@robinmordasiewicz/f5xc-terraform-mcp 3.10.2 → 3.10.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/advertise_policy.md +10 -10
- package/dist/docs/resources/alert_policy.md +9 -9
- package/dist/docs/resources/alert_receiver.md +4 -4
- package/dist/docs/resources/api_definition.md +2 -2
- package/dist/docs/resources/api_testing.md +6 -6
- package/dist/docs/resources/apm.md +8 -8
- package/dist/docs/resources/app_firewall.md +19 -19
- package/dist/docs/resources/app_setting.md +5 -5
- package/dist/docs/resources/app_type.md +3 -3
- package/dist/docs/resources/aws_tgw_site.md +50 -50
- package/dist/docs/resources/aws_vpc_site.md +66 -66
- package/dist/docs/resources/azure_vnet_site.md +93 -93
- package/dist/docs/resources/bgp.md +205 -37
- package/dist/docs/resources/bgp_routing_policy.md +7 -7
- package/dist/docs/resources/cdn_cache_rule.md +2 -2
- package/dist/docs/resources/cdn_loadbalancer.md +122 -122
- package/dist/docs/resources/cloud_connect.md +2 -2
- package/dist/docs/resources/cloud_credentials.md +2 -2
- package/dist/docs/resources/cloud_link.md +3 -3
- package/dist/docs/resources/cluster.md +18 -18
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +259 -8
- package/dist/docs/resources/dns_domain.md +2 -2
- package/dist/docs/resources/endpoint.md +5 -5
- package/dist/docs/resources/enhanced_firewall_policy.md +15 -15
- package/dist/docs/resources/external_connector.md +7 -7
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/fast_acl_rule.md +2 -2
- package/dist/docs/resources/fleet.md +25 -25
- package/dist/docs/resources/forward_proxy_policy.md +15 -15
- package/dist/docs/resources/forwarding_class.md +5 -5
- package/dist/docs/resources/gcp_vpc_site.md +37 -37
- package/dist/docs/resources/global_log_receiver.md +104 -104
- package/dist/docs/resources/healthcheck.md +2 -2
- package/dist/docs/resources/http_loadbalancer.md +287 -287
- package/dist/docs/resources/log_receiver.md +44 -825
- package/dist/docs/resources/malicious_user_mitigation.md +6 -6
- package/dist/docs/resources/nat_policy.md +10 -10
- package/dist/docs/resources/network_connector.md +9 -9
- package/dist/docs/resources/network_firewall.md +3 -3
- package/dist/docs/resources/network_interface.md +28 -28
- package/dist/docs/resources/network_policy.md +217 -38
- package/dist/docs/resources/network_policy_view.md +16 -16
- package/dist/docs/resources/nfv_service.md +26 -26
- package/dist/docs/resources/origin_pool.md +48 -48
- package/dist/docs/resources/policy_based_routing.md +8 -8
- package/dist/docs/resources/protocol_inspection.md +4 -4
- package/dist/docs/resources/proxy.md +23 -23
- package/dist/docs/resources/rate_limiter.md +1 -1
- package/dist/docs/resources/rate_limiter_policy.md +8 -8
- package/dist/docs/resources/route.md +36 -36
- package/dist/docs/resources/secret_management_access.md +8 -8
- package/dist/docs/resources/securemesh_site.md +258 -1619
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/service_policy.md +44 -44
- package/dist/docs/resources/service_policy_rule.md +37 -37
- package/dist/docs/resources/site.md +244 -322
- package/dist/docs/resources/site_mesh_group.md +8 -8
- package/dist/docs/resources/subnet.md +5 -5
- package/dist/docs/resources/tcp_loadbalancer.md +37 -37
- package/dist/docs/resources/tunnel.md +4 -4
- package/dist/docs/resources/udp_loadbalancer.md +9 -9
- package/dist/docs/resources/user_identification.md +10 -10
- package/dist/docs/resources/virtual_host.md +42 -42
- package/dist/docs/resources/virtual_network.md +4 -4
- package/dist/docs/resources/voltstack_site.md +59 -59
- package/dist/docs/resources/waf_exclusion_policy.md +5 -5
- package/dist/docs/resources/workload.md +24 -24
- package/dist/metadata/resource-metadata.json +394 -948
- package/dist/metadata/validation-patterns.json +1 -1
- package/package.json +1 -1
|
@@ -73,12 +73,12 @@ resource "f5xc_enhanced_firewall_policy" "example" {
|
|
|
73
73
|
### Spec Argument Reference
|
|
74
74
|
|
|
75
75
|
-> **One of the following:**
|
|
76
|
-
• <a id="allow-all"></a>[`allow_all`](#allow-all) - Optional Block<br>
|
|
76
|
+
• <a id="allow-all"></a>[`allow_all`](#allow-all) - Optional Block<br>Enable this option
|
|
77
77
|
<br><br>• <a id="allowed-destinations"></a>[`allowed_destinations`](#allowed-destinations) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Destinations](#allowed-destinations) below for details.
|
|
78
78
|
<br><br>• <a id="allowed-sources"></a>[`allowed_sources`](#allowed-sources) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Allowed Sources](#allowed-sources) below for details.
|
|
79
79
|
<br><br>• <a id="denied-destinations"></a>[`denied_destinations`](#denied-destinations) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Destinations](#denied-destinations) below for details.
|
|
80
80
|
<br><br>• <a id="denied-sources"></a>[`denied_sources`](#denied-sources) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Denied Sources](#denied-sources) below for details.
|
|
81
|
-
<br><br>• <a id="deny-all"></a>[`deny_all`](#deny-all) - Optional Block<br>
|
|
81
|
+
<br><br>• <a id="deny-all"></a>[`deny_all`](#deny-all) - Optional Block<br>Enable this option
|
|
82
82
|
<br><br>• <a id="rule-list"></a>[`rule_list`](#rule-list) - Optional Block<br>Custom Enhanced Firewall Policy Rules. Custom Enhanced Firewall Policy Rules<br>See [Rule List](#rule-list) below for details.
|
|
83
83
|
|
|
84
84
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
@@ -127,25 +127,25 @@ A [`rules`](#rule-list-rules) block (within [`rule_list`](#rule-list)) supports
|
|
|
127
127
|
|
|
128
128
|
<a id="rule-list-rules-advanced-action"></a>• [`advanced_action`](#rule-list-rules-advanced-action) - Optional Block<br>Network Policy Rule Advanced Action provides additional OPTIONS along with RuleAction and PBRRuleAction<br>See [Advanced Action](#rule-list-rules-advanced-action) below.
|
|
129
129
|
|
|
130
|
-
<a id="rule-list-rules-all-destinations"></a>• [`all_destinations`](#rule-list-rules-all-destinations) - Optional Block<br>
|
|
130
|
+
<a id="rule-list-rules-all-destinations"></a>• [`all_destinations`](#rule-list-rules-all-destinations) - Optional Block<br>Enable this option
|
|
131
131
|
|
|
132
|
-
<a id="rule-list-rules-all-sli-vips"></a>• [`all_sli_vips`](#rule-list-rules-all-sli-vips) - Optional Block<br>
|
|
132
|
+
<a id="rule-list-rules-all-sli-vips"></a>• [`all_sli_vips`](#rule-list-rules-all-sli-vips) - Optional Block<br>Enable this option
|
|
133
133
|
|
|
134
|
-
<a id="rule-list-rules-all-slo-vips"></a>• [`all_slo_vips`](#rule-list-rules-all-slo-vips) - Optional Block<br>
|
|
134
|
+
<a id="rule-list-rules-all-slo-vips"></a>• [`all_slo_vips`](#rule-list-rules-all-slo-vips) - Optional Block<br>Enable this option
|
|
135
135
|
|
|
136
|
-
<a id="rule-list-rules-all-sources"></a>• [`all_sources`](#rule-list-rules-all-sources) - Optional Block<br>
|
|
136
|
+
<a id="rule-list-rules-all-sources"></a>• [`all_sources`](#rule-list-rules-all-sources) - Optional Block<br>Enable this option
|
|
137
137
|
|
|
138
|
-
<a id="rule-list-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#rule-list-rules-all-tcp-traffic) - Optional Block<br>
|
|
138
|
+
<a id="rule-list-rules-all-tcp-traffic"></a>• [`all_tcp_traffic`](#rule-list-rules-all-tcp-traffic) - Optional Block<br>Enable this option
|
|
139
139
|
|
|
140
|
-
<a id="rule-list-rules-all-traffic"></a>• [`all_traffic`](#rule-list-rules-all-traffic) - Optional Block<br>
|
|
140
|
+
<a id="rule-list-rules-all-traffic"></a>• [`all_traffic`](#rule-list-rules-all-traffic) - Optional Block<br>Enable this option
|
|
141
141
|
|
|
142
|
-
<a id="rule-list-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#rule-list-rules-all-udp-traffic) - Optional Block<br>
|
|
142
|
+
<a id="rule-list-rules-all-udp-traffic"></a>• [`all_udp_traffic`](#rule-list-rules-all-udp-traffic) - Optional Block<br>Enable this option
|
|
143
143
|
|
|
144
|
-
<a id="rule-list-rules-allow"></a>• [`allow`](#rule-list-rules-allow) - Optional Block<br>
|
|
144
|
+
<a id="rule-list-rules-allow"></a>• [`allow`](#rule-list-rules-allow) - Optional Block<br>Enable this option
|
|
145
145
|
|
|
146
146
|
<a id="rule-list-rules-applications"></a>• [`applications`](#rule-list-rules-applications) - Optional Block<br>Applications. Application protocols like HTTP, SNMP<br>See [Applications](#rule-list-rules-applications) below.
|
|
147
147
|
|
|
148
|
-
<a id="rule-list-rules-deny"></a>• [`deny`](#rule-list-rules-deny) - Optional Block<br>
|
|
148
|
+
<a id="rule-list-rules-deny"></a>• [`deny`](#rule-list-rules-deny) - Optional Block<br>Enable this option
|
|
149
149
|
|
|
150
150
|
<a id="rule-list-rules-destination-aws-vpc-ids"></a>• [`destination_aws_vpc_ids`](#rule-list-rules-destination-aws-vpc-ids) - Optional Block<br>AWS VPC List. List of VPC Identifiers in AWS<br>See [Destination AWS VPC Ids](#rule-list-rules-destination-aws-vpc-ids) below.
|
|
151
151
|
|
|
@@ -157,17 +157,17 @@ A [`rules`](#rule-list-rules) block (within [`rule_list`](#rule-list)) supports
|
|
|
157
157
|
|
|
158
158
|
<a id="rule-list-rules-insert-service"></a>• [`insert_service`](#rule-list-rules-insert-service) - Optional Block<br>Action to forward traffic to external service<br>See [Insert Service](#rule-list-rules-insert-service) below.
|
|
159
159
|
|
|
160
|
-
<a id="rule-list-rules-inside-destinations"></a>• [`inside_destinations`](#rule-list-rules-inside-destinations) - Optional Block<br>
|
|
160
|
+
<a id="rule-list-rules-inside-destinations"></a>• [`inside_destinations`](#rule-list-rules-inside-destinations) - Optional Block<br>Enable this option
|
|
161
161
|
|
|
162
|
-
<a id="rule-list-rules-inside-sources"></a>• [`inside_sources`](#rule-list-rules-inside-sources) - Optional Block<br>
|
|
162
|
+
<a id="rule-list-rules-inside-sources"></a>• [`inside_sources`](#rule-list-rules-inside-sources) - Optional Block<br>Enable this option
|
|
163
163
|
|
|
164
164
|
<a id="rule-list-rules-label-matcher"></a>• [`label_matcher`](#rule-list-rules-label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#rule-list-rules-label-matcher) below.
|
|
165
165
|
|
|
166
166
|
<a id="rule-list-rules-metadata"></a>• [`metadata`](#rule-list-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#rule-list-rules-metadata) below.
|
|
167
167
|
|
|
168
|
-
<a id="rule-list-rules-outside-destinations"></a>• [`outside_destinations`](#rule-list-rules-outside-destinations) - Optional Block<br>
|
|
168
|
+
<a id="rule-list-rules-outside-destinations"></a>• [`outside_destinations`](#rule-list-rules-outside-destinations) - Optional Block<br>Enable this option
|
|
169
169
|
|
|
170
|
-
<a id="rule-list-rules-outside-sources"></a>• [`outside_sources`](#rule-list-rules-outside-sources) - Optional Block<br>
|
|
170
|
+
<a id="rule-list-rules-outside-sources"></a>• [`outside_sources`](#rule-list-rules-outside-sources) - Optional Block<br>Enable this option
|
|
171
171
|
|
|
172
172
|
<a id="rule-list-rules-protocol-port-range"></a>• [`protocol_port_range`](#rule-list-rules-protocol-port-range) - Optional Block<br>Protocol and Port. Protocol and Port ranges<br>See [Protocol Port Range](#rule-list-rules-protocol-port-range) below.
|
|
173
173
|
|
|
@@ -102,7 +102,7 @@ An [`ipsec`](#ipsec) block supports the following:
|
|
|
102
102
|
|
|
103
103
|
An [`ike_parameters`](#ipsec-ike-parameters) block (within [`ipsec`](#ipsec)) supports the following:
|
|
104
104
|
|
|
105
|
-
<a id="ipsec-ike-parameters-dpd-disabled"></a>• [`dpd_disabled`](#ipsec-ike-parameters-dpd-disabled) - Optional Block<br>
|
|
105
|
+
<a id="ipsec-ike-parameters-dpd-disabled"></a>• [`dpd_disabled`](#ipsec-ike-parameters-dpd-disabled) - Optional Block<br>Enable this option
|
|
106
106
|
|
|
107
107
|
<a id="timer-0d12ec"></a>• [`dpd_keep_alive_timer`](#timer-0d12ec) - Optional Block<br>Keepalive Timer<br>See [Dpd Keep Alive Timer](#timer-0d12ec) below.
|
|
108
108
|
|
|
@@ -110,17 +110,17 @@ An [`ike_parameters`](#ipsec-ike-parameters) block (within [`ipsec`](#ipsec)) su
|
|
|
110
110
|
|
|
111
111
|
<a id="ipsec-ike-parameters-ike-phase2-profile"></a>• [`ike_phase2_profile`](#ipsec-ike-parameters-ike-phase2-profile) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [IKE Phase2 Profile](#ipsec-ike-parameters-ike-phase2-profile) below.
|
|
112
112
|
|
|
113
|
-
<a id="ipsec-ike-parameters-initiator"></a>• [`initiator`](#ipsec-ike-parameters-initiator) - Optional Block<br>
|
|
113
|
+
<a id="ipsec-ike-parameters-initiator"></a>• [`initiator`](#ipsec-ike-parameters-initiator) - Optional Block<br>Enable this option
|
|
114
114
|
|
|
115
|
-
<a id="ipsec-ike-parameters-responder"></a>• [`responder`](#ipsec-ike-parameters-responder) - Optional Block<br>
|
|
115
|
+
<a id="ipsec-ike-parameters-responder"></a>• [`responder`](#ipsec-ike-parameters-responder) - Optional Block<br>Enable this option
|
|
116
116
|
|
|
117
117
|
<a id="ipsec-ike-parameters-rm-hostname"></a>• [`rm_hostname`](#ipsec-ike-parameters-rm-hostname) - Optional String<br>Configure an hostname Remote IKE ID
|
|
118
118
|
|
|
119
119
|
<a id="ipsec-ike-parameters-rm-ip-address"></a>• [`rm_ip_address`](#ipsec-ike-parameters-rm-ip-address) - Optional Block<br>IP Address used to specify an IPv4 or IPv6 address<br>See [Rm IP Address](#ipsec-ike-parameters-rm-ip-address) below.
|
|
120
120
|
|
|
121
|
-
<a id="ike-id-adcccf"></a>• [`use_default_local_ike_id`](#ike-id-adcccf) - Optional Block<br>
|
|
121
|
+
<a id="ike-id-adcccf"></a>• [`use_default_local_ike_id`](#ike-id-adcccf) - Optional Block<br>Enable this option
|
|
122
122
|
|
|
123
|
-
<a id="ike-id-5fac9c"></a>• [`use_default_remote_ike_id`](#ike-id-5fac9c) - Optional Block<br>
|
|
123
|
+
<a id="ike-id-5fac9c"></a>• [`use_default_remote_ike_id`](#ike-id-5fac9c) - Optional Block<br>Enable this option
|
|
124
124
|
|
|
125
125
|
#### Ipsec IKE Parameters Dpd Keep Alive Timer
|
|
126
126
|
|
|
@@ -178,9 +178,9 @@ An [`ipsec_tunnel_parameters`](#ipsec-ipsec-tunnel-parameters) block (within [`i
|
|
|
178
178
|
|
|
179
179
|
<a id="ipsec-ipsec-tunnel-parameters-segment"></a>• [`segment`](#ipsec-ipsec-tunnel-parameters-segment) - Optional Block<br>Segment Reference Type. Reference to Segment Object<br>See [Segment](#ipsec-ipsec-tunnel-parameters-segment) below.
|
|
180
180
|
|
|
181
|
-
<a id="network-44cee5"></a>• [`site_local_inside_network`](#network-44cee5) - Optional Block<br>
|
|
181
|
+
<a id="network-44cee5"></a>• [`site_local_inside_network`](#network-44cee5) - Optional Block<br>Enable this option
|
|
182
182
|
|
|
183
|
-
<a id="network-f96b8b"></a>• [`site_local_network`](#network-f96b8b) - Optional Block<br>
|
|
183
|
+
<a id="network-f96b8b"></a>• [`site_local_network`](#network-f96b8b) - Optional Block<br>Enable this option
|
|
184
184
|
|
|
185
185
|
<a id="eps-33e1fb"></a>• [`tunnel_eps`](#eps-33e1fb) - Optional Block<br>Configure tunnel parameters, local and remote IP addresses<br>See [Tunnel Eps](#eps-33e1fb) below.
|
|
186
186
|
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_fast_acl Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_fast_acl (Resource)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ Manages new Fast ACL rule, has specification to match source IP, source port and
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Fast ACL Resource Example
|
|
18
|
-
# Manages
|
|
18
|
+
# Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Fast ACL configuration
|
|
21
21
|
resource "f5xc_fast_acl" "example" {
|
|
@@ -32,17 +32,17 @@ resource "f5xc_fast_acl" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
#
|
|
36
|
-
|
|
37
|
-
# Configure
|
|
35
|
+
# Type establishes a direct reference from one object(the r...
|
|
36
|
+
protocol_policer {
|
|
37
|
+
# Configure protocol_policer settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
40
|
-
|
|
41
|
-
# Configure
|
|
39
|
+
# [OneOf: re_acl, site_acl] Fast ACL for RE. Fast ACL defin...
|
|
40
|
+
re_acl {
|
|
41
|
+
# Configure re_acl settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
44
|
-
|
|
45
|
-
# Configure
|
|
43
|
+
# Enable this option
|
|
44
|
+
all_public_vips {
|
|
45
|
+
# Configure all_public_vips settings
|
|
46
46
|
}
|
|
47
47
|
}
|
|
48
48
|
```
|
|
@@ -66,13 +66,11 @@ resource "f5xc_fast_acl" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="
|
|
69
|
+
<a id="protocol-policer"></a>• [`protocol_policer`](#protocol-policer) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Protocol Policer](#protocol-policer) below for details.
|
|
70
70
|
|
|
71
71
|
-> **One of the following:**
|
|
72
|
-
• <a id="
|
|
73
|
-
<br><br>• <a id="
|
|
74
|
-
|
|
75
|
-
<a id="port"></a>• [`port`](#port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#port) below for details.
|
|
72
|
+
• <a id="re-acl"></a>[`re_acl`](#re-acl) - Optional Block<br>Fast ACL for RE. Fast ACL definition for RE<br>See [RE ACL](#re-acl) below for details.
|
|
73
|
+
<br><br>• <a id="site-acl"></a>[`site_acl`](#site-acl) - Optional Block<br>Fast ACL for Site. Fast ACL definition for Site<br>See [Site ACL](#site-acl) below for details.
|
|
76
74
|
|
|
77
75
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
78
76
|
|
|
@@ -84,91 +82,199 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
84
82
|
|
|
85
83
|
---
|
|
86
84
|
|
|
87
|
-
####
|
|
85
|
+
#### Protocol Policer
|
|
86
|
+
|
|
87
|
+
A [`protocol_policer`](#protocol-policer) block supports the following:
|
|
88
|
+
|
|
89
|
+
<a id="protocol-policer-name"></a>• [`name`](#protocol-policer-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
90
|
+
|
|
91
|
+
<a id="protocol-policer-namespace"></a>• [`namespace`](#protocol-policer-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
92
|
+
|
|
93
|
+
<a id="protocol-policer-tenant"></a>• [`tenant`](#protocol-policer-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
94
|
+
|
|
95
|
+
#### RE ACL
|
|
96
|
+
|
|
97
|
+
A [`re_acl`](#re-acl) block supports the following:
|
|
98
|
+
|
|
99
|
+
<a id="re-acl-all-public-vips"></a>• [`all_public_vips`](#re-acl-all-public-vips) - Optional Block<br>Enable this option
|
|
100
|
+
|
|
101
|
+
<a id="re-acl-default-tenant-vip"></a>• [`default_tenant_vip`](#re-acl-default-tenant-vip) - Optional Block<br>Enable this option
|
|
102
|
+
|
|
103
|
+
<a id="re-acl-fast-acl-rules"></a>• [`fast_acl_rules`](#re-acl-fast-acl-rules) - Optional Block<br>Rules. Fast ACL rules to match<br>See [Fast ACL Rules](#re-acl-fast-acl-rules) below.
|
|
104
|
+
|
|
105
|
+
<a id="re-acl-selected-tenant-vip"></a>• [`selected_tenant_vip`](#re-acl-selected-tenant-vip) - Optional Block<br>Specific Tenant VIP. Select various tenant public VIP(s)<br>See [Selected Tenant VIP](#re-acl-selected-tenant-vip) below.
|
|
106
|
+
|
|
107
|
+
#### RE ACL Fast ACL Rules
|
|
108
|
+
|
|
109
|
+
A [`fast_acl_rules`](#re-acl-fast-acl-rules) block (within [`re_acl`](#re-acl)) supports the following:
|
|
110
|
+
|
|
111
|
+
<a id="re-acl-fast-acl-rules-action"></a>• [`action`](#re-acl-fast-acl-rules-action) - Optional Block<br>FastAclRuleAction specifies possible action to be applied on traffic, possible action include dropping, forwarding or ratelimiting the traffic<br>See [Action](#re-acl-fast-acl-rules-action) below.
|
|
112
|
+
|
|
113
|
+
<a id="re-acl-fast-acl-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#re-acl-fast-acl-rules-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#re-acl-fast-acl-rules-ip-prefix-set) below.
|
|
114
|
+
|
|
115
|
+
<a id="re-acl-fast-acl-rules-metadata"></a>• [`metadata`](#re-acl-fast-acl-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#re-acl-fast-acl-rules-metadata) below.
|
|
116
|
+
|
|
117
|
+
<a id="re-acl-fast-acl-rules-port"></a>• [`port`](#re-acl-fast-acl-rules-port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#re-acl-fast-acl-rules-port) below.
|
|
118
|
+
|
|
119
|
+
<a id="re-acl-fast-acl-rules-prefix"></a>• [`prefix`](#re-acl-fast-acl-rules-prefix) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Prefix](#re-acl-fast-acl-rules-prefix) below.
|
|
120
|
+
|
|
121
|
+
#### RE ACL Fast ACL Rules Action
|
|
122
|
+
|
|
123
|
+
An [`action`](#re-acl-fast-acl-rules-action) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
124
|
+
|
|
125
|
+
<a id="action-09a22d"></a>• [`policer_action`](#action-09a22d) - Optional Block<br>Policer Reference. Reference to policer object<br>See [Policer Action](#action-09a22d) below.
|
|
126
|
+
|
|
127
|
+
<a id="action-1f2796"></a>• [`protocol_policer_action`](#action-1f2796) - Optional Block<br>Protocol Policer Reference. Reference to policer object<br>See [Protocol Policer Action](#action-1f2796) below.
|
|
128
|
+
|
|
129
|
+
<a id="action-551f44"></a>• [`simple_action`](#action-551f44) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] FastAclRuleSimpleAction specifies simple action like PASS or DENY Drop the traffic Forward the traffic
|
|
130
|
+
|
|
131
|
+
#### RE ACL Fast ACL Rules Action Policer Action
|
|
132
|
+
|
|
133
|
+
<a id="deep-64211b"></a>Deeply nested **Action** block collapsed for readability.
|
|
134
|
+
|
|
135
|
+
#### RE ACL Fast ACL Rules Action Policer Action Ref
|
|
136
|
+
|
|
137
|
+
<a id="deep-f6253f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
138
|
+
|
|
139
|
+
#### RE ACL Fast ACL Rules Action Protocol Policer Action
|
|
140
|
+
|
|
141
|
+
<a id="deep-eb61a3"></a>Deeply nested **Action** block collapsed for readability.
|
|
142
|
+
|
|
143
|
+
#### RE ACL Fast ACL Rules Action Protocol Policer Action Ref
|
|
144
|
+
|
|
145
|
+
<a id="deep-8ac143"></a>Deeply nested **Ref** block collapsed for readability.
|
|
146
|
+
|
|
147
|
+
#### RE ACL Fast ACL Rules IP Prefix Set
|
|
148
|
+
|
|
149
|
+
<a id="deep-5eb942"></a>Deeply nested **Set** block collapsed for readability.
|
|
150
|
+
|
|
151
|
+
#### RE ACL Fast ACL Rules IP Prefix Set Ref
|
|
152
|
+
|
|
153
|
+
<a id="deep-8005c0"></a>Deeply nested **Ref** block collapsed for readability.
|
|
154
|
+
|
|
155
|
+
#### RE ACL Fast ACL Rules Metadata
|
|
156
|
+
|
|
157
|
+
A [`metadata`](#re-acl-fast-acl-rules-metadata) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
158
|
+
|
|
159
|
+
<a id="spec-e77730"></a>• [`description_spec`](#spec-e77730) - Optional String<br>Description. Human readable description
|
|
160
|
+
|
|
161
|
+
<a id="re-acl-fast-acl-rules-metadata-name"></a>• [`name`](#re-acl-fast-acl-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
162
|
+
|
|
163
|
+
#### RE ACL Fast ACL Rules Port
|
|
164
|
+
|
|
165
|
+
A [`port`](#re-acl-fast-acl-rules-port) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
166
|
+
|
|
167
|
+
<a id="re-acl-fast-acl-rules-port-all"></a>• [`all`](#re-acl-fast-acl-rules-port-all) - Optional Block<br>Enable this option
|
|
168
|
+
|
|
169
|
+
<a id="re-acl-fast-acl-rules-port-dns"></a>• [`dns`](#re-acl-fast-acl-rules-port-dns) - Optional Block<br>Enable this option
|
|
170
|
+
|
|
171
|
+
<a id="re-acl-fast-acl-rules-port-user-defined"></a>• [`user_defined`](#re-acl-fast-acl-rules-port-user-defined) - Optional Number<br>Matches the user defined port
|
|
172
|
+
|
|
173
|
+
#### RE ACL Fast ACL Rules Prefix
|
|
174
|
+
|
|
175
|
+
A [`prefix`](#re-acl-fast-acl-rules-prefix) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
176
|
+
|
|
177
|
+
<a id="re-acl-fast-acl-rules-prefix-prefix"></a>• [`prefix`](#re-acl-fast-acl-rules-prefix-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
178
|
+
|
|
179
|
+
#### RE ACL Selected Tenant VIP
|
|
180
|
+
|
|
181
|
+
A [`selected_tenant_vip`](#re-acl-selected-tenant-vip) block (within [`re_acl`](#re-acl)) supports the following:
|
|
182
|
+
|
|
183
|
+
<a id="vip-1d894b"></a>• [`default_tenant_vip`](#vip-1d894b) - Optional Bool<br>Include tenant VIP in list of specific VIP(s)
|
|
184
|
+
|
|
185
|
+
<a id="refs-523a60"></a>• [`public_ip_refs`](#refs-523a60) - Optional Block<br>Select additional public VIP(s)<br>See [Public IP Refs](#refs-523a60) below.
|
|
186
|
+
|
|
187
|
+
#### RE ACL Selected Tenant VIP Public IP Refs
|
|
188
|
+
|
|
189
|
+
<a id="deep-2edc68"></a>Deeply nested **Refs** block collapsed for readability.
|
|
190
|
+
|
|
191
|
+
#### Site ACL
|
|
192
|
+
|
|
193
|
+
A [`site_acl`](#site-acl) block supports the following:
|
|
88
194
|
|
|
89
|
-
|
|
195
|
+
<a id="site-acl-all-services"></a>• [`all_services`](#site-acl-all-services) - Optional Block<br>Enable this option
|
|
90
196
|
|
|
91
|
-
<a id="
|
|
197
|
+
<a id="site-acl-fast-acl-rules"></a>• [`fast_acl_rules`](#site-acl-fast-acl-rules) - Optional Block<br>Rules. Fast ACL rules to match<br>See [Fast ACL Rules](#site-acl-fast-acl-rules) below.
|
|
92
198
|
|
|
93
|
-
<a id="
|
|
199
|
+
<a id="site-acl-inside-network"></a>• [`inside_network`](#site-acl-inside-network) - Optional Block<br>Enable this option
|
|
94
200
|
|
|
95
|
-
<a id="
|
|
201
|
+
<a id="site-acl-interface-services"></a>• [`interface_services`](#site-acl-interface-services) - Optional Block<br>Enable this option
|
|
96
202
|
|
|
97
|
-
|
|
203
|
+
<a id="site-acl-outside-network"></a>• [`outside_network`](#site-acl-outside-network) - Optional Block<br>Enable this option
|
|
98
204
|
|
|
99
|
-
|
|
205
|
+
<a id="site-acl-vip-services"></a>• [`vip_services`](#site-acl-vip-services) - Optional Block<br>Enable this option
|
|
100
206
|
|
|
101
|
-
|
|
207
|
+
#### Site ACL Fast ACL Rules
|
|
102
208
|
|
|
103
|
-
|
|
209
|
+
A [`fast_acl_rules`](#site-acl-fast-acl-rules) block (within [`site_acl`](#site-acl)) supports the following:
|
|
104
210
|
|
|
105
|
-
|
|
211
|
+
<a id="site-acl-fast-acl-rules-action"></a>• [`action`](#site-acl-fast-acl-rules-action) - Optional Block<br>FastAclRuleAction specifies possible action to be applied on traffic, possible action include dropping, forwarding or ratelimiting the traffic<br>See [Action](#site-acl-fast-acl-rules-action) below.
|
|
106
212
|
|
|
107
|
-
<a id="
|
|
213
|
+
<a id="site-acl-fast-acl-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#site-acl-fast-acl-rules-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#site-acl-fast-acl-rules-ip-prefix-set) below.
|
|
108
214
|
|
|
109
|
-
<a id="
|
|
215
|
+
<a id="site-acl-fast-acl-rules-metadata"></a>• [`metadata`](#site-acl-fast-acl-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#site-acl-fast-acl-rules-metadata) below.
|
|
110
216
|
|
|
111
|
-
<a id="
|
|
217
|
+
<a id="site-acl-fast-acl-rules-port"></a>• [`port`](#site-acl-fast-acl-rules-port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#site-acl-fast-acl-rules-port) below.
|
|
112
218
|
|
|
113
|
-
<a id="
|
|
219
|
+
<a id="site-acl-fast-acl-rules-prefix"></a>• [`prefix`](#site-acl-fast-acl-rules-prefix) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Prefix](#site-acl-fast-acl-rules-prefix) below.
|
|
114
220
|
|
|
115
|
-
|
|
221
|
+
#### Site ACL Fast ACL Rules Action
|
|
116
222
|
|
|
117
|
-
|
|
223
|
+
An [`action`](#site-acl-fast-acl-rules-action) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
118
224
|
|
|
119
|
-
|
|
225
|
+
<a id="action-2f2674"></a>• [`policer_action`](#action-2f2674) - Optional Block<br>Policer Reference. Reference to policer object<br>See [Policer Action](#action-2f2674) below.
|
|
120
226
|
|
|
121
|
-
<a id="action-
|
|
227
|
+
<a id="action-31624c"></a>• [`protocol_policer_action`](#action-31624c) - Optional Block<br>Protocol Policer Reference. Reference to policer object<br>See [Protocol Policer Action](#action-31624c) below.
|
|
122
228
|
|
|
123
|
-
|
|
229
|
+
<a id="action-5a554b"></a>• [`simple_action`](#action-5a554b) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] FastAclRuleSimpleAction specifies simple action like PASS or DENY Drop the traffic Forward the traffic
|
|
124
230
|
|
|
125
|
-
|
|
231
|
+
#### Site ACL Fast ACL Rules Action Policer Action
|
|
126
232
|
|
|
127
|
-
<a id="
|
|
233
|
+
<a id="deep-a4b94e"></a>Deeply nested **Action** block collapsed for readability.
|
|
128
234
|
|
|
129
|
-
|
|
235
|
+
#### Site ACL Fast ACL Rules Action Policer Action Ref
|
|
130
236
|
|
|
131
|
-
<a id="
|
|
237
|
+
<a id="deep-e41b5f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
132
238
|
|
|
133
|
-
|
|
239
|
+
#### Site ACL Fast ACL Rules Action Protocol Policer Action
|
|
134
240
|
|
|
135
|
-
<a id="
|
|
241
|
+
<a id="deep-a68215"></a>Deeply nested **Action** block collapsed for readability.
|
|
136
242
|
|
|
137
|
-
####
|
|
243
|
+
#### Site ACL Fast ACL Rules Action Protocol Policer Action Ref
|
|
138
244
|
|
|
139
|
-
|
|
245
|
+
<a id="deep-9ef6c0"></a>Deeply nested **Ref** block collapsed for readability.
|
|
140
246
|
|
|
141
|
-
|
|
247
|
+
#### Site ACL Fast ACL Rules IP Prefix Set
|
|
142
248
|
|
|
143
|
-
|
|
249
|
+
<a id="deep-176f71"></a>Deeply nested **Set** block collapsed for readability.
|
|
144
250
|
|
|
145
|
-
|
|
251
|
+
#### Site ACL Fast ACL Rules IP Prefix Set Ref
|
|
146
252
|
|
|
147
|
-
<a id="
|
|
253
|
+
<a id="deep-be6e78"></a>Deeply nested **Ref** block collapsed for readability.
|
|
148
254
|
|
|
149
|
-
|
|
255
|
+
#### Site ACL Fast ACL Rules Metadata
|
|
150
256
|
|
|
151
|
-
|
|
257
|
+
A [`metadata`](#site-acl-fast-acl-rules-metadata) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
152
258
|
|
|
153
|
-
<a id="
|
|
259
|
+
<a id="spec-0b0675"></a>• [`description_spec`](#spec-0b0675) - Optional String<br>Description. Human readable description
|
|
154
260
|
|
|
155
|
-
<a id="
|
|
261
|
+
<a id="site-acl-fast-acl-rules-metadata-name"></a>• [`name`](#site-acl-fast-acl-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
156
262
|
|
|
157
|
-
#### Port
|
|
263
|
+
#### Site ACL Fast ACL Rules Port
|
|
158
264
|
|
|
159
|
-
A [`port`](#port) block supports the following:
|
|
265
|
+
A [`port`](#site-acl-fast-acl-rules-port) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
160
266
|
|
|
161
|
-
<a id="port-all"></a>• [`all`](#port-all) - Optional Block<br>
|
|
267
|
+
<a id="site-acl-fast-acl-rules-port-all"></a>• [`all`](#site-acl-fast-acl-rules-port-all) - Optional Block<br>Enable this option
|
|
162
268
|
|
|
163
|
-
<a id="port-dns"></a>• [`dns`](#port-dns) - Optional Block<br>
|
|
269
|
+
<a id="site-acl-fast-acl-rules-port-dns"></a>• [`dns`](#site-acl-fast-acl-rules-port-dns) - Optional Block<br>Enable this option
|
|
164
270
|
|
|
165
|
-
<a id="
|
|
271
|
+
<a id="defined-3dc64a"></a>• [`user_defined`](#defined-3dc64a) - Optional Number<br>Matches the user defined port
|
|
166
272
|
|
|
167
|
-
#### Prefix
|
|
273
|
+
#### Site ACL Fast ACL Rules Prefix
|
|
168
274
|
|
|
169
|
-
A [`prefix`](#prefix) block supports the following:
|
|
275
|
+
A [`prefix`](#site-acl-fast-acl-rules-prefix) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
170
276
|
|
|
171
|
-
<a id="prefix-prefix"></a>• [`prefix`](#prefix-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
277
|
+
<a id="site-acl-fast-acl-rules-prefix-prefix"></a>• [`prefix`](#site-acl-fast-acl-rules-prefix-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
172
278
|
|
|
173
279
|
#### Timeouts
|
|
174
280
|
|
|
@@ -158,9 +158,9 @@ A [`ref`](#ip-prefix-set-ref) block (within [`ip_prefix_set`](#ip-prefix-set)) s
|
|
|
158
158
|
|
|
159
159
|
A [`port`](#port) block supports the following:
|
|
160
160
|
|
|
161
|
-
<a id="port-all"></a>• [`all`](#port-all) - Optional Block<br>
|
|
161
|
+
<a id="port-all"></a>• [`all`](#port-all) - Optional Block<br>Enable this option
|
|
162
162
|
|
|
163
|
-
<a id="port-dns"></a>• [`dns`](#port-dns) - Optional Block<br>
|
|
163
|
+
<a id="port-dns"></a>• [`dns`](#port-dns) - Optional Block<br>Enable this option
|
|
164
164
|
|
|
165
165
|
<a id="port-user-defined"></a>• [`user_defined`](#port-user-defined) - Optional Number<br>Matches the user defined port
|
|
166
166
|
|