@robinmordasiewicz/f5xc-terraform-mcp 3.10.2 → 3.10.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/advertise_policy.md +10 -10
- package/dist/docs/resources/alert_policy.md +9 -9
- package/dist/docs/resources/alert_receiver.md +4 -4
- package/dist/docs/resources/api_definition.md +2 -2
- package/dist/docs/resources/api_testing.md +6 -6
- package/dist/docs/resources/apm.md +8 -8
- package/dist/docs/resources/app_firewall.md +19 -19
- package/dist/docs/resources/app_setting.md +5 -5
- package/dist/docs/resources/app_type.md +3 -3
- package/dist/docs/resources/aws_tgw_site.md +50 -50
- package/dist/docs/resources/aws_vpc_site.md +66 -66
- package/dist/docs/resources/azure_vnet_site.md +93 -93
- package/dist/docs/resources/bgp.md +205 -37
- package/dist/docs/resources/bgp_routing_policy.md +7 -7
- package/dist/docs/resources/cdn_cache_rule.md +2 -2
- package/dist/docs/resources/cdn_loadbalancer.md +122 -122
- package/dist/docs/resources/cloud_connect.md +2 -2
- package/dist/docs/resources/cloud_credentials.md +2 -2
- package/dist/docs/resources/cloud_link.md +3 -3
- package/dist/docs/resources/cluster.md +18 -18
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +259 -8
- package/dist/docs/resources/dns_domain.md +2 -2
- package/dist/docs/resources/endpoint.md +5 -5
- package/dist/docs/resources/enhanced_firewall_policy.md +15 -15
- package/dist/docs/resources/external_connector.md +7 -7
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/fast_acl_rule.md +2 -2
- package/dist/docs/resources/fleet.md +25 -25
- package/dist/docs/resources/forward_proxy_policy.md +15 -15
- package/dist/docs/resources/forwarding_class.md +5 -5
- package/dist/docs/resources/gcp_vpc_site.md +37 -37
- package/dist/docs/resources/global_log_receiver.md +104 -104
- package/dist/docs/resources/healthcheck.md +2 -2
- package/dist/docs/resources/http_loadbalancer.md +287 -287
- package/dist/docs/resources/log_receiver.md +44 -825
- package/dist/docs/resources/malicious_user_mitigation.md +6 -6
- package/dist/docs/resources/nat_policy.md +10 -10
- package/dist/docs/resources/network_connector.md +9 -9
- package/dist/docs/resources/network_firewall.md +3 -3
- package/dist/docs/resources/network_interface.md +28 -28
- package/dist/docs/resources/network_policy.md +217 -38
- package/dist/docs/resources/network_policy_view.md +16 -16
- package/dist/docs/resources/nfv_service.md +26 -26
- package/dist/docs/resources/origin_pool.md +48 -48
- package/dist/docs/resources/policy_based_routing.md +8 -8
- package/dist/docs/resources/protocol_inspection.md +4 -4
- package/dist/docs/resources/proxy.md +23 -23
- package/dist/docs/resources/rate_limiter.md +1 -1
- package/dist/docs/resources/rate_limiter_policy.md +8 -8
- package/dist/docs/resources/route.md +36 -36
- package/dist/docs/resources/secret_management_access.md +8 -8
- package/dist/docs/resources/securemesh_site.md +258 -1619
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/service_policy.md +44 -44
- package/dist/docs/resources/service_policy_rule.md +37 -37
- package/dist/docs/resources/site.md +244 -322
- package/dist/docs/resources/site_mesh_group.md +8 -8
- package/dist/docs/resources/subnet.md +5 -5
- package/dist/docs/resources/tcp_loadbalancer.md +37 -37
- package/dist/docs/resources/tunnel.md +4 -4
- package/dist/docs/resources/udp_loadbalancer.md +9 -9
- package/dist/docs/resources/user_identification.md +10 -10
- package/dist/docs/resources/virtual_host.md +42 -42
- package/dist/docs/resources/virtual_network.md +4 -4
- package/dist/docs/resources/voltstack_site.md +59 -59
- package/dist/docs/resources/waf_exclusion_policy.md +5 -5
- package/dist/docs/resources/workload.md +24 -24
- package/dist/metadata/resource-metadata.json +394 -948
- package/dist/metadata/validation-patterns.json +1 -1
- package/package.json +1 -1
|
@@ -124,22 +124,22 @@ resource "f5xc_origin_pool" "example" {
|
|
|
124
124
|
<a id="advanced-options"></a>• [`advanced_options`](#advanced-options) - Optional Block Defaults to `null`<br>Configure Advanced OPTIONS for origin pool<br>See [Advanced Options](#advanced-options) below for details.
|
|
125
125
|
|
|
126
126
|
-> **One of the following:**
|
|
127
|
-
• <a id="automatic-port"></a>[`automatic_port`](#automatic-port) - Optional Block<br>
|
|
128
|
-
<br><br>• <a id="lb-port"></a>[`lb_port`](#lb-port) - Optional Block<br>
|
|
127
|
+
• <a id="automatic-port"></a>[`automatic_port`](#automatic-port) - Optional Block<br>Enable this option
|
|
128
|
+
<br><br>• <a id="lb-port"></a>[`lb_port`](#lb-port) - Optional Block<br>Enable this option
|
|
129
129
|
<br><br>• <a id="port"></a>[`port`](#port) - Optional Number<br>Endpoint service is available on this port
|
|
130
130
|
|
|
131
131
|
<a id="endpoint-selection"></a>• [`endpoint_selection`](#endpoint-selection) - Optional String Defaults to `DISTRIBUTED`<br>Possible values are `DISTRIBUTED`, `LOCAL_ONLY`, `LOCAL_PREFERRED`<br>[Enum: DISTRIBUTED|LOCAL_ONLY|LOCAL_PREFERRED] Policy for selection of endpoints from local site/remote site/both Consider both remote and local endpoints for load balancing LOCAL_ONLY: Consider only local endpoints for load balancing Enable this policy to load balance ONLY among locally discovered endpoints Prefer the local endpoints for
|
|
132
132
|
|
|
133
133
|
-> **One of the following:**
|
|
134
134
|
• <a id="health-check-port"></a>[`health_check_port`](#health-check-port) - Optional Number<br>Port used for performing health check
|
|
135
|
-
<br><br>• <a id="same-as-endpoint-port"></a>[`same_as_endpoint_port`](#same-as-endpoint-port) - Optional Block<br>
|
|
135
|
+
<br><br>• <a id="same-as-endpoint-port"></a>[`same_as_endpoint_port`](#same-as-endpoint-port) - Optional Block<br>Enable this option
|
|
136
136
|
|
|
137
137
|
<a id="healthcheck"></a>• [`healthcheck`](#healthcheck) - Optional Block<br>Reference to healthcheck configuration objects<br>See [Healthcheck](#healthcheck) below for details.
|
|
138
138
|
|
|
139
139
|
<a id="loadbalancer-algorithm"></a>• [`loadbalancer_algorithm`](#loadbalancer-algorithm) - Optional String Defaults to `ROUND_ROBIN`<br>Possible values are `ROUND_ROBIN`, `LEAST_REQUEST`, `RING_HASH`, `RANDOM`, `LB_OVERRIDE`<br>[Enum: ROUND_ROBIN|LEAST_REQUEST|RING_HASH|RANDOM|LB_OVERRIDE] Different load balancing algorithms supported When a connection to a endpoint in an upstream cluster is required, the load balancer uses loadbalancer_algorithm to determine which host is selected. - ROUND_ROBIN: ROUND_ROBIN Policy in which each healthy/available upstream endpoint is selected in
|
|
140
140
|
|
|
141
141
|
-> **One of the following:**
|
|
142
|
-
• <a id="no-tls"></a>[`no_tls`](#no-tls) - Optional Block<br>
|
|
142
|
+
• <a id="no-tls"></a>[`no_tls`](#no-tls) - Optional Block<br>Enable this option
|
|
143
143
|
|
|
144
144
|
<a id="origin-servers"></a>• [`origin_servers`](#origin-servers) - Optional Block<br>List of origin servers in this pool<br>See [Origin Servers](#origin-servers) below for details.
|
|
145
145
|
|
|
@@ -161,25 +161,25 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
161
161
|
|
|
162
162
|
An [`advanced_options`](#advanced-options) block supports the following:
|
|
163
163
|
|
|
164
|
-
<a id="advanced-options-auto-http-config"></a>• [`auto_http_config`](#advanced-options-auto-http-config) - Optional Block<br>
|
|
164
|
+
<a id="advanced-options-auto-http-config"></a>• [`auto_http_config`](#advanced-options-auto-http-config) - Optional Block<br>Enable this option
|
|
165
165
|
|
|
166
166
|
<a id="advanced-options-circuit-breaker"></a>• [`circuit_breaker`](#advanced-options-circuit-breaker) - Optional Block<br>CircuitBreaker provides a mechanism for watching failures in upstream connections or requests and if the failures reach a certain threshold, automatically fail subsequent requests which allows to apply back pressure on downstream quickly<br>See [Circuit Breaker](#advanced-options-circuit-breaker) below.
|
|
167
167
|
|
|
168
168
|
<a id="advanced-options-connection-timeout"></a>• [`connection_timeout`](#advanced-options-connection-timeout) - Optional Number Defaults to `2` Specified in milliseconds<br>The timeout for new network connections to endpoints in the cluster. The seconds
|
|
169
169
|
|
|
170
|
-
<a id="breaker-c470cf"></a>• [`default_circuit_breaker`](#breaker-c470cf) - Optional Block<br>
|
|
170
|
+
<a id="breaker-c470cf"></a>• [`default_circuit_breaker`](#breaker-c470cf) - Optional Block<br>Enable this option
|
|
171
171
|
|
|
172
|
-
<a id="breaker-222fdc"></a>• [`disable_circuit_breaker`](#breaker-222fdc) - Optional Block<br>
|
|
172
|
+
<a id="breaker-222fdc"></a>• [`disable_circuit_breaker`](#breaker-222fdc) - Optional Block<br>Enable this option
|
|
173
173
|
|
|
174
|
-
<a id="persistance-1139ff"></a>• [`disable_lb_source_ip_persistance`](#persistance-1139ff) - Optional Block<br>
|
|
174
|
+
<a id="persistance-1139ff"></a>• [`disable_lb_source_ip_persistance`](#persistance-1139ff) - Optional Block<br>Enable this option
|
|
175
175
|
|
|
176
|
-
<a id="detection-c26369"></a>• [`disable_outlier_detection`](#detection-c26369) - Optional Block<br>
|
|
176
|
+
<a id="detection-c26369"></a>• [`disable_outlier_detection`](#detection-c26369) - Optional Block<br>Enable this option
|
|
177
177
|
|
|
178
|
-
<a id="advanced-options-disable-proxy-protocol"></a>• [`disable_proxy_protocol`](#advanced-options-disable-proxy-protocol) - Optional Block<br>
|
|
178
|
+
<a id="advanced-options-disable-proxy-protocol"></a>• [`disable_proxy_protocol`](#advanced-options-disable-proxy-protocol) - Optional Block<br>Enable this option
|
|
179
179
|
|
|
180
|
-
<a id="advanced-options-disable-subsets"></a>• [`disable_subsets`](#advanced-options-disable-subsets) - Optional Block<br>
|
|
180
|
+
<a id="advanced-options-disable-subsets"></a>• [`disable_subsets`](#advanced-options-disable-subsets) - Optional Block<br>Enable this option
|
|
181
181
|
|
|
182
|
-
<a id="persistance-62e70d"></a>• [`enable_lb_source_ip_persistance`](#persistance-62e70d) - Optional Block<br>
|
|
182
|
+
<a id="persistance-62e70d"></a>• [`enable_lb_source_ip_persistance`](#persistance-62e70d) - Optional Block<br>Enable this option
|
|
183
183
|
|
|
184
184
|
<a id="advanced-options-enable-subsets"></a>• [`enable_subsets`](#advanced-options-enable-subsets) - Optional Block<br>Configure subset OPTIONS for origin pool<br>See [Enable Subsets](#advanced-options-enable-subsets) below.
|
|
185
185
|
|
|
@@ -189,15 +189,15 @@ An [`advanced_options`](#advanced-options) block supports the following:
|
|
|
189
189
|
|
|
190
190
|
<a id="advanced-options-http-idle-timeout"></a>• [`http_idle_timeout`](#advanced-options-http-idle-timeout) - Optional Number<br>The idle timeout for upstream connection pool connections. The idle timeout is defined as the period in which there are no active requests. When the idle timeout is reached the connection will be closed
|
|
191
191
|
|
|
192
|
-
<a id="advanced-options-no-panic-threshold"></a>• [`no_panic_threshold`](#advanced-options-no-panic-threshold) - Optional Block<br>
|
|
192
|
+
<a id="advanced-options-no-panic-threshold"></a>• [`no_panic_threshold`](#advanced-options-no-panic-threshold) - Optional Block<br>Enable this option
|
|
193
193
|
|
|
194
194
|
<a id="advanced-options-outlier-detection"></a>• [`outlier_detection`](#advanced-options-outlier-detection) - Optional Block<br>Outlier detection and ejection is the process of dynamically determining whether some number of hosts in an upstream cluster are performing unlike the others and removing them from the healthy load balancing set. Outlier detection is a form of passive health checking. Algorithm 1<br>See [Outlier Detection](#advanced-options-outlier-detection) below.
|
|
195
195
|
|
|
196
196
|
<a id="advanced-options-panic-threshold"></a>• [`panic_threshold`](#advanced-options-panic-threshold) - Optional Number<br>Configure a threshold (percentage of unhealthy endpoints) below which all endpoints will be considered for load balancing ignoring its health status
|
|
197
197
|
|
|
198
|
-
<a id="advanced-options-proxy-protocol-v1"></a>• [`proxy_protocol_v1`](#advanced-options-proxy-protocol-v1) - Optional Block<br>
|
|
198
|
+
<a id="advanced-options-proxy-protocol-v1"></a>• [`proxy_protocol_v1`](#advanced-options-proxy-protocol-v1) - Optional Block<br>Enable this option
|
|
199
199
|
|
|
200
|
-
<a id="advanced-options-proxy-protocol-v2"></a>• [`proxy_protocol_v2`](#advanced-options-proxy-protocol-v2) - Optional Block<br>
|
|
200
|
+
<a id="advanced-options-proxy-protocol-v2"></a>• [`proxy_protocol_v2`](#advanced-options-proxy-protocol-v2) - Optional Block<br>Enable this option
|
|
201
201
|
|
|
202
202
|
#### Advanced Options Circuit Breaker
|
|
203
203
|
|
|
@@ -217,13 +217,13 @@ A [`circuit_breaker`](#advanced-options-circuit-breaker) block (within [`advance
|
|
|
217
217
|
|
|
218
218
|
An [`enable_subsets`](#advanced-options-enable-subsets) block (within [`advanced_options`](#advanced-options)) supports the following:
|
|
219
219
|
|
|
220
|
-
<a id="endpoint-0fc3f9"></a>• [`any_endpoint`](#endpoint-0fc3f9) - Optional Block<br>
|
|
220
|
+
<a id="endpoint-0fc3f9"></a>• [`any_endpoint`](#endpoint-0fc3f9) - Optional Block<br>Enable this option
|
|
221
221
|
|
|
222
222
|
<a id="subset-276c69"></a>• [`default_subset`](#subset-276c69) - Optional Block<br>Origin Pool Default Subset. Default Subset definition<br>See [Default Subset](#subset-276c69) below.
|
|
223
223
|
|
|
224
224
|
<a id="subsets-25c75e"></a>• [`endpoint_subsets`](#subsets-25c75e) - Optional Block<br>List of subset class. Subsets class is defined using list of keys. Every unique combination of values of these keys form a subset withing the class<br>See [Endpoint Subsets](#subsets-25c75e) below.
|
|
225
225
|
|
|
226
|
-
<a id="request-49c0b8"></a>• [`fail_request`](#request-49c0b8) - Optional Block<br>
|
|
226
|
+
<a id="request-49c0b8"></a>• [`fail_request`](#request-49c0b8) - Optional Block<br>Enable this option
|
|
227
227
|
|
|
228
228
|
#### Advanced Options Enable Subsets Default Subset
|
|
229
229
|
|
|
@@ -247,13 +247,13 @@ A [`http1_config`](#advanced-options-http1-config) block (within [`advanced_opti
|
|
|
247
247
|
|
|
248
248
|
A [`header_transformation`](#transformation-1e4851) block (within [`advanced_options.http1_config`](#advanced-options-http1-config)) supports the following:
|
|
249
249
|
|
|
250
|
-
<a id="transformation-6fa15c"></a>• [`default_header_transformation`](#transformation-6fa15c) - Optional Block<br>
|
|
250
|
+
<a id="transformation-6fa15c"></a>• [`default_header_transformation`](#transformation-6fa15c) - Optional Block<br>Enable this option
|
|
251
251
|
|
|
252
|
-
<a id="transformation-c4c936"></a>• [`legacy_header_transformation`](#transformation-c4c936) - Optional Block<br>
|
|
252
|
+
<a id="transformation-c4c936"></a>• [`legacy_header_transformation`](#transformation-c4c936) - Optional Block<br>Enable this option
|
|
253
253
|
|
|
254
|
-
<a id="transformation-923ab8"></a>• [`preserve_case_header_transformation`](#transformation-923ab8) - Optional Block<br>
|
|
254
|
+
<a id="transformation-923ab8"></a>• [`preserve_case_header_transformation`](#transformation-923ab8) - Optional Block<br>Enable this option
|
|
255
255
|
|
|
256
|
-
<a id="transformation-1ce9d5"></a>• [`proper_case_header_transformation`](#transformation-1ce9d5) - Optional Block<br>
|
|
256
|
+
<a id="transformation-1ce9d5"></a>• [`proper_case_header_transformation`](#transformation-1ce9d5) - Optional Block<br>Enable this option
|
|
257
257
|
|
|
258
258
|
#### Advanced Options Http2 Options
|
|
259
259
|
|
|
@@ -321,9 +321,9 @@ A [`cbip_service`](#origin-servers-cbip-service) block (within [`origin_servers`
|
|
|
321
321
|
|
|
322
322
|
A [`consul_service`](#origin-servers-consul-service) block (within [`origin_servers`](#origin-servers)) supports the following:
|
|
323
323
|
|
|
324
|
-
<a id="network-5b2697"></a>• [`inside_network`](#network-5b2697) - Optional Block<br>
|
|
324
|
+
<a id="network-5b2697"></a>• [`inside_network`](#network-5b2697) - Optional Block<br>Enable this option
|
|
325
325
|
|
|
326
|
-
<a id="network-844fc7"></a>• [`outside_network`](#network-844fc7) - Optional Block<br>
|
|
326
|
+
<a id="network-844fc7"></a>• [`outside_network`](#network-844fc7) - Optional Block<br>Enable this option
|
|
327
327
|
|
|
328
328
|
<a id="name-e2ff9a"></a>• [`service_name`](#name-e2ff9a) - Optional String<br>Consul service name of this origin server will be listed, including cluster-ID. The format is servicename:cluster-ID
|
|
329
329
|
|
|
@@ -357,7 +357,7 @@ A [`site`](#site-a096eb) block (within [`origin_servers.consul_service.site_loca
|
|
|
357
357
|
|
|
358
358
|
A [`snat_pool`](#origin-servers-consul-service-snat-pool) block (within [`origin_servers.consul_service`](#origin-servers-consul-service)) supports the following:
|
|
359
359
|
|
|
360
|
-
<a id="pool-8eb799"></a>• [`no_snat_pool`](#pool-8eb799) - Optional Block<br>
|
|
360
|
+
<a id="pool-8eb799"></a>• [`no_snat_pool`](#pool-8eb799) - Optional Block<br>Enable this option
|
|
361
361
|
|
|
362
362
|
<a id="pool-fc27df"></a>• [`snat_pool`](#pool-fc27df) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Snat Pool](#pool-fc27df) below.
|
|
363
363
|
|
|
@@ -385,9 +385,9 @@ An [`endpoint`](#endpoint-6a2e33) block (within [`origin_servers.custom_endpoint
|
|
|
385
385
|
|
|
386
386
|
A [`k8s_service`](#origin-servers-k8s-service) block (within [`origin_servers`](#origin-servers)) supports the following:
|
|
387
387
|
|
|
388
|
-
<a id="network-698e40"></a>• [`inside_network`](#network-698e40) - Optional Block<br>
|
|
388
|
+
<a id="network-698e40"></a>• [`inside_network`](#network-698e40) - Optional Block<br>Enable this option
|
|
389
389
|
|
|
390
|
-
<a id="network-4852ec"></a>• [`outside_network`](#network-4852ec) - Optional Block<br>
|
|
390
|
+
<a id="network-4852ec"></a>• [`outside_network`](#network-4852ec) - Optional Block<br>Enable this option
|
|
391
391
|
|
|
392
392
|
<a id="origin-servers-k8s-service-protocol"></a>• [`protocol`](#origin-servers-k8s-service-protocol) - Optional String Defaults to `PROTOCOL_TCP`<br>Possible values are `PROTOCOL_TCP`, `PROTOCOL_UDP`<br>[Enum: PROTOCOL_TCP|PROTOCOL_UDP] Type of protocol - PROTOCOL_TCP: TCP - PROTOCOL_UDP: UDP
|
|
393
393
|
|
|
@@ -397,7 +397,7 @@ A [`k8s_service`](#origin-servers-k8s-service) block (within [`origin_servers`](
|
|
|
397
397
|
|
|
398
398
|
<a id="origin-servers-k8s-service-snat-pool"></a>• [`snat_pool`](#origin-servers-k8s-service-snat-pool) - Optional Block<br>SNAT Pool. SNAT Pool configuration<br>See [Snat Pool](#origin-servers-k8s-service-snat-pool) below.
|
|
399
399
|
|
|
400
|
-
<a id="networks-d41308"></a>• [`vk8s_networks`](#networks-d41308) - Optional Block<br>
|
|
400
|
+
<a id="networks-d41308"></a>• [`vk8s_networks`](#networks-d41308) - Optional Block<br>Enable this option
|
|
401
401
|
|
|
402
402
|
#### Origin Servers K8S Service Site Locator
|
|
403
403
|
|
|
@@ -425,7 +425,7 @@ A [`site`](#site-e35217) block (within [`origin_servers.k8s_service.site_locator
|
|
|
425
425
|
|
|
426
426
|
A [`snat_pool`](#origin-servers-k8s-service-snat-pool) block (within [`origin_servers.k8s_service`](#origin-servers-k8s-service)) supports the following:
|
|
427
427
|
|
|
428
|
-
<a id="pool-57d5fe"></a>• [`no_snat_pool`](#pool-57d5fe) - Optional Block<br>
|
|
428
|
+
<a id="pool-57d5fe"></a>• [`no_snat_pool`](#pool-57d5fe) - Optional Block<br>Enable this option
|
|
429
429
|
|
|
430
430
|
<a id="pool-8c0889"></a>• [`snat_pool`](#pool-8c0889) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Snat Pool](#pool-8c0889) below.
|
|
431
431
|
|
|
@@ -437,11 +437,11 @@ A [`snat_pool`](#origin-servers-k8s-service-snat-pool) block (within [`origin_se
|
|
|
437
437
|
|
|
438
438
|
A [`private_ip`](#origin-servers-private-ip) block (within [`origin_servers`](#origin-servers)) supports the following:
|
|
439
439
|
|
|
440
|
-
<a id="network-340769"></a>• [`inside_network`](#network-340769) - Optional Block<br>
|
|
440
|
+
<a id="network-340769"></a>• [`inside_network`](#network-340769) - Optional Block<br>Enable this option
|
|
441
441
|
|
|
442
442
|
<a id="origin-servers-private-ip-ip"></a>• [`ip`](#origin-servers-private-ip-ip) - Optional String<br>IP. Private IPv4 address
|
|
443
443
|
|
|
444
|
-
<a id="network-4b8cd1"></a>• [`outside_network`](#network-4b8cd1) - Optional Block<br>
|
|
444
|
+
<a id="network-4b8cd1"></a>• [`outside_network`](#network-4b8cd1) - Optional Block<br>Enable this option
|
|
445
445
|
|
|
446
446
|
<a id="origin-servers-private-ip-segment"></a>• [`segment`](#origin-servers-private-ip-segment) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Segment](#origin-servers-private-ip-segment) below.
|
|
447
447
|
|
|
@@ -485,7 +485,7 @@ A [`site`](#site-9000e8) block (within [`origin_servers.private_ip.site_locator`
|
|
|
485
485
|
|
|
486
486
|
A [`snat_pool`](#origin-servers-private-ip-snat-pool) block (within [`origin_servers.private_ip`](#origin-servers-private-ip)) supports the following:
|
|
487
487
|
|
|
488
|
-
<a id="pool-c826de"></a>• [`no_snat_pool`](#pool-c826de) - Optional Block<br>
|
|
488
|
+
<a id="pool-c826de"></a>• [`no_snat_pool`](#pool-c826de) - Optional Block<br>Enable this option
|
|
489
489
|
|
|
490
490
|
<a id="pool-cc6a33"></a>• [`snat_pool`](#pool-cc6a33) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Snat Pool](#pool-cc6a33) below.
|
|
491
491
|
|
|
@@ -499,9 +499,9 @@ A [`private_name`](#origin-servers-private-name) block (within [`origin_servers`
|
|
|
499
499
|
|
|
500
500
|
<a id="origin-servers-private-name-dns-name"></a>• [`dns_name`](#origin-servers-private-name-dns-name) - Optional String<br>DNS Name. DNS Name
|
|
501
501
|
|
|
502
|
-
<a id="network-1921f3"></a>• [`inside_network`](#network-1921f3) - Optional Block<br>
|
|
502
|
+
<a id="network-1921f3"></a>• [`inside_network`](#network-1921f3) - Optional Block<br>Enable this option
|
|
503
503
|
|
|
504
|
-
<a id="network-a1ed83"></a>• [`outside_network`](#network-a1ed83) - Optional Block<br>
|
|
504
|
+
<a id="network-a1ed83"></a>• [`outside_network`](#network-a1ed83) - Optional Block<br>Enable this option
|
|
505
505
|
|
|
506
506
|
<a id="interval-4bd915"></a>• [`refresh_interval`](#interval-4bd915) - Optional Number<br>Interval for DNS refresh in seconds. Max value is 7 days as per `HTTPS://datatracker.ietf.org/doc/HTML/rfc8767.`
|
|
507
507
|
|
|
@@ -547,7 +547,7 @@ A [`site`](#site-771c33) block (within [`origin_servers.private_name.site_locato
|
|
|
547
547
|
|
|
548
548
|
A [`snat_pool`](#origin-servers-private-name-snat-pool) block (within [`origin_servers.private_name`](#origin-servers-private-name)) supports the following:
|
|
549
549
|
|
|
550
|
-
<a id="pool-569cef"></a>• [`no_snat_pool`](#pool-569cef) - Optional Block<br>
|
|
550
|
+
<a id="pool-569cef"></a>• [`no_snat_pool`](#pool-569cef) - Optional Block<br>Enable this option
|
|
551
551
|
|
|
552
552
|
<a id="pool-b6c3f7"></a>• [`snat_pool`](#pool-b6c3f7) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Snat Pool](#pool-b6c3f7) below.
|
|
553
553
|
|
|
@@ -621,31 +621,31 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
621
621
|
|
|
622
622
|
An [`upstream_conn_pool_reuse_type`](#upstream-conn-pool-reuse-type) block supports the following:
|
|
623
623
|
|
|
624
|
-
<a id="reuse-008a14"></a>• [`disable_conn_pool_reuse`](#reuse-008a14) - Optional Block<br>
|
|
624
|
+
<a id="reuse-008a14"></a>• [`disable_conn_pool_reuse`](#reuse-008a14) - Optional Block<br>Enable this option
|
|
625
625
|
|
|
626
|
-
<a id="reuse-ad4462"></a>• [`enable_conn_pool_reuse`](#reuse-ad4462) - Optional Block<br>
|
|
626
|
+
<a id="reuse-ad4462"></a>• [`enable_conn_pool_reuse`](#reuse-ad4462) - Optional Block<br>Enable this option
|
|
627
627
|
|
|
628
628
|
#### Use TLS
|
|
629
629
|
|
|
630
630
|
An [`use_tls`](#use-tls) block supports the following:
|
|
631
631
|
|
|
632
|
-
<a id="use-tls-default-session-key-caching"></a>• [`default_session_key_caching`](#use-tls-default-session-key-caching) - Optional Block<br>
|
|
632
|
+
<a id="use-tls-default-session-key-caching"></a>• [`default_session_key_caching`](#use-tls-default-session-key-caching) - Optional Block<br>Enable this option
|
|
633
633
|
|
|
634
|
-
<a id="use-tls-disable-session-key-caching"></a>• [`disable_session_key_caching`](#use-tls-disable-session-key-caching) - Optional Block<br>
|
|
634
|
+
<a id="use-tls-disable-session-key-caching"></a>• [`disable_session_key_caching`](#use-tls-disable-session-key-caching) - Optional Block<br>Enable this option
|
|
635
635
|
|
|
636
|
-
<a id="use-tls-disable-sni"></a>• [`disable_sni`](#use-tls-disable-sni) - Optional Block<br>
|
|
636
|
+
<a id="use-tls-disable-sni"></a>• [`disable_sni`](#use-tls-disable-sni) - Optional Block<br>Enable this option
|
|
637
637
|
|
|
638
638
|
<a id="use-tls-max-session-keys"></a>• [`max_session_keys`](#use-tls-max-session-keys) - Optional Number<br>Number of session keys that are cached
|
|
639
639
|
|
|
640
|
-
<a id="use-tls-no-mtls"></a>• [`no_mtls`](#use-tls-no-mtls) - Optional Block<br>
|
|
640
|
+
<a id="use-tls-no-mtls"></a>• [`no_mtls`](#use-tls-no-mtls) - Optional Block<br>Enable this option
|
|
641
641
|
|
|
642
|
-
<a id="use-tls-skip-server-verification"></a>• [`skip_server_verification`](#use-tls-skip-server-verification) - Optional Block<br>
|
|
642
|
+
<a id="use-tls-skip-server-verification"></a>• [`skip_server_verification`](#use-tls-skip-server-verification) - Optional Block<br>Enable this option
|
|
643
643
|
|
|
644
644
|
<a id="use-tls-sni"></a>• [`sni`](#use-tls-sni) - Optional String<br>SNI value to be used
|
|
645
645
|
|
|
646
646
|
<a id="use-tls-tls-config"></a>• [`tls_config`](#use-tls-tls-config) - Optional Block<br>Defines various OPTIONS to configure TLS configuration parameters<br>See [TLS Config](#use-tls-tls-config) below.
|
|
647
647
|
|
|
648
|
-
<a id="use-tls-use-host-header-as-sni"></a>• [`use_host_header_as_sni`](#use-tls-use-host-header-as-sni) - Optional Block<br>
|
|
648
|
+
<a id="use-tls-use-host-header-as-sni"></a>• [`use_host_header_as_sni`](#use-tls-use-host-header-as-sni) - Optional Block<br>Enable this option
|
|
649
649
|
|
|
650
650
|
<a id="use-tls-use-mtls"></a>• [`use_mtls`](#use-tls-use-mtls) - Optional Block<br>mTLS Certificate. mTLS Client Certificate<br>See [Use mTLS](#use-tls-use-mtls) below.
|
|
651
651
|
|
|
@@ -653,7 +653,7 @@ An [`use_tls`](#use-tls) block supports the following:
|
|
|
653
653
|
|
|
654
654
|
<a id="use-tls-use-server-verification"></a>• [`use_server_verification`](#use-tls-use-server-verification) - Optional Block<br>TLS Validation Context for Origin Servers. Upstream TLS Validation Context<br>See [Use Server Verification](#use-tls-use-server-verification) below.
|
|
655
655
|
|
|
656
|
-
<a id="use-tls-volterra-trusted-ca"></a>• [`volterra_trusted_ca`](#use-tls-volterra-trusted-ca) - Optional Block<br>
|
|
656
|
+
<a id="use-tls-volterra-trusted-ca"></a>• [`volterra_trusted_ca`](#use-tls-volterra-trusted-ca) - Optional Block<br>Enable this option
|
|
657
657
|
|
|
658
658
|
#### Use TLS TLS Config
|
|
659
659
|
|
|
@@ -661,11 +661,11 @@ A [`tls_config`](#use-tls-tls-config) block (within [`use_tls`](#use-tls)) suppo
|
|
|
661
661
|
|
|
662
662
|
<a id="use-tls-tls-config-custom-security"></a>• [`custom_security`](#use-tls-tls-config-custom-security) - Optional Block<br>Defines TLS protocol config including min/max versions and allowed ciphers<br>See [Custom Security](#use-tls-tls-config-custom-security) below.
|
|
663
663
|
|
|
664
|
-
<a id="use-tls-tls-config-default-security"></a>• [`default_security`](#use-tls-tls-config-default-security) - Optional Block<br>
|
|
664
|
+
<a id="use-tls-tls-config-default-security"></a>• [`default_security`](#use-tls-tls-config-default-security) - Optional Block<br>Enable this option
|
|
665
665
|
|
|
666
|
-
<a id="use-tls-tls-config-low-security"></a>• [`low_security`](#use-tls-tls-config-low-security) - Optional Block<br>
|
|
666
|
+
<a id="use-tls-tls-config-low-security"></a>• [`low_security`](#use-tls-tls-config-low-security) - Optional Block<br>Enable this option
|
|
667
667
|
|
|
668
|
-
<a id="use-tls-tls-config-medium-security"></a>• [`medium_security`](#use-tls-tls-config-medium-security) - Optional Block<br>
|
|
668
|
+
<a id="use-tls-tls-config-medium-security"></a>• [`medium_security`](#use-tls-tls-config-medium-security) - Optional Block<br>Enable this option
|
|
669
669
|
|
|
670
670
|
#### Use TLS TLS Config Custom Security
|
|
671
671
|
|
|
@@ -693,11 +693,11 @@ A [`tls_certificates`](#use-tls-use-mtls-tls-certificates) block (within [`use_t
|
|
|
693
693
|
|
|
694
694
|
<a id="spec-ad9c6c"></a>• [`description_spec`](#spec-ad9c6c) - Optional String<br>Description. Description for the certificate
|
|
695
695
|
|
|
696
|
-
<a id="stapling-242d9f"></a>• [`disable_ocsp_stapling`](#stapling-242d9f) - Optional Block<br>
|
|
696
|
+
<a id="stapling-242d9f"></a>• [`disable_ocsp_stapling`](#stapling-242d9f) - Optional Block<br>Enable this option
|
|
697
697
|
|
|
698
698
|
<a id="key-dc1b14"></a>• [`private_key`](#key-dc1b14) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#key-dc1b14) below.
|
|
699
699
|
|
|
700
|
-
<a id="defaults-413d06"></a>• [`use_system_defaults`](#defaults-413d06) - Optional Block<br>
|
|
700
|
+
<a id="defaults-413d06"></a>• [`use_system_defaults`](#defaults-413d06) - Optional Block<br>Enable this option
|
|
701
701
|
|
|
702
702
|
#### Use TLS Use mTLS TLS Certificates Custom Hash Algorithms
|
|
703
703
|
|
|
@@ -40,7 +40,7 @@ resource "f5xc_policy_based_routing" "example" {
|
|
|
40
40
|
forward_proxy_pbr_rules {
|
|
41
41
|
# Configure forward_proxy_pbr_rules settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
43
|
+
# Enable this option
|
|
44
44
|
all_destinations {
|
|
45
45
|
# Configure all_destinations settings
|
|
46
46
|
}
|
|
@@ -92,9 +92,9 @@ A [`forward_proxy_pbr`](#forward-proxy-pbr) block supports the following:
|
|
|
92
92
|
|
|
93
93
|
A [`forward_proxy_pbr_rules`](#rules-67a5cc) block (within [`forward_proxy_pbr`](#forward-proxy-pbr)) supports the following:
|
|
94
94
|
|
|
95
|
-
<a id="destinations-1e0cd9"></a>• [`all_destinations`](#destinations-1e0cd9) - Optional Block<br>
|
|
95
|
+
<a id="destinations-1e0cd9"></a>• [`all_destinations`](#destinations-1e0cd9) - Optional Block<br>Enable this option
|
|
96
96
|
|
|
97
|
-
<a id="sources-4f8004"></a>• [`all_sources`](#sources-4f8004) - Optional Block<br>
|
|
97
|
+
<a id="sources-4f8004"></a>• [`all_sources`](#sources-4f8004) - Optional Block<br>Enable this option
|
|
98
98
|
|
|
99
99
|
<a id="list-a3b35a"></a>• [`forwarding_class_list`](#list-a3b35a) - Optional Block<br>Ordered list of forwarding Class to be used if no rule match<br>See [Forwarding Class List](#list-a3b35a) below.
|
|
100
100
|
|
|
@@ -160,7 +160,7 @@ A [`forwarding_class_list`](#forwarding-class-list) block supports the following
|
|
|
160
160
|
|
|
161
161
|
A [`network_pbr`](#network-pbr) block supports the following:
|
|
162
162
|
|
|
163
|
-
<a id="network-pbr-any"></a>• [`any`](#network-pbr-any) - Optional Block<br>
|
|
163
|
+
<a id="network-pbr-any"></a>• [`any`](#network-pbr-any) - Optional Block<br>Enable this option
|
|
164
164
|
|
|
165
165
|
<a id="network-pbr-label-selector"></a>• [`label_selector`](#network-pbr-label-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Label Selector](#network-pbr-label-selector) below.
|
|
166
166
|
|
|
@@ -178,13 +178,13 @@ A [`label_selector`](#network-pbr-label-selector) block (within [`network_pbr`](
|
|
|
178
178
|
|
|
179
179
|
A [`network_pbr_rules`](#network-pbr-network-pbr-rules) block (within [`network_pbr`](#network-pbr)) supports the following:
|
|
180
180
|
|
|
181
|
-
<a id="traffic-e56c3b"></a>• [`all_tcp_traffic`](#traffic-e56c3b) - Optional Block<br>
|
|
181
|
+
<a id="traffic-e56c3b"></a>• [`all_tcp_traffic`](#traffic-e56c3b) - Optional Block<br>Enable this option
|
|
182
182
|
|
|
183
|
-
<a id="traffic-5b23a8"></a>• [`all_traffic`](#traffic-5b23a8) - Optional Block<br>
|
|
183
|
+
<a id="traffic-5b23a8"></a>• [`all_traffic`](#traffic-5b23a8) - Optional Block<br>Enable this option
|
|
184
184
|
|
|
185
|
-
<a id="traffic-d923ff"></a>• [`all_udp_traffic`](#traffic-d923ff) - Optional Block<br>
|
|
185
|
+
<a id="traffic-d923ff"></a>• [`all_udp_traffic`](#traffic-d923ff) - Optional Block<br>Enable this option
|
|
186
186
|
|
|
187
|
-
<a id="network-pbr-network-pbr-rules-any"></a>• [`any`](#network-pbr-network-pbr-rules-any) - Optional Block<br>
|
|
187
|
+
<a id="network-pbr-network-pbr-rules-any"></a>• [`any`](#network-pbr-network-pbr-rules-any) - Optional Block<br>Enable this option
|
|
188
188
|
|
|
189
189
|
<a id="applications-913ddd"></a>• [`applications`](#applications-913ddd) - Optional Block<br>Applications. Application protocols like HTTP, SNMP<br>See [Applications](#applications-913ddd) below.
|
|
190
190
|
|
|
@@ -36,7 +36,7 @@ resource "f5xc_protocol_inspection" "example" {
|
|
|
36
36
|
enable_disable_compliance_checks {
|
|
37
37
|
# Configure enable_disable_compliance_checks settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
39
|
+
# Enable this option
|
|
40
40
|
disable_compliance_checks {
|
|
41
41
|
# Configure disable_compliance_checks settings
|
|
42
42
|
}
|
|
@@ -86,7 +86,7 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
86
86
|
|
|
87
87
|
An [`enable_disable_compliance_checks`](#enable-disable-compliance-checks) block supports the following:
|
|
88
88
|
|
|
89
|
-
<a id="checks-6c8eaa"></a>• [`disable_compliance_checks`](#checks-6c8eaa) - Optional Block<br>
|
|
89
|
+
<a id="checks-6c8eaa"></a>• [`disable_compliance_checks`](#checks-6c8eaa) - Optional Block<br>Enable this option
|
|
90
90
|
|
|
91
91
|
<a id="checks-68d3e1"></a>• [`enable_compliance_checks`](#checks-68d3e1) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Enable Compliance Checks](#checks-68d3e1) below.
|
|
92
92
|
|
|
@@ -104,9 +104,9 @@ An [`enable_compliance_checks`](#checks-68d3e1) block (within [`enable_disable_c
|
|
|
104
104
|
|
|
105
105
|
An [`enable_disable_signatures`](#enable-disable-signatures) block supports the following:
|
|
106
106
|
|
|
107
|
-
<a id="signature-dd5a1e"></a>• [`disable_signature`](#signature-dd5a1e) - Optional Block<br>
|
|
107
|
+
<a id="signature-dd5a1e"></a>• [`disable_signature`](#signature-dd5a1e) - Optional Block<br>Enable this option
|
|
108
108
|
|
|
109
|
-
<a id="signature-359b96"></a>• [`enable_signature`](#signature-359b96) - Optional Block<br>
|
|
109
|
+
<a id="signature-359b96"></a>• [`enable_signature`](#signature-359b96) - Optional Block<br>Enable this option
|
|
110
110
|
|
|
111
111
|
#### Timeouts
|
|
112
112
|
|
|
@@ -61,21 +61,21 @@ resource "f5xc_proxy" "example" {
|
|
|
61
61
|
<a id="connection-timeout"></a>• [`connection_timeout`](#connection-timeout) - Optional Number Defaults to `2000` Specified in milliseconds<br>The timeout for new network connections to upstream server. The (2 seconds)
|
|
62
62
|
|
|
63
63
|
-> **One of the following:**
|
|
64
|
-
• <a id="do-not-advertise"></a>[`do_not_advertise`](#do-not-advertise) - Optional Block<br>
|
|
64
|
+
• <a id="do-not-advertise"></a>[`do_not_advertise`](#do-not-advertise) - Optional Block<br>Enable this option
|
|
65
65
|
<br><br>• <a id="site-virtual-sites"></a>[`site_virtual_sites`](#site-virtual-sites) - Optional Block<br>Defines a way to advertise a VIP on specific sites
|
|
66
66
|
|
|
67
67
|
-> **One of the following:**
|
|
68
68
|
• <a id="dynamic-proxy"></a>[`dynamic_proxy`](#dynamic-proxy) - Optional Block<br>DynamicProxyType<br>See [Dynamic Proxy](#dynamic-proxy) below for details.
|
|
69
69
|
<br><br>• <a id="http-proxy"></a>[`http_proxy`](#http-proxy) - Optional Block<br>HTTP Connect Proxy. Parameters for HTTP Connect Proxy
|
|
70
70
|
|
|
71
|
-
<a id="no-forward-proxy-policy"></a>• [`no_forward_proxy_policy`](#no-forward-proxy-policy) - Optional Block<br>
|
|
71
|
+
<a id="no-forward-proxy-policy"></a>• [`no_forward_proxy_policy`](#no-forward-proxy-policy) - Optional Block<br>Enable this option
|
|
72
72
|
|
|
73
73
|
-> **One of the following:**
|
|
74
|
-
• <a id="no-interception"></a>[`no_interception`](#no-interception) - Optional Block<br>
|
|
74
|
+
• <a id="no-interception"></a>[`no_interception`](#no-interception) - Optional Block<br>Enable this option
|
|
75
75
|
|
|
76
76
|
-> **One of the following:**
|
|
77
|
-
• <a id="site-local-inside-network"></a>[`site_local_inside_network`](#site-local-inside-network) - Optional Block<br>
|
|
78
|
-
<br><br>• <a id="site-local-network"></a>[`site_local_network`](#site-local-network) - Optional Block<br>
|
|
77
|
+
• <a id="site-local-inside-network"></a>[`site_local_inside_network`](#site-local-inside-network) - Optional Block<br>Enable this option
|
|
78
|
+
<br><br>• <a id="site-local-network"></a>[`site_local_network`](#site-local-network) - Optional Block<br>Enable this option
|
|
79
79
|
|
|
80
80
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
81
81
|
|
|
@@ -109,11 +109,11 @@ A [`forward_proxy_policies`](#policies-42e2f7) block (within [`active_forward_pr
|
|
|
109
109
|
|
|
110
110
|
A [`dynamic_proxy`](#dynamic-proxy) block supports the following:
|
|
111
111
|
|
|
112
|
-
<a id="dynamic-proxy-disable-dns-masquerade"></a>• [`disable_dns_masquerade`](#dynamic-proxy-disable-dns-masquerade) - Optional Block<br>
|
|
112
|
+
<a id="dynamic-proxy-disable-dns-masquerade"></a>• [`disable_dns_masquerade`](#dynamic-proxy-disable-dns-masquerade) - Optional Block<br>Enable this option
|
|
113
113
|
|
|
114
114
|
<a id="dynamic-proxy-domains"></a>• [`domains`](#dynamic-proxy-domains) - Optional List<br>List of Domains to be proxied. Wildcard hosts are supported in the suffix or prefix form Supported Domains and search order: 1. Exact Domain names: `www.example.com.` 2
|
|
115
115
|
|
|
116
|
-
<a id="dynamic-proxy-enable-dns-masquerade"></a>• [`enable_dns_masquerade`](#dynamic-proxy-enable-dns-masquerade) - Optional Block<br>
|
|
116
|
+
<a id="dynamic-proxy-enable-dns-masquerade"></a>• [`enable_dns_masquerade`](#dynamic-proxy-enable-dns-masquerade) - Optional Block<br>Enable this option
|
|
117
117
|
|
|
118
118
|
<a id="dynamic-proxy-http-proxy"></a>• [`http_proxy`](#dynamic-proxy-http-proxy) - Optional Block<br>Dynamic HTTP Proxy Type. Parameters for dynamic HTTP proxy<br>See [HTTP Proxy](#dynamic-proxy-http-proxy) below.
|
|
119
119
|
|
|
@@ -139,9 +139,9 @@ A [`more_option`](#dynamic-proxy-http-proxy-more-option) block (within [`dynamic
|
|
|
139
139
|
|
|
140
140
|
<a id="pages-241bd8"></a>• [`disable_default_error_pages`](#pages-241bd8) - Optional Bool<br>Disable the use of default F5XC error pages
|
|
141
141
|
|
|
142
|
-
<a id="normalize-343080"></a>• [`disable_path_normalize`](#normalize-343080) - Optional Block<br>
|
|
142
|
+
<a id="normalize-343080"></a>• [`disable_path_normalize`](#normalize-343080) - Optional Block<br>Enable this option
|
|
143
143
|
|
|
144
|
-
<a id="normalize-19a976"></a>• [`enable_path_normalize`](#normalize-19a976) - Optional Block<br>
|
|
144
|
+
<a id="normalize-19a976"></a>• [`enable_path_normalize`](#normalize-19a976) - Optional Block<br>Enable this option
|
|
145
145
|
|
|
146
146
|
<a id="timeout-14c486"></a>• [`idle_timeout`](#timeout-14c486) - Optional Number<br>The amount of time that a stream can exist without upstream or downstream activity, in milliseconds. The stream is terminated with a HTTP 504 (Gateway Timeout) error code if no upstream response header has been received, otherwise the stream is reset
|
|
147
147
|
|
|
@@ -255,9 +255,9 @@ A [`more_option`](#dynamic-proxy-https-proxy-more-option) block (within [`dynami
|
|
|
255
255
|
|
|
256
256
|
<a id="pages-9edd65"></a>• [`disable_default_error_pages`](#pages-9edd65) - Optional Bool<br>Disable the use of default F5XC error pages
|
|
257
257
|
|
|
258
|
-
<a id="normalize-780e38"></a>• [`disable_path_normalize`](#normalize-780e38) - Optional Block<br>
|
|
258
|
+
<a id="normalize-780e38"></a>• [`disable_path_normalize`](#normalize-780e38) - Optional Block<br>Enable this option
|
|
259
259
|
|
|
260
|
-
<a id="normalize-a240ab"></a>• [`enable_path_normalize`](#normalize-a240ab) - Optional Block<br>
|
|
260
|
+
<a id="normalize-a240ab"></a>• [`enable_path_normalize`](#normalize-a240ab) - Optional Block<br>Enable this option
|
|
261
261
|
|
|
262
262
|
<a id="timeout-1062ad"></a>• [`idle_timeout`](#timeout-1062ad) - Optional Number<br>The amount of time that a stream can exist without upstream or downstream activity, in milliseconds. The stream is terminated with a HTTP 504 (Gateway Timeout) error code if no upstream response header has been received, otherwise the stream is reset
|
|
263
263
|
|
|
@@ -355,7 +355,7 @@ A [`more_option`](#dynamic-proxy-https-proxy-more-option) block (within [`dynami
|
|
|
355
355
|
|
|
356
356
|
A [`tls_params`](#dynamic-proxy-https-proxy-tls-params) block (within [`dynamic_proxy.https_proxy`](#dynamic-proxy-https-proxy)) supports the following:
|
|
357
357
|
|
|
358
|
-
<a id="mtls-1872dc"></a>• [`no_mtls`](#mtls-1872dc) - Optional Block<br>
|
|
358
|
+
<a id="mtls-1872dc"></a>• [`no_mtls`](#mtls-1872dc) - Optional Block<br>Enable this option
|
|
359
359
|
|
|
360
360
|
<a id="certificates-6f0e81"></a>• [`tls_certificates`](#certificates-6f0e81) - Optional Block<br>Users can add one or more certificates that share the same set of domains. For example, domain.com and \*.domain.com - but use different signature algorithms<br>See [TLS Certificates](#certificates-6f0e81) below.
|
|
361
361
|
|
|
@@ -417,7 +417,7 @@ A [`sni_proxy`](#dynamic-proxy-sni-proxy) block (within [`dynamic_proxy`](#dynam
|
|
|
417
417
|
|
|
418
418
|
A [`http_proxy`](#http-proxy) block supports the following:
|
|
419
419
|
|
|
420
|
-
<a id="http-proxy-enable-http"></a>• [`enable_http`](#http-proxy-enable-http) - Optional Block<br>
|
|
420
|
+
<a id="http-proxy-enable-http"></a>• [`enable_http`](#http-proxy-enable-http) - Optional Block<br>Enable this option
|
|
421
421
|
|
|
422
422
|
<a id="http-proxy-more-option"></a>• [`more_option`](#http-proxy-more-option) - Optional Block<br>Defines various OPTIONS to define a route<br>See [More Option](#http-proxy-more-option) below.
|
|
423
423
|
|
|
@@ -433,9 +433,9 @@ A [`more_option`](#http-proxy-more-option) block (within [`http_proxy`](#http-pr
|
|
|
433
433
|
|
|
434
434
|
<a id="pages-159caf"></a>• [`disable_default_error_pages`](#pages-159caf) - Optional Bool<br>Disable the use of default F5XC error pages
|
|
435
435
|
|
|
436
|
-
<a id="normalize-3090b6"></a>• [`disable_path_normalize`](#normalize-3090b6) - Optional Block<br>
|
|
436
|
+
<a id="normalize-3090b6"></a>• [`disable_path_normalize`](#normalize-3090b6) - Optional Block<br>Enable this option
|
|
437
437
|
|
|
438
|
-
<a id="normalize-8562f8"></a>• [`enable_path_normalize`](#normalize-8562f8) - Optional Block<br>
|
|
438
|
+
<a id="normalize-8562f8"></a>• [`enable_path_normalize`](#normalize-8562f8) - Optional Block<br>Enable this option
|
|
439
439
|
|
|
440
440
|
<a id="http-proxy-more-option-idle-timeout"></a>• [`idle_timeout`](#http-proxy-more-option-idle-timeout) - Optional Number<br>The amount of time that a stream can exist without upstream or downstream activity, in milliseconds. The stream is terminated with a HTTP 504 (Gateway Timeout) error code if no upstream response header has been received, otherwise the stream is reset
|
|
441
441
|
|
|
@@ -555,7 +555,7 @@ An [`advertise_where`](#site-virtual-sites-advertise-where) block (within [`site
|
|
|
555
555
|
|
|
556
556
|
<a id="site-virtual-sites-advertise-where-site"></a>• [`site`](#site-virtual-sites-advertise-where-site) - Optional Block<br>Defines a reference to a CE site along with network type and an optional IP address where a load balancer could be advertised<br>See [Site](#site-virtual-sites-advertise-where-site) below.
|
|
557
557
|
|
|
558
|
-
<a id="port-7cb8fb"></a>• [`use_default_port`](#port-7cb8fb) - Optional Block<br>
|
|
558
|
+
<a id="port-7cb8fb"></a>• [`use_default_port`](#port-7cb8fb) - Optional Block<br>Enable this option
|
|
559
559
|
|
|
560
560
|
<a id="site-7107b1"></a>• [`virtual_site`](#site-7107b1) - Optional Block<br>Defines a reference to a customer site virtual site along with network type where a load balancer could be advertised<br>See [Virtual Site](#site-7107b1) below.
|
|
561
561
|
|
|
@@ -609,15 +609,15 @@ A [`tls_intercept`](#tls-intercept) block supports the following:
|
|
|
609
609
|
|
|
610
610
|
<a id="tls-intercept-custom-certificate"></a>• [`custom_certificate`](#tls-intercept-custom-certificate) - Optional Block<br>TLS Certificate. Handle to fetch certificate and key<br>See [Custom Certificate](#tls-intercept-custom-certificate) below.
|
|
611
611
|
|
|
612
|
-
<a id="tls-intercept-enable-for-all-domains"></a>• [`enable_for_all_domains`](#tls-intercept-enable-for-all-domains) - Optional Block<br>
|
|
612
|
+
<a id="tls-intercept-enable-for-all-domains"></a>• [`enable_for_all_domains`](#tls-intercept-enable-for-all-domains) - Optional Block<br>Enable this option
|
|
613
613
|
|
|
614
614
|
<a id="tls-intercept-policy"></a>• [`policy`](#tls-intercept-policy) - Optional Block<br>Policy to enable or disable TLS interception<br>See [Policy](#tls-intercept-policy) below.
|
|
615
615
|
|
|
616
616
|
<a id="tls-intercept-trusted-ca-url"></a>• [`trusted_ca_url`](#tls-intercept-trusted-ca-url) - Optional String<br>Custom Root CA Certificate for validating upstream server certificate
|
|
617
617
|
|
|
618
|
-
<a id="tls-intercept-volterra-certificate"></a>• [`volterra_certificate`](#tls-intercept-volterra-certificate) - Optional Block<br>
|
|
618
|
+
<a id="tls-intercept-volterra-certificate"></a>• [`volterra_certificate`](#tls-intercept-volterra-certificate) - Optional Block<br>Enable this option
|
|
619
619
|
|
|
620
|
-
<a id="tls-intercept-volterra-trusted-ca"></a>• [`volterra_trusted_ca`](#tls-intercept-volterra-trusted-ca) - Optional Block<br>
|
|
620
|
+
<a id="tls-intercept-volterra-trusted-ca"></a>• [`volterra_trusted_ca`](#tls-intercept-volterra-trusted-ca) - Optional Block<br>Enable this option
|
|
621
621
|
|
|
622
622
|
#### TLS Intercept Custom Certificate
|
|
623
623
|
|
|
@@ -629,11 +629,11 @@ A [`custom_certificate`](#tls-intercept-custom-certificate) block (within [`tls_
|
|
|
629
629
|
|
|
630
630
|
<a id="spec-309e16"></a>• [`description_spec`](#spec-309e16) - Optional String<br>Description. Description for the certificate
|
|
631
631
|
|
|
632
|
-
<a id="stapling-e452bc"></a>• [`disable_ocsp_stapling`](#stapling-e452bc) - Optional Block<br>
|
|
632
|
+
<a id="stapling-e452bc"></a>• [`disable_ocsp_stapling`](#stapling-e452bc) - Optional Block<br>Enable this option
|
|
633
633
|
|
|
634
634
|
<a id="key-64ce0d"></a>• [`private_key`](#key-64ce0d) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#key-64ce0d) below.
|
|
635
635
|
|
|
636
|
-
<a id="defaults-a85c93"></a>• [`use_system_defaults`](#defaults-a85c93) - Optional Block<br>
|
|
636
|
+
<a id="defaults-a85c93"></a>• [`use_system_defaults`](#defaults-a85c93) - Optional Block<br>Enable this option
|
|
637
637
|
|
|
638
638
|
#### TLS Intercept Custom Certificate Custom Hash Algorithms
|
|
639
639
|
|
|
@@ -667,11 +667,11 @@ A [`policy`](#tls-intercept-policy) block (within [`tls_intercept`](#tls-interce
|
|
|
667
667
|
|
|
668
668
|
An [`interception_rules`](#tls-intercept-policy-interception-rules) block (within [`tls_intercept.policy`](#tls-intercept-policy)) supports the following:
|
|
669
669
|
|
|
670
|
-
<a id="interception-f6b646"></a>• [`disable_interception`](#interception-f6b646) - Optional Block<br>
|
|
670
|
+
<a id="interception-f6b646"></a>• [`disable_interception`](#interception-f6b646) - Optional Block<br>Enable this option
|
|
671
671
|
|
|
672
672
|
<a id="match-42a3da"></a>• [`domain_match`](#match-42a3da) - Optional Block<br>Domains. Domains names<br>See [Domain Match](#match-42a3da) below.
|
|
673
673
|
|
|
674
|
-
<a id="interception-e82eca"></a>• [`enable_interception`](#interception-e82eca) - Optional Block<br>
|
|
674
|
+
<a id="interception-e82eca"></a>• [`enable_interception`](#interception-e82eca) - Optional Block<br>Enable this option
|
|
675
675
|
|
|
676
676
|
#### TLS Intercept Policy Interception Rules Domain Match
|
|
677
677
|
|
|
@@ -79,7 +79,7 @@ A [`limits`](#limits) block supports the following:
|
|
|
79
79
|
|
|
80
80
|
<a id="limits-burst-multiplier"></a>• [`burst_multiplier`](#limits-burst-multiplier) - Optional Number<br>The maximum burst of requests to accommodate, expressed as a multiple of the rate
|
|
81
81
|
|
|
82
|
-
<a id="limits-disabled"></a>• [`disabled`](#limits-disabled) - Optional Block<br>
|
|
82
|
+
<a id="limits-disabled"></a>• [`disabled`](#limits-disabled) - Optional Block<br>Enable this option
|
|
83
83
|
|
|
84
84
|
<a id="limits-leaky-bucket"></a>• [`leaky_bucket`](#limits-leaky-bucket) - Optional Block<br>Leaky-Bucket is the default rate limiter algorithm for F5
|
|
85
85
|
|
|
@@ -63,7 +63,7 @@ resource "f5xc_rate_limiter_policy" "example" {
|
|
|
63
63
|
### Spec Argument Reference
|
|
64
64
|
|
|
65
65
|
-> **One of the following:**
|
|
66
|
-
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>
|
|
66
|
+
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>Enable this option
|
|
67
67
|
<br><br>• <a id="server-name"></a>[`server_name`](#server-name) - Optional String<br>The expected name of the server. The actual names for the server are extracted from the HTTP Host header and the name of the virtual_host for the request
|
|
68
68
|
<br><br>• <a id="server-name-matcher"></a>[`server_name_matcher`](#server-name-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Server Name Matcher](#server-name-matcher) below for details.
|
|
69
69
|
<br><br>• <a id="server-selector"></a>[`server_selector`](#server-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Server Selector](#server-selector) below for details.
|
|
@@ -100,19 +100,19 @@ A [`metadata`](#rules-metadata) block (within [`rules`](#rules)) supports the fo
|
|
|
100
100
|
|
|
101
101
|
A [`spec`](#rules-spec) block (within [`rules`](#rules)) supports the following:
|
|
102
102
|
|
|
103
|
-
<a id="rules-spec-any-asn"></a>• [`any_asn`](#rules-spec-any-asn) - Optional Block<br>
|
|
103
|
+
<a id="rules-spec-any-asn"></a>• [`any_asn`](#rules-spec-any-asn) - Optional Block<br>Enable this option
|
|
104
104
|
|
|
105
|
-
<a id="rules-spec-any-country"></a>• [`any_country`](#rules-spec-any-country) - Optional Block<br>
|
|
105
|
+
<a id="rules-spec-any-country"></a>• [`any_country`](#rules-spec-any-country) - Optional Block<br>Enable this option
|
|
106
106
|
|
|
107
|
-
<a id="rules-spec-any-ip"></a>• [`any_ip`](#rules-spec-any-ip) - Optional Block<br>
|
|
107
|
+
<a id="rules-spec-any-ip"></a>• [`any_ip`](#rules-spec-any-ip) - Optional Block<br>Enable this option
|
|
108
108
|
|
|
109
|
-
<a id="rules-spec-apply-rate-limiter"></a>• [`apply_rate_limiter`](#rules-spec-apply-rate-limiter) - Optional Block<br>
|
|
109
|
+
<a id="rules-spec-apply-rate-limiter"></a>• [`apply_rate_limiter`](#rules-spec-apply-rate-limiter) - Optional Block<br>Enable this option
|
|
110
110
|
|
|
111
111
|
<a id="rules-spec-asn-list"></a>• [`asn_list`](#rules-spec-asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#rules-spec-asn-list) below.
|
|
112
112
|
|
|
113
113
|
<a id="rules-spec-asn-matcher"></a>• [`asn_matcher`](#rules-spec-asn-matcher) - Optional Block<br>Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#rules-spec-asn-matcher) below.
|
|
114
114
|
|
|
115
|
-
<a id="rules-spec-bypass-rate-limiter"></a>• [`bypass_rate_limiter`](#rules-spec-bypass-rate-limiter) - Optional Block<br>
|
|
115
|
+
<a id="rules-spec-bypass-rate-limiter"></a>• [`bypass_rate_limiter`](#rules-spec-bypass-rate-limiter) - Optional Block<br>Enable this option
|
|
116
116
|
|
|
117
117
|
<a id="rules-spec-country-list"></a>• [`country_list`](#rules-spec-country-list) - Optional Block<br>Country Codes List. List of Country Codes to match against<br>See [Country List](#rules-spec-country-list) below.
|
|
118
118
|
|
|
@@ -186,9 +186,9 @@ A [`domain_matcher`](#rules-spec-domain-matcher) block (within [`rules.spec`](#r
|
|
|
186
186
|
|
|
187
187
|
A [`headers`](#rules-spec-headers) block (within [`rules.spec`](#rules-spec)) supports the following:
|
|
188
188
|
|
|
189
|
-
<a id="rules-spec-headers-check-not-present"></a>• [`check_not_present`](#rules-spec-headers-check-not-present) - Optional Block<br>
|
|
189
|
+
<a id="rules-spec-headers-check-not-present"></a>• [`check_not_present`](#rules-spec-headers-check-not-present) - Optional Block<br>Enable this option
|
|
190
190
|
|
|
191
|
-
<a id="rules-spec-headers-check-present"></a>• [`check_present`](#rules-spec-headers-check-present) - Optional Block<br>
|
|
191
|
+
<a id="rules-spec-headers-check-present"></a>• [`check_present`](#rules-spec-headers-check-present) - Optional Block<br>Enable this option
|
|
192
192
|
|
|
193
193
|
<a id="rules-spec-headers-invert-matcher"></a>• [`invert_matcher`](#rules-spec-headers-invert-matcher) - Optional Bool<br>Invert Header Matcher. Invert the match result
|
|
194
194
|
|