@robinmordasiewicz/f5xc-terraform-mcp 3.10.2 → 3.10.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/advertise_policy.md +10 -10
- package/dist/docs/resources/alert_policy.md +9 -9
- package/dist/docs/resources/alert_receiver.md +4 -4
- package/dist/docs/resources/api_definition.md +2 -2
- package/dist/docs/resources/api_testing.md +6 -6
- package/dist/docs/resources/apm.md +8 -8
- package/dist/docs/resources/app_firewall.md +19 -19
- package/dist/docs/resources/app_setting.md +5 -5
- package/dist/docs/resources/app_type.md +3 -3
- package/dist/docs/resources/aws_tgw_site.md +50 -50
- package/dist/docs/resources/aws_vpc_site.md +66 -66
- package/dist/docs/resources/azure_vnet_site.md +93 -93
- package/dist/docs/resources/bgp.md +205 -37
- package/dist/docs/resources/bgp_routing_policy.md +7 -7
- package/dist/docs/resources/cdn_cache_rule.md +2 -2
- package/dist/docs/resources/cdn_loadbalancer.md +122 -122
- package/dist/docs/resources/cloud_connect.md +2 -2
- package/dist/docs/resources/cloud_credentials.md +2 -2
- package/dist/docs/resources/cloud_link.md +3 -3
- package/dist/docs/resources/cluster.md +18 -18
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +259 -8
- package/dist/docs/resources/dns_domain.md +2 -2
- package/dist/docs/resources/endpoint.md +5 -5
- package/dist/docs/resources/enhanced_firewall_policy.md +15 -15
- package/dist/docs/resources/external_connector.md +7 -7
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/fast_acl_rule.md +2 -2
- package/dist/docs/resources/fleet.md +25 -25
- package/dist/docs/resources/forward_proxy_policy.md +15 -15
- package/dist/docs/resources/forwarding_class.md +5 -5
- package/dist/docs/resources/gcp_vpc_site.md +37 -37
- package/dist/docs/resources/global_log_receiver.md +104 -104
- package/dist/docs/resources/healthcheck.md +2 -2
- package/dist/docs/resources/http_loadbalancer.md +287 -287
- package/dist/docs/resources/log_receiver.md +44 -825
- package/dist/docs/resources/malicious_user_mitigation.md +6 -6
- package/dist/docs/resources/nat_policy.md +10 -10
- package/dist/docs/resources/network_connector.md +9 -9
- package/dist/docs/resources/network_firewall.md +3 -3
- package/dist/docs/resources/network_interface.md +28 -28
- package/dist/docs/resources/network_policy.md +217 -38
- package/dist/docs/resources/network_policy_view.md +16 -16
- package/dist/docs/resources/nfv_service.md +26 -26
- package/dist/docs/resources/origin_pool.md +48 -48
- package/dist/docs/resources/policy_based_routing.md +8 -8
- package/dist/docs/resources/protocol_inspection.md +4 -4
- package/dist/docs/resources/proxy.md +23 -23
- package/dist/docs/resources/rate_limiter.md +1 -1
- package/dist/docs/resources/rate_limiter_policy.md +8 -8
- package/dist/docs/resources/route.md +36 -36
- package/dist/docs/resources/secret_management_access.md +8 -8
- package/dist/docs/resources/securemesh_site.md +258 -1619
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/service_policy.md +44 -44
- package/dist/docs/resources/service_policy_rule.md +37 -37
- package/dist/docs/resources/site.md +244 -322
- package/dist/docs/resources/site_mesh_group.md +8 -8
- package/dist/docs/resources/subnet.md +5 -5
- package/dist/docs/resources/tcp_loadbalancer.md +37 -37
- package/dist/docs/resources/tunnel.md +4 -4
- package/dist/docs/resources/udp_loadbalancer.md +9 -9
- package/dist/docs/resources/user_identification.md +10 -10
- package/dist/docs/resources/virtual_host.md +42 -42
- package/dist/docs/resources/virtual_network.md +4 -4
- package/dist/docs/resources/voltstack_site.md +59 -59
- package/dist/docs/resources/waf_exclusion_policy.md +5 -5
- package/dist/docs/resources/workload.md +24 -24
- package/dist/metadata/resource-metadata.json +394 -948
- package/dist/metadata/validation-patterns.json +1 -1
- package/package.json +1 -1
|
@@ -32,11 +32,11 @@ resource "f5xc_segment" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
# [OneOf: disable, enable]
|
|
35
|
+
# [OneOf: disable, enable] Enable this option
|
|
36
36
|
disable {
|
|
37
37
|
# Configure disable settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
39
|
+
# Enable this option
|
|
40
40
|
enable {
|
|
41
41
|
# Configure enable settings
|
|
42
42
|
}
|
|
@@ -56,14 +56,14 @@ resource "f5xc_segment" "example" {
|
|
|
56
56
|
|
|
57
57
|
<a id="description"></a>• [`description`](#description) - Optional String<br>Human readable description for the object
|
|
58
58
|
|
|
59
|
-
<a id="disable"></a>• [`disable`](#disable) - Optional Block<br>
|
|
59
|
+
<a id="disable"></a>• [`disable`](#disable) - Optional Block<br>Enable this option
|
|
60
60
|
|
|
61
61
|
<a id="labels"></a>• [`labels`](#labels) - Optional Map<br>Labels is a user defined key value map that can be attached to resources for organization and filtering
|
|
62
62
|
|
|
63
63
|
### Spec Argument Reference
|
|
64
64
|
|
|
65
65
|
-> **One of the following:**
|
|
66
|
-
• <a id="enable"></a>[`enable`](#enable) - Optional Block<br>
|
|
66
|
+
• <a id="enable"></a>[`enable`](#enable) - Optional Block<br>Enable this option
|
|
67
67
|
|
|
68
68
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
69
69
|
|
|
@@ -69,14 +69,14 @@ resource "f5xc_service_policy" "example" {
|
|
|
69
69
|
### Spec Argument Reference
|
|
70
70
|
|
|
71
71
|
-> **One of the following:**
|
|
72
|
-
• <a id="allow-all-requests"></a>[`allow_all_requests`](#allow-all-requests) - Optional Block<br>
|
|
72
|
+
• <a id="allow-all-requests"></a>[`allow_all_requests`](#allow-all-requests) - Optional Block<br>Enable this option
|
|
73
73
|
<br><br>• <a id="allow-list"></a>[`allow_list`](#allow-list) - Optional Block<br>List of sources. A request belongs to this list if it satisfies any of the match criteria<br>See [Allow List](#allow-list) below for details.
|
|
74
|
-
<br><br>• <a id="deny-all-requests"></a>[`deny_all_requests`](#deny-all-requests) - Optional Block<br>
|
|
74
|
+
<br><br>• <a id="deny-all-requests"></a>[`deny_all_requests`](#deny-all-requests) - Optional Block<br>Enable this option
|
|
75
75
|
<br><br>• <a id="deny-list"></a>[`deny_list`](#deny-list) - Optional Block<br>List of sources. A request belongs to this list if it satisfies any of the match criteria<br>See [Deny List](#deny-list) below for details.
|
|
76
76
|
<br><br>• <a id="rule-list"></a>[`rule_list`](#rule-list) - Optional Block<br>List of rules. The order of evaluation of the rules depends on the rule combining algorithm<br>See [Rule List](#rule-list) below for details.
|
|
77
77
|
|
|
78
78
|
-> **One of the following:**
|
|
79
|
-
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>
|
|
79
|
+
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>Enable this option
|
|
80
80
|
<br><br>• <a id="server-name"></a>[`server_name`](#server-name) - Optional String<br>The expected name of the server to which the request API is directed. The actual names for the server are extracted from the HTTP Host header and the name of the virtual_host to which the request is directed. If the request is
|
|
81
81
|
<br><br>• <a id="server-name-matcher"></a>[`server_name_matcher`](#server-name-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions
|
|
82
82
|
<br><br>• <a id="server-selector"></a>[`server_selector`](#server-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects
|
|
@@ -101,11 +101,11 @@ An [`allow_list`](#allow-list) block supports the following:
|
|
|
101
101
|
|
|
102
102
|
<a id="allow-list-country-list"></a>• [`country_list`](#allow-list-country-list) - Optional List Defaults to `COUNTRY_NONE`<br>Possible values are `COUNTRY_NONE`, `COUNTRY_AD`, `COUNTRY_AE`, `COUNTRY_AF`, `COUNTRY_AG`, `COUNTRY_AI`, `COUNTRY_AL`, `COUNTRY_AM`, `COUNTRY_AN`, `COUNTRY_AO`, `COUNTRY_AQ`, `COUNTRY_AR`, `COUNTRY_AS`, `COUNTRY_AT`, `COUNTRY_AU`, `COUNTRY_AW`, `COUNTRY_AX`, `COUNTRY_AZ`, `COUNTRY_BA`, `COUNTRY_BB`, `COUNTRY_BD`, `COUNTRY_BE`, `COUNTRY_BF`, `COUNTRY_BG`, `COUNTRY_BH`, `COUNTRY_BI`, `COUNTRY_BJ`, `COUNTRY_BL`, `COUNTRY_BM`, `COUNTRY_BN`, `COUNTRY_BO`, `COUNTRY_BQ`, `COUNTRY_BR`, `COUNTRY_BS`, `COUNTRY_BT`, `COUNTRY_BV`, `COUNTRY_BW`, `COUNTRY_BY`, `COUNTRY_BZ`, `COUNTRY_CA`, `COUNTRY_CC`, `COUNTRY_CD`, `COUNTRY_CF`, `COUNTRY_CG`, `COUNTRY_CH`, `COUNTRY_CI`, `COUNTRY_CK`, `COUNTRY_CL`, `COUNTRY_CM`, `COUNTRY_CN`, `COUNTRY_CO`, `COUNTRY_CR`, `COUNTRY_CS`, `COUNTRY_CU`, `COUNTRY_CV`, `COUNTRY_CW`, `COUNTRY_CX`, `COUNTRY_CY`, `COUNTRY_CZ`, `COUNTRY_DE`, `COUNTRY_DJ`, `COUNTRY_DK`, `COUNTRY_DM`, `COUNTRY_DO`, `COUNTRY_DZ`, `COUNTRY_EC`, `COUNTRY_EE`, `COUNTRY_EG`, `COUNTRY_EH`, `COUNTRY_ER`, `COUNTRY_ES`, `COUNTRY_ET`, `COUNTRY_FI`, `COUNTRY_FJ`, `COUNTRY_FK`, `COUNTRY_FM`, `COUNTRY_FO`, `COUNTRY_FR`, `COUNTRY_GA`, `COUNTRY_GB`, `COUNTRY_GD`, `COUNTRY_GE`, `COUNTRY_GF`, `COUNTRY_GG`, `COUNTRY_GH`, `COUNTRY_GI`, `COUNTRY_GL`, `COUNTRY_GM`, `COUNTRY_GN`, `COUNTRY_GP`, `COUNTRY_GQ`, `COUNTRY_GR`, `COUNTRY_GS`, `COUNTRY_GT`, `COUNTRY_GU`, `COUNTRY_GW`, `COUNTRY_GY`, `COUNTRY_HK`, `COUNTRY_HM`, `COUNTRY_HN`, `COUNTRY_HR`, `COUNTRY_HT`, `COUNTRY_HU`, `COUNTRY_ID`, `COUNTRY_IE`, `COUNTRY_IL`, `COUNTRY_IM`, `COUNTRY_IN`, `COUNTRY_IO`, `COUNTRY_IQ`, `COUNTRY_IR`, `COUNTRY_IS`, `COUNTRY_IT`, `COUNTRY_JE`, `COUNTRY_JM`, `COUNTRY_JO`, `COUNTRY_JP`, `COUNTRY_KE`, `COUNTRY_KG`, `COUNTRY_KH`, `COUNTRY_KI`, `COUNTRY_KM`, `COUNTRY_KN`, `COUNTRY_KP`, `COUNTRY_KR`, `COUNTRY_KW`, `COUNTRY_KY`, `COUNTRY_KZ`, `COUNTRY_LA`, `COUNTRY_LB`, `COUNTRY_LC`, `COUNTRY_LI`, `COUNTRY_LK`, `COUNTRY_LR`, `COUNTRY_LS`, `COUNTRY_LT`, `COUNTRY_LU`, `COUNTRY_LV`, `COUNTRY_LY`, `COUNTRY_MA`, `COUNTRY_MC`, `COUNTRY_MD`, `COUNTRY_ME`, `COUNTRY_MF`, `COUNTRY_MG`, `COUNTRY_MH`, `COUNTRY_MK`, `COUNTRY_ML`, `COUNTRY_MM`, `COUNTRY_MN`, `COUNTRY_MO`, `COUNTRY_MP`, `COUNTRY_MQ`, `COUNTRY_MR`, `COUNTRY_MS`, `COUNTRY_MT`, `COUNTRY_MU`, `COUNTRY_MV`, `COUNTRY_MW`, `COUNTRY_MX`, `COUNTRY_MY`, `COUNTRY_MZ`, `COUNTRY_NA`, `COUNTRY_NC`, `COUNTRY_NE`, `COUNTRY_NF`, `COUNTRY_NG`, `COUNTRY_NI`, `COUNTRY_NL`, `COUNTRY_NO`, `COUNTRY_NP`, `COUNTRY_NR`, `COUNTRY_NU`, `COUNTRY_NZ`, `COUNTRY_OM`, `COUNTRY_PA`, `COUNTRY_PE`, `COUNTRY_PF`, `COUNTRY_PG`, `COUNTRY_PH`, `COUNTRY_PK`, `COUNTRY_PL`, `COUNTRY_PM`, `COUNTRY_PN`, `COUNTRY_PR`, `COUNTRY_PS`, `COUNTRY_PT`, `COUNTRY_PW`, `COUNTRY_PY`, `COUNTRY_QA`, `COUNTRY_RE`, `COUNTRY_RO`, `COUNTRY_RS`, `COUNTRY_RU`, `COUNTRY_RW`, `COUNTRY_SA`, `COUNTRY_SB`, `COUNTRY_SC`, `COUNTRY_SD`, `COUNTRY_SE`, `COUNTRY_SG`, `COUNTRY_SH`, `COUNTRY_SI`, `COUNTRY_SJ`, `COUNTRY_SK`, `COUNTRY_SL`, `COUNTRY_SM`, `COUNTRY_SN`, `COUNTRY_SO`, `COUNTRY_SR`, `COUNTRY_SS`, `COUNTRY_ST`, `COUNTRY_SV`, `COUNTRY_SX`, `COUNTRY_SY`, `COUNTRY_SZ`, `COUNTRY_TC`, `COUNTRY_TD`, `COUNTRY_TF`, `COUNTRY_TG`, `COUNTRY_TH`, `COUNTRY_TJ`, `COUNTRY_TK`, `COUNTRY_TL`, `COUNTRY_TM`, `COUNTRY_TN`, `COUNTRY_TO`, `COUNTRY_TR`, `COUNTRY_TT`, `COUNTRY_TV`, `COUNTRY_TW`, `COUNTRY_TZ`, `COUNTRY_UA`, `COUNTRY_UG`, `COUNTRY_UM`, `COUNTRY_US`, `COUNTRY_UY`, `COUNTRY_UZ`, `COUNTRY_VA`, `COUNTRY_VC`, `COUNTRY_VE`, `COUNTRY_VG`, `COUNTRY_VI`, `COUNTRY_VN`, `COUNTRY_VU`, `COUNTRY_WF`, `COUNTRY_WS`, `COUNTRY_XK`, `COUNTRY_XT`, `COUNTRY_YE`, `COUNTRY_YT`, `COUNTRY_ZA`, `COUNTRY_ZM`, `COUNTRY_ZW`<br>[Enum: COUNTRY_NONE|COUNTRY_AD|COUNTRY_AE|COUNTRY_AF|COUNTRY_AG|COUNTRY_AI|COUNTRY_AL|COUNTRY_AM|COUNTRY_AN|COUNTRY_AO|COUNTRY_AQ|COUNTRY_AR|COUNTRY_AS|COUNTRY_AT|COUNTRY_AU|COUNTRY_AW|COUNTRY_AX|COUNTRY_AZ|COUNTRY_BA|COUNTRY_BB|COUNTRY_BD|COUNTRY_BE|COUNTRY_BF|COUNTRY_BG|COUNTRY_BH|COUNTRY_BI|COUNTRY_BJ|COUNTRY_BL|COUNTRY_BM|COUNTRY_BN|COUNTRY_BO|COUNTRY_BQ|COUNTRY_BR|COUNTRY_BS|COUNTRY_BT|COUNTRY_BV|COUNTRY_BW|COUNTRY_BY|COUNTRY_BZ|COUNTRY_CA|COUNTRY_CC|COUNTRY_CD|COUNTRY_CF|COUNTRY_CG|COUNTRY_CH|COUNTRY_CI|COUNTRY_CK|COUNTRY_CL|COUNTRY_CM|COUNTRY_CN|COUNTRY_CO|COUNTRY_CR|COUNTRY_CS|COUNTRY_CU|COUNTRY_CV|COUNTRY_CW|COUNTRY_CX|COUNTRY_CY|COUNTRY_CZ|COUNTRY_DE|COUNTRY_DJ|COUNTRY_DK|COUNTRY_DM|COUNTRY_DO|COUNTRY_DZ|COUNTRY_EC|COUNTRY_EE|COUNTRY_EG|COUNTRY_EH|COUNTRY_ER|COUNTRY_ES|COUNTRY_ET|COUNTRY_FI|COUNTRY_FJ|COUNTRY_FK|COUNTRY_FM|COUNTRY_FO|COUNTRY_FR|COUNTRY_GA|COUNTRY_GB|COUNTRY_GD|COUNTRY_GE|COUNTRY_GF|COUNTRY_GG|COUNTRY_GH|COUNTRY_GI|COUNTRY_GL|COUNTRY_GM|COUNTRY_GN|COUNTRY_GP|COUNTRY_GQ|COUNTRY_GR|COUNTRY_GS|COUNTRY_GT|COUNTRY_GU|COUNTRY_GW|COUNTRY_GY|COUNTRY_HK|COUNTRY_HM|COUNTRY_HN|COUNTRY_HR|COUNTRY_HT|COUNTRY_HU|COUNTRY_ID|COUNTRY_IE|COUNTRY_IL|COUNTRY_IM|COUNTRY_IN|COUNTRY_IO|COUNTRY_IQ|COUNTRY_IR|COUNTRY_IS|COUNTRY_IT|COUNTRY_JE|COUNTRY_JM|COUNTRY_JO|COUNTRY_JP|COUNTRY_KE|COUNTRY_KG|COUNTRY_KH|COUNTRY_KI|COUNTRY_KM|COUNTRY_KN|COUNTRY_KP|COUNTRY_KR|COUNTRY_KW|COUNTRY_KY|COUNTRY_KZ|COUNTRY_LA|COUNTRY_LB|COUNTRY_LC|COUNTRY_LI|COUNTRY_LK|COUNTRY_LR|COUNTRY_LS|COUNTRY_LT|COUNTRY_LU|COUNTRY_LV|COUNTRY_LY|COUNTRY_MA|COUNTRY_MC|COUNTRY_MD|COUNTRY_ME|COUNTRY_MF|COUNTRY_MG|COUNTRY_MH|COUNTRY_MK|COUNTRY_ML|COUNTRY_MM|COUNTRY_MN|COUNTRY_MO|COUNTRY_MP|COUNTRY_MQ|COUNTRY_MR|COUNTRY_MS|COUNTRY_MT|COUNTRY_MU|COUNTRY_MV|COUNTRY_MW|COUNTRY_MX|COUNTRY_MY|COUNTRY_MZ|COUNTRY_NA|COUNTRY_NC|COUNTRY_NE|COUNTRY_NF|COUNTRY_NG|COUNTRY_NI|COUNTRY_NL|COUNTRY_NO|COUNTRY_NP|COUNTRY_NR|COUNTRY_NU|COUNTRY_NZ|COUNTRY_OM|COUNTRY_PA|COUNTRY_PE|COUNTRY_PF|COUNTRY_PG|COUNTRY_PH|COUNTRY_PK|COUNTRY_PL|COUNTRY_PM|COUNTRY_PN|COUNTRY_PR|COUNTRY_PS|COUNTRY_PT|COUNTRY_PW|COUNTRY_PY|COUNTRY_QA|COUNTRY_RE|COUNTRY_RO|COUNTRY_RS|COUNTRY_RU|COUNTRY_RW|COUNTRY_SA|COUNTRY_SB|COUNTRY_SC|COUNTRY_SD|COUNTRY_SE|COUNTRY_SG|COUNTRY_SH|COUNTRY_SI|COUNTRY_SJ|COUNTRY_SK|COUNTRY_SL|COUNTRY_SM|COUNTRY_SN|COUNTRY_SO|COUNTRY_SR|COUNTRY_SS|COUNTRY_ST|COUNTRY_SV|COUNTRY_SX|COUNTRY_SY|COUNTRY_SZ|COUNTRY_TC|COUNTRY_TD|COUNTRY_TF|COUNTRY_TG|COUNTRY_TH|COUNTRY_TJ|COUNTRY_TK|COUNTRY_TL|COUNTRY_TM|COUNTRY_TN|COUNTRY_TO|COUNTRY_TR|COUNTRY_TT|COUNTRY_TV|COUNTRY_TW|COUNTRY_TZ|COUNTRY_UA|COUNTRY_UG|COUNTRY_UM|COUNTRY_US|COUNTRY_UY|COUNTRY_UZ|COUNTRY_VA|COUNTRY_VC|COUNTRY_VE|COUNTRY_VG|COUNTRY_VI|COUNTRY_VN|COUNTRY_VU|COUNTRY_WF|COUNTRY_WS|COUNTRY_XK|COUNTRY_XT|COUNTRY_YE|COUNTRY_YT|COUNTRY_ZA|COUNTRY_ZM|COUNTRY_ZW] Addresses that belong to one of the countries in the given list The country is obtained by performing a lookup for the source IPv4 Address in a GeoIP DB
|
|
103
103
|
|
|
104
|
-
<a id="allow-list-default-action-allow"></a>• [`default_action_allow`](#allow-list-default-action-allow) - Optional Block<br>
|
|
104
|
+
<a id="allow-list-default-action-allow"></a>• [`default_action_allow`](#allow-list-default-action-allow) - Optional Block<br>Enable this option
|
|
105
105
|
|
|
106
|
-
<a id="allow-list-default-action-deny"></a>• [`default_action_deny`](#allow-list-default-action-deny) - Optional Block<br>
|
|
106
|
+
<a id="allow-list-default-action-deny"></a>• [`default_action_deny`](#allow-list-default-action-deny) - Optional Block<br>Enable this option
|
|
107
107
|
|
|
108
|
-
<a id="allow-list-default-action-next-policy"></a>• [`default_action_next_policy`](#allow-list-default-action-next-policy) - Optional Block<br>
|
|
108
|
+
<a id="allow-list-default-action-next-policy"></a>• [`default_action_next_policy`](#allow-list-default-action-next-policy) - Optional Block<br>Enable this option
|
|
109
109
|
|
|
110
110
|
<a id="allow-list-ip-prefix-set"></a>• [`ip_prefix_set`](#allow-list-ip-prefix-set) - Optional Block<br>Addresses that are covered by the prefixes in the given ip_prefix_set<br>See [IP Prefix Set](#allow-list-ip-prefix-set) below.
|
|
111
111
|
|
|
@@ -157,11 +157,11 @@ A [`deny_list`](#deny-list) block supports the following:
|
|
|
157
157
|
|
|
158
158
|
<a id="deny-list-country-list"></a>• [`country_list`](#deny-list-country-list) - Optional List Defaults to `COUNTRY_NONE`<br>Possible values are `COUNTRY_NONE`, `COUNTRY_AD`, `COUNTRY_AE`, `COUNTRY_AF`, `COUNTRY_AG`, `COUNTRY_AI`, `COUNTRY_AL`, `COUNTRY_AM`, `COUNTRY_AN`, `COUNTRY_AO`, `COUNTRY_AQ`, `COUNTRY_AR`, `COUNTRY_AS`, `COUNTRY_AT`, `COUNTRY_AU`, `COUNTRY_AW`, `COUNTRY_AX`, `COUNTRY_AZ`, `COUNTRY_BA`, `COUNTRY_BB`, `COUNTRY_BD`, `COUNTRY_BE`, `COUNTRY_BF`, `COUNTRY_BG`, `COUNTRY_BH`, `COUNTRY_BI`, `COUNTRY_BJ`, `COUNTRY_BL`, `COUNTRY_BM`, `COUNTRY_BN`, `COUNTRY_BO`, `COUNTRY_BQ`, `COUNTRY_BR`, `COUNTRY_BS`, `COUNTRY_BT`, `COUNTRY_BV`, `COUNTRY_BW`, `COUNTRY_BY`, `COUNTRY_BZ`, `COUNTRY_CA`, `COUNTRY_CC`, `COUNTRY_CD`, `COUNTRY_CF`, `COUNTRY_CG`, `COUNTRY_CH`, `COUNTRY_CI`, `COUNTRY_CK`, `COUNTRY_CL`, `COUNTRY_CM`, `COUNTRY_CN`, `COUNTRY_CO`, `COUNTRY_CR`, `COUNTRY_CS`, `COUNTRY_CU`, `COUNTRY_CV`, `COUNTRY_CW`, `COUNTRY_CX`, `COUNTRY_CY`, `COUNTRY_CZ`, `COUNTRY_DE`, `COUNTRY_DJ`, `COUNTRY_DK`, `COUNTRY_DM`, `COUNTRY_DO`, `COUNTRY_DZ`, `COUNTRY_EC`, `COUNTRY_EE`, `COUNTRY_EG`, `COUNTRY_EH`, `COUNTRY_ER`, `COUNTRY_ES`, `COUNTRY_ET`, `COUNTRY_FI`, `COUNTRY_FJ`, `COUNTRY_FK`, `COUNTRY_FM`, `COUNTRY_FO`, `COUNTRY_FR`, `COUNTRY_GA`, `COUNTRY_GB`, `COUNTRY_GD`, `COUNTRY_GE`, `COUNTRY_GF`, `COUNTRY_GG`, `COUNTRY_GH`, `COUNTRY_GI`, `COUNTRY_GL`, `COUNTRY_GM`, `COUNTRY_GN`, `COUNTRY_GP`, `COUNTRY_GQ`, `COUNTRY_GR`, `COUNTRY_GS`, `COUNTRY_GT`, `COUNTRY_GU`, `COUNTRY_GW`, `COUNTRY_GY`, `COUNTRY_HK`, `COUNTRY_HM`, `COUNTRY_HN`, `COUNTRY_HR`, `COUNTRY_HT`, `COUNTRY_HU`, `COUNTRY_ID`, `COUNTRY_IE`, `COUNTRY_IL`, `COUNTRY_IM`, `COUNTRY_IN`, `COUNTRY_IO`, `COUNTRY_IQ`, `COUNTRY_IR`, `COUNTRY_IS`, `COUNTRY_IT`, `COUNTRY_JE`, `COUNTRY_JM`, `COUNTRY_JO`, `COUNTRY_JP`, `COUNTRY_KE`, `COUNTRY_KG`, `COUNTRY_KH`, `COUNTRY_KI`, `COUNTRY_KM`, `COUNTRY_KN`, `COUNTRY_KP`, `COUNTRY_KR`, `COUNTRY_KW`, `COUNTRY_KY`, `COUNTRY_KZ`, `COUNTRY_LA`, `COUNTRY_LB`, `COUNTRY_LC`, `COUNTRY_LI`, `COUNTRY_LK`, `COUNTRY_LR`, `COUNTRY_LS`, `COUNTRY_LT`, `COUNTRY_LU`, `COUNTRY_LV`, `COUNTRY_LY`, `COUNTRY_MA`, `COUNTRY_MC`, `COUNTRY_MD`, `COUNTRY_ME`, `COUNTRY_MF`, `COUNTRY_MG`, `COUNTRY_MH`, `COUNTRY_MK`, `COUNTRY_ML`, `COUNTRY_MM`, `COUNTRY_MN`, `COUNTRY_MO`, `COUNTRY_MP`, `COUNTRY_MQ`, `COUNTRY_MR`, `COUNTRY_MS`, `COUNTRY_MT`, `COUNTRY_MU`, `COUNTRY_MV`, `COUNTRY_MW`, `COUNTRY_MX`, `COUNTRY_MY`, `COUNTRY_MZ`, `COUNTRY_NA`, `COUNTRY_NC`, `COUNTRY_NE`, `COUNTRY_NF`, `COUNTRY_NG`, `COUNTRY_NI`, `COUNTRY_NL`, `COUNTRY_NO`, `COUNTRY_NP`, `COUNTRY_NR`, `COUNTRY_NU`, `COUNTRY_NZ`, `COUNTRY_OM`, `COUNTRY_PA`, `COUNTRY_PE`, `COUNTRY_PF`, `COUNTRY_PG`, `COUNTRY_PH`, `COUNTRY_PK`, `COUNTRY_PL`, `COUNTRY_PM`, `COUNTRY_PN`, `COUNTRY_PR`, `COUNTRY_PS`, `COUNTRY_PT`, `COUNTRY_PW`, `COUNTRY_PY`, `COUNTRY_QA`, `COUNTRY_RE`, `COUNTRY_RO`, `COUNTRY_RS`, `COUNTRY_RU`, `COUNTRY_RW`, `COUNTRY_SA`, `COUNTRY_SB`, `COUNTRY_SC`, `COUNTRY_SD`, `COUNTRY_SE`, `COUNTRY_SG`, `COUNTRY_SH`, `COUNTRY_SI`, `COUNTRY_SJ`, `COUNTRY_SK`, `COUNTRY_SL`, `COUNTRY_SM`, `COUNTRY_SN`, `COUNTRY_SO`, `COUNTRY_SR`, `COUNTRY_SS`, `COUNTRY_ST`, `COUNTRY_SV`, `COUNTRY_SX`, `COUNTRY_SY`, `COUNTRY_SZ`, `COUNTRY_TC`, `COUNTRY_TD`, `COUNTRY_TF`, `COUNTRY_TG`, `COUNTRY_TH`, `COUNTRY_TJ`, `COUNTRY_TK`, `COUNTRY_TL`, `COUNTRY_TM`, `COUNTRY_TN`, `COUNTRY_TO`, `COUNTRY_TR`, `COUNTRY_TT`, `COUNTRY_TV`, `COUNTRY_TW`, `COUNTRY_TZ`, `COUNTRY_UA`, `COUNTRY_UG`, `COUNTRY_UM`, `COUNTRY_US`, `COUNTRY_UY`, `COUNTRY_UZ`, `COUNTRY_VA`, `COUNTRY_VC`, `COUNTRY_VE`, `COUNTRY_VG`, `COUNTRY_VI`, `COUNTRY_VN`, `COUNTRY_VU`, `COUNTRY_WF`, `COUNTRY_WS`, `COUNTRY_XK`, `COUNTRY_XT`, `COUNTRY_YE`, `COUNTRY_YT`, `COUNTRY_ZA`, `COUNTRY_ZM`, `COUNTRY_ZW`<br>[Enum: COUNTRY_NONE|COUNTRY_AD|COUNTRY_AE|COUNTRY_AF|COUNTRY_AG|COUNTRY_AI|COUNTRY_AL|COUNTRY_AM|COUNTRY_AN|COUNTRY_AO|COUNTRY_AQ|COUNTRY_AR|COUNTRY_AS|COUNTRY_AT|COUNTRY_AU|COUNTRY_AW|COUNTRY_AX|COUNTRY_AZ|COUNTRY_BA|COUNTRY_BB|COUNTRY_BD|COUNTRY_BE|COUNTRY_BF|COUNTRY_BG|COUNTRY_BH|COUNTRY_BI|COUNTRY_BJ|COUNTRY_BL|COUNTRY_BM|COUNTRY_BN|COUNTRY_BO|COUNTRY_BQ|COUNTRY_BR|COUNTRY_BS|COUNTRY_BT|COUNTRY_BV|COUNTRY_BW|COUNTRY_BY|COUNTRY_BZ|COUNTRY_CA|COUNTRY_CC|COUNTRY_CD|COUNTRY_CF|COUNTRY_CG|COUNTRY_CH|COUNTRY_CI|COUNTRY_CK|COUNTRY_CL|COUNTRY_CM|COUNTRY_CN|COUNTRY_CO|COUNTRY_CR|COUNTRY_CS|COUNTRY_CU|COUNTRY_CV|COUNTRY_CW|COUNTRY_CX|COUNTRY_CY|COUNTRY_CZ|COUNTRY_DE|COUNTRY_DJ|COUNTRY_DK|COUNTRY_DM|COUNTRY_DO|COUNTRY_DZ|COUNTRY_EC|COUNTRY_EE|COUNTRY_EG|COUNTRY_EH|COUNTRY_ER|COUNTRY_ES|COUNTRY_ET|COUNTRY_FI|COUNTRY_FJ|COUNTRY_FK|COUNTRY_FM|COUNTRY_FO|COUNTRY_FR|COUNTRY_GA|COUNTRY_GB|COUNTRY_GD|COUNTRY_GE|COUNTRY_GF|COUNTRY_GG|COUNTRY_GH|COUNTRY_GI|COUNTRY_GL|COUNTRY_GM|COUNTRY_GN|COUNTRY_GP|COUNTRY_GQ|COUNTRY_GR|COUNTRY_GS|COUNTRY_GT|COUNTRY_GU|COUNTRY_GW|COUNTRY_GY|COUNTRY_HK|COUNTRY_HM|COUNTRY_HN|COUNTRY_HR|COUNTRY_HT|COUNTRY_HU|COUNTRY_ID|COUNTRY_IE|COUNTRY_IL|COUNTRY_IM|COUNTRY_IN|COUNTRY_IO|COUNTRY_IQ|COUNTRY_IR|COUNTRY_IS|COUNTRY_IT|COUNTRY_JE|COUNTRY_JM|COUNTRY_JO|COUNTRY_JP|COUNTRY_KE|COUNTRY_KG|COUNTRY_KH|COUNTRY_KI|COUNTRY_KM|COUNTRY_KN|COUNTRY_KP|COUNTRY_KR|COUNTRY_KW|COUNTRY_KY|COUNTRY_KZ|COUNTRY_LA|COUNTRY_LB|COUNTRY_LC|COUNTRY_LI|COUNTRY_LK|COUNTRY_LR|COUNTRY_LS|COUNTRY_LT|COUNTRY_LU|COUNTRY_LV|COUNTRY_LY|COUNTRY_MA|COUNTRY_MC|COUNTRY_MD|COUNTRY_ME|COUNTRY_MF|COUNTRY_MG|COUNTRY_MH|COUNTRY_MK|COUNTRY_ML|COUNTRY_MM|COUNTRY_MN|COUNTRY_MO|COUNTRY_MP|COUNTRY_MQ|COUNTRY_MR|COUNTRY_MS|COUNTRY_MT|COUNTRY_MU|COUNTRY_MV|COUNTRY_MW|COUNTRY_MX|COUNTRY_MY|COUNTRY_MZ|COUNTRY_NA|COUNTRY_NC|COUNTRY_NE|COUNTRY_NF|COUNTRY_NG|COUNTRY_NI|COUNTRY_NL|COUNTRY_NO|COUNTRY_NP|COUNTRY_NR|COUNTRY_NU|COUNTRY_NZ|COUNTRY_OM|COUNTRY_PA|COUNTRY_PE|COUNTRY_PF|COUNTRY_PG|COUNTRY_PH|COUNTRY_PK|COUNTRY_PL|COUNTRY_PM|COUNTRY_PN|COUNTRY_PR|COUNTRY_PS|COUNTRY_PT|COUNTRY_PW|COUNTRY_PY|COUNTRY_QA|COUNTRY_RE|COUNTRY_RO|COUNTRY_RS|COUNTRY_RU|COUNTRY_RW|COUNTRY_SA|COUNTRY_SB|COUNTRY_SC|COUNTRY_SD|COUNTRY_SE|COUNTRY_SG|COUNTRY_SH|COUNTRY_SI|COUNTRY_SJ|COUNTRY_SK|COUNTRY_SL|COUNTRY_SM|COUNTRY_SN|COUNTRY_SO|COUNTRY_SR|COUNTRY_SS|COUNTRY_ST|COUNTRY_SV|COUNTRY_SX|COUNTRY_SY|COUNTRY_SZ|COUNTRY_TC|COUNTRY_TD|COUNTRY_TF|COUNTRY_TG|COUNTRY_TH|COUNTRY_TJ|COUNTRY_TK|COUNTRY_TL|COUNTRY_TM|COUNTRY_TN|COUNTRY_TO|COUNTRY_TR|COUNTRY_TT|COUNTRY_TV|COUNTRY_TW|COUNTRY_TZ|COUNTRY_UA|COUNTRY_UG|COUNTRY_UM|COUNTRY_US|COUNTRY_UY|COUNTRY_UZ|COUNTRY_VA|COUNTRY_VC|COUNTRY_VE|COUNTRY_VG|COUNTRY_VI|COUNTRY_VN|COUNTRY_VU|COUNTRY_WF|COUNTRY_WS|COUNTRY_XK|COUNTRY_XT|COUNTRY_YE|COUNTRY_YT|COUNTRY_ZA|COUNTRY_ZM|COUNTRY_ZW] Addresses that belong to one of the countries in the given list The country is obtained by performing a lookup for the source IPv4 Address in a GeoIP DB
|
|
159
159
|
|
|
160
|
-
<a id="deny-list-default-action-allow"></a>• [`default_action_allow`](#deny-list-default-action-allow) - Optional Block<br>
|
|
160
|
+
<a id="deny-list-default-action-allow"></a>• [`default_action_allow`](#deny-list-default-action-allow) - Optional Block<br>Enable this option
|
|
161
161
|
|
|
162
|
-
<a id="deny-list-default-action-deny"></a>• [`default_action_deny`](#deny-list-default-action-deny) - Optional Block<br>
|
|
162
|
+
<a id="deny-list-default-action-deny"></a>• [`default_action_deny`](#deny-list-default-action-deny) - Optional Block<br>Enable this option
|
|
163
163
|
|
|
164
|
-
<a id="deny-list-default-action-next-policy"></a>• [`default_action_next_policy`](#deny-list-default-action-next-policy) - Optional Block<br>
|
|
164
|
+
<a id="deny-list-default-action-next-policy"></a>• [`default_action_next_policy`](#deny-list-default-action-next-policy) - Optional Block<br>Enable this option
|
|
165
165
|
|
|
166
166
|
<a id="deny-list-ip-prefix-set"></a>• [`ip_prefix_set`](#deny-list-ip-prefix-set) - Optional Block<br>Addresses that are covered by the prefixes in the given ip_prefix_set<br>See [IP Prefix Set](#deny-list-ip-prefix-set) below.
|
|
167
167
|
|
|
@@ -231,11 +231,11 @@ A [`spec`](#rule-list-rules-spec) block (within [`rule_list.rules`](#rule-list-r
|
|
|
231
231
|
|
|
232
232
|
<a id="rule-list-rules-spec-action"></a>• [`action`](#rule-list-rules-spec-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY] The rule action determines the disposition of the input request API. If a policy matches a rule with an ALLOW action, the processing of the request proceeds forward. If it matches a rule with a DENY action, the processing of the request is terminated and an appropriate message/code returned to
|
|
233
233
|
|
|
234
|
-
<a id="rule-list-rules-spec-any-asn"></a>• [`any_asn`](#rule-list-rules-spec-any-asn) - Optional Block<br>
|
|
234
|
+
<a id="rule-list-rules-spec-any-asn"></a>• [`any_asn`](#rule-list-rules-spec-any-asn) - Optional Block<br>Enable this option
|
|
235
235
|
|
|
236
|
-
<a id="rule-list-rules-spec-any-client"></a>• [`any_client`](#rule-list-rules-spec-any-client) - Optional Block<br>
|
|
236
|
+
<a id="rule-list-rules-spec-any-client"></a>• [`any_client`](#rule-list-rules-spec-any-client) - Optional Block<br>Enable this option
|
|
237
237
|
|
|
238
|
-
<a id="rule-list-rules-spec-any-ip"></a>• [`any_ip`](#rule-list-rules-spec-any-ip) - Optional Block<br>
|
|
238
|
+
<a id="rule-list-rules-spec-any-ip"></a>• [`any_ip`](#rule-list-rules-spec-any-ip) - Optional Block<br>Enable this option
|
|
239
239
|
|
|
240
240
|
<a id="rule-list-rules-spec-api-group-matcher"></a>• [`api_group_matcher`](#rule-list-rules-spec-api-group-matcher) - Optional Block<br>Matcher specifies a list of values for matching an input string. The match is considered successful if the input value is present in the list. The result of the match is inverted if invert_matcher is true<br>See [API Group Matcher](#rule-list-rules-spec-api-group-matcher) below.
|
|
241
241
|
|
|
@@ -307,9 +307,9 @@ An [`api_group_matcher`](#rule-list-rules-spec-api-group-matcher) block (within
|
|
|
307
307
|
|
|
308
308
|
An [`arg_matchers`](#rule-list-rules-spec-arg-matchers) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
309
309
|
|
|
310
|
-
<a id="present-2c642d"></a>• [`check_not_present`](#present-2c642d) - Optional Block<br>
|
|
310
|
+
<a id="present-2c642d"></a>• [`check_not_present`](#present-2c642d) - Optional Block<br>Enable this option
|
|
311
311
|
|
|
312
|
-
<a id="present-643cdb"></a>• [`check_present`](#present-643cdb) - Optional Block<br>
|
|
312
|
+
<a id="present-643cdb"></a>• [`check_present`](#present-643cdb) - Optional Block<br>Enable this option
|
|
313
313
|
|
|
314
314
|
<a id="matcher-0461ac"></a>• [`invert_matcher`](#matcher-0461ac) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
315
315
|
|
|
@@ -357,9 +357,9 @@ A [`body_matcher`](#rule-list-rules-spec-body-matcher) block (within [`rule_list
|
|
|
357
357
|
|
|
358
358
|
A [`bot_action`](#rule-list-rules-spec-bot-action) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
359
359
|
|
|
360
|
-
<a id="processing-583231"></a>• [`bot_skip_processing`](#processing-583231) - Optional Block<br>
|
|
360
|
+
<a id="processing-583231"></a>• [`bot_skip_processing`](#processing-583231) - Optional Block<br>Enable this option
|
|
361
361
|
|
|
362
|
-
<a id="rule-list-rules-spec-bot-action-none"></a>• [`none`](#rule-list-rules-spec-bot-action-none) - Optional Block<br>
|
|
362
|
+
<a id="rule-list-rules-spec-bot-action-none"></a>• [`none`](#rule-list-rules-spec-bot-action-none) - Optional Block<br>Enable this option
|
|
363
363
|
|
|
364
364
|
#### Rule List Rules Spec Client Name Matcher
|
|
365
365
|
|
|
@@ -381,9 +381,9 @@ A [`client_selector`](#rule-list-rules-spec-client-selector) block (within [`rul
|
|
|
381
381
|
|
|
382
382
|
A [`cookie_matchers`](#rule-list-rules-spec-cookie-matchers) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
383
383
|
|
|
384
|
-
<a id="present-485b0a"></a>• [`check_not_present`](#present-485b0a) - Optional Block<br>
|
|
384
|
+
<a id="present-485b0a"></a>• [`check_not_present`](#present-485b0a) - Optional Block<br>Enable this option
|
|
385
385
|
|
|
386
|
-
<a id="present-459192"></a>• [`check_present`](#present-459192) - Optional Block<br>
|
|
386
|
+
<a id="present-459192"></a>• [`check_present`](#present-459192) - Optional Block<br>Enable this option
|
|
387
387
|
|
|
388
388
|
<a id="matcher-c32a99"></a>• [`invert_matcher`](#matcher-c32a99) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
389
389
|
|
|
@@ -415,9 +415,9 @@ A [`domain_matcher`](#rule-list-rules-spec-domain-matcher) block (within [`rule_
|
|
|
415
415
|
|
|
416
416
|
A [`headers`](#rule-list-rules-spec-headers) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
417
417
|
|
|
418
|
-
<a id="present-652e97"></a>• [`check_not_present`](#present-652e97) - Optional Block<br>
|
|
418
|
+
<a id="present-652e97"></a>• [`check_not_present`](#present-652e97) - Optional Block<br>Enable this option
|
|
419
419
|
|
|
420
|
-
<a id="present-fe2629"></a>• [`check_present`](#present-fe2629) - Optional Block<br>
|
|
420
|
+
<a id="present-fe2629"></a>• [`check_present`](#present-fe2629) - Optional Block<br>Enable this option
|
|
421
421
|
|
|
422
422
|
<a id="matcher-0d0548"></a>• [`invert_matcher`](#matcher-0d0548) - Optional Bool<br>Invert Header Matcher. Invert the match result
|
|
423
423
|
|
|
@@ -477,9 +477,9 @@ A [`ja4_tls_fingerprint`](#fingerprint-dfb868) block (within [`rule_list.rules.s
|
|
|
477
477
|
|
|
478
478
|
A [`jwt_claims`](#rule-list-rules-spec-jwt-claims) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
479
479
|
|
|
480
|
-
<a id="present-2d6113"></a>• [`check_not_present`](#present-2d6113) - Optional Block<br>
|
|
480
|
+
<a id="present-2d6113"></a>• [`check_not_present`](#present-2d6113) - Optional Block<br>Enable this option
|
|
481
481
|
|
|
482
|
-
<a id="present-4eb640"></a>• [`check_present`](#present-4eb640) - Optional Block<br>
|
|
482
|
+
<a id="present-4eb640"></a>• [`check_present`](#present-4eb640) - Optional Block<br>Enable this option
|
|
483
483
|
|
|
484
484
|
<a id="matcher-03ed8d"></a>• [`invert_matcher`](#matcher-03ed8d) - Optional Bool<br>Invert Matcher. Invert the match result
|
|
485
485
|
|
|
@@ -507,9 +507,9 @@ A [`label_matcher`](#rule-list-rules-spec-label-matcher) block (within [`rule_li
|
|
|
507
507
|
|
|
508
508
|
A [`mum_action`](#rule-list-rules-spec-mum-action) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
509
509
|
|
|
510
|
-
<a id="rule-list-rules-spec-mum-action-default"></a>• [`default`](#rule-list-rules-spec-mum-action-default) - Optional Block<br>
|
|
510
|
+
<a id="rule-list-rules-spec-mum-action-default"></a>• [`default`](#rule-list-rules-spec-mum-action-default) - Optional Block<br>Enable this option
|
|
511
511
|
|
|
512
|
-
<a id="processing-d7aff9"></a>• [`skip_processing`](#processing-d7aff9) - Optional Block<br>
|
|
512
|
+
<a id="processing-d7aff9"></a>• [`skip_processing`](#processing-d7aff9) - Optional Block<br>Enable this option
|
|
513
513
|
|
|
514
514
|
#### Rule List Rules Spec Path
|
|
515
515
|
|
|
@@ -539,9 +539,9 @@ A [`port_matcher`](#rule-list-rules-spec-port-matcher) block (within [`rule_list
|
|
|
539
539
|
|
|
540
540
|
A [`query_params`](#rule-list-rules-spec-query-params) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
541
541
|
|
|
542
|
-
<a id="present-d92889"></a>• [`check_not_present`](#present-d92889) - Optional Block<br>
|
|
542
|
+
<a id="present-d92889"></a>• [`check_not_present`](#present-d92889) - Optional Block<br>Enable this option
|
|
543
543
|
|
|
544
|
-
<a id="present-bd865e"></a>• [`check_present`](#present-bd865e) - Optional Block<br>
|
|
544
|
+
<a id="present-bd865e"></a>• [`check_present`](#present-bd865e) - Optional Block<br>Enable this option
|
|
545
545
|
|
|
546
546
|
<a id="matcher-ea3b3a"></a>• [`invert_matcher`](#matcher-ea3b3a) - Optional Bool<br>Invert Query Parameter Matcher. Invert the match result
|
|
547
547
|
|
|
@@ -565,67 +565,67 @@ A [`request_constraints`](#constraints-a447da) block (within [`rule_list.rules.s
|
|
|
565
565
|
|
|
566
566
|
<a id="exceeds-88210d"></a>• [`max_cookie_count_exceeds`](#exceeds-88210d) - Optional Number<br>Match on the Count for all Cookies that exceed this value
|
|
567
567
|
|
|
568
|
-
<a id="none-3e70e3"></a>• [`max_cookie_count_none`](#none-3e70e3) - Optional Block<br>
|
|
568
|
+
<a id="none-3e70e3"></a>• [`max_cookie_count_none`](#none-3e70e3) - Optional Block<br>Enable this option
|
|
569
569
|
|
|
570
570
|
<a id="exceeds-a151df"></a>• [`max_cookie_key_size_exceeds`](#exceeds-a151df) - Optional Number
|
|
571
571
|
|
|
572
|
-
<a id="none-9984be"></a>• [`max_cookie_key_size_none`](#none-9984be) - Optional Block<br>
|
|
572
|
+
<a id="none-9984be"></a>• [`max_cookie_key_size_none`](#none-9984be) - Optional Block<br>Enable this option
|
|
573
573
|
|
|
574
574
|
<a id="exceeds-8f6fd2"></a>• [`max_cookie_value_size_exceeds`](#exceeds-8f6fd2) - Optional Number
|
|
575
575
|
|
|
576
|
-
<a id="none-7f78ad"></a>• [`max_cookie_value_size_none`](#none-7f78ad) - Optional Block<br>
|
|
576
|
+
<a id="none-7f78ad"></a>• [`max_cookie_value_size_none`](#none-7f78ad) - Optional Block<br>Enable this option
|
|
577
577
|
|
|
578
578
|
<a id="exceeds-5dc80b"></a>• [`max_header_count_exceeds`](#exceeds-5dc80b) - Optional Number<br>Match on the Count for all Headers that exceed this value
|
|
579
579
|
|
|
580
|
-
<a id="none-162eb4"></a>• [`max_header_count_none`](#none-162eb4) - Optional Block<br>
|
|
580
|
+
<a id="none-162eb4"></a>• [`max_header_count_none`](#none-162eb4) - Optional Block<br>Enable this option
|
|
581
581
|
|
|
582
582
|
<a id="exceeds-e960c1"></a>• [`max_header_key_size_exceeds`](#exceeds-e960c1) - Optional Number
|
|
583
583
|
|
|
584
|
-
<a id="none-b86486"></a>• [`max_header_key_size_none`](#none-b86486) - Optional Block<br>
|
|
584
|
+
<a id="none-b86486"></a>• [`max_header_key_size_none`](#none-b86486) - Optional Block<br>Enable this option
|
|
585
585
|
|
|
586
586
|
<a id="exceeds-2f6bfd"></a>• [`max_header_value_size_exceeds`](#exceeds-2f6bfd) - Optional Number
|
|
587
587
|
|
|
588
|
-
<a id="none-e5927d"></a>• [`max_header_value_size_none`](#none-e5927d) - Optional Block<br>
|
|
588
|
+
<a id="none-e5927d"></a>• [`max_header_value_size_none`](#none-e5927d) - Optional Block<br>Enable this option
|
|
589
589
|
|
|
590
590
|
<a id="exceeds-c0dcef"></a>• [`max_parameter_count_exceeds`](#exceeds-c0dcef) - Optional Number
|
|
591
591
|
|
|
592
|
-
<a id="none-6a4f57"></a>• [`max_parameter_count_none`](#none-6a4f57) - Optional Block<br>
|
|
592
|
+
<a id="none-6a4f57"></a>• [`max_parameter_count_none`](#none-6a4f57) - Optional Block<br>Enable this option
|
|
593
593
|
|
|
594
594
|
<a id="exceeds-878a8c"></a>• [`max_parameter_name_size_exceeds`](#exceeds-878a8c) - Optional Number
|
|
595
595
|
|
|
596
|
-
<a id="none-ed3f5c"></a>• [`max_parameter_name_size_none`](#none-ed3f5c) - Optional Block<br>
|
|
596
|
+
<a id="none-ed3f5c"></a>• [`max_parameter_name_size_none`](#none-ed3f5c) - Optional Block<br>Enable this option
|
|
597
597
|
|
|
598
598
|
<a id="exceeds-2753a2"></a>• [`max_parameter_value_size_exceeds`](#exceeds-2753a2) - Optional Number
|
|
599
599
|
|
|
600
|
-
<a id="none-aa518b"></a>• [`max_parameter_value_size_none`](#none-aa518b) - Optional Block<br>
|
|
600
|
+
<a id="none-aa518b"></a>• [`max_parameter_value_size_none`](#none-aa518b) - Optional Block<br>Enable this option
|
|
601
601
|
|
|
602
602
|
<a id="exceeds-09d792"></a>• [`max_query_size_exceeds`](#exceeds-09d792) - Optional Number<br>Match on the URL Query Size that exceed this value
|
|
603
603
|
|
|
604
|
-
<a id="none-420f9c"></a>• [`max_query_size_none`](#none-420f9c) - Optional Block<br>
|
|
604
|
+
<a id="none-420f9c"></a>• [`max_query_size_none`](#none-420f9c) - Optional Block<br>Enable this option
|
|
605
605
|
|
|
606
606
|
<a id="exceeds-e9386b"></a>• [`max_request_line_size_exceeds`](#exceeds-e9386b) - Optional Number
|
|
607
607
|
|
|
608
|
-
<a id="none-c1b4c5"></a>• [`max_request_line_size_none`](#none-c1b4c5) - Optional Block<br>
|
|
608
|
+
<a id="none-c1b4c5"></a>• [`max_request_line_size_none`](#none-c1b4c5) - Optional Block<br>Enable this option
|
|
609
609
|
|
|
610
610
|
<a id="exceeds-c9584b"></a>• [`max_request_size_exceeds`](#exceeds-c9584b) - Optional Number<br>Match on the Request Size that exceed this value
|
|
611
611
|
|
|
612
|
-
<a id="none-a7d587"></a>• [`max_request_size_none`](#none-a7d587) - Optional Block<br>
|
|
612
|
+
<a id="none-a7d587"></a>• [`max_request_size_none`](#none-a7d587) - Optional Block<br>Enable this option
|
|
613
613
|
|
|
614
614
|
<a id="exceeds-36b3ef"></a>• [`max_url_size_exceeds`](#exceeds-36b3ef) - Optional Number<br>Match on the URL Size that exceed this value
|
|
615
615
|
|
|
616
|
-
<a id="none-ce96c1"></a>• [`max_url_size_none`](#none-ce96c1) - Optional Block<br>
|
|
616
|
+
<a id="none-ce96c1"></a>• [`max_url_size_none`](#none-ce96c1) - Optional Block<br>Enable this option
|
|
617
617
|
|
|
618
618
|
#### Rule List Rules Spec Segment Policy
|
|
619
619
|
|
|
620
620
|
A [`segment_policy`](#rule-list-rules-spec-segment-policy) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
621
621
|
|
|
622
|
-
<a id="any-9c58b4"></a>• [`dst_any`](#any-9c58b4) - Optional Block<br>
|
|
622
|
+
<a id="any-9c58b4"></a>• [`dst_any`](#any-9c58b4) - Optional Block<br>Enable this option
|
|
623
623
|
|
|
624
624
|
<a id="segments-478f34"></a>• [`dst_segments`](#segments-478f34) - Optional Block<br>X-displayName: 'Segment List' List of references to Segments<br>See [Dst Segments](#segments-478f34) below.
|
|
625
625
|
|
|
626
|
-
<a id="segment-431a3a"></a>• [`intra_segment`](#segment-431a3a) - Optional Block<br>
|
|
626
|
+
<a id="segment-431a3a"></a>• [`intra_segment`](#segment-431a3a) - Optional Block<br>Enable this option
|
|
627
627
|
|
|
628
|
-
<a id="any-f3d551"></a>• [`src_any`](#any-f3d551) - Optional Block<br>
|
|
628
|
+
<a id="any-f3d551"></a>• [`src_any`](#any-f3d551) - Optional Block<br>Enable this option
|
|
629
629
|
|
|
630
630
|
<a id="segments-191ada"></a>• [`src_segments`](#segments-191ada) - Optional Block<br>X-displayName: 'Segment List' List of references to Segments<br>See [Src Segments](#segments-191ada) below.
|
|
631
631
|
|
|
@@ -669,9 +669,9 @@ A [`waf_action`](#rule-list-rules-spec-waf-action) block (within [`rule_list.rul
|
|
|
669
669
|
|
|
670
670
|
<a id="control-4fbf89"></a>• [`app_firewall_detection_control`](#control-4fbf89) - Optional Block<br>Define the list of Signature IDs, Violations, Attack Types and Bot Names that should be excluded from triggering on the defined match criteria<br>See [App Firewall Detection Control](#control-4fbf89) below.
|
|
671
671
|
|
|
672
|
-
<a id="rule-list-rules-spec-waf-action-none"></a>• [`none`](#rule-list-rules-spec-waf-action-none) - Optional Block<br>
|
|
672
|
+
<a id="rule-list-rules-spec-waf-action-none"></a>• [`none`](#rule-list-rules-spec-waf-action-none) - Optional Block<br>Enable this option
|
|
673
673
|
|
|
674
|
-
<a id="processing-e97520"></a>• [`waf_skip_processing`](#processing-e97520) - Optional Block<br>
|
|
674
|
+
<a id="processing-e97520"></a>• [`waf_skip_processing`](#processing-e97520) - Optional Block<br>Enable this option
|
|
675
675
|
|
|
676
676
|
#### Rule List Rules Spec WAF Action App Firewall Detection Control
|
|
677
677
|
|
|
@@ -32,7 +32,7 @@ resource "f5xc_service_policy_rule" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
# [OneOf: any_asn, asn_list, asn_matcher]
|
|
35
|
+
# [OneOf: any_asn, asn_list, asn_matcher] Enable this option
|
|
36
36
|
any_asn {
|
|
37
37
|
# Configure any_asn settings
|
|
38
38
|
}
|
|
@@ -40,7 +40,7 @@ resource "f5xc_service_policy_rule" "example" {
|
|
|
40
40
|
any_client {
|
|
41
41
|
# Configure any_client settings
|
|
42
42
|
}
|
|
43
|
-
# [OneOf: any_ip, ip_matcher, ip_prefix_list]
|
|
43
|
+
# [OneOf: any_ip, ip_matcher, ip_prefix_list] Enable this o...
|
|
44
44
|
any_ip {
|
|
45
45
|
# Configure any_ip settings
|
|
46
46
|
}
|
|
@@ -69,19 +69,19 @@ resource "f5xc_service_policy_rule" "example" {
|
|
|
69
69
|
<a id="action"></a>• [`action`](#action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY] The rule action determines the disposition of the input request API. If a policy matches a rule with an ALLOW action, the processing of the request proceeds forward. If it matches a rule with a DENY action, the processing of the request is terminated and an appropriate message/code returned to
|
|
70
70
|
|
|
71
71
|
-> **One of the following:**
|
|
72
|
-
• <a id="any-asn"></a>[`any_asn`](#any-asn) - Optional Block<br>
|
|
72
|
+
• <a id="any-asn"></a>[`any_asn`](#any-asn) - Optional Block<br>Enable this option
|
|
73
73
|
<br><br>• <a id="asn-list"></a>[`asn_list`](#asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#asn-list) below for details.
|
|
74
74
|
<br><br>• <a id="asn-matcher"></a>[`asn_matcher`](#asn-matcher) - Optional Block<br>Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#asn-matcher) below for details.
|
|
75
75
|
|
|
76
76
|
-> **One of the following:**
|
|
77
|
-
• <a id="any-client"></a>[`any_client`](#any-client) - Optional Block<br>
|
|
77
|
+
• <a id="any-client"></a>[`any_client`](#any-client) - Optional Block<br>Enable this option
|
|
78
78
|
<br><br>• <a id="client-name"></a>[`client_name`](#client-name) - Optional String<br>The expected name of the client invoking the request API. The predicate evaluates to true if any of the actual names is the same as the expected client name
|
|
79
79
|
<br><br>• <a id="client-name-matcher"></a>[`client_name_matcher`](#client-name-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Client Name Matcher](#client-name-matcher) below for details.
|
|
80
80
|
<br><br>• <a id="client-selector"></a>[`client_selector`](#client-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Client Selector](#client-selector) below for details.
|
|
81
81
|
<br><br>• <a id="ip-threat-category-list"></a>[`ip_threat_category_list`](#ip-threat-category-list) - Optional Block<br>IP Threat Category List Type. List of IP threat categories<br>See [IP Threat Category List](#ip-threat-category-list) below for details.
|
|
82
82
|
|
|
83
83
|
-> **One of the following:**
|
|
84
|
-
• <a id="any-ip"></a>[`any_ip`](#any-ip) - Optional Block<br>
|
|
84
|
+
• <a id="any-ip"></a>[`any_ip`](#any-ip) - Optional Block<br>Enable this option
|
|
85
85
|
<br><br>• <a id="ip-matcher"></a>[`ip_matcher`](#ip-matcher) - Optional Block<br>Match any IP prefix contained in the list of ip_prefix_sets. The result of the match is inverted if invert_matcher is true<br>See [IP Matcher](#ip-matcher) below for details.
|
|
86
86
|
<br><br>• <a id="ip-prefix-list"></a>[`ip_prefix_list`](#ip-prefix-list) - Optional Block<br>List of IP Prefix strings to match against<br>See [IP Prefix List](#ip-prefix-list) below for details.
|
|
87
87
|
|
|
@@ -147,9 +147,9 @@ An [`api_group_matcher`](#api-group-matcher) block supports the following:
|
|
|
147
147
|
|
|
148
148
|
An [`arg_matchers`](#arg-matchers) block supports the following:
|
|
149
149
|
|
|
150
|
-
<a id="arg-matchers-check-not-present"></a>• [`check_not_present`](#arg-matchers-check-not-present) - Optional Block<br>
|
|
150
|
+
<a id="arg-matchers-check-not-present"></a>• [`check_not_present`](#arg-matchers-check-not-present) - Optional Block<br>Enable this option
|
|
151
151
|
|
|
152
|
-
<a id="arg-matchers-check-present"></a>• [`check_present`](#arg-matchers-check-present) - Optional Block<br>
|
|
152
|
+
<a id="arg-matchers-check-present"></a>• [`check_present`](#arg-matchers-check-present) - Optional Block<br>Enable this option
|
|
153
153
|
|
|
154
154
|
<a id="arg-matchers-invert-matcher"></a>• [`invert_matcher`](#arg-matchers-invert-matcher) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
155
155
|
|
|
@@ -207,9 +207,9 @@ A [`body_matcher`](#body-matcher) block supports the following:
|
|
|
207
207
|
|
|
208
208
|
A [`bot_action`](#bot-action) block supports the following:
|
|
209
209
|
|
|
210
|
-
<a id="bot-action-bot-skip-processing"></a>• [`bot_skip_processing`](#bot-action-bot-skip-processing) - Optional Block<br>
|
|
210
|
+
<a id="bot-action-bot-skip-processing"></a>• [`bot_skip_processing`](#bot-action-bot-skip-processing) - Optional Block<br>Enable this option
|
|
211
211
|
|
|
212
|
-
<a id="bot-action-none"></a>• [`none`](#bot-action-none) - Optional Block<br>
|
|
212
|
+
<a id="bot-action-none"></a>• [`none`](#bot-action-none) - Optional Block<br>Enable this option
|
|
213
213
|
|
|
214
214
|
#### Client Name Matcher
|
|
215
215
|
|
|
@@ -229,9 +229,9 @@ A [`client_selector`](#client-selector) block supports the following:
|
|
|
229
229
|
|
|
230
230
|
A [`cookie_matchers`](#cookie-matchers) block supports the following:
|
|
231
231
|
|
|
232
|
-
<a id="cookie-matchers-check-not-present"></a>• [`check_not_present`](#cookie-matchers-check-not-present) - Optional Block<br>
|
|
232
|
+
<a id="cookie-matchers-check-not-present"></a>• [`check_not_present`](#cookie-matchers-check-not-present) - Optional Block<br>Enable this option
|
|
233
233
|
|
|
234
|
-
<a id="cookie-matchers-check-present"></a>• [`check_present`](#cookie-matchers-check-present) - Optional Block<br>
|
|
234
|
+
<a id="cookie-matchers-check-present"></a>• [`check_present`](#cookie-matchers-check-present) - Optional Block<br>Enable this option
|
|
235
235
|
|
|
236
236
|
<a id="cookie-matchers-invert-matcher"></a>• [`invert_matcher`](#cookie-matchers-invert-matcher) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
237
237
|
|
|
@@ -261,9 +261,9 @@ A [`domain_matcher`](#domain-matcher) block supports the following:
|
|
|
261
261
|
|
|
262
262
|
A [`headers`](#headers) block supports the following:
|
|
263
263
|
|
|
264
|
-
<a id="headers-check-not-present"></a>• [`check_not_present`](#headers-check-not-present) - Optional Block<br>
|
|
264
|
+
<a id="headers-check-not-present"></a>• [`check_not_present`](#headers-check-not-present) - Optional Block<br>Enable this option
|
|
265
265
|
|
|
266
|
-
<a id="headers-check-present"></a>• [`check_present`](#headers-check-present) - Optional Block<br>
|
|
266
|
+
<a id="headers-check-present"></a>• [`check_present`](#headers-check-present) - Optional Block<br>Enable this option
|
|
267
267
|
|
|
268
268
|
<a id="headers-invert-matcher"></a>• [`invert_matcher`](#headers-invert-matcher) - Optional Bool<br>Invert Header Matcher. Invert the match result
|
|
269
269
|
|
|
@@ -335,9 +335,9 @@ A [`ja4_tls_fingerprint`](#ja4-tls-fingerprint) block supports the following:
|
|
|
335
335
|
|
|
336
336
|
A [`jwt_claims`](#jwt-claims) block supports the following:
|
|
337
337
|
|
|
338
|
-
<a id="jwt-claims-check-not-present"></a>• [`check_not_present`](#jwt-claims-check-not-present) - Optional Block<br>
|
|
338
|
+
<a id="jwt-claims-check-not-present"></a>• [`check_not_present`](#jwt-claims-check-not-present) - Optional Block<br>Enable this option
|
|
339
339
|
|
|
340
|
-
<a id="jwt-claims-check-present"></a>• [`check_present`](#jwt-claims-check-present) - Optional Block<br>
|
|
340
|
+
<a id="jwt-claims-check-present"></a>• [`check_present`](#jwt-claims-check-present) - Optional Block<br>Enable this option
|
|
341
341
|
|
|
342
342
|
<a id="jwt-claims-invert-matcher"></a>• [`invert_matcher`](#jwt-claims-invert-matcher) - Optional Bool<br>Invert Matcher. Invert the match result
|
|
343
343
|
|
|
@@ -365,9 +365,9 @@ A [`label_matcher`](#label-matcher) block supports the following:
|
|
|
365
365
|
|
|
366
366
|
A [`mum_action`](#mum-action) block supports the following:
|
|
367
367
|
|
|
368
|
-
<a id="mum-action-default"></a>• [`default`](#mum-action-default) - Optional Block<br>
|
|
368
|
+
<a id="mum-action-default"></a>• [`default`](#mum-action-default) - Optional Block<br>Enable this option
|
|
369
369
|
|
|
370
|
-
<a id="mum-action-skip-processing"></a>• [`skip_processing`](#mum-action-skip-processing) - Optional Block<br>
|
|
370
|
+
<a id="mum-action-skip-processing"></a>• [`skip_processing`](#mum-action-skip-processing) - Optional Block<br>Enable this option
|
|
371
371
|
|
|
372
372
|
#### Path
|
|
373
373
|
|
|
@@ -397,9 +397,9 @@ A [`port_matcher`](#port-matcher) block supports the following:
|
|
|
397
397
|
|
|
398
398
|
A [`query_params`](#query-params) block supports the following:
|
|
399
399
|
|
|
400
|
-
<a id="query-params-check-not-present"></a>• [`check_not_present`](#query-params-check-not-present) - Optional Block<br>
|
|
400
|
+
<a id="query-params-check-not-present"></a>• [`check_not_present`](#query-params-check-not-present) - Optional Block<br>Enable this option
|
|
401
401
|
|
|
402
|
-
<a id="query-params-check-present"></a>• [`check_present`](#query-params-check-present) - Optional Block<br>
|
|
402
|
+
<a id="query-params-check-present"></a>• [`check_present`](#query-params-check-present) - Optional Block<br>Enable this option
|
|
403
403
|
|
|
404
404
|
<a id="query-params-invert-matcher"></a>• [`invert_matcher`](#query-params-invert-matcher) - Optional Bool<br>Invert Query Parameter Matcher. Invert the match result
|
|
405
405
|
|
|
@@ -423,67 +423,67 @@ A [`request_constraints`](#request-constraints) block supports the following:
|
|
|
423
423
|
|
|
424
424
|
<a id="exceeds-0e8746"></a>• [`max_cookie_count_exceeds`](#exceeds-0e8746) - Optional Number<br>Match on the Count for all Cookies that exceed this value
|
|
425
425
|
|
|
426
|
-
<a id="none-291d57"></a>• [`max_cookie_count_none`](#none-291d57) - Optional Block<br>
|
|
426
|
+
<a id="none-291d57"></a>• [`max_cookie_count_none`](#none-291d57) - Optional Block<br>Enable this option
|
|
427
427
|
|
|
428
428
|
<a id="exceeds-7352a4"></a>• [`max_cookie_key_size_exceeds`](#exceeds-7352a4) - Optional Number
|
|
429
429
|
|
|
430
|
-
<a id="none-0c2b38"></a>• [`max_cookie_key_size_none`](#none-0c2b38) - Optional Block<br>
|
|
430
|
+
<a id="none-0c2b38"></a>• [`max_cookie_key_size_none`](#none-0c2b38) - Optional Block<br>Enable this option
|
|
431
431
|
|
|
432
432
|
<a id="exceeds-ec487d"></a>• [`max_cookie_value_size_exceeds`](#exceeds-ec487d) - Optional Number
|
|
433
433
|
|
|
434
|
-
<a id="none-cfea13"></a>• [`max_cookie_value_size_none`](#none-cfea13) - Optional Block<br>
|
|
434
|
+
<a id="none-cfea13"></a>• [`max_cookie_value_size_none`](#none-cfea13) - Optional Block<br>Enable this option
|
|
435
435
|
|
|
436
436
|
<a id="exceeds-d461a1"></a>• [`max_header_count_exceeds`](#exceeds-d461a1) - Optional Number<br>Match on the Count for all Headers that exceed this value
|
|
437
437
|
|
|
438
|
-
<a id="none-d12b83"></a>• [`max_header_count_none`](#none-d12b83) - Optional Block<br>
|
|
438
|
+
<a id="none-d12b83"></a>• [`max_header_count_none`](#none-d12b83) - Optional Block<br>Enable this option
|
|
439
439
|
|
|
440
440
|
<a id="exceeds-87df1c"></a>• [`max_header_key_size_exceeds`](#exceeds-87df1c) - Optional Number
|
|
441
441
|
|
|
442
|
-
<a id="none-6ea93c"></a>• [`max_header_key_size_none`](#none-6ea93c) - Optional Block<br>
|
|
442
|
+
<a id="none-6ea93c"></a>• [`max_header_key_size_none`](#none-6ea93c) - Optional Block<br>Enable this option
|
|
443
443
|
|
|
444
444
|
<a id="exceeds-883323"></a>• [`max_header_value_size_exceeds`](#exceeds-883323) - Optional Number
|
|
445
445
|
|
|
446
|
-
<a id="none-d2e74f"></a>• [`max_header_value_size_none`](#none-d2e74f) - Optional Block<br>
|
|
446
|
+
<a id="none-d2e74f"></a>• [`max_header_value_size_none`](#none-d2e74f) - Optional Block<br>Enable this option
|
|
447
447
|
|
|
448
448
|
<a id="exceeds-480590"></a>• [`max_parameter_count_exceeds`](#exceeds-480590) - Optional Number
|
|
449
449
|
|
|
450
|
-
<a id="none-cea22c"></a>• [`max_parameter_count_none`](#none-cea22c) - Optional Block<br>
|
|
450
|
+
<a id="none-cea22c"></a>• [`max_parameter_count_none`](#none-cea22c) - Optional Block<br>Enable this option
|
|
451
451
|
|
|
452
452
|
<a id="exceeds-c96298"></a>• [`max_parameter_name_size_exceeds`](#exceeds-c96298) - Optional Number
|
|
453
453
|
|
|
454
|
-
<a id="none-b2e47d"></a>• [`max_parameter_name_size_none`](#none-b2e47d) - Optional Block<br>
|
|
454
|
+
<a id="none-b2e47d"></a>• [`max_parameter_name_size_none`](#none-b2e47d) - Optional Block<br>Enable this option
|
|
455
455
|
|
|
456
456
|
<a id="exceeds-c345d4"></a>• [`max_parameter_value_size_exceeds`](#exceeds-c345d4) - Optional Number
|
|
457
457
|
|
|
458
|
-
<a id="none-bd1b4b"></a>• [`max_parameter_value_size_none`](#none-bd1b4b) - Optional Block<br>
|
|
458
|
+
<a id="none-bd1b4b"></a>• [`max_parameter_value_size_none`](#none-bd1b4b) - Optional Block<br>Enable this option
|
|
459
459
|
|
|
460
460
|
<a id="exceeds-a9b09b"></a>• [`max_query_size_exceeds`](#exceeds-a9b09b) - Optional Number<br>Match on the URL Query Size that exceed this value
|
|
461
461
|
|
|
462
|
-
<a id="request-constraints-max-query-size-none"></a>• [`max_query_size_none`](#request-constraints-max-query-size-none) - Optional Block<br>
|
|
462
|
+
<a id="request-constraints-max-query-size-none"></a>• [`max_query_size_none`](#request-constraints-max-query-size-none) - Optional Block<br>Enable this option
|
|
463
463
|
|
|
464
464
|
<a id="exceeds-80bd97"></a>• [`max_request_line_size_exceeds`](#exceeds-80bd97) - Optional Number
|
|
465
465
|
|
|
466
|
-
<a id="none-76b27d"></a>• [`max_request_line_size_none`](#none-76b27d) - Optional Block<br>
|
|
466
|
+
<a id="none-76b27d"></a>• [`max_request_line_size_none`](#none-76b27d) - Optional Block<br>Enable this option
|
|
467
467
|
|
|
468
468
|
<a id="exceeds-2156ce"></a>• [`max_request_size_exceeds`](#exceeds-2156ce) - Optional Number<br>Match on the Request Size that exceed this value
|
|
469
469
|
|
|
470
|
-
<a id="none-250223"></a>• [`max_request_size_none`](#none-250223) - Optional Block<br>
|
|
470
|
+
<a id="none-250223"></a>• [`max_request_size_none`](#none-250223) - Optional Block<br>Enable this option
|
|
471
471
|
|
|
472
472
|
<a id="exceeds-4ce081"></a>• [`max_url_size_exceeds`](#exceeds-4ce081) - Optional Number<br>Match on the URL Size that exceed this value
|
|
473
473
|
|
|
474
|
-
<a id="request-constraints-max-url-size-none"></a>• [`max_url_size_none`](#request-constraints-max-url-size-none) - Optional Block<br>
|
|
474
|
+
<a id="request-constraints-max-url-size-none"></a>• [`max_url_size_none`](#request-constraints-max-url-size-none) - Optional Block<br>Enable this option
|
|
475
475
|
|
|
476
476
|
#### Segment Policy
|
|
477
477
|
|
|
478
478
|
A [`segment_policy`](#segment-policy) block supports the following:
|
|
479
479
|
|
|
480
|
-
<a id="segment-policy-dst-any"></a>• [`dst_any`](#segment-policy-dst-any) - Optional Block<br>
|
|
480
|
+
<a id="segment-policy-dst-any"></a>• [`dst_any`](#segment-policy-dst-any) - Optional Block<br>Enable this option
|
|
481
481
|
|
|
482
482
|
<a id="segment-policy-dst-segments"></a>• [`dst_segments`](#segment-policy-dst-segments) - Optional Block<br>Segment List. List of references to Segments<br>See [Dst Segments](#segment-policy-dst-segments) below.
|
|
483
483
|
|
|
484
|
-
<a id="segment-policy-intra-segment"></a>• [`intra_segment`](#segment-policy-intra-segment) - Optional Block<br>
|
|
484
|
+
<a id="segment-policy-intra-segment"></a>• [`intra_segment`](#segment-policy-intra-segment) - Optional Block<br>Enable this option
|
|
485
485
|
|
|
486
|
-
<a id="segment-policy-src-any"></a>• [`src_any`](#segment-policy-src-any) - Optional Block<br>
|
|
486
|
+
<a id="segment-policy-src-any"></a>• [`src_any`](#segment-policy-src-any) - Optional Block<br>Enable this option
|
|
487
487
|
|
|
488
488
|
<a id="segment-policy-src-segments"></a>• [`src_segments`](#segment-policy-src-segments) - Optional Block<br>Segment List. List of references to Segments<br>See [Src Segments](#segment-policy-src-segments) below.
|
|
489
489
|
|
|
@@ -547,9 +547,9 @@ A [`waf_action`](#waf-action) block supports the following:
|
|
|
547
547
|
|
|
548
548
|
<a id="control-b9f62f"></a>• [`app_firewall_detection_control`](#control-b9f62f) - Optional Block<br>Define the list of Signature IDs, Violations, Attack Types and Bot Names that should be excluded from triggering on the defined match criteria<br>See [App Firewall Detection Control](#control-b9f62f) below.
|
|
549
549
|
|
|
550
|
-
<a id="waf-action-none"></a>• [`none`](#waf-action-none) - Optional Block<br>
|
|
550
|
+
<a id="waf-action-none"></a>• [`none`](#waf-action-none) - Optional Block<br>Enable this option
|
|
551
551
|
|
|
552
|
-
<a id="waf-action-waf-skip-processing"></a>• [`waf_skip_processing`](#waf-action-waf-skip-processing) - Optional Block<br>
|
|
552
|
+
<a id="waf-action-waf-skip-processing"></a>• [`waf_skip_processing`](#waf-action-waf-skip-processing) - Optional Block<br>Enable this option
|
|
553
553
|
|
|
554
554
|
#### WAF Action App Firewall Detection Control
|
|
555
555
|
|