@robinmordasiewicz/f5xc-terraform-mcp 3.10.2 → 3.10.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/data-sources/workload.md +2 -2
- package/dist/docs/resources/advertise_policy.md +10 -10
- package/dist/docs/resources/alert_policy.md +9 -9
- package/dist/docs/resources/alert_receiver.md +4 -4
- package/dist/docs/resources/api_definition.md +2 -2
- package/dist/docs/resources/api_testing.md +6 -6
- package/dist/docs/resources/apm.md +8 -8
- package/dist/docs/resources/app_firewall.md +19 -19
- package/dist/docs/resources/app_setting.md +5 -5
- package/dist/docs/resources/app_type.md +3 -3
- package/dist/docs/resources/aws_tgw_site.md +50 -50
- package/dist/docs/resources/aws_vpc_site.md +66 -66
- package/dist/docs/resources/azure_vnet_site.md +93 -93
- package/dist/docs/resources/bgp.md +6 -6
- package/dist/docs/resources/bgp_routing_policy.md +7 -7
- package/dist/docs/resources/cdn_cache_rule.md +2 -2
- package/dist/docs/resources/cdn_loadbalancer.md +122 -122
- package/dist/docs/resources/cloud_connect.md +4 -4
- package/dist/docs/resources/cloud_credentials.md +2 -2
- package/dist/docs/resources/cloud_link.md +3 -3
- package/dist/docs/resources/cluster.md +18 -18
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +259 -8
- package/dist/docs/resources/dns_domain.md +2 -2
- package/dist/docs/resources/endpoint.md +5 -5
- package/dist/docs/resources/enhanced_firewall_policy.md +15 -15
- package/dist/docs/resources/external_connector.md +7 -7
- package/dist/docs/resources/fast_acl.md +2 -2
- package/dist/docs/resources/fast_acl_rule.md +2 -2
- package/dist/docs/resources/fleet.md +25 -25
- package/dist/docs/resources/forward_proxy_policy.md +15 -15
- package/dist/docs/resources/forwarding_class.md +5 -5
- package/dist/docs/resources/gcp_vpc_site.md +37 -37
- package/dist/docs/resources/global_log_receiver.md +104 -104
- package/dist/docs/resources/healthcheck.md +2 -2
- package/dist/docs/resources/http_loadbalancer.md +287 -287
- package/dist/docs/resources/irule.md +7 -5
- package/dist/docs/resources/log_receiver.md +104 -104
- package/dist/docs/resources/malicious_user_mitigation.md +6 -6
- package/dist/docs/resources/nat_policy.md +10 -10
- package/dist/docs/resources/network_connector.md +9 -9
- package/dist/docs/resources/network_firewall.md +3 -3
- package/dist/docs/resources/network_interface.md +28 -28
- package/dist/docs/resources/network_policy.md +210 -37
- package/dist/docs/resources/network_policy_view.md +16 -16
- package/dist/docs/resources/nfv_service.md +26 -26
- package/dist/docs/resources/origin_pool.md +48 -48
- package/dist/docs/resources/policer.md +50 -10
- package/dist/docs/resources/policy_based_routing.md +8 -8
- package/dist/docs/resources/protocol_inspection.md +4 -4
- package/dist/docs/resources/proxy.md +23 -23
- package/dist/docs/resources/rate_limiter.md +1 -1
- package/dist/docs/resources/rate_limiter_policy.md +8 -8
- package/dist/docs/resources/route.md +36 -36
- package/dist/docs/resources/secret_management_access.md +8 -8
- package/dist/docs/resources/securemesh_site.md +97 -97
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/service_policy.md +44 -44
- package/dist/docs/resources/service_policy_rule.md +37 -37
- package/dist/docs/resources/site.md +241 -613
- package/dist/docs/resources/site_mesh_group.md +8 -8
- package/dist/docs/resources/subnet.md +5 -5
- package/dist/docs/resources/tcp_loadbalancer.md +37 -37
- package/dist/docs/resources/tunnel.md +4 -4
- package/dist/docs/resources/udp_loadbalancer.md +9 -9
- package/dist/docs/resources/user_identification.md +10 -10
- package/dist/docs/resources/virtual_host.md +42 -42
- package/dist/docs/resources/virtual_network.md +4 -4
- package/dist/docs/resources/voltstack_site.md +59 -59
- package/dist/docs/resources/waf_exclusion_policy.md +5 -5
- package/dist/docs/resources/workload.md +9 -2951
- package/dist/metadata/resource-metadata.json +379 -613
- package/dist/metadata/validation-patterns.json +1 -1
- package/package.json +1 -1
|
@@ -72,8 +72,8 @@ resource "f5xc_virtual_host" "example" {
|
|
|
72
72
|
|
|
73
73
|
-> **One of the following:**
|
|
74
74
|
• <a id="append-server-name"></a>[`append_server_name`](#append-server-name) - Optional String<br>Specifies the value to be used for Server header if it is not already present. If Server Header is already present it is not overwritten. It is just passed
|
|
75
|
-
<br><br>• <a id="default-header"></a>[`default_header`](#default-header) - Optional Block<br>
|
|
76
|
-
<br><br>• <a id="pass-through"></a>[`pass_through`](#pass-through) - Optional Block<br>
|
|
75
|
+
<br><br>• <a id="default-header"></a>[`default_header`](#default-header) - Optional Block<br>Enable this option
|
|
76
|
+
<br><br>• <a id="pass-through"></a>[`pass_through`](#pass-through) - Optional Block<br>Enable this option
|
|
77
77
|
|
|
78
78
|
-> **One of the following:**
|
|
79
79
|
• <a id="authentication"></a>[`authentication`](#authentication) - Optional Block<br>Authentication related information. This allows to configure the URL to redirect after the authentication Authentication Object Reference, configuration of cookie params etc<br>See [Authentication](#authentication) below for details.
|
|
@@ -97,20 +97,20 @@ resource "f5xc_virtual_host" "example" {
|
|
|
97
97
|
<a id="custom-errors"></a>• [`custom_errors`](#custom-errors) - Optional Block<br>Map of integer error codes as keys and string values that can be used to provide custom HTTP pages for each error code. Key of the map can be either response code class or HTTP Error code. Response code classes for key is configured as follows 3 -- for 3xx response code class 4 -- for 4xx
|
|
98
98
|
|
|
99
99
|
-> **One of the following:**
|
|
100
|
-
• <a id="default-loadbalancer"></a>[`default_loadbalancer`](#default-loadbalancer) - Optional Block<br>
|
|
100
|
+
• <a id="default-loadbalancer"></a>[`default_loadbalancer`](#default-loadbalancer) - Optional Block<br>Enable this option
|
|
101
101
|
|
|
102
102
|
<a id="disable-default-error-pages"></a>• [`disable_default_error_pages`](#disable-default-error-pages) - Optional Bool<br>Option to specify whether to disable using default F5XC error pages
|
|
103
103
|
|
|
104
104
|
<a id="disable-dns-resolve"></a>• [`disable_dns_resolve`](#disable-dns-resolve) - Optional Bool<br>Disable DNS resolution for domains specified in the virtual host When the virtual host is configured as Dynamive Resolve Proxy (DRP), disable DNS resolution for domains configured. This configuration is suitable for HTTP CONNECT proxy
|
|
105
105
|
|
|
106
106
|
-> **One of the following:**
|
|
107
|
-
• <a id="disable-path-normalize"></a>[`disable_path_normalize`](#disable-path-normalize) - Optional Block<br>
|
|
107
|
+
• <a id="disable-path-normalize"></a>[`disable_path_normalize`](#disable-path-normalize) - Optional Block<br>Enable this option
|
|
108
108
|
|
|
109
109
|
<a id="domains"></a>• [`domains`](#domains) - Optional List<br>List of domain names matched to this virtual host for routing incoming requests. Supports wildcard patterns like \*.example.com for subdomain matching
|
|
110
110
|
|
|
111
111
|
<a id="dynamic-reverse-proxy"></a>• [`dynamic_reverse_proxy`](#dynamic-reverse-proxy) - Optional Block<br>In this mode of proxy, virtual host will resolve the destination endpoint dynamically. The dynamic resolution is done using a predefined field in the request. This predefined field depends on the ProxyType configured on the Virtual Host<br>See [Dynamic Reverse Proxy](#dynamic-reverse-proxy) below for details.
|
|
112
112
|
|
|
113
|
-
<a id="enable-path-normalize"></a>• [`enable_path_normalize`](#enable-path-normalize) - Optional Block<br>
|
|
113
|
+
<a id="enable-path-normalize"></a>• [`enable_path_normalize`](#enable-path-normalize) - Optional Block<br>Enable this option
|
|
114
114
|
|
|
115
115
|
<a id="http-protocol-options"></a>• [`http_protocol_options`](#http-protocol-options) - Optional Block<br>HTTP protocol configuration OPTIONS for downstream connections<br>See [HTTP Protocol Options](#http-protocol-options) below for details.
|
|
116
116
|
|
|
@@ -118,11 +118,11 @@ resource "f5xc_virtual_host" "example" {
|
|
|
118
118
|
|
|
119
119
|
<a id="max-request-header-size"></a>• [`max_request_header_size`](#max-request-header-size) - Optional Number<br>The maximum request header size in KiB for incoming connections. If un-configured, the default max request headers allowed is 60 KiB. Requests that exceed this limit will receive a 431 response
|
|
120
120
|
|
|
121
|
-
<a id="no-authentication"></a>• [`no_authentication`](#no-authentication) - Optional Block<br>
|
|
121
|
+
<a id="no-authentication"></a>• [`no_authentication`](#no-authentication) - Optional Block<br>Enable this option
|
|
122
122
|
|
|
123
|
-
<a id="no-challenge"></a>• [`no_challenge`](#no-challenge) - Optional Block<br>
|
|
123
|
+
<a id="no-challenge"></a>• [`no_challenge`](#no-challenge) - Optional Block<br>Enable this option
|
|
124
124
|
|
|
125
|
-
<a id="non-default-loadbalancer"></a>• [`non_default_loadbalancer`](#non-default-loadbalancer) - Optional Block<br>
|
|
125
|
+
<a id="non-default-loadbalancer"></a>• [`non_default_loadbalancer`](#non-default-loadbalancer) - Optional Block<br>Enable this option
|
|
126
126
|
|
|
127
127
|
<a id="proxy"></a>• [`proxy`](#proxy) - Optional String Defaults to `HTTP_PROXY`<br>Possible values are `UDP_PROXY`, `SMA_PROXY`, `DNS_PROXY`, `ZTNA_PROXY`, `UZTNA_PROXY`<br>[Enum: UDP_PROXY|SMA_PROXY|DNS_PROXY|ZTNA_PROXY|UZTNA_PROXY] ProxyType tells the type of proxy to install for the virtual host. Only the following combination of VirtualHosts within same AdvertisePolicy is permitted (None of them should have '*' in domains when used with other VirtualHosts in same AdvertisePolicy) 1. Multiple TCP_PROXY_WITH_SNI and
|
|
128
128
|
|
|
@@ -194,11 +194,11 @@ An [`authentication`](#authentication) block supports the following:
|
|
|
194
194
|
|
|
195
195
|
<a id="authentication-cookie-params"></a>• [`cookie_params`](#authentication-cookie-params) - Optional Block<br>Specifies different cookie related config parameters for authentication<br>See [Cookie Params](#authentication-cookie-params) below.
|
|
196
196
|
|
|
197
|
-
<a id="authentication-redirect-dynamic"></a>• [`redirect_dynamic`](#authentication-redirect-dynamic) - Optional Block<br>
|
|
197
|
+
<a id="authentication-redirect-dynamic"></a>• [`redirect_dynamic`](#authentication-redirect-dynamic) - Optional Block<br>Enable this option
|
|
198
198
|
|
|
199
199
|
<a id="authentication-redirect-url"></a>• [`redirect_url`](#authentication-redirect-url) - Optional String<br>user can provide a URL for e.g `HTTPS://abc.xyz.com` where user gets redirected. This URL configured here must match with the redirect URL configured with the OIDC provider
|
|
200
200
|
|
|
201
|
-
<a id="authentication-use-auth-object-config"></a>• [`use_auth_object_config`](#authentication-use-auth-object-config) - Optional Block<br>
|
|
201
|
+
<a id="authentication-use-auth-object-config"></a>• [`use_auth_object_config`](#authentication-use-auth-object-config) - Optional Block<br>Enable this option
|
|
202
202
|
|
|
203
203
|
#### Authentication Auth Config
|
|
204
204
|
|
|
@@ -292,9 +292,9 @@ A [`captcha_challenge`](#captcha-challenge) block supports the following:
|
|
|
292
292
|
|
|
293
293
|
A [`coalescing_options`](#coalescing-options) block supports the following:
|
|
294
294
|
|
|
295
|
-
<a id="coalescing-options-default-coalescing"></a>• [`default_coalescing`](#coalescing-options-default-coalescing) - Optional Block<br>
|
|
295
|
+
<a id="coalescing-options-default-coalescing"></a>• [`default_coalescing`](#coalescing-options-default-coalescing) - Optional Block<br>Enable this option
|
|
296
296
|
|
|
297
|
-
<a id="coalescing-options-strict-coalescing"></a>• [`strict_coalescing`](#coalescing-options-strict-coalescing) - Optional Block<br>
|
|
297
|
+
<a id="coalescing-options-strict-coalescing"></a>• [`strict_coalescing`](#coalescing-options-strict-coalescing) - Optional Block<br>Enable this option
|
|
298
298
|
|
|
299
299
|
#### Compression Params
|
|
300
300
|
|
|
@@ -332,11 +332,11 @@ A [`cors_policy`](#cors-policy) block supports the following:
|
|
|
332
332
|
|
|
333
333
|
A [`csrf_policy`](#csrf-policy) block supports the following:
|
|
334
334
|
|
|
335
|
-
<a id="csrf-policy-all-load-balancer-domains"></a>• [`all_load_balancer_domains`](#csrf-policy-all-load-balancer-domains) - Optional Block<br>
|
|
335
|
+
<a id="csrf-policy-all-load-balancer-domains"></a>• [`all_load_balancer_domains`](#csrf-policy-all-load-balancer-domains) - Optional Block<br>Enable this option
|
|
336
336
|
|
|
337
337
|
<a id="csrf-policy-custom-domain-list"></a>• [`custom_domain_list`](#csrf-policy-custom-domain-list) - Optional Block<br>List of domain names used for Host header matching<br>See [Custom Domain List](#csrf-policy-custom-domain-list) below.
|
|
338
338
|
|
|
339
|
-
<a id="csrf-policy-disabled"></a>• [`disabled`](#csrf-policy-disabled) - Optional Block<br>
|
|
339
|
+
<a id="csrf-policy-disabled"></a>• [`disabled`](#csrf-policy-disabled) - Optional Block<br>Enable this option
|
|
340
340
|
|
|
341
341
|
#### CSRF Policy Custom Domain List
|
|
342
342
|
|
|
@@ -376,9 +376,9 @@ A [`http_protocol_options`](#http-protocol-options) block supports the following
|
|
|
376
376
|
|
|
377
377
|
<a id="only-d91b7d"></a>• [`http_protocol_enable_v1_only`](#only-d91b7d) - Optional Block<br>HTTP/1.1 Protocol OPTIONS for downstream connections<br>See [HTTP Protocol Enable V1 Only](#only-d91b7d) below.
|
|
378
378
|
|
|
379
|
-
<a id="v1-v2-79c7b6"></a>• [`http_protocol_enable_v1_v2`](#v1-v2-79c7b6) - Optional Block<br>
|
|
379
|
+
<a id="v1-v2-79c7b6"></a>• [`http_protocol_enable_v1_v2`](#v1-v2-79c7b6) - Optional Block<br>Enable this option
|
|
380
380
|
|
|
381
|
-
<a id="only-e64b55"></a>• [`http_protocol_enable_v2_only`](#only-e64b55) - Optional Block<br>
|
|
381
|
+
<a id="only-e64b55"></a>• [`http_protocol_enable_v2_only`](#only-e64b55) - Optional Block<br>Enable this option
|
|
382
382
|
|
|
383
383
|
#### HTTP Protocol Options HTTP Protocol Enable V1 Only
|
|
384
384
|
|
|
@@ -476,31 +476,31 @@ A [`response_cookies_to_add`](#response-cookies-to-add) block supports the follo
|
|
|
476
476
|
|
|
477
477
|
<a id="response-cookies-to-add-add-expiry"></a>• [`add_expiry`](#response-cookies-to-add-add-expiry) - Optional String<br>Add expiry attribute
|
|
478
478
|
|
|
479
|
-
<a id="response-cookies-to-add-add-httponly"></a>• [`add_httponly`](#response-cookies-to-add-add-httponly) - Optional Block<br>
|
|
479
|
+
<a id="response-cookies-to-add-add-httponly"></a>• [`add_httponly`](#response-cookies-to-add-add-httponly) - Optional Block<br>Enable this option
|
|
480
480
|
|
|
481
|
-
<a id="response-cookies-to-add-add-partitioned"></a>• [`add_partitioned`](#response-cookies-to-add-add-partitioned) - Optional Block<br>
|
|
481
|
+
<a id="response-cookies-to-add-add-partitioned"></a>• [`add_partitioned`](#response-cookies-to-add-add-partitioned) - Optional Block<br>Enable this option
|
|
482
482
|
|
|
483
483
|
<a id="response-cookies-to-add-add-path"></a>• [`add_path`](#response-cookies-to-add-add-path) - Optional String<br>Add path attribute
|
|
484
484
|
|
|
485
|
-
<a id="response-cookies-to-add-add-secure"></a>• [`add_secure`](#response-cookies-to-add-add-secure) - Optional Block<br>
|
|
485
|
+
<a id="response-cookies-to-add-add-secure"></a>• [`add_secure`](#response-cookies-to-add-add-secure) - Optional Block<br>Enable this option
|
|
486
486
|
|
|
487
|
-
<a id="response-cookies-to-add-ignore-domain"></a>• [`ignore_domain`](#response-cookies-to-add-ignore-domain) - Optional Block<br>
|
|
487
|
+
<a id="response-cookies-to-add-ignore-domain"></a>• [`ignore_domain`](#response-cookies-to-add-ignore-domain) - Optional Block<br>Enable this option
|
|
488
488
|
|
|
489
|
-
<a id="response-cookies-to-add-ignore-expiry"></a>• [`ignore_expiry`](#response-cookies-to-add-ignore-expiry) - Optional Block<br>
|
|
489
|
+
<a id="response-cookies-to-add-ignore-expiry"></a>• [`ignore_expiry`](#response-cookies-to-add-ignore-expiry) - Optional Block<br>Enable this option
|
|
490
490
|
|
|
491
|
-
<a id="response-cookies-to-add-ignore-httponly"></a>• [`ignore_httponly`](#response-cookies-to-add-ignore-httponly) - Optional Block<br>
|
|
491
|
+
<a id="response-cookies-to-add-ignore-httponly"></a>• [`ignore_httponly`](#response-cookies-to-add-ignore-httponly) - Optional Block<br>Enable this option
|
|
492
492
|
|
|
493
|
-
<a id="response-cookies-to-add-ignore-max-age"></a>• [`ignore_max_age`](#response-cookies-to-add-ignore-max-age) - Optional Block<br>
|
|
493
|
+
<a id="response-cookies-to-add-ignore-max-age"></a>• [`ignore_max_age`](#response-cookies-to-add-ignore-max-age) - Optional Block<br>Enable this option
|
|
494
494
|
|
|
495
|
-
<a id="partitioned-36b0ea"></a>• [`ignore_partitioned`](#partitioned-36b0ea) - Optional Block<br>
|
|
495
|
+
<a id="partitioned-36b0ea"></a>• [`ignore_partitioned`](#partitioned-36b0ea) - Optional Block<br>Enable this option
|
|
496
496
|
|
|
497
|
-
<a id="response-cookies-to-add-ignore-path"></a>• [`ignore_path`](#response-cookies-to-add-ignore-path) - Optional Block<br>
|
|
497
|
+
<a id="response-cookies-to-add-ignore-path"></a>• [`ignore_path`](#response-cookies-to-add-ignore-path) - Optional Block<br>Enable this option
|
|
498
498
|
|
|
499
|
-
<a id="response-cookies-to-add-ignore-samesite"></a>• [`ignore_samesite`](#response-cookies-to-add-ignore-samesite) - Optional Block<br>
|
|
499
|
+
<a id="response-cookies-to-add-ignore-samesite"></a>• [`ignore_samesite`](#response-cookies-to-add-ignore-samesite) - Optional Block<br>Enable this option
|
|
500
500
|
|
|
501
|
-
<a id="response-cookies-to-add-ignore-secure"></a>• [`ignore_secure`](#response-cookies-to-add-ignore-secure) - Optional Block<br>
|
|
501
|
+
<a id="response-cookies-to-add-ignore-secure"></a>• [`ignore_secure`](#response-cookies-to-add-ignore-secure) - Optional Block<br>Enable this option
|
|
502
502
|
|
|
503
|
-
<a id="response-cookies-to-add-ignore-value"></a>• [`ignore_value`](#response-cookies-to-add-ignore-value) - Optional Block<br>
|
|
503
|
+
<a id="response-cookies-to-add-ignore-value"></a>• [`ignore_value`](#response-cookies-to-add-ignore-value) - Optional Block<br>Enable this option
|
|
504
504
|
|
|
505
505
|
<a id="response-cookies-to-add-max-age-value"></a>• [`max_age_value`](#response-cookies-to-add-max-age-value) - Optional Number<br>Add max age attribute
|
|
506
506
|
|
|
@@ -508,11 +508,11 @@ A [`response_cookies_to_add`](#response-cookies-to-add) block supports the follo
|
|
|
508
508
|
|
|
509
509
|
<a id="response-cookies-to-add-overwrite"></a>• [`overwrite`](#response-cookies-to-add-overwrite) - Optional Bool Defaults to `do`<br>Should the value be overwritten? If true, the value is overwritten to existing values. not overwrite
|
|
510
510
|
|
|
511
|
-
<a id="response-cookies-to-add-samesite-lax"></a>• [`samesite_lax`](#response-cookies-to-add-samesite-lax) - Optional Block<br>
|
|
511
|
+
<a id="response-cookies-to-add-samesite-lax"></a>• [`samesite_lax`](#response-cookies-to-add-samesite-lax) - Optional Block<br>Enable this option
|
|
512
512
|
|
|
513
|
-
<a id="response-cookies-to-add-samesite-none"></a>• [`samesite_none`](#response-cookies-to-add-samesite-none) - Optional Block<br>
|
|
513
|
+
<a id="response-cookies-to-add-samesite-none"></a>• [`samesite_none`](#response-cookies-to-add-samesite-none) - Optional Block<br>Enable this option
|
|
514
514
|
|
|
515
|
-
<a id="response-cookies-to-add-samesite-strict"></a>• [`samesite_strict`](#response-cookies-to-add-samesite-strict) - Optional Block<br>
|
|
515
|
+
<a id="response-cookies-to-add-samesite-strict"></a>• [`samesite_strict`](#response-cookies-to-add-samesite-strict) - Optional Block<br>Enable this option
|
|
516
516
|
|
|
517
517
|
<a id="response-cookies-to-add-secret-value"></a>• [`secret_value`](#response-cookies-to-add-secret-value) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Secret Value](#response-cookies-to-add-secret-value) below.
|
|
518
518
|
|
|
@@ -616,7 +616,7 @@ A [`sensitive_data_policy`](#sensitive-data-policy) block supports the following
|
|
|
616
616
|
|
|
617
617
|
A [`slow_ddos_mitigation`](#slow-ddos-mitigation) block supports the following:
|
|
618
618
|
|
|
619
|
-
<a id="timeout-81071e"></a>• [`disable_request_timeout`](#timeout-81071e) - Optional Block<br>
|
|
619
|
+
<a id="timeout-81071e"></a>• [`disable_request_timeout`](#timeout-81071e) - Optional Block<br>Enable this option
|
|
620
620
|
|
|
621
621
|
<a id="timeout-da89d3"></a>• [`request_headers_timeout`](#timeout-da89d3) - Optional Number Defaults to `10000`<br>The amount of time the client has to send only the headers on the request stream before the stream is cancelled. The milliseconds. This setting provides protection against Slowloris attacks
|
|
622
622
|
|
|
@@ -642,15 +642,15 @@ A [`tls_cert_params`](#tls-cert-params) block supports the following:
|
|
|
642
642
|
|
|
643
643
|
<a id="tls-cert-params-cipher-suites"></a>• [`cipher_suites`](#tls-cert-params-cipher-suites) - Optional List<br>The following list specifies the supported cipher suite TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
644
644
|
|
|
645
|
-
<a id="optional-41418d"></a>• [`client_certificate_optional`](#optional-41418d) - Optional Block<br>
|
|
645
|
+
<a id="optional-41418d"></a>• [`client_certificate_optional`](#optional-41418d) - Optional Block<br>Enable this option
|
|
646
646
|
|
|
647
|
-
<a id="required-58689a"></a>• [`client_certificate_required`](#required-58689a) - Optional Block<br>
|
|
647
|
+
<a id="required-58689a"></a>• [`client_certificate_required`](#required-58689a) - Optional Block<br>Enable this option
|
|
648
648
|
|
|
649
649
|
<a id="version-93b9ed"></a>• [`maximum_protocol_version`](#version-93b9ed) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
650
650
|
|
|
651
651
|
<a id="version-77eedf"></a>• [`minimum_protocol_version`](#version-77eedf) - Optional String Defaults to `TLS_AUTO`<br>Possible values are `TLS_AUTO`, `TLSv1_0`, `TLSv1_1`, `TLSv1_2`, `TLSv1_3`<br>[Enum: TLS_AUTO|TLSv1_0|TLSv1_1|TLSv1_2|TLSv1_3] TlsProtocol is enumeration of supported TLS versions F5 Distributed Cloud will choose the optimal TLS version
|
|
652
652
|
|
|
653
|
-
<a id="tls-cert-params-no-client-certificate"></a>• [`no_client_certificate`](#tls-cert-params-no-client-certificate) - Optional Block<br>
|
|
653
|
+
<a id="tls-cert-params-no-client-certificate"></a>• [`no_client_certificate`](#tls-cert-params-no-client-certificate) - Optional Block<br>Enable this option
|
|
654
654
|
|
|
655
655
|
<a id="tls-cert-params-validation-params"></a>• [`validation_params`](#tls-cert-params-validation-params) - Optional Block<br>Includes URL for a trust store, whether SAN verification is required and list of Subject Alt Names for verification<br>See [Validation Params](#tls-cert-params-validation-params) below.
|
|
656
656
|
|
|
@@ -696,13 +696,13 @@ A [`trusted_ca`](#trusted-ca-f27956) block (within [`tls_cert_params.validation_
|
|
|
696
696
|
|
|
697
697
|
A [`tls_parameters`](#tls-parameters) block supports the following:
|
|
698
698
|
|
|
699
|
-
<a id="optional-56d793"></a>• [`client_certificate_optional`](#optional-56d793) - Optional Block<br>
|
|
699
|
+
<a id="optional-56d793"></a>• [`client_certificate_optional`](#optional-56d793) - Optional Block<br>Enable this option
|
|
700
700
|
|
|
701
|
-
<a id="required-544cf5"></a>• [`client_certificate_required`](#required-544cf5) - Optional Block<br>
|
|
701
|
+
<a id="required-544cf5"></a>• [`client_certificate_required`](#required-544cf5) - Optional Block<br>Enable this option
|
|
702
702
|
|
|
703
703
|
<a id="tls-parameters-common-params"></a>• [`common_params`](#tls-parameters-common-params) - Optional Block<br>Information of different aspects for TLS authentication related to ciphers, certificates and trust store<br>See [Common Params](#tls-parameters-common-params) below.
|
|
704
704
|
|
|
705
|
-
<a id="tls-parameters-no-client-certificate"></a>• [`no_client_certificate`](#tls-parameters-no-client-certificate) - Optional Block<br>
|
|
705
|
+
<a id="tls-parameters-no-client-certificate"></a>• [`no_client_certificate`](#tls-parameters-no-client-certificate) - Optional Block<br>Enable this option
|
|
706
706
|
|
|
707
707
|
<a id="tls-parameters-xfcc-header-elements"></a>• [`xfcc_header_elements`](#tls-parameters-xfcc-header-elements) - Optional List Defaults to `XFCC_NONE`<br>Possible values are `XFCC_NONE`, `XFCC_CERT`, `XFCC_CHAIN`, `XFCC_SUBJECT`, `XFCC_URI`, `XFCC_DNS`<br>[Enum: XFCC_NONE|XFCC_CERT|XFCC_CHAIN|XFCC_SUBJECT|XFCC_URI|XFCC_DNS] X-Forwarded-Client-Cert header elements to be set in an mTLS enabled connections. If none are defined, the header will not be added
|
|
708
708
|
|
|
@@ -730,11 +730,11 @@ A [`tls_certificates`](#certificates-c9caff) block (within [`tls_parameters.comm
|
|
|
730
730
|
|
|
731
731
|
<a id="spec-5af02c"></a>• [`description_spec`](#spec-5af02c) - Optional String<br>Description. Description for the certificate
|
|
732
732
|
|
|
733
|
-
<a id="stapling-c091fa"></a>• [`disable_ocsp_stapling`](#stapling-c091fa) - Optional Block<br>
|
|
733
|
+
<a id="stapling-c091fa"></a>• [`disable_ocsp_stapling`](#stapling-c091fa) - Optional Block<br>Enable this option
|
|
734
734
|
|
|
735
735
|
<a id="key-da7979"></a>• [`private_key`](#key-da7979) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#key-da7979) below.
|
|
736
736
|
|
|
737
|
-
<a id="defaults-f58bc7"></a>• [`use_system_defaults`](#defaults-f58bc7) - Optional Block<br>
|
|
737
|
+
<a id="defaults-f58bc7"></a>• [`use_system_defaults`](#defaults-f58bc7) - Optional Block<br>Enable this option
|
|
738
738
|
|
|
739
739
|
#### TLS Parameters Common Params TLS Certificates Custom Hash Algorithms
|
|
740
740
|
|
|
@@ -792,9 +792,9 @@ A [`waf_type`](#waf-type) block supports the following:
|
|
|
792
792
|
|
|
793
793
|
<a id="waf-type-app-firewall"></a>• [`app_firewall`](#waf-type-app-firewall) - Optional Block<br>List of references to the app_firewall configuration objects<br>See [App Firewall](#waf-type-app-firewall) below.
|
|
794
794
|
|
|
795
|
-
<a id="waf-type-disable-waf"></a>• [`disable_waf`](#waf-type-disable-waf) - Optional Block<br>
|
|
795
|
+
<a id="waf-type-disable-waf"></a>• [`disable_waf`](#waf-type-disable-waf) - Optional Block<br>Enable this option
|
|
796
796
|
|
|
797
|
-
<a id="waf-type-inherit-waf"></a>• [`inherit_waf`](#waf-type-inherit-waf) - Optional Block<br>
|
|
797
|
+
<a id="waf-type-inherit-waf"></a>• [`inherit_waf`](#waf-type-inherit-waf) - Optional Block<br>Enable this option
|
|
798
798
|
|
|
799
799
|
#### WAF Type App Firewall
|
|
800
800
|
|
|
@@ -68,10 +68,10 @@ resource "f5xc_virtual_network" "example" {
|
|
|
68
68
|
### Spec Argument Reference
|
|
69
69
|
|
|
70
70
|
-> **One of the following:**
|
|
71
|
-
• <a id="global-network"></a>[`global_network`](#global-network) - Optional Block<br>
|
|
71
|
+
• <a id="global-network"></a>[`global_network`](#global-network) - Optional Block<br>Enable this option
|
|
72
72
|
<br><br>• <a id="legacy-type"></a>[`legacy_type`](#legacy-type) - Optional String Defaults to `VIRTUAL_NETWORK_SITE_LOCAL`<br>Possible values are `VIRTUAL_NETWORK_SITE_LOCAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE`, `VIRTUAL_NETWORK_PER_SITE`, `VIRTUAL_NETWORK_PUBLIC`, `VIRTUAL_NETWORK_GLOBAL`, `VIRTUAL_NETWORK_SITE_SERVICE`, `VIRTUAL_NETWORK_VER_INTERNAL`, `VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE`, `VIRTUAL_NETWORK_IP_AUTO`, `VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK`, `VIRTUAL_NETWORK_SRV6_NETWORK`, `VIRTUAL_NETWORK_IP_FABRIC`, `VIRTUAL_NETWORK_SEGMENT`<br>[Enum: VIRTUAL_NETWORK_SITE_LOCAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE|VIRTUAL_NETWORK_PER_SITE|VIRTUAL_NETWORK_PUBLIC|VIRTUAL_NETWORK_GLOBAL|VIRTUAL_NETWORK_SITE_SERVICE|VIRTUAL_NETWORK_VER_INTERNAL|VIRTUAL_NETWORK_SITE_LOCAL_INSIDE_OUTSIDE|VIRTUAL_NETWORK_IP_AUTO|VIRTUAL_NETWORK_VOLTADN_PRIVATE_NETWORK|VIRTUAL_NETWORK_SRV6_NETWORK|VIRTUAL_NETWORK_IP_FABRIC|VIRTUAL_NETWORK_SEGMENT] Different types of virtual networks understood by the system Virtual-network of type VIRTUAL_NETWORK_SITE_LOCAL provides connectivity to public (outside) network. This is an insecure network and is connected to public internet via NAT Gateways/firwalls Virtual-network of this type is local to
|
|
73
|
-
<br><br>• <a id="site-local-inside-network"></a>[`site_local_inside_network`](#site-local-inside-network) - Optional Block<br>
|
|
74
|
-
<br><br>• <a id="site-local-network"></a>[`site_local_network`](#site-local-network) - Optional Block<br>
|
|
73
|
+
<br><br>• <a id="site-local-inside-network"></a>[`site_local_inside_network`](#site-local-inside-network) - Optional Block<br>Enable this option
|
|
74
|
+
<br><br>• <a id="site-local-network"></a>[`site_local_network`](#site-local-network) - Optional Block<br>Enable this option
|
|
75
75
|
|
|
76
76
|
<a id="static-routes"></a>• [`static_routes`](#static-routes) - Optional Block<br>List of static routes on the virtual network<br>See [Static Routes](#static-routes) below for details.
|
|
77
77
|
|
|
@@ -91,7 +91,7 @@ A [`static_routes`](#static-routes) block supports the following:
|
|
|
91
91
|
|
|
92
92
|
<a id="static-routes-attrs"></a>• [`attrs`](#static-routes-attrs) - Optional List Defaults to `ROUTE_ATTR_NO_OP`<br>Possible values are `ROUTE_ATTR_NO_OP`, `ROUTE_ATTR_ADVERTISE`, `ROUTE_ATTR_INSTALL_HOST`, `ROUTE_ATTR_INSTALL_FORWARDING`, `ROUTE_ATTR_MERGE_ONLY`<br>[Enum: ROUTE_ATTR_NO_OP|ROUTE_ATTR_ADVERTISE|ROUTE_ATTR_INSTALL_HOST|ROUTE_ATTR_INSTALL_FORWARDING|ROUTE_ATTR_MERGE_ONLY] List of attributes that control forwarding, dynamic routing and control plane (host) reachability
|
|
93
93
|
|
|
94
|
-
<a id="static-routes-default-gateway"></a>• [`default_gateway`](#static-routes-default-gateway) - Optional Block<br>
|
|
94
|
+
<a id="static-routes-default-gateway"></a>• [`default_gateway`](#static-routes-default-gateway) - Optional Block<br>Enable this option
|
|
95
95
|
|
|
96
96
|
<a id="static-routes-ip-address"></a>• [`ip_address`](#static-routes-ip-address) - Optional String<br>Traffic matching the IP prefixes is sent to this IP Address
|
|
97
97
|
|