@robinmordasiewicz/f5xc-terraform-mcp 3.10.1 → 3.10.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/data-sources/workload.md +2 -2
- package/dist/docs/resources/advertise_policy.md +10 -10
- package/dist/docs/resources/alert_policy.md +9 -9
- package/dist/docs/resources/alert_receiver.md +4 -4
- package/dist/docs/resources/api_definition.md +2 -2
- package/dist/docs/resources/api_testing.md +6 -6
- package/dist/docs/resources/apm.md +8 -8
- package/dist/docs/resources/app_firewall.md +19 -19
- package/dist/docs/resources/app_setting.md +5 -5
- package/dist/docs/resources/app_type.md +3 -3
- package/dist/docs/resources/aws_tgw_site.md +50 -50
- package/dist/docs/resources/aws_vpc_site.md +66 -66
- package/dist/docs/resources/azure_vnet_site.md +93 -93
- package/dist/docs/resources/bgp.md +6 -6
- package/dist/docs/resources/bgp_routing_policy.md +7 -7
- package/dist/docs/resources/cdn_cache_rule.md +2 -2
- package/dist/docs/resources/cdn_loadbalancer.md +122 -122
- package/dist/docs/resources/cloud_connect.md +4 -4
- package/dist/docs/resources/cloud_credentials.md +2 -2
- package/dist/docs/resources/cloud_link.md +3 -3
- package/dist/docs/resources/cluster.md +18 -18
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +259 -8
- package/dist/docs/resources/dns_domain.md +2 -2
- package/dist/docs/resources/endpoint.md +5 -5
- package/dist/docs/resources/enhanced_firewall_policy.md +15 -15
- package/dist/docs/resources/external_connector.md +7 -7
- package/dist/docs/resources/fast_acl.md +2 -2
- package/dist/docs/resources/fast_acl_rule.md +2 -2
- package/dist/docs/resources/fleet.md +25 -25
- package/dist/docs/resources/forward_proxy_policy.md +15 -15
- package/dist/docs/resources/forwarding_class.md +5 -5
- package/dist/docs/resources/gcp_vpc_site.md +37 -37
- package/dist/docs/resources/global_log_receiver.md +104 -104
- package/dist/docs/resources/healthcheck.md +2 -2
- package/dist/docs/resources/http_loadbalancer.md +287 -287
- package/dist/docs/resources/irule.md +7 -5
- package/dist/docs/resources/log_receiver.md +104 -104
- package/dist/docs/resources/malicious_user_mitigation.md +6 -6
- package/dist/docs/resources/nat_policy.md +10 -10
- package/dist/docs/resources/network_connector.md +9 -9
- package/dist/docs/resources/network_firewall.md +3 -3
- package/dist/docs/resources/network_interface.md +28 -28
- package/dist/docs/resources/network_policy.md +210 -37
- package/dist/docs/resources/network_policy_view.md +16 -16
- package/dist/docs/resources/nfv_service.md +26 -26
- package/dist/docs/resources/origin_pool.md +48 -48
- package/dist/docs/resources/policer.md +50 -10
- package/dist/docs/resources/policy_based_routing.md +8 -8
- package/dist/docs/resources/protocol_inspection.md +4 -4
- package/dist/docs/resources/proxy.md +23 -23
- package/dist/docs/resources/rate_limiter.md +1 -1
- package/dist/docs/resources/rate_limiter_policy.md +8 -8
- package/dist/docs/resources/route.md +36 -36
- package/dist/docs/resources/secret_management_access.md +8 -8
- package/dist/docs/resources/securemesh_site.md +97 -97
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/service_policy.md +44 -44
- package/dist/docs/resources/service_policy_rule.md +37 -37
- package/dist/docs/resources/site.md +241 -613
- package/dist/docs/resources/site_mesh_group.md +8 -8
- package/dist/docs/resources/subnet.md +5 -5
- package/dist/docs/resources/tcp_loadbalancer.md +37 -37
- package/dist/docs/resources/tunnel.md +4 -4
- package/dist/docs/resources/udp_loadbalancer.md +9 -9
- package/dist/docs/resources/user_identification.md +10 -10
- package/dist/docs/resources/virtual_host.md +42 -42
- package/dist/docs/resources/virtual_network.md +4 -4
- package/dist/docs/resources/voltstack_site.md +59 -59
- package/dist/docs/resources/waf_exclusion_policy.md +5 -5
- package/dist/docs/resources/workload.md +9 -2951
- package/dist/metadata/resource-metadata.json +379 -613
- package/dist/metadata/validation-patterns.json +1 -1
- package/dist/tools/auth.js +38 -15
- package/dist/tools/auth.js.map +1 -1
- package/dist/tools/discover.d.ts.map +1 -1
- package/dist/tools/discover.js +36 -0
- package/dist/tools/discover.js.map +1 -1
- package/package.json +1 -1
|
@@ -61,21 +61,21 @@ resource "f5xc_proxy" "example" {
|
|
|
61
61
|
<a id="connection-timeout"></a>• [`connection_timeout`](#connection-timeout) - Optional Number Defaults to `2000` Specified in milliseconds<br>The timeout for new network connections to upstream server. The (2 seconds)
|
|
62
62
|
|
|
63
63
|
-> **One of the following:**
|
|
64
|
-
• <a id="do-not-advertise"></a>[`do_not_advertise`](#do-not-advertise) - Optional Block<br>
|
|
64
|
+
• <a id="do-not-advertise"></a>[`do_not_advertise`](#do-not-advertise) - Optional Block<br>Enable this option
|
|
65
65
|
<br><br>• <a id="site-virtual-sites"></a>[`site_virtual_sites`](#site-virtual-sites) - Optional Block<br>Defines a way to advertise a VIP on specific sites
|
|
66
66
|
|
|
67
67
|
-> **One of the following:**
|
|
68
68
|
• <a id="dynamic-proxy"></a>[`dynamic_proxy`](#dynamic-proxy) - Optional Block<br>DynamicProxyType<br>See [Dynamic Proxy](#dynamic-proxy) below for details.
|
|
69
69
|
<br><br>• <a id="http-proxy"></a>[`http_proxy`](#http-proxy) - Optional Block<br>HTTP Connect Proxy. Parameters for HTTP Connect Proxy
|
|
70
70
|
|
|
71
|
-
<a id="no-forward-proxy-policy"></a>• [`no_forward_proxy_policy`](#no-forward-proxy-policy) - Optional Block<br>
|
|
71
|
+
<a id="no-forward-proxy-policy"></a>• [`no_forward_proxy_policy`](#no-forward-proxy-policy) - Optional Block<br>Enable this option
|
|
72
72
|
|
|
73
73
|
-> **One of the following:**
|
|
74
|
-
• <a id="no-interception"></a>[`no_interception`](#no-interception) - Optional Block<br>
|
|
74
|
+
• <a id="no-interception"></a>[`no_interception`](#no-interception) - Optional Block<br>Enable this option
|
|
75
75
|
|
|
76
76
|
-> **One of the following:**
|
|
77
|
-
• <a id="site-local-inside-network"></a>[`site_local_inside_network`](#site-local-inside-network) - Optional Block<br>
|
|
78
|
-
<br><br>• <a id="site-local-network"></a>[`site_local_network`](#site-local-network) - Optional Block<br>
|
|
77
|
+
• <a id="site-local-inside-network"></a>[`site_local_inside_network`](#site-local-inside-network) - Optional Block<br>Enable this option
|
|
78
|
+
<br><br>• <a id="site-local-network"></a>[`site_local_network`](#site-local-network) - Optional Block<br>Enable this option
|
|
79
79
|
|
|
80
80
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
81
81
|
|
|
@@ -109,11 +109,11 @@ A [`forward_proxy_policies`](#policies-42e2f7) block (within [`active_forward_pr
|
|
|
109
109
|
|
|
110
110
|
A [`dynamic_proxy`](#dynamic-proxy) block supports the following:
|
|
111
111
|
|
|
112
|
-
<a id="dynamic-proxy-disable-dns-masquerade"></a>• [`disable_dns_masquerade`](#dynamic-proxy-disable-dns-masquerade) - Optional Block<br>
|
|
112
|
+
<a id="dynamic-proxy-disable-dns-masquerade"></a>• [`disable_dns_masquerade`](#dynamic-proxy-disable-dns-masquerade) - Optional Block<br>Enable this option
|
|
113
113
|
|
|
114
114
|
<a id="dynamic-proxy-domains"></a>• [`domains`](#dynamic-proxy-domains) - Optional List<br>List of Domains to be proxied. Wildcard hosts are supported in the suffix or prefix form Supported Domains and search order: 1. Exact Domain names: `www.example.com.` 2
|
|
115
115
|
|
|
116
|
-
<a id="dynamic-proxy-enable-dns-masquerade"></a>• [`enable_dns_masquerade`](#dynamic-proxy-enable-dns-masquerade) - Optional Block<br>
|
|
116
|
+
<a id="dynamic-proxy-enable-dns-masquerade"></a>• [`enable_dns_masquerade`](#dynamic-proxy-enable-dns-masquerade) - Optional Block<br>Enable this option
|
|
117
117
|
|
|
118
118
|
<a id="dynamic-proxy-http-proxy"></a>• [`http_proxy`](#dynamic-proxy-http-proxy) - Optional Block<br>Dynamic HTTP Proxy Type. Parameters for dynamic HTTP proxy<br>See [HTTP Proxy](#dynamic-proxy-http-proxy) below.
|
|
119
119
|
|
|
@@ -139,9 +139,9 @@ A [`more_option`](#dynamic-proxy-http-proxy-more-option) block (within [`dynamic
|
|
|
139
139
|
|
|
140
140
|
<a id="pages-241bd8"></a>• [`disable_default_error_pages`](#pages-241bd8) - Optional Bool<br>Disable the use of default F5XC error pages
|
|
141
141
|
|
|
142
|
-
<a id="normalize-343080"></a>• [`disable_path_normalize`](#normalize-343080) - Optional Block<br>
|
|
142
|
+
<a id="normalize-343080"></a>• [`disable_path_normalize`](#normalize-343080) - Optional Block<br>Enable this option
|
|
143
143
|
|
|
144
|
-
<a id="normalize-19a976"></a>• [`enable_path_normalize`](#normalize-19a976) - Optional Block<br>
|
|
144
|
+
<a id="normalize-19a976"></a>• [`enable_path_normalize`](#normalize-19a976) - Optional Block<br>Enable this option
|
|
145
145
|
|
|
146
146
|
<a id="timeout-14c486"></a>• [`idle_timeout`](#timeout-14c486) - Optional Number<br>The amount of time that a stream can exist without upstream or downstream activity, in milliseconds. The stream is terminated with a HTTP 504 (Gateway Timeout) error code if no upstream response header has been received, otherwise the stream is reset
|
|
147
147
|
|
|
@@ -255,9 +255,9 @@ A [`more_option`](#dynamic-proxy-https-proxy-more-option) block (within [`dynami
|
|
|
255
255
|
|
|
256
256
|
<a id="pages-9edd65"></a>• [`disable_default_error_pages`](#pages-9edd65) - Optional Bool<br>Disable the use of default F5XC error pages
|
|
257
257
|
|
|
258
|
-
<a id="normalize-780e38"></a>• [`disable_path_normalize`](#normalize-780e38) - Optional Block<br>
|
|
258
|
+
<a id="normalize-780e38"></a>• [`disable_path_normalize`](#normalize-780e38) - Optional Block<br>Enable this option
|
|
259
259
|
|
|
260
|
-
<a id="normalize-a240ab"></a>• [`enable_path_normalize`](#normalize-a240ab) - Optional Block<br>
|
|
260
|
+
<a id="normalize-a240ab"></a>• [`enable_path_normalize`](#normalize-a240ab) - Optional Block<br>Enable this option
|
|
261
261
|
|
|
262
262
|
<a id="timeout-1062ad"></a>• [`idle_timeout`](#timeout-1062ad) - Optional Number<br>The amount of time that a stream can exist without upstream or downstream activity, in milliseconds. The stream is terminated with a HTTP 504 (Gateway Timeout) error code if no upstream response header has been received, otherwise the stream is reset
|
|
263
263
|
|
|
@@ -355,7 +355,7 @@ A [`more_option`](#dynamic-proxy-https-proxy-more-option) block (within [`dynami
|
|
|
355
355
|
|
|
356
356
|
A [`tls_params`](#dynamic-proxy-https-proxy-tls-params) block (within [`dynamic_proxy.https_proxy`](#dynamic-proxy-https-proxy)) supports the following:
|
|
357
357
|
|
|
358
|
-
<a id="mtls-1872dc"></a>• [`no_mtls`](#mtls-1872dc) - Optional Block<br>
|
|
358
|
+
<a id="mtls-1872dc"></a>• [`no_mtls`](#mtls-1872dc) - Optional Block<br>Enable this option
|
|
359
359
|
|
|
360
360
|
<a id="certificates-6f0e81"></a>• [`tls_certificates`](#certificates-6f0e81) - Optional Block<br>Users can add one or more certificates that share the same set of domains. For example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#certificates-6f0e81) below.
|
|
361
361
|
|
|
@@ -417,7 +417,7 @@ A [`sni_proxy`](#dynamic-proxy-sni-proxy) block (within [`dynamic_proxy`](#dynam
|
|
|
417
417
|
|
|
418
418
|
A [`http_proxy`](#http-proxy) block supports the following:
|
|
419
419
|
|
|
420
|
-
<a id="http-proxy-enable-http"></a>• [`enable_http`](#http-proxy-enable-http) - Optional Block<br>
|
|
420
|
+
<a id="http-proxy-enable-http"></a>• [`enable_http`](#http-proxy-enable-http) - Optional Block<br>Enable this option
|
|
421
421
|
|
|
422
422
|
<a id="http-proxy-more-option"></a>• [`more_option`](#http-proxy-more-option) - Optional Block<br>Defines various OPTIONS to define a route<br>See [More Option](#http-proxy-more-option) below.
|
|
423
423
|
|
|
@@ -433,9 +433,9 @@ A [`more_option`](#http-proxy-more-option) block (within [`http_proxy`](#http-pr
|
|
|
433
433
|
|
|
434
434
|
<a id="pages-159caf"></a>• [`disable_default_error_pages`](#pages-159caf) - Optional Bool<br>Disable the use of default F5XC error pages
|
|
435
435
|
|
|
436
|
-
<a id="normalize-3090b6"></a>• [`disable_path_normalize`](#normalize-3090b6) - Optional Block<br>
|
|
436
|
+
<a id="normalize-3090b6"></a>• [`disable_path_normalize`](#normalize-3090b6) - Optional Block<br>Enable this option
|
|
437
437
|
|
|
438
|
-
<a id="normalize-8562f8"></a>• [`enable_path_normalize`](#normalize-8562f8) - Optional Block<br>
|
|
438
|
+
<a id="normalize-8562f8"></a>• [`enable_path_normalize`](#normalize-8562f8) - Optional Block<br>Enable this option
|
|
439
439
|
|
|
440
440
|
<a id="http-proxy-more-option-idle-timeout"></a>• [`idle_timeout`](#http-proxy-more-option-idle-timeout) - Optional Number<br>The amount of time that a stream can exist without upstream or downstream activity, in milliseconds. The stream is terminated with a HTTP 504 (Gateway Timeout) error code if no upstream response header has been received, otherwise the stream is reset
|
|
441
441
|
|
|
@@ -555,7 +555,7 @@ An [`advertise_where`](#site-virtual-sites-advertise-where) block (within [`site
|
|
|
555
555
|
|
|
556
556
|
<a id="site-virtual-sites-advertise-where-site"></a>• [`site`](#site-virtual-sites-advertise-where-site) - Optional Block<br>Defines a reference to a CE site along with network type and an optional IP address where a load balancer could be advertised<br>See [Site](#site-virtual-sites-advertise-where-site) below.
|
|
557
557
|
|
|
558
|
-
<a id="port-7cb8fb"></a>• [`use_default_port`](#port-7cb8fb) - Optional Block<br>
|
|
558
|
+
<a id="port-7cb8fb"></a>• [`use_default_port`](#port-7cb8fb) - Optional Block<br>Enable this option
|
|
559
559
|
|
|
560
560
|
<a id="site-7107b1"></a>• [`virtual_site`](#site-7107b1) - Optional Block<br>Defines a reference to a customer site virtual site along with network type where a load balancer could be advertised<br>See [Virtual Site](#site-7107b1) below.
|
|
561
561
|
|
|
@@ -609,15 +609,15 @@ A [`tls_intercept`](#tls-intercept) block supports the following:
|
|
|
609
609
|
|
|
610
610
|
<a id="tls-intercept-custom-certificate"></a>• [`custom_certificate`](#tls-intercept-custom-certificate) - Optional Block<br>TLS Certificate. Handle to fetch certificate and key<br>See [Custom Certificate](#tls-intercept-custom-certificate) below.
|
|
611
611
|
|
|
612
|
-
<a id="tls-intercept-enable-for-all-domains"></a>• [`enable_for_all_domains`](#tls-intercept-enable-for-all-domains) - Optional Block<br>
|
|
612
|
+
<a id="tls-intercept-enable-for-all-domains"></a>• [`enable_for_all_domains`](#tls-intercept-enable-for-all-domains) - Optional Block<br>Enable this option
|
|
613
613
|
|
|
614
614
|
<a id="tls-intercept-policy"></a>• [`policy`](#tls-intercept-policy) - Optional Block<br>Policy to enable or disable TLS interception<br>See [Policy](#tls-intercept-policy) below.
|
|
615
615
|
|
|
616
616
|
<a id="tls-intercept-trusted-ca-url"></a>• [`trusted_ca_url`](#tls-intercept-trusted-ca-url) - Optional String<br>Custom Root CA Certificate for validating upstream server certificate
|
|
617
617
|
|
|
618
|
-
<a id="tls-intercept-volterra-certificate"></a>• [`volterra_certificate`](#tls-intercept-volterra-certificate) - Optional Block<br>
|
|
618
|
+
<a id="tls-intercept-volterra-certificate"></a>• [`volterra_certificate`](#tls-intercept-volterra-certificate) - Optional Block<br>Enable this option
|
|
619
619
|
|
|
620
|
-
<a id="tls-intercept-volterra-trusted-ca"></a>• [`volterra_trusted_ca`](#tls-intercept-volterra-trusted-ca) - Optional Block<br>
|
|
620
|
+
<a id="tls-intercept-volterra-trusted-ca"></a>• [`volterra_trusted_ca`](#tls-intercept-volterra-trusted-ca) - Optional Block<br>Enable this option
|
|
621
621
|
|
|
622
622
|
#### TLS Intercept Custom Certificate
|
|
623
623
|
|
|
@@ -629,11 +629,11 @@ A [`custom_certificate`](#tls-intercept-custom-certificate) block (within [`tls_
|
|
|
629
629
|
|
|
630
630
|
<a id="spec-309e16"></a>• [`description_spec`](#spec-309e16) - Optional String<br>Description. Description for the certificate
|
|
631
631
|
|
|
632
|
-
<a id="stapling-e452bc"></a>• [`disable_ocsp_stapling`](#stapling-e452bc) - Optional Block<br>
|
|
632
|
+
<a id="stapling-e452bc"></a>• [`disable_ocsp_stapling`](#stapling-e452bc) - Optional Block<br>Enable this option
|
|
633
633
|
|
|
634
634
|
<a id="key-64ce0d"></a>• [`private_key`](#key-64ce0d) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#key-64ce0d) below.
|
|
635
635
|
|
|
636
|
-
<a id="defaults-a85c93"></a>• [`use_system_defaults`](#defaults-a85c93) - Optional Block<br>
|
|
636
|
+
<a id="defaults-a85c93"></a>• [`use_system_defaults`](#defaults-a85c93) - Optional Block<br>Enable this option
|
|
637
637
|
|
|
638
638
|
#### TLS Intercept Custom Certificate Custom Hash Algorithms
|
|
639
639
|
|
|
@@ -667,11 +667,11 @@ A [`policy`](#tls-intercept-policy) block (within [`tls_intercept`](#tls-interce
|
|
|
667
667
|
|
|
668
668
|
An [`interception_rules`](#tls-intercept-policy-interception-rules) block (within [`tls_intercept.policy`](#tls-intercept-policy)) supports the following:
|
|
669
669
|
|
|
670
|
-
<a id="interception-f6b646"></a>• [`disable_interception`](#interception-f6b646) - Optional Block<br>
|
|
670
|
+
<a id="interception-f6b646"></a>• [`disable_interception`](#interception-f6b646) - Optional Block<br>Enable this option
|
|
671
671
|
|
|
672
672
|
<a id="match-42a3da"></a>• [`domain_match`](#match-42a3da) - Optional Block<br>Domains. Domains names<br>See [Domain Match](#match-42a3da) below.
|
|
673
673
|
|
|
674
|
-
<a id="interception-e82eca"></a>• [`enable_interception`](#interception-e82eca) - Optional Block<br>
|
|
674
|
+
<a id="interception-e82eca"></a>• [`enable_interception`](#interception-e82eca) - Optional Block<br>Enable this option
|
|
675
675
|
|
|
676
676
|
#### TLS Intercept Policy Interception Rules Domain Match
|
|
677
677
|
|
|
@@ -79,7 +79,7 @@ A [`limits`](#limits) block supports the following:
|
|
|
79
79
|
|
|
80
80
|
<a id="limits-burst-multiplier"></a>• [`burst_multiplier`](#limits-burst-multiplier) - Optional Number<br>The maximum burst of requests to accommodate, expressed as a multiple of the rate
|
|
81
81
|
|
|
82
|
-
<a id="limits-disabled"></a>• [`disabled`](#limits-disabled) - Optional Block<br>
|
|
82
|
+
<a id="limits-disabled"></a>• [`disabled`](#limits-disabled) - Optional Block<br>Enable this option
|
|
83
83
|
|
|
84
84
|
<a id="limits-leaky-bucket"></a>• [`leaky_bucket`](#limits-leaky-bucket) - Optional Block<br>Leaky-Bucket is the default rate limiter algorithm for F5
|
|
85
85
|
|
|
@@ -63,7 +63,7 @@ resource "f5xc_rate_limiter_policy" "example" {
|
|
|
63
63
|
### Spec Argument Reference
|
|
64
64
|
|
|
65
65
|
-> **One of the following:**
|
|
66
|
-
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>
|
|
66
|
+
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>Enable this option
|
|
67
67
|
<br><br>• <a id="server-name"></a>[`server_name`](#server-name) - Optional String<br>The expected name of the server. The actual names for the server are extracted from the HTTP Host header and the name of the virtual_host for the request
|
|
68
68
|
<br><br>• <a id="server-name-matcher"></a>[`server_name_matcher`](#server-name-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Server Name Matcher](#server-name-matcher) below for details.
|
|
69
69
|
<br><br>• <a id="server-selector"></a>[`server_selector`](#server-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Server Selector](#server-selector) below for details.
|
|
@@ -100,19 +100,19 @@ A [`metadata`](#rules-metadata) block (within [`rules`](#rules)) supports the fo
|
|
|
100
100
|
|
|
101
101
|
A [`spec`](#rules-spec) block (within [`rules`](#rules)) supports the following:
|
|
102
102
|
|
|
103
|
-
<a id="rules-spec-any-asn"></a>• [`any_asn`](#rules-spec-any-asn) - Optional Block<br>
|
|
103
|
+
<a id="rules-spec-any-asn"></a>• [`any_asn`](#rules-spec-any-asn) - Optional Block<br>Enable this option
|
|
104
104
|
|
|
105
|
-
<a id="rules-spec-any-country"></a>• [`any_country`](#rules-spec-any-country) - Optional Block<br>
|
|
105
|
+
<a id="rules-spec-any-country"></a>• [`any_country`](#rules-spec-any-country) - Optional Block<br>Enable this option
|
|
106
106
|
|
|
107
|
-
<a id="rules-spec-any-ip"></a>• [`any_ip`](#rules-spec-any-ip) - Optional Block<br>
|
|
107
|
+
<a id="rules-spec-any-ip"></a>• [`any_ip`](#rules-spec-any-ip) - Optional Block<br>Enable this option
|
|
108
108
|
|
|
109
|
-
<a id="rules-spec-apply-rate-limiter"></a>• [`apply_rate_limiter`](#rules-spec-apply-rate-limiter) - Optional Block<br>
|
|
109
|
+
<a id="rules-spec-apply-rate-limiter"></a>• [`apply_rate_limiter`](#rules-spec-apply-rate-limiter) - Optional Block<br>Enable this option
|
|
110
110
|
|
|
111
111
|
<a id="rules-spec-asn-list"></a>• [`asn_list`](#rules-spec-asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#rules-spec-asn-list) below.
|
|
112
112
|
|
|
113
113
|
<a id="rules-spec-asn-matcher"></a>• [`asn_matcher`](#rules-spec-asn-matcher) - Optional Block<br>Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#rules-spec-asn-matcher) below.
|
|
114
114
|
|
|
115
|
-
<a id="rules-spec-bypass-rate-limiter"></a>• [`bypass_rate_limiter`](#rules-spec-bypass-rate-limiter) - Optional Block<br>
|
|
115
|
+
<a id="rules-spec-bypass-rate-limiter"></a>• [`bypass_rate_limiter`](#rules-spec-bypass-rate-limiter) - Optional Block<br>Enable this option
|
|
116
116
|
|
|
117
117
|
<a id="rules-spec-country-list"></a>• [`country_list`](#rules-spec-country-list) - Optional Block<br>Country Codes List. List of Country Codes to match against<br>See [Country List](#rules-spec-country-list) below.
|
|
118
118
|
|
|
@@ -186,9 +186,9 @@ A [`domain_matcher`](#rules-spec-domain-matcher) block (within [`rules.spec`](#r
|
|
|
186
186
|
|
|
187
187
|
A [`headers`](#rules-spec-headers) block (within [`rules.spec`](#rules-spec)) supports the following:
|
|
188
188
|
|
|
189
|
-
<a id="rules-spec-headers-check-not-present"></a>• [`check_not_present`](#rules-spec-headers-check-not-present) - Optional Block<br>
|
|
189
|
+
<a id="rules-spec-headers-check-not-present"></a>• [`check_not_present`](#rules-spec-headers-check-not-present) - Optional Block<br>Enable this option
|
|
190
190
|
|
|
191
|
-
<a id="rules-spec-headers-check-present"></a>• [`check_present`](#rules-spec-headers-check-present) - Optional Block<br>
|
|
191
|
+
<a id="rules-spec-headers-check-present"></a>• [`check_present`](#rules-spec-headers-check-present) - Optional Block<br>Enable this option
|
|
192
192
|
|
|
193
193
|
<a id="rules-spec-headers-invert-matcher"></a>• [`invert_matcher`](#rules-spec-headers-invert-matcher) - Optional Bool<br>Invert Header Matcher. Invert the match result
|
|
194
194
|
|
|
@@ -90,9 +90,9 @@ A [`routes`](#routes) block supports the following:
|
|
|
90
90
|
|
|
91
91
|
<a id="routes-disable-location-add"></a>• [`disable_location_add`](#routes-disable-location-add) - Optional Bool<br>Disables append of x-F5 Distributed Cloud-location = `<RE-site-name>` at route level, if it is configured at virtual-host level. This configuration is ignored on CE sites
|
|
92
92
|
|
|
93
|
-
<a id="injection-2c38a2"></a>• [`inherited_bot_defense_javascript_injection`](#injection-2c38a2) - Optional Block<br>
|
|
93
|
+
<a id="injection-2c38a2"></a>• [`inherited_bot_defense_javascript_injection`](#injection-2c38a2) - Optional Block<br>Enable this option
|
|
94
94
|
|
|
95
|
-
<a id="routes-inherited-waf-exclusion"></a>• [`inherited_waf_exclusion`](#routes-inherited-waf-exclusion) - Optional Block<br>
|
|
95
|
+
<a id="routes-inherited-waf-exclusion"></a>• [`inherited_waf_exclusion`](#routes-inherited-waf-exclusion) - Optional Block<br>Enable this option
|
|
96
96
|
|
|
97
97
|
<a id="routes-match"></a>• [`match`](#routes-match) - Optional Block<br>Match. Route match condition<br>See [Match](#routes-match) below.
|
|
98
98
|
|
|
@@ -176,7 +176,7 @@ A [`headers`](#routes-match-headers) block (within [`routes.match`](#routes-matc
|
|
|
176
176
|
|
|
177
177
|
An [`incoming_port`](#routes-match-incoming-port) block (within [`routes.match`](#routes-match)) supports the following:
|
|
178
178
|
|
|
179
|
-
<a id="match-1d4edd"></a>• [`no_port_match`](#match-1d4edd) - Optional Block<br>
|
|
179
|
+
<a id="match-1d4edd"></a>• [`no_port_match`](#match-1d4edd) - Optional Block<br>Enable this option
|
|
180
180
|
|
|
181
181
|
<a id="routes-match-incoming-port-port"></a>• [`port`](#routes-match-incoming-port-port) - Optional Number<br>Exact Port to match
|
|
182
182
|
|
|
@@ -266,31 +266,31 @@ A [`response_cookies_to_add`](#routes-response-cookies-to-add) block (within [`r
|
|
|
266
266
|
|
|
267
267
|
<a id="expiry-62b700"></a>• [`add_expiry`](#expiry-62b700) - Optional String<br>Add expiry attribute
|
|
268
268
|
|
|
269
|
-
<a id="httponly-c2890d"></a>• [`add_httponly`](#httponly-c2890d) - Optional Block<br>
|
|
269
|
+
<a id="httponly-c2890d"></a>• [`add_httponly`](#httponly-c2890d) - Optional Block<br>Enable this option
|
|
270
270
|
|
|
271
|
-
<a id="partitioned-aa1f08"></a>• [`add_partitioned`](#partitioned-aa1f08) - Optional Block<br>
|
|
271
|
+
<a id="partitioned-aa1f08"></a>• [`add_partitioned`](#partitioned-aa1f08) - Optional Block<br>Enable this option
|
|
272
272
|
|
|
273
273
|
<a id="routes-response-cookies-to-add-add-path"></a>• [`add_path`](#routes-response-cookies-to-add-add-path) - Optional String<br>Add path attribute
|
|
274
274
|
|
|
275
|
-
<a id="secure-9cd35a"></a>• [`add_secure`](#secure-9cd35a) - Optional Block<br>
|
|
275
|
+
<a id="secure-9cd35a"></a>• [`add_secure`](#secure-9cd35a) - Optional Block<br>Enable this option
|
|
276
276
|
|
|
277
|
-
<a id="domain-c754cb"></a>• [`ignore_domain`](#domain-c754cb) - Optional Block<br>
|
|
277
|
+
<a id="domain-c754cb"></a>• [`ignore_domain`](#domain-c754cb) - Optional Block<br>Enable this option
|
|
278
278
|
|
|
279
|
-
<a id="expiry-44cdc8"></a>• [`ignore_expiry`](#expiry-44cdc8) - Optional Block<br>
|
|
279
|
+
<a id="expiry-44cdc8"></a>• [`ignore_expiry`](#expiry-44cdc8) - Optional Block<br>Enable this option
|
|
280
280
|
|
|
281
|
-
<a id="httponly-99def6"></a>• [`ignore_httponly`](#httponly-99def6) - Optional Block<br>
|
|
281
|
+
<a id="httponly-99def6"></a>• [`ignore_httponly`](#httponly-99def6) - Optional Block<br>Enable this option
|
|
282
282
|
|
|
283
|
-
<a id="age-478fc0"></a>• [`ignore_max_age`](#age-478fc0) - Optional Block<br>
|
|
283
|
+
<a id="age-478fc0"></a>• [`ignore_max_age`](#age-478fc0) - Optional Block<br>Enable this option
|
|
284
284
|
|
|
285
|
-
<a id="partitioned-7a224c"></a>• [`ignore_partitioned`](#partitioned-7a224c) - Optional Block<br>
|
|
285
|
+
<a id="partitioned-7a224c"></a>• [`ignore_partitioned`](#partitioned-7a224c) - Optional Block<br>Enable this option
|
|
286
286
|
|
|
287
|
-
<a id="path-3677c1"></a>• [`ignore_path`](#path-3677c1) - Optional Block<br>
|
|
287
|
+
<a id="path-3677c1"></a>• [`ignore_path`](#path-3677c1) - Optional Block<br>Enable this option
|
|
288
288
|
|
|
289
|
-
<a id="samesite-0d04a2"></a>• [`ignore_samesite`](#samesite-0d04a2) - Optional Block<br>
|
|
289
|
+
<a id="samesite-0d04a2"></a>• [`ignore_samesite`](#samesite-0d04a2) - Optional Block<br>Enable this option
|
|
290
290
|
|
|
291
|
-
<a id="secure-effaa1"></a>• [`ignore_secure`](#secure-effaa1) - Optional Block<br>
|
|
291
|
+
<a id="secure-effaa1"></a>• [`ignore_secure`](#secure-effaa1) - Optional Block<br>Enable this option
|
|
292
292
|
|
|
293
|
-
<a id="value-0e603e"></a>• [`ignore_value`](#value-0e603e) - Optional Block<br>
|
|
293
|
+
<a id="value-0e603e"></a>• [`ignore_value`](#value-0e603e) - Optional Block<br>Enable this option
|
|
294
294
|
|
|
295
295
|
<a id="value-e8b96e"></a>• [`max_age_value`](#value-e8b96e) - Optional Number<br>Add max age attribute
|
|
296
296
|
|
|
@@ -298,11 +298,11 @@ A [`response_cookies_to_add`](#routes-response-cookies-to-add) block (within [`r
|
|
|
298
298
|
|
|
299
299
|
<a id="overwrite-25fb1c"></a>• [`overwrite`](#overwrite-25fb1c) - Optional Bool Defaults to `do`<br>Should the value be overwritten? If true, the value is overwritten to existing values. not overwrite
|
|
300
300
|
|
|
301
|
-
<a id="lax-3799dd"></a>• [`samesite_lax`](#lax-3799dd) - Optional Block<br>
|
|
301
|
+
<a id="lax-3799dd"></a>• [`samesite_lax`](#lax-3799dd) - Optional Block<br>Enable this option
|
|
302
302
|
|
|
303
|
-
<a id="none-d063b8"></a>• [`samesite_none`](#none-d063b8) - Optional Block<br>
|
|
303
|
+
<a id="none-d063b8"></a>• [`samesite_none`](#none-d063b8) - Optional Block<br>Enable this option
|
|
304
304
|
|
|
305
|
-
<a id="strict-b3db69"></a>• [`samesite_strict`](#strict-b3db69) - Optional Block<br>
|
|
305
|
+
<a id="strict-b3db69"></a>• [`samesite_strict`](#strict-b3db69) - Optional Block<br>Enable this option
|
|
306
306
|
|
|
307
307
|
<a id="value-172895"></a>• [`secret_value`](#value-172895) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Secret Value](#value-172895) below.
|
|
308
308
|
|
|
@@ -366,7 +366,7 @@ A [`route_destination`](#routes-route-destination) block (within [`routes`](#rou
|
|
|
366
366
|
|
|
367
367
|
<a id="routes-route-destination-destinations"></a>• [`destinations`](#routes-route-destination-destinations) - Optional Block<br>When requests have to distributed among multiple upstream clusters, multiple destinations are configured, each having its own cluster and weight. Traffic is distributed among clusters based on the weight configured<br>See [Destinations](#routes-route-destination-destinations) below.
|
|
368
368
|
|
|
369
|
-
<a id="cluster-098c21"></a>• [`do_not_retract_cluster`](#cluster-098c21) - Optional Block<br>
|
|
369
|
+
<a id="cluster-098c21"></a>• [`do_not_retract_cluster`](#cluster-098c21) - Optional Block<br>Enable this option
|
|
370
370
|
|
|
371
371
|
<a id="subsets-17b178"></a>• [`endpoint_subsets`](#subsets-17b178) - Optional Block<br>Upstream cluster may be configured to divide its endpoints into subsets based on metadata attached to the endpoints. Routes may then specify the metadata that a endpoint must match in order to be selected by the load balancer Labels field of endpoint object's metadata is used for subset
|
|
372
372
|
|
|
@@ -384,7 +384,7 @@ A [`route_destination`](#routes-route-destination) block (within [`routes`](#rou
|
|
|
384
384
|
|
|
385
385
|
<a id="routes-route-destination-regex-rewrite"></a>• [`regex_rewrite`](#routes-route-destination-regex-rewrite) - Optional Block<br>RegexMatchRewrite describes how to match a string and then produce a new string using a regular expression and a substitution string<br>See [Regex Rewrite](#routes-route-destination-regex-rewrite) below.
|
|
386
386
|
|
|
387
|
-
<a id="cluster-96a194"></a>• [`retract_cluster`](#cluster-96a194) - Optional Block<br>
|
|
387
|
+
<a id="cluster-96a194"></a>• [`retract_cluster`](#cluster-96a194) - Optional Block<br>Enable this option
|
|
388
388
|
|
|
389
389
|
<a id="routes-route-destination-retry-policy"></a>• [`retry_policy`](#routes-route-destination-retry-policy) - Optional Block<br>Retry policy configuration for route destination<br>See [Retry Policy](#routes-route-destination-retry-policy) below.
|
|
390
390
|
|
|
@@ -426,11 +426,11 @@ A [`cors_policy`](#routes-route-destination-cors-policy) block (within [`routes.
|
|
|
426
426
|
|
|
427
427
|
A [`csrf_policy`](#routes-route-destination-csrf-policy) block (within [`routes.route_destination`](#routes-route-destination)) supports the following:
|
|
428
428
|
|
|
429
|
-
<a id="domains-a58e7f"></a>• [`all_load_balancer_domains`](#domains-a58e7f) - Optional Block<br>
|
|
429
|
+
<a id="domains-a58e7f"></a>• [`all_load_balancer_domains`](#domains-a58e7f) - Optional Block<br>Enable this option
|
|
430
430
|
|
|
431
431
|
<a id="list-904516"></a>• [`custom_domain_list`](#list-904516) - Optional Block<br>List of domain names used for Host header matching<br>See [Custom Domain List](#list-904516) below.
|
|
432
432
|
|
|
433
|
-
<a id="disabled-8b18cb"></a>• [`disabled`](#disabled-8b18cb) - Optional Block<br>
|
|
433
|
+
<a id="disabled-8b18cb"></a>• [`disabled`](#disabled-8b18cb) - Optional Block<br>Enable this option
|
|
434
434
|
|
|
435
435
|
#### Routes Route Destination CSRF Policy Custom Domain List
|
|
436
436
|
|
|
@@ -478,25 +478,25 @@ A [`hash_policy`](#routes-route-destination-hash-policy) block (within [`routes.
|
|
|
478
478
|
|
|
479
479
|
A [`cookie`](#cookie-fa8e38) block (within [`routes.route_destination.hash_policy`](#routes-route-destination-hash-policy)) supports the following:
|
|
480
480
|
|
|
481
|
-
<a id="httponly-c187b0"></a>• [`add_httponly`](#httponly-c187b0) - Optional Block<br>
|
|
481
|
+
<a id="httponly-c187b0"></a>• [`add_httponly`](#httponly-c187b0) - Optional Block<br>Enable this option
|
|
482
482
|
|
|
483
|
-
<a id="secure-141faf"></a>• [`add_secure`](#secure-141faf) - Optional Block<br>
|
|
483
|
+
<a id="secure-141faf"></a>• [`add_secure`](#secure-141faf) - Optional Block<br>Enable this option
|
|
484
484
|
|
|
485
|
-
<a id="httponly-d1eb99"></a>• [`ignore_httponly`](#httponly-d1eb99) - Optional Block<br>
|
|
485
|
+
<a id="httponly-d1eb99"></a>• [`ignore_httponly`](#httponly-d1eb99) - Optional Block<br>Enable this option
|
|
486
486
|
|
|
487
|
-
<a id="samesite-dc4309"></a>• [`ignore_samesite`](#samesite-dc4309) - Optional Block<br>
|
|
487
|
+
<a id="samesite-dc4309"></a>• [`ignore_samesite`](#samesite-dc4309) - Optional Block<br>Enable this option
|
|
488
488
|
|
|
489
|
-
<a id="secure-9eb9ca"></a>• [`ignore_secure`](#secure-9eb9ca) - Optional Block<br>
|
|
489
|
+
<a id="secure-9eb9ca"></a>• [`ignore_secure`](#secure-9eb9ca) - Optional Block<br>Enable this option
|
|
490
490
|
|
|
491
491
|
<a id="name-a648a7"></a>• [`name`](#name-a648a7) - Optional String<br>The name of the cookie that will be used to obtain the hash key. If the cookie is not present and TTL below is not set, no hash will be produced
|
|
492
492
|
|
|
493
493
|
<a id="path-b96c24"></a>• [`path`](#path-b96c24) - Optional String<br>The name of the path for the cookie. If no path is specified here, no path will be set for the cookie
|
|
494
494
|
|
|
495
|
-
<a id="lax-fbe3d9"></a>• [`samesite_lax`](#lax-fbe3d9) - Optional Block<br>
|
|
495
|
+
<a id="lax-fbe3d9"></a>• [`samesite_lax`](#lax-fbe3d9) - Optional Block<br>Enable this option
|
|
496
496
|
|
|
497
|
-
<a id="none-087d30"></a>• [`samesite_none`](#none-087d30) - Optional Block<br>
|
|
497
|
+
<a id="none-087d30"></a>• [`samesite_none`](#none-087d30) - Optional Block<br>Enable this option
|
|
498
498
|
|
|
499
|
-
<a id="strict-3e3555"></a>• [`samesite_strict`](#strict-3e3555) - Optional Block<br>
|
|
499
|
+
<a id="strict-3e3555"></a>• [`samesite_strict`](#strict-3e3555) - Optional Block<br>Enable this option
|
|
500
500
|
|
|
501
501
|
<a id="ttl-e740ae"></a>• [`ttl`](#ttl-e740ae) - Optional Number<br>If specified, a cookie with the TTL will be generated if the cookie is not present. If the TTL is present and zero, the generated cookie will be a session cookie. TTL value is in milliseconds
|
|
502
502
|
|
|
@@ -534,11 +534,11 @@ A [`percent`](#percent-e76235) block (within [`routes.route_destination.mirror_p
|
|
|
534
534
|
|
|
535
535
|
A [`query_params`](#routes-route-destination-query-params) block (within [`routes.route_destination`](#routes-route-destination)) supports the following:
|
|
536
536
|
|
|
537
|
-
<a id="params-29da85"></a>• [`remove_all_params`](#params-29da85) - Optional Block<br>
|
|
537
|
+
<a id="params-29da85"></a>• [`remove_all_params`](#params-29da85) - Optional Block<br>Enable this option
|
|
538
538
|
|
|
539
539
|
<a id="params-cfccb5"></a>• [`replace_params`](#params-cfccb5) - Optional String
|
|
540
540
|
|
|
541
|
-
<a id="params-7e3845"></a>• [`retain_all_params`](#params-7e3845) - Optional Block<br>
|
|
541
|
+
<a id="params-7e3845"></a>• [`retain_all_params`](#params-7e3845) - Optional Block<br>Enable this option
|
|
542
542
|
|
|
543
543
|
#### Routes Route Destination Regex Rewrite
|
|
544
544
|
|
|
@@ -602,13 +602,13 @@ A [`route_redirect`](#routes-route-redirect) block (within [`routes`](#routes))
|
|
|
602
602
|
|
|
603
603
|
<a id="routes-route-redirect-proto-redirect"></a>• [`proto_redirect`](#routes-route-redirect-proto-redirect) - Optional String<br>Swap protocol part of incoming URL in redirect URL The protocol can be swapped with either HTTP or HTTPS When incoming-proto option is specified, swapping of protocol is not done
|
|
604
604
|
|
|
605
|
-
<a id="routes-route-redirect-remove-all-params"></a>• [`remove_all_params`](#routes-route-redirect-remove-all-params) - Optional Block<br>
|
|
605
|
+
<a id="routes-route-redirect-remove-all-params"></a>• [`remove_all_params`](#routes-route-redirect-remove-all-params) - Optional Block<br>Enable this option
|
|
606
606
|
|
|
607
607
|
<a id="routes-route-redirect-replace-params"></a>• [`replace_params`](#routes-route-redirect-replace-params) - Optional String
|
|
608
608
|
|
|
609
609
|
<a id="routes-route-redirect-response-code"></a>• [`response_code`](#routes-route-redirect-response-code) - Optional Number<br>The HTTP status code to use in the redirect response
|
|
610
610
|
|
|
611
|
-
<a id="routes-route-redirect-retain-all-params"></a>• [`retain_all_params`](#routes-route-redirect-retain-all-params) - Optional Block<br>
|
|
611
|
+
<a id="routes-route-redirect-retain-all-params"></a>• [`retain_all_params`](#routes-route-redirect-retain-all-params) - Optional Block<br>Enable this option
|
|
612
612
|
|
|
613
613
|
#### Routes Service Policy
|
|
614
614
|
|
|
@@ -632,9 +632,9 @@ A [`waf_type`](#routes-waf-type) block (within [`routes`](#routes)) supports the
|
|
|
632
632
|
|
|
633
633
|
<a id="routes-waf-type-app-firewall"></a>• [`app_firewall`](#routes-waf-type-app-firewall) - Optional Block<br>List of references to the app_firewall configuration objects<br>See [App Firewall](#routes-waf-type-app-firewall) below.
|
|
634
634
|
|
|
635
|
-
<a id="routes-waf-type-disable-waf"></a>• [`disable_waf`](#routes-waf-type-disable-waf) - Optional Block<br>
|
|
635
|
+
<a id="routes-waf-type-disable-waf"></a>• [`disable_waf`](#routes-waf-type-disable-waf) - Optional Block<br>Enable this option
|
|
636
636
|
|
|
637
|
-
<a id="routes-waf-type-inherit-waf"></a>• [`inherit_waf`](#routes-waf-type-inherit-waf) - Optional Block<br>
|
|
637
|
+
<a id="routes-waf-type-inherit-waf"></a>• [`inherit_waf`](#routes-waf-type-inherit-waf) - Optional Block<br>Enable this option
|
|
638
638
|
|
|
639
639
|
#### Routes WAF Type App Firewall
|
|
640
640
|
|
|
@@ -144,17 +144,17 @@ A [`tls_config`](#access-info-tls-config) block (within [`access_info`](#access-
|
|
|
144
144
|
|
|
145
145
|
<a id="access-info-tls-config-common-params"></a>• [`common_params`](#access-info-tls-config-common-params) - Optional Block<br>Information of different aspects for TLS authentication related to ciphers, certificates and trust store<br>See [Common Params](#access-info-tls-config-common-params) below.
|
|
146
146
|
|
|
147
|
-
<a id="caching-0f2bd1"></a>• [`default_session_key_caching`](#caching-0f2bd1) - Optional Block<br>
|
|
147
|
+
<a id="caching-0f2bd1"></a>• [`default_session_key_caching`](#caching-0f2bd1) - Optional Block<br>Enable this option
|
|
148
148
|
|
|
149
|
-
<a id="caching-c17b8f"></a>• [`disable_session_key_caching`](#caching-c17b8f) - Optional Block<br>
|
|
149
|
+
<a id="caching-c17b8f"></a>• [`disable_session_key_caching`](#caching-c17b8f) - Optional Block<br>Enable this option
|
|
150
150
|
|
|
151
|
-
<a id="access-info-tls-config-disable-sni"></a>• [`disable_sni`](#access-info-tls-config-disable-sni) - Optional Block<br>
|
|
151
|
+
<a id="access-info-tls-config-disable-sni"></a>• [`disable_sni`](#access-info-tls-config-disable-sni) - Optional Block<br>Enable this option
|
|
152
152
|
|
|
153
153
|
<a id="access-info-tls-config-max-session-keys"></a>• [`max_session_keys`](#access-info-tls-config-max-session-keys) - Optional Number<br>Number of session keys that are cached
|
|
154
154
|
|
|
155
155
|
<a id="access-info-tls-config-sni"></a>• [`sni`](#access-info-tls-config-sni) - Optional String<br>SNI value to be used
|
|
156
156
|
|
|
157
|
-
<a id="sni-493d0a"></a>• [`use_host_header_as_sni`](#sni-493d0a) - Optional Block<br>
|
|
157
|
+
<a id="sni-493d0a"></a>• [`use_host_header_as_sni`](#sni-493d0a) - Optional Block<br>Enable this option
|
|
158
158
|
|
|
159
159
|
#### Access Info TLS Config Cert Params
|
|
160
160
|
|
|
@@ -308,9 +308,9 @@ A [`where`](#where) block supports the following:
|
|
|
308
308
|
|
|
309
309
|
A [`site`](#where-site) block (within [`where`](#where)) supports the following:
|
|
310
310
|
|
|
311
|
-
<a id="where-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-site-disable-internet-vip) - Optional Block<br>
|
|
311
|
+
<a id="where-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-site-disable-internet-vip) - Optional Block<br>Enable this option
|
|
312
312
|
|
|
313
|
-
<a id="where-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-site-enable-internet-vip) - Optional Block<br>
|
|
313
|
+
<a id="where-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-site-enable-internet-vip) - Optional Block<br>Enable this option
|
|
314
314
|
|
|
315
315
|
<a id="where-site-network-type"></a>• [`network_type`](#where-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
|
|
316
316
|
|
|
@@ -354,9 +354,9 @@ A [`ref`](#where-virtual-network-ref) block (within [`where.virtual_network`](#w
|
|
|
354
354
|
|
|
355
355
|
A [`virtual_site`](#where-virtual-site) block (within [`where`](#where)) supports the following:
|
|
356
356
|
|
|
357
|
-
<a id="where-virtual-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-virtual-site-disable-internet-vip) - Optional Block<br>
|
|
357
|
+
<a id="where-virtual-site-disable-internet-vip"></a>• [`disable_internet_vip`](#where-virtual-site-disable-internet-vip) - Optional Block<br>Enable this option
|
|
358
358
|
|
|
359
|
-
<a id="where-virtual-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-virtual-site-enable-internet-vip) - Optional Block<br>
|
|
359
|
+
<a id="where-virtual-site-enable-internet-vip"></a>• [`enable_internet_vip`](#where-virtual-site-enable-internet-vip) - Optional Block<br>Enable this option
|
|
360
360
|
|
|
361
361
|
<a id="where-virtual-site-network-type"></a>• [`network_type`](#where-virtual-site-network-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
|
|
362
362
|
|