
|
1945
|
-
Object references establish a direct reference from one configuration object to another in F5 Distributed Cloud. References use the format `tenant/namespace/name`.
|
|
1946
|
-
|
|
1947
|
-
| Field | Type | Description |
|
|
1948
|
-
| ----- | ---- | ----------- |
|
|
1949
|
-
| `name` | String | Name of the referenced object |
|
|
1950
|
-
| `namespace` | String | Namespace containing the referenced object |
|
|
1951
|
-
| `tenant` | String | Tenant of the referenced object (system-managed) |
|
|
1952
|
-
|
|
1953
|
-
### Transformers {#common-transformers}
|
|
1954
|
-
|
|
1955
|
-
Transformers apply transformations to input values before matching. Multiple transformers can be applied in order.
|
|
1956
|
-
|
|
1957
|
-
| Value | Description |
|
|
1958
|
-
| ----- | ----------- |
|
|
1959
|
-
| `LOWER_CASE` | Convert to lowercase |
|
|
1960
|
-
| `UPPER_CASE` | Convert to uppercase |
|
|
1961
|
-
| `BASE64_DECODE` | Decode base64 content |
|
|
1962
|
-
| `NORMALIZE_PATH` | Normalize URL path |
|
|
1963
|
-
| `REMOVE_WHITESPACE` | Remove whitespace characters |
|
|
1964
|
-
| `URL_DECODE` | Decode URL-encoded characters |
|
|
1965
|
-
| `TRIM_LEFT` | Trim leading whitespace |
|
|
1966
|
-
| `TRIM_RIGHT` | Trim trailing whitespace |
|
|
1967
|
-
| `TRIM` | Trim both leading and trailing whitespace |
|
|
1968
|
-
|
|
1969
|
-
### HTTP Methods {#common-http-methods}
|
|
1970
|
-
|
|
1971
|
-
HTTP methods used for request matching.
|
|
1972
|
-
|
|
1973
|
-
| Value | Description |
|
|
1974
|
-
| ----- | ----------- |
|
|
1975
|
-
| `ANY` | Match any HTTP method |
|
|
1976
|
-
| `GET` | HTTP GET request |
|
|
1977
|
-
| `HEAD` | HTTP HEAD request |
|
|
1978
|
-
| `POST` | HTTP POST request |
|
|
1979
|
-
| `PUT` | HTTP PUT request |
|
|
1980
|
-
| `DELETE` | HTTP DELETE request |
|
|
1981
|
-
| `CONNECT` | HTTP CONNECT request |
|
|
1982
|
-
| `OPTIONS` | HTTP OPTIONS request |
|
|
1983
|
-
| `TRACE` | HTTP TRACE request |
|
|
1984
|
-
| `PATCH` | HTTP PATCH request |
|
|
1985
|
-
| `COPY` | HTTP COPY request (WebDAV) |
|
|
1986
|
-
|
|
1987
|
-
### TLS Fingerprints {#common-tls-fingerprints}
|
|
1988
|
-
|
|
1989
|
-
TLS fingerprint categories for malicious client detection.
|
|
1990
|
-
|
|
1991
|
-
| Value | Description |
|
|
1992
|
-
| ----- | ----------- |
|
|
1993
|
-
| `TLS_FINGERPRINT_NONE` | No fingerprint matching |
|
|
1994
|
-
| `ANY_MALICIOUS_FINGERPRINT` | Match any known malicious fingerprint |
|
|
1995
|
-
| `ADWARE` | Adware-associated fingerprints |
|
|
1996
|
-
| `DRIDEX` | Dridex malware fingerprints |
|
|
1997
|
-
| `GOOTKIT` | Gootkit malware fingerprints |
|
|
1998
|
-
| `RANSOMWARE` | Ransomware-associated fingerprints |
|
|
1999
|
-
| `TRICKBOT` | Trickbot malware fingerprints |
|
|
2000
|
-
|
|
2001
|
-
### IP Threat Categories {#common-ip-threat-categories}
|
|
2002
|
-
|
|
2003
|
-
IP address threat categories for security filtering.
|
|
2004
|
-
|
|
2005
|
-
| Value | Description |
|
|
2006
|
-
| ----- | ----------- |
|
|
2007
|
-
| `SPAM_SOURCES` | Known spam sources |
|
|
2008
|
-
| `WINDOWS_EXPLOITS` | Windows exploit sources |
|
|
2009
|
-
| `WEB_ATTACKS` | Web attack sources |
|
|
2010
|
-
| `BOTNETS` | Known botnet IPs |
|
|
2011
|
-
| `SCANNERS` | Network scanner IPs |
|
|
2012
|
-
| `REPUTATION` | Poor reputation IPs |
|
|
2013
|
-
| `PHISHING` | Phishing-related IPs |
|
|
2014
|
-
| `PROXY` | Anonymous proxy IPs |
|
|
2015
|
-
| `MOBILE_THREATS` | Mobile threat sources |
|
|
2016
|
-
| `TOR_PROXY` | Tor exit nodes |
|
|
2017
|
-
| `DENIAL_OF_SERVICE` | DoS attack sources |
|
|
2018
|
-
| `NETWORK` | Known bad network ranges |
|
|
2019
|
-
|
|
2020
|
-
## Import
|
|
2021
|
-
|
|
2022
|
-
Import is supported using the following syntax:
|
|
2023
|
-
|
|
2024
|
-
```shell
|
|
2025
|
-
# Import using namespace/name format
|
|
2026
|
-
terraform import f5xc_securemesh_site_v2.example system/example
|
|
2027
|
-
```
|