@robinmordasiewicz/f5xc-terraform-mcp 3.11.11 → 3.11.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/index.md +17 -0
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/policer.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/functions/index.md +18 -0
- package/dist/docs/guides/addon-activation.md +4 -4
- package/dist/docs/guides/advanced-http-loadbalancer.md +6 -6
- package/dist/docs/guides/authentication.md +4 -4
- package/dist/docs/guides/blindfold.md +6 -6
- package/dist/docs/guides/http-loadbalancer.md +5 -5
- package/dist/docs/guides/index.md +17 -0
- package/dist/docs/guides/v3-migration.md +3 -3
- package/dist/docs/resources/fast_acl.md +166 -60
- package/dist/docs/resources/index.md +22 -0
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/network_policy.md +37 -210
- package/dist/docs/resources/policer.md +50 -10
- package/dist/docs/resources/site.md +454 -668
- package/dist/metadata/resource-metadata.json +264 -238
- package/package.json +1 -1
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_fast_acl Data Source - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_fast_acl (Data Source)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
# Data Sources
|
|
2
|
+
|
|
3
|
+
Terraform data sources for querying existing F5 Distributed Cloud infrastructure.
|
|
4
|
+
|
|
5
|
+
## Overview
|
|
6
|
+
|
|
7
|
+
Data sources allow you to reference existing F5XC resources in your Terraform configurations without managing them.
|
|
8
|
+
|
|
9
|
+
## Finding Data Sources
|
|
10
|
+
|
|
11
|
+
Use the navigation menu or search function to find specific data sources.
|
|
12
|
+
|
|
13
|
+
## Related Documentation
|
|
14
|
+
|
|
15
|
+
- [Guides](../guides/index.md) - Step-by-step tutorials
|
|
16
|
+
- [Resources](../resources/index.md) - Manage infrastructure
|
|
17
|
+
- [Functions](../functions/index.md) - Provider functions
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_irule Data Source - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "BIG-IP Integration"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages iRule in a given namespace. If one already exists it will give an error. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_irule (Data Source)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages iRule in a given namespace. If one already exists it will give an error. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_network_policy Data Source - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages network policy rule with configured parameters in specified namespace. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_network_policy (Data Source)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages network policy rule with configured parameters in specified namespace. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_policer Data Source - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Service Mesh"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages protocol_policer object, protocol_policer object contains list of L4 protocol match condition and corresponding traffic rate limits. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_policer (Data Source)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages protocol_policer object, protocol_policer object contains list of L4 protocol match condition and corresponding traffic rate limits. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_site Data Source - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Uncategorized"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages a Site resource in F5 Distributed Cloud for
|
|
5
|
+
Manages a Site resource in F5 Distributed Cloud for aws vpc site specification. configuration.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_site (Data Source)
|
|
9
9
|
|
|
10
|
-
Manages a Site resource in F5 Distributed Cloud for
|
|
10
|
+
Manages a Site resource in F5 Distributed Cloud for aws vpc site specification. configuration.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this data source, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
# Functions
|
|
2
|
+
|
|
3
|
+
Provider-defined functions for F5 Distributed Cloud operations.
|
|
4
|
+
|
|
5
|
+
## Overview
|
|
6
|
+
|
|
7
|
+
Functions provide utility operations not available through standard resources.
|
|
8
|
+
|
|
9
|
+
## Available Functions
|
|
10
|
+
|
|
11
|
+
- **[blindfold](blindfold.md)** - Encrypt plaintext using F5XC blindfold encryption
|
|
12
|
+
- **[blindfold_file](blindfold_file.md)** - Encrypt file contents using F5XC blindfold encryption
|
|
13
|
+
|
|
14
|
+
## Related Documentation
|
|
15
|
+
|
|
16
|
+
- [Guides](../guides/index.md) - Step-by-step tutorials
|
|
17
|
+
- [Resources](../resources/index.md) - Manage infrastructure
|
|
18
|
+
- [Data Sources](../data-sources/index.md) - Query existing infrastructure
|
|
@@ -453,7 +453,7 @@ See the [addon-activation example](https://github.com/robinmordasiewicz/terrafor
|
|
|
453
453
|
|
|
454
454
|
## Related Resources
|
|
455
455
|
|
|
456
|
-
- [f5xc_addon_service Data Source](../data-sources/addon_service)
|
|
457
|
-
- [f5xc_addon_service_activation_status Data Source](../data-sources/addon_service_activation_status)
|
|
458
|
-
- [f5xc_addon_subscription Resource](../resources/addon_subscription)
|
|
459
|
-
- [HTTP Load Balancer Resource](../resources/http_loadbalancer)
|
|
456
|
+
- [f5xc_addon_service Data Source](../data-sources/addon_service.md)
|
|
457
|
+
- [f5xc_addon_service_activation_status Data Source](../data-sources/addon_service_activation_status.md)
|
|
458
|
+
- [f5xc_addon_subscription Resource](../resources/addon_subscription.md)
|
|
459
|
+
- [HTTP Load Balancer Resource](../resources/http_loadbalancer.md)
|
|
@@ -9,7 +9,7 @@ description: |-
|
|
|
9
9
|
|
|
10
10
|
# Advanced HTTP Load Balancer Security
|
|
11
11
|
|
|
12
|
-
This guide extends the [basic HTTP Load Balancer guide](http-loadbalancer) with advanced security features for production deployments requiring comprehensive protection against sophisticated threats.
|
|
12
|
+
This guide extends the [basic HTTP Load Balancer guide](http-loadbalancer.md) with advanced security features for production deployments requiring comprehensive protection against sophisticated threats.
|
|
13
13
|
|
|
14
14
|
By following this guide, you'll deploy an HTTP Load Balancer with **11 security controls**:
|
|
15
15
|
|
|
@@ -34,7 +34,7 @@ Before you begin, ensure you have:
|
|
|
34
34
|
- **Namespace** - An existing namespace or permissions to create one
|
|
35
35
|
- **Backend Origin** - Your application server accessible from the internet
|
|
36
36
|
|
|
37
|
-
-> **Tip:** Review the [Authentication Guide](authentication) for detailed credential setup instructions.
|
|
37
|
+
-> **Tip:** Review the [Authentication Guide](authentication.md) for detailed credential setup instructions.
|
|
38
38
|
|
|
39
39
|
## Complete Configuration
|
|
40
40
|
|
|
@@ -558,10 +558,10 @@ rate_limit {
|
|
|
558
558
|
|
|
559
559
|
### Provider Resources
|
|
560
560
|
|
|
561
|
-
- [f5xc_http_loadbalancer](../resources/http_loadbalancer)
|
|
562
|
-
- [f5xc_app_firewall](../resources/app_firewall)
|
|
563
|
-
- [f5xc_origin_pool](../resources/origin_pool)
|
|
564
|
-
- [f5xc_healthcheck](../resources/healthcheck)
|
|
561
|
+
- [f5xc_http_loadbalancer](../resources/http_loadbalancer.md)
|
|
562
|
+
- [f5xc_app_firewall](../resources/app_firewall.md)
|
|
563
|
+
- [f5xc_origin_pool](../resources/origin_pool.md)
|
|
564
|
+
- [f5xc_healthcheck](../resources/healthcheck.md)
|
|
565
565
|
|
|
566
566
|
## Support
|
|
567
567
|
|
|
@@ -377,13 +377,13 @@ F5XC_API_TOKEN="token" # Won't work
|
|
|
377
377
|
|
|
378
378
|
## Next Steps
|
|
379
379
|
|
|
380
|
-
- [HTTP Load Balancer Guide](http-loadbalancer) - Deploy your first load balancer
|
|
381
|
-
- [Blindfold Functions Guide](blindfold) - Secure secret management
|
|
382
|
-
- [Namespace Resource](../resources/namespace) - Organize your resources
|
|
380
|
+
- [HTTP Load Balancer Guide](http-loadbalancer.md) - Deploy your first load balancer
|
|
381
|
+
- [Blindfold Functions Guide](blindfold.md) - Secure secret management
|
|
382
|
+
- [Namespace Resource](../resources/namespace.md) - Organize your resources
|
|
383
383
|
|
|
384
384
|
## Support
|
|
385
385
|
|
|
386
|
-
- [Provider Documentation](../index)
|
|
386
|
+
- [Provider Documentation](../index.md)
|
|
387
387
|
- [F5 Distributed Cloud Docs](https://docs.cloud.f5.com/)
|
|
388
388
|
- [F5 Credentials Guide](https://docs.cloud.f5.com/docs-v2/administration/how-tos/user-mgmt/Credentials)
|
|
389
389
|
- [GitHub Issues](https://github.com/robinmordasiewicz/terraform-provider-f5xc/issues)
|
|
@@ -505,15 +505,15 @@ Type `yes` to confirm destruction.
|
|
|
505
505
|
|
|
506
506
|
Now that you understand blindfold encryption, explore related resources:
|
|
507
507
|
|
|
508
|
-
- [Certificate Resource](../resources/certificate) - Full certificate management
|
|
509
|
-
- [Cloud Credentials Resource](../resources/cloud_credentials) - Cloud provider authentication
|
|
510
|
-
- [HTTP Load Balancer Guide](./http-loadbalancer) - Use certificates in load balancers
|
|
511
|
-
- [blindfold Function Reference](../functions/blindfold) - Function API details
|
|
512
|
-
- [blindfold_file Function Reference](../functions/blindfold_file) - Function API details
|
|
508
|
+
- [Certificate Resource](../resources/certificate.md) - Full certificate management
|
|
509
|
+
- [Cloud Credentials Resource](../resources/cloud_credentials.md) - Cloud provider authentication
|
|
510
|
+
- [HTTP Load Balancer Guide](./http-loadbalancer.md) - Use certificates in load balancers
|
|
511
|
+
- [blindfold Function Reference](../functions/blindfold.md) - Function API details
|
|
512
|
+
- [blindfold_file Function Reference](../functions/blindfold_file.md) - Function API details
|
|
513
513
|
|
|
514
514
|
## Support
|
|
515
515
|
|
|
516
|
-
- **Provider Documentation:** [F5XC Provider](../index)
|
|
516
|
+
- **Provider Documentation:** [F5XC Provider](../index.md)
|
|
517
517
|
- **F5 Documentation:** [F5 Distributed Cloud Docs](https://docs.cloud.f5.com/)
|
|
518
518
|
- **Secret Management:** [F5XC Secret Management](https://docs.cloud.f5.com/docs/how-to/secrets-management)
|
|
519
519
|
- **Issues:** [GitHub Issues](https://github.com/robinmordasiewicz/terraform-provider-f5xc/issues)
|
|
@@ -262,13 +262,13 @@ Type `yes` to confirm destruction.
|
|
|
262
262
|
|
|
263
263
|
Now that you have a basic HTTP Load Balancer deployed, consider exploring:
|
|
264
264
|
|
|
265
|
-
- [Origin Pool Resource](../resources/origin_pool) - Add multiple origins for redundancy
|
|
266
|
-
- [App Firewall Resource](../resources/app_firewall) - Customize WAF rules
|
|
267
|
-
- [Service Policy Resource](../resources/service_policy) - Add custom access control
|
|
268
|
-
- [TCP Load Balancer Resource](../resources/tcp_loadbalancer) - For non-HTTP applications
|
|
265
|
+
- [Origin Pool Resource](../resources/origin_pool.md) - Add multiple origins for redundancy
|
|
266
|
+
- [App Firewall Resource](../resources/app_firewall.md) - Customize WAF rules
|
|
267
|
+
- [Service Policy Resource](../resources/service_policy.md) - Add custom access control
|
|
268
|
+
- [TCP Load Balancer Resource](../resources/tcp_loadbalancer.md) - For non-HTTP applications
|
|
269
269
|
|
|
270
270
|
## Support
|
|
271
271
|
|
|
272
|
-
- **Provider Documentation:** [F5XC Provider](../index)
|
|
272
|
+
- **Provider Documentation:** [F5XC Provider](../index.md)
|
|
273
273
|
- **F5 Documentation:** [F5 Distributed Cloud Docs](https://docs.cloud.f5.com/)
|
|
274
274
|
- **Issues:** [GitHub Issues](https://github.com/robinmordasiewicz/terraform-provider-f5xc/issues)
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
# Guides
|
|
2
|
+
|
|
3
|
+
Step-by-step tutorials for common F5 Distributed Cloud scenarios.
|
|
4
|
+
|
|
5
|
+
## Available Guides
|
|
6
|
+
|
|
7
|
+
- [HTTP Load Balancer](http-loadbalancer.md) - Deploy a basic HTTP Load Balancer
|
|
8
|
+
- [Advanced HTTP Load Balancer Security](advanced-http-loadbalancer.md) - Production-ready security features
|
|
9
|
+
- [Authentication](authentication.md) - Configure provider authentication
|
|
10
|
+
- [Blindfold Encryption](blindfold.md) - Secure secret management
|
|
11
|
+
- [Addon Service Activation](addon-activation.md) - Activate and manage addon services
|
|
12
|
+
|
|
13
|
+
## Related Documentation
|
|
14
|
+
|
|
15
|
+
- [Resources](../resources/index.md)
|
|
16
|
+
- [Data Sources](../data-sources/index.md)
|
|
17
|
+
- [Functions](../functions/index.md)
|
|
@@ -144,6 +144,6 @@ If you have automation relying on resource subcategories:
|
|
|
144
144
|
|
|
145
145
|
## Related Guides
|
|
146
146
|
|
|
147
|
-
- [Authentication Guide](authentication)
|
|
148
|
-
- [HTTP Load Balancer Guide](http-loadbalancer)
|
|
149
|
-
- [Blindfold Encryption Guide](blindfold)
|
|
147
|
+
- [Authentication Guide](authentication.md)
|
|
148
|
+
- [HTTP Load Balancer Guide](http-loadbalancer.md)
|
|
149
|
+
- [Blindfold Encryption Guide](blindfold.md)
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_fast_acl Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_fast_acl (Resource)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ Manages new Fast ACL rule, has specification to match source IP, source port and
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Fast ACL Resource Example
|
|
18
|
-
# Manages
|
|
18
|
+
# Manages object, object contains rules to protect site from denial of service It has destination{destination IP, destination port) and references to. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Fast ACL configuration
|
|
21
21
|
resource "f5xc_fast_acl" "example" {
|
|
@@ -32,17 +32,17 @@ resource "f5xc_fast_acl" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
#
|
|
36
|
-
|
|
37
|
-
# Configure
|
|
35
|
+
# Type establishes a direct reference from one object(the r...
|
|
36
|
+
protocol_policer {
|
|
37
|
+
# Configure protocol_policer settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
40
|
-
|
|
41
|
-
# Configure
|
|
39
|
+
# [OneOf: re_acl, site_acl] Fast ACL for RE. Fast ACL defin...
|
|
40
|
+
re_acl {
|
|
41
|
+
# Configure re_acl settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
44
|
-
|
|
45
|
-
# Configure
|
|
43
|
+
# Enable this option
|
|
44
|
+
all_public_vips {
|
|
45
|
+
# Configure all_public_vips settings
|
|
46
46
|
}
|
|
47
47
|
}
|
|
48
48
|
```
|
|
@@ -66,13 +66,11 @@ resource "f5xc_fast_acl" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="
|
|
69
|
+
<a id="protocol-policer"></a>• [`protocol_policer`](#protocol-policer) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Protocol Policer](#protocol-policer) below for details.
|
|
70
70
|
|
|
71
71
|
-> **One of the following:**
|
|
72
|
-
• <a id="
|
|
73
|
-
<br><br>• <a id="
|
|
74
|
-
|
|
75
|
-
<a id="port"></a>• [`port`](#port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#port) below for details.
|
|
72
|
+
• <a id="re-acl"></a>[`re_acl`](#re-acl) - Optional Block<br>Fast ACL for RE. Fast ACL definition for RE<br>See [RE ACL](#re-acl) below for details.
|
|
73
|
+
<br><br>• <a id="site-acl"></a>[`site_acl`](#site-acl) - Optional Block<br>Fast ACL for Site. Fast ACL definition for Site<br>See [Site ACL](#site-acl) below for details.
|
|
76
74
|
|
|
77
75
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
78
76
|
|
|
@@ -84,91 +82,199 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
84
82
|
|
|
85
83
|
---
|
|
86
84
|
|
|
87
|
-
####
|
|
85
|
+
#### Protocol Policer
|
|
86
|
+
|
|
87
|
+
A [`protocol_policer`](#protocol-policer) block supports the following:
|
|
88
|
+
|
|
89
|
+
<a id="protocol-policer-name"></a>• [`name`](#protocol-policer-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
90
|
+
|
|
91
|
+
<a id="protocol-policer-namespace"></a>• [`namespace`](#protocol-policer-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
92
|
+
|
|
93
|
+
<a id="protocol-policer-tenant"></a>• [`tenant`](#protocol-policer-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
94
|
+
|
|
95
|
+
#### RE ACL
|
|
96
|
+
|
|
97
|
+
A [`re_acl`](#re-acl) block supports the following:
|
|
98
|
+
|
|
99
|
+
<a id="re-acl-all-public-vips"></a>• [`all_public_vips`](#re-acl-all-public-vips) - Optional Block<br>Enable this option
|
|
100
|
+
|
|
101
|
+
<a id="re-acl-default-tenant-vip"></a>• [`default_tenant_vip`](#re-acl-default-tenant-vip) - Optional Block<br>Enable this option
|
|
102
|
+
|
|
103
|
+
<a id="re-acl-fast-acl-rules"></a>• [`fast_acl_rules`](#re-acl-fast-acl-rules) - Optional Block<br>Rules. Fast ACL rules to match<br>See [Fast ACL Rules](#re-acl-fast-acl-rules) below.
|
|
104
|
+
|
|
105
|
+
<a id="re-acl-selected-tenant-vip"></a>• [`selected_tenant_vip`](#re-acl-selected-tenant-vip) - Optional Block<br>Specific Tenant VIP. Select various tenant public VIP(s)<br>See [Selected Tenant VIP](#re-acl-selected-tenant-vip) below.
|
|
106
|
+
|
|
107
|
+
#### RE ACL Fast ACL Rules
|
|
108
|
+
|
|
109
|
+
A [`fast_acl_rules`](#re-acl-fast-acl-rules) block (within [`re_acl`](#re-acl)) supports the following:
|
|
110
|
+
|
|
111
|
+
<a id="re-acl-fast-acl-rules-action"></a>• [`action`](#re-acl-fast-acl-rules-action) - Optional Block<br>FastAclRuleAction specifies possible action to be applied on traffic, possible action include dropping, forwarding or ratelimiting the traffic<br>See [Action](#re-acl-fast-acl-rules-action) below.
|
|
112
|
+
|
|
113
|
+
<a id="re-acl-fast-acl-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#re-acl-fast-acl-rules-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#re-acl-fast-acl-rules-ip-prefix-set) below.
|
|
114
|
+
|
|
115
|
+
<a id="re-acl-fast-acl-rules-metadata"></a>• [`metadata`](#re-acl-fast-acl-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#re-acl-fast-acl-rules-metadata) below.
|
|
116
|
+
|
|
117
|
+
<a id="re-acl-fast-acl-rules-port"></a>• [`port`](#re-acl-fast-acl-rules-port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#re-acl-fast-acl-rules-port) below.
|
|
118
|
+
|
|
119
|
+
<a id="re-acl-fast-acl-rules-prefix"></a>• [`prefix`](#re-acl-fast-acl-rules-prefix) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Prefix](#re-acl-fast-acl-rules-prefix) below.
|
|
120
|
+
|
|
121
|
+
#### RE ACL Fast ACL Rules Action
|
|
122
|
+
|
|
123
|
+
An [`action`](#re-acl-fast-acl-rules-action) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
124
|
+
|
|
125
|
+
<a id="action-09a22d"></a>• [`policer_action`](#action-09a22d) - Optional Block<br>Policer Reference. Reference to policer object<br>See [Policer Action](#action-09a22d) below.
|
|
126
|
+
|
|
127
|
+
<a id="action-1f2796"></a>• [`protocol_policer_action`](#action-1f2796) - Optional Block<br>Protocol Policer Reference. Reference to policer object<br>See [Protocol Policer Action](#action-1f2796) below.
|
|
128
|
+
|
|
129
|
+
<a id="action-551f44"></a>• [`simple_action`](#action-551f44) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] FastAclRuleSimpleAction specifies simple action like PASS or DENY Drop the traffic Forward the traffic
|
|
130
|
+
|
|
131
|
+
#### RE ACL Fast ACL Rules Action Policer Action
|
|
132
|
+
|
|
133
|
+
<a id="deep-64211b"></a>Deeply nested **Action** block collapsed for readability.
|
|
134
|
+
|
|
135
|
+
#### RE ACL Fast ACL Rules Action Policer Action Ref
|
|
136
|
+
|
|
137
|
+
<a id="deep-f6253f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
138
|
+
|
|
139
|
+
#### RE ACL Fast ACL Rules Action Protocol Policer Action
|
|
140
|
+
|
|
141
|
+
<a id="deep-eb61a3"></a>Deeply nested **Action** block collapsed for readability.
|
|
142
|
+
|
|
143
|
+
#### RE ACL Fast ACL Rules Action Protocol Policer Action Ref
|
|
144
|
+
|
|
145
|
+
<a id="deep-8ac143"></a>Deeply nested **Ref** block collapsed for readability.
|
|
146
|
+
|
|
147
|
+
#### RE ACL Fast ACL Rules IP Prefix Set
|
|
148
|
+
|
|
149
|
+
<a id="deep-5eb942"></a>Deeply nested **Set** block collapsed for readability.
|
|
150
|
+
|
|
151
|
+
#### RE ACL Fast ACL Rules IP Prefix Set Ref
|
|
152
|
+
|
|
153
|
+
<a id="deep-8005c0"></a>Deeply nested **Ref** block collapsed for readability.
|
|
154
|
+
|
|
155
|
+
#### RE ACL Fast ACL Rules Metadata
|
|
156
|
+
|
|
157
|
+
A [`metadata`](#re-acl-fast-acl-rules-metadata) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
158
|
+
|
|
159
|
+
<a id="spec-e77730"></a>• [`description_spec`](#spec-e77730) - Optional String<br>Description. Human readable description
|
|
160
|
+
|
|
161
|
+
<a id="re-acl-fast-acl-rules-metadata-name"></a>• [`name`](#re-acl-fast-acl-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
162
|
+
|
|
163
|
+
#### RE ACL Fast ACL Rules Port
|
|
164
|
+
|
|
165
|
+
A [`port`](#re-acl-fast-acl-rules-port) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
166
|
+
|
|
167
|
+
<a id="re-acl-fast-acl-rules-port-all"></a>• [`all`](#re-acl-fast-acl-rules-port-all) - Optional Block<br>Enable this option
|
|
168
|
+
|
|
169
|
+
<a id="re-acl-fast-acl-rules-port-dns"></a>• [`dns`](#re-acl-fast-acl-rules-port-dns) - Optional Block<br>Enable this option
|
|
170
|
+
|
|
171
|
+
<a id="re-acl-fast-acl-rules-port-user-defined"></a>• [`user_defined`](#re-acl-fast-acl-rules-port-user-defined) - Optional Number<br>Matches the user defined port
|
|
172
|
+
|
|
173
|
+
#### RE ACL Fast ACL Rules Prefix
|
|
174
|
+
|
|
175
|
+
A [`prefix`](#re-acl-fast-acl-rules-prefix) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
176
|
+
|
|
177
|
+
<a id="re-acl-fast-acl-rules-prefix-prefix"></a>• [`prefix`](#re-acl-fast-acl-rules-prefix-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
178
|
+
|
|
179
|
+
#### RE ACL Selected Tenant VIP
|
|
180
|
+
|
|
181
|
+
A [`selected_tenant_vip`](#re-acl-selected-tenant-vip) block (within [`re_acl`](#re-acl)) supports the following:
|
|
182
|
+
|
|
183
|
+
<a id="vip-1d894b"></a>• [`default_tenant_vip`](#vip-1d894b) - Optional Bool<br>Include tenant VIP in list of specific VIP(s)
|
|
184
|
+
|
|
185
|
+
<a id="refs-523a60"></a>• [`public_ip_refs`](#refs-523a60) - Optional Block<br>Select additional public VIP(s)<br>See [Public IP Refs](#refs-523a60) below.
|
|
186
|
+
|
|
187
|
+
#### RE ACL Selected Tenant VIP Public IP Refs
|
|
188
|
+
|
|
189
|
+
<a id="deep-2edc68"></a>Deeply nested **Refs** block collapsed for readability.
|
|
190
|
+
|
|
191
|
+
#### Site ACL
|
|
192
|
+
|
|
193
|
+
A [`site_acl`](#site-acl) block supports the following:
|
|
88
194
|
|
|
89
|
-
|
|
195
|
+
<a id="site-acl-all-services"></a>• [`all_services`](#site-acl-all-services) - Optional Block<br>Enable this option
|
|
90
196
|
|
|
91
|
-
<a id="
|
|
197
|
+
<a id="site-acl-fast-acl-rules"></a>• [`fast_acl_rules`](#site-acl-fast-acl-rules) - Optional Block<br>Rules. Fast ACL rules to match<br>See [Fast ACL Rules](#site-acl-fast-acl-rules) below.
|
|
92
198
|
|
|
93
|
-
<a id="
|
|
199
|
+
<a id="site-acl-inside-network"></a>• [`inside_network`](#site-acl-inside-network) - Optional Block<br>Enable this option
|
|
94
200
|
|
|
95
|
-
<a id="
|
|
201
|
+
<a id="site-acl-interface-services"></a>• [`interface_services`](#site-acl-interface-services) - Optional Block<br>Enable this option
|
|
96
202
|
|
|
97
|
-
|
|
203
|
+
<a id="site-acl-outside-network"></a>• [`outside_network`](#site-acl-outside-network) - Optional Block<br>Enable this option
|
|
98
204
|
|
|
99
|
-
|
|
205
|
+
<a id="site-acl-vip-services"></a>• [`vip_services`](#site-acl-vip-services) - Optional Block<br>Enable this option
|
|
100
206
|
|
|
101
|
-
|
|
207
|
+
#### Site ACL Fast ACL Rules
|
|
102
208
|
|
|
103
|
-
|
|
209
|
+
A [`fast_acl_rules`](#site-acl-fast-acl-rules) block (within [`site_acl`](#site-acl)) supports the following:
|
|
104
210
|
|
|
105
|
-
|
|
211
|
+
<a id="site-acl-fast-acl-rules-action"></a>• [`action`](#site-acl-fast-acl-rules-action) - Optional Block<br>FastAclRuleAction specifies possible action to be applied on traffic, possible action include dropping, forwarding or ratelimiting the traffic<br>See [Action](#site-acl-fast-acl-rules-action) below.
|
|
106
212
|
|
|
107
|
-
<a id="
|
|
213
|
+
<a id="site-acl-fast-acl-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#site-acl-fast-acl-rules-ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#site-acl-fast-acl-rules-ip-prefix-set) below.
|
|
108
214
|
|
|
109
|
-
<a id="
|
|
215
|
+
<a id="site-acl-fast-acl-rules-metadata"></a>• [`metadata`](#site-acl-fast-acl-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#site-acl-fast-acl-rules-metadata) below.
|
|
110
216
|
|
|
111
|
-
<a id="
|
|
217
|
+
<a id="site-acl-fast-acl-rules-port"></a>• [`port`](#site-acl-fast-acl-rules-port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#site-acl-fast-acl-rules-port) below.
|
|
112
218
|
|
|
113
|
-
<a id="
|
|
219
|
+
<a id="site-acl-fast-acl-rules-prefix"></a>• [`prefix`](#site-acl-fast-acl-rules-prefix) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Prefix](#site-acl-fast-acl-rules-prefix) below.
|
|
114
220
|
|
|
115
|
-
|
|
221
|
+
#### Site ACL Fast ACL Rules Action
|
|
116
222
|
|
|
117
|
-
|
|
223
|
+
An [`action`](#site-acl-fast-acl-rules-action) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
118
224
|
|
|
119
|
-
|
|
225
|
+
<a id="action-2f2674"></a>• [`policer_action`](#action-2f2674) - Optional Block<br>Policer Reference. Reference to policer object<br>See [Policer Action](#action-2f2674) below.
|
|
120
226
|
|
|
121
|
-
<a id="action-
|
|
227
|
+
<a id="action-31624c"></a>• [`protocol_policer_action`](#action-31624c) - Optional Block<br>Protocol Policer Reference. Reference to policer object<br>See [Protocol Policer Action](#action-31624c) below.
|
|
122
228
|
|
|
123
|
-
|
|
229
|
+
<a id="action-5a554b"></a>• [`simple_action`](#action-5a554b) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] FastAclRuleSimpleAction specifies simple action like PASS or DENY Drop the traffic Forward the traffic
|
|
124
230
|
|
|
125
|
-
|
|
231
|
+
#### Site ACL Fast ACL Rules Action Policer Action
|
|
126
232
|
|
|
127
|
-
<a id="
|
|
233
|
+
<a id="deep-a4b94e"></a>Deeply nested **Action** block collapsed for readability.
|
|
128
234
|
|
|
129
|
-
|
|
235
|
+
#### Site ACL Fast ACL Rules Action Policer Action Ref
|
|
130
236
|
|
|
131
|
-
<a id="
|
|
237
|
+
<a id="deep-e41b5f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
132
238
|
|
|
133
|
-
|
|
239
|
+
#### Site ACL Fast ACL Rules Action Protocol Policer Action
|
|
134
240
|
|
|
135
|
-
<a id="
|
|
241
|
+
<a id="deep-a68215"></a>Deeply nested **Action** block collapsed for readability.
|
|
136
242
|
|
|
137
|
-
####
|
|
243
|
+
#### Site ACL Fast ACL Rules Action Protocol Policer Action Ref
|
|
138
244
|
|
|
139
|
-
|
|
245
|
+
<a id="deep-9ef6c0"></a>Deeply nested **Ref** block collapsed for readability.
|
|
140
246
|
|
|
141
|
-
|
|
247
|
+
#### Site ACL Fast ACL Rules IP Prefix Set
|
|
142
248
|
|
|
143
|
-
|
|
249
|
+
<a id="deep-176f71"></a>Deeply nested **Set** block collapsed for readability.
|
|
144
250
|
|
|
145
|
-
|
|
251
|
+
#### Site ACL Fast ACL Rules IP Prefix Set Ref
|
|
146
252
|
|
|
147
|
-
<a id="
|
|
253
|
+
<a id="deep-be6e78"></a>Deeply nested **Ref** block collapsed for readability.
|
|
148
254
|
|
|
149
|
-
|
|
255
|
+
#### Site ACL Fast ACL Rules Metadata
|
|
150
256
|
|
|
151
|
-
|
|
257
|
+
A [`metadata`](#site-acl-fast-acl-rules-metadata) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
152
258
|
|
|
153
|
-
<a id="
|
|
259
|
+
<a id="spec-0b0675"></a>• [`description_spec`](#spec-0b0675) - Optional String<br>Description. Human readable description
|
|
154
260
|
|
|
155
|
-
<a id="
|
|
261
|
+
<a id="site-acl-fast-acl-rules-metadata-name"></a>• [`name`](#site-acl-fast-acl-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
156
262
|
|
|
157
|
-
#### Port
|
|
263
|
+
#### Site ACL Fast ACL Rules Port
|
|
158
264
|
|
|
159
|
-
A [`port`](#port) block supports the following:
|
|
265
|
+
A [`port`](#site-acl-fast-acl-rules-port) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
160
266
|
|
|
161
|
-
<a id="port-all"></a>• [`all`](#port-all) - Optional Block<br>Enable this option
|
|
267
|
+
<a id="site-acl-fast-acl-rules-port-all"></a>• [`all`](#site-acl-fast-acl-rules-port-all) - Optional Block<br>Enable this option
|
|
162
268
|
|
|
163
|
-
<a id="port-dns"></a>• [`dns`](#port-dns) - Optional Block<br>Enable this option
|
|
269
|
+
<a id="site-acl-fast-acl-rules-port-dns"></a>• [`dns`](#site-acl-fast-acl-rules-port-dns) - Optional Block<br>Enable this option
|
|
164
270
|
|
|
165
|
-
<a id="
|
|
271
|
+
<a id="defined-3dc64a"></a>• [`user_defined`](#defined-3dc64a) - Optional Number<br>Matches the user defined port
|
|
166
272
|
|
|
167
|
-
#### Prefix
|
|
273
|
+
#### Site ACL Fast ACL Rules Prefix
|
|
168
274
|
|
|
169
|
-
A [`prefix`](#prefix) block supports the following:
|
|
275
|
+
A [`prefix`](#site-acl-fast-acl-rules-prefix) block (within [`site_acl.fast_acl_rules`](#site-acl-fast-acl-rules)) supports the following:
|
|
170
276
|
|
|
171
|
-
<a id="prefix-prefix"></a>• [`prefix`](#prefix-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
277
|
+
<a id="site-acl-fast-acl-rules-prefix-prefix"></a>• [`prefix`](#site-acl-fast-acl-rules-prefix-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
172
278
|
|
|
173
279
|
#### Timeouts
|
|
174
280
|
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
# Resources
|
|
2
|
+
|
|
3
|
+
Terraform resources for managing F5 Distributed Cloud infrastructure.
|
|
4
|
+
|
|
5
|
+
## Overview
|
|
6
|
+
|
|
7
|
+
This provider includes 150+ resources across all F5XC domains:
|
|
8
|
+
|
|
9
|
+
- **Security**: WAF, DDoS protection, certificates
|
|
10
|
+
- **Networking**: Load balancers, origin pools, DNS
|
|
11
|
+
- **Infrastructure**: Sites, service mesh, cloud infrastructure
|
|
12
|
+
- **Platform**: Tenants, identity, authentication
|
|
13
|
+
|
|
14
|
+
## Finding Resources
|
|
15
|
+
|
|
16
|
+
Use the navigation menu or search function to find specific resources.
|
|
17
|
+
|
|
18
|
+
## Related Documentation
|
|
19
|
+
|
|
20
|
+
- [Guides](../guides/index.md) - Step-by-step tutorials
|
|
21
|
+
- [Data Sources](../data-sources/index.md) - Read existing infrastructure
|
|
22
|
+
- [Functions](../functions/index.md) - Provider functions
|