@robinmordasiewicz/f5xc-terraform-mcp 3.5.0 → 3.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +283 -104
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -32,7 +32,7 @@ resource "f5xc_external_connector" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
#
|
|
35
|
+
# Type establishes a direct reference from one object(the r...
|
|
36
36
|
ce_site_reference {
|
|
37
37
|
# Configure ce_site_reference settings
|
|
38
38
|
}
|
|
@@ -40,7 +40,7 @@ resource "f5xc_external_connector" "example" {
|
|
|
40
40
|
ipsec {
|
|
41
41
|
# Configure ipsec settings
|
|
42
42
|
}
|
|
43
|
-
# IKE
|
|
43
|
+
# IKE configuration parameters required for IPsec Connectio...
|
|
44
44
|
ike_parameters {
|
|
45
45
|
# Configure ike_parameters settings
|
|
46
46
|
}
|
|
@@ -66,7 +66,7 @@ resource "f5xc_external_connector" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="ce-site-reference"></a>• [`ce_site_reference`](#ce-site-reference) - Optional Block<br>
|
|
69
|
+
<a id="ce-site-reference"></a>• [`ce_site_reference`](#ce-site-reference) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [CE Site Reference](#ce-site-reference) below for details.
|
|
70
70
|
|
|
71
71
|
<a id="ipsec"></a>• [`ipsec`](#ipsec) - Optional Block<br>IPsec. External Connector with IPsec tunnel<br>See [Ipsec](#ipsec) below for details.
|
|
72
72
|
|
|
@@ -84,43 +84,43 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
84
84
|
|
|
85
85
|
A [`ce_site_reference`](#ce-site-reference) block supports the following:
|
|
86
86
|
|
|
87
|
-
<a id="ce-site-reference-name"></a>• [`name`](#ce-site-reference-name) - Optional String<br>
|
|
87
|
+
<a id="ce-site-reference-name"></a>• [`name`](#ce-site-reference-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
88
88
|
|
|
89
|
-
<a id="ce-site-reference-namespace"></a>• [`namespace`](#ce-site-reference-namespace) - Optional String<br>
|
|
89
|
+
<a id="ce-site-reference-namespace"></a>• [`namespace`](#ce-site-reference-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
90
90
|
|
|
91
|
-
<a id="ce-site-reference-tenant"></a>• [`tenant`](#ce-site-reference-tenant) - Optional String<br>
|
|
91
|
+
<a id="ce-site-reference-tenant"></a>• [`tenant`](#ce-site-reference-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
92
92
|
|
|
93
93
|
#### Ipsec
|
|
94
94
|
|
|
95
95
|
An [`ipsec`](#ipsec) block supports the following:
|
|
96
96
|
|
|
97
|
-
<a id="ipsec-ike-parameters"></a>• [`ike_parameters`](#ipsec-ike-parameters) - Optional Block<br>IKE
|
|
97
|
+
<a id="ipsec-ike-parameters"></a>• [`ike_parameters`](#ipsec-ike-parameters) - Optional Block<br>IKE configuration parameters required for IPsec Connection type<br>See [IKE Parameters](#ipsec-ike-parameters) below.
|
|
98
98
|
|
|
99
|
-
<a id="ipsec-ipsec-tunnel-parameters"></a>• [`ipsec_tunnel_parameters`](#ipsec-ipsec-tunnel-parameters) - Optional Block<br>
|
|
99
|
+
<a id="ipsec-ipsec-tunnel-parameters"></a>• [`ipsec_tunnel_parameters`](#ipsec-ipsec-tunnel-parameters) - Optional Block<br>In this section, we will configure the tunnel parameters, source, destination, IP addresses, and segment<br>See [Ipsec Tunnel Parameters](#ipsec-ipsec-tunnel-parameters) below.
|
|
100
100
|
|
|
101
101
|
#### Ipsec IKE Parameters
|
|
102
102
|
|
|
103
103
|
An [`ike_parameters`](#ipsec-ike-parameters) block (within [`ipsec`](#ipsec)) supports the following:
|
|
104
104
|
|
|
105
|
-
<a id="ipsec-ike-parameters-dpd-disabled"></a>• [`dpd_disabled`](#ipsec-ike-parameters-dpd-disabled) - Optional Block<br>
|
|
105
|
+
<a id="ipsec-ike-parameters-dpd-disabled"></a>• [`dpd_disabled`](#ipsec-ike-parameters-dpd-disabled) - Optional Block<br>Can be used for messages where no values are needed
|
|
106
106
|
|
|
107
107
|
<a id="timer-0d12ec"></a>• [`dpd_keep_alive_timer`](#timer-0d12ec) - Optional Block<br>Keepalive Timer<br>See [Dpd Keep Alive Timer](#timer-0d12ec) below.
|
|
108
108
|
|
|
109
|
-
<a id="ipsec-ike-parameters-ike-phase1-profile"></a>• [`ike_phase1_profile`](#ipsec-ike-parameters-ike-phase1-profile) - Optional Block<br>
|
|
109
|
+
<a id="ipsec-ike-parameters-ike-phase1-profile"></a>• [`ike_phase1_profile`](#ipsec-ike-parameters-ike-phase1-profile) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [IKE Phase1 Profile](#ipsec-ike-parameters-ike-phase1-profile) below.
|
|
110
110
|
|
|
111
|
-
<a id="ipsec-ike-parameters-ike-phase2-profile"></a>• [`ike_phase2_profile`](#ipsec-ike-parameters-ike-phase2-profile) - Optional Block<br>
|
|
111
|
+
<a id="ipsec-ike-parameters-ike-phase2-profile"></a>• [`ike_phase2_profile`](#ipsec-ike-parameters-ike-phase2-profile) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [IKE Phase2 Profile](#ipsec-ike-parameters-ike-phase2-profile) below.
|
|
112
112
|
|
|
113
|
-
<a id="ipsec-ike-parameters-initiator"></a>• [`initiator`](#ipsec-ike-parameters-initiator) - Optional Block<br>
|
|
113
|
+
<a id="ipsec-ike-parameters-initiator"></a>• [`initiator`](#ipsec-ike-parameters-initiator) - Optional Block<br>Can be used for messages where no values are needed
|
|
114
114
|
|
|
115
|
-
<a id="ipsec-ike-parameters-responder"></a>• [`responder`](#ipsec-ike-parameters-responder) - Optional Block<br>
|
|
115
|
+
<a id="ipsec-ike-parameters-responder"></a>• [`responder`](#ipsec-ike-parameters-responder) - Optional Block<br>Can be used for messages where no values are needed
|
|
116
116
|
|
|
117
|
-
<a id="ipsec-ike-parameters-rm-hostname"></a>• [`rm_hostname`](#ipsec-ike-parameters-rm-hostname) - Optional String<br>
|
|
117
|
+
<a id="ipsec-ike-parameters-rm-hostname"></a>• [`rm_hostname`](#ipsec-ike-parameters-rm-hostname) - Optional String<br>Configure an hostname Remote IKE ID
|
|
118
118
|
|
|
119
|
-
<a id="ipsec-ike-parameters-rm-ip-address"></a>• [`rm_ip_address`](#ipsec-ike-parameters-rm-ip-address) - Optional Block<br>IP Address
|
|
119
|
+
<a id="ipsec-ike-parameters-rm-ip-address"></a>• [`rm_ip_address`](#ipsec-ike-parameters-rm-ip-address) - Optional Block<br>IP Address used to specify an IPv4 or IPv6 address<br>See [Rm IP Address](#ipsec-ike-parameters-rm-ip-address) below.
|
|
120
120
|
|
|
121
|
-
<a id="ike-id-adcccf"></a>• [`use_default_local_ike_id`](#ike-id-adcccf) - Optional Block<br>
|
|
121
|
+
<a id="ike-id-adcccf"></a>• [`use_default_local_ike_id`](#ike-id-adcccf) - Optional Block<br>Can be used for messages where no values are needed
|
|
122
122
|
|
|
123
|
-
<a id="ike-id-5fac9c"></a>• [`use_default_remote_ike_id`](#ike-id-5fac9c) - Optional Block<br>
|
|
123
|
+
<a id="ike-id-5fac9c"></a>• [`use_default_remote_ike_id`](#ike-id-5fac9c) - Optional Block<br>Can be used for messages where no values are needed
|
|
124
124
|
|
|
125
125
|
#### Ipsec IKE Parameters Dpd Keep Alive Timer
|
|
126
126
|
|
|
@@ -132,21 +132,21 @@ A [`dpd_keep_alive_timer`](#timer-0d12ec) block (within [`ipsec.ike_parameters`]
|
|
|
132
132
|
|
|
133
133
|
An [`ike_phase1_profile`](#ipsec-ike-parameters-ike-phase1-profile) block (within [`ipsec.ike_parameters`](#ipsec-ike-parameters)) supports the following:
|
|
134
134
|
|
|
135
|
-
<a id="name-0a829b"></a>• [`name`](#name-0a829b) - Optional String<br>
|
|
135
|
+
<a id="name-0a829b"></a>• [`name`](#name-0a829b) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
136
136
|
|
|
137
|
-
<a id="namespace-82c294"></a>• [`namespace`](#namespace-82c294) - Optional String<br>
|
|
137
|
+
<a id="namespace-82c294"></a>• [`namespace`](#namespace-82c294) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
138
138
|
|
|
139
|
-
<a id="tenant-6d0cb2"></a>• [`tenant`](#tenant-6d0cb2) - Optional String<br>
|
|
139
|
+
<a id="tenant-6d0cb2"></a>• [`tenant`](#tenant-6d0cb2) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
140
140
|
|
|
141
141
|
#### Ipsec IKE Parameters IKE Phase2 Profile
|
|
142
142
|
|
|
143
143
|
An [`ike_phase2_profile`](#ipsec-ike-parameters-ike-phase2-profile) block (within [`ipsec.ike_parameters`](#ipsec-ike-parameters)) supports the following:
|
|
144
144
|
|
|
145
|
-
<a id="name-73184f"></a>• [`name`](#name-73184f) - Optional String<br>
|
|
145
|
+
<a id="name-73184f"></a>• [`name`](#name-73184f) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
146
146
|
|
|
147
|
-
<a id="namespace-2427e8"></a>• [`namespace`](#namespace-2427e8) - Optional String<br>
|
|
147
|
+
<a id="namespace-2427e8"></a>• [`namespace`](#namespace-2427e8) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
148
148
|
|
|
149
|
-
<a id="tenant-58d877"></a>• [`tenant`](#tenant-58d877) - Optional String<br>
|
|
149
|
+
<a id="tenant-58d877"></a>• [`tenant`](#tenant-58d877) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
150
150
|
|
|
151
151
|
#### Ipsec IKE Parameters Rm IP Address
|
|
152
152
|
|
|
@@ -154,19 +154,19 @@ A [`rm_ip_address`](#ipsec-ike-parameters-rm-ip-address) block (within [`ipsec.i
|
|
|
154
154
|
|
|
155
155
|
<a id="ipsec-ike-parameters-rm-ip-address-ipv4"></a>• [`ipv4`](#ipsec-ike-parameters-rm-ip-address-ipv4) - Optional Block<br>IPv4 Address. IPv4 Address in dot-decimal notation<br>See [IPv4](#ipsec-ike-parameters-rm-ip-address-ipv4) below.
|
|
156
156
|
|
|
157
|
-
<a id="ipsec-ike-parameters-rm-ip-address-ipv6"></a>• [`ipv6`](#ipsec-ike-parameters-rm-ip-address-ipv6) - Optional Block<br>IPv6 Address
|
|
157
|
+
<a id="ipsec-ike-parameters-rm-ip-address-ipv6"></a>• [`ipv6`](#ipsec-ike-parameters-rm-ip-address-ipv6) - Optional Block<br>IPv6 Address specified as hexadecimal numbers separated by ':'<br>See [IPv6](#ipsec-ike-parameters-rm-ip-address-ipv6) below.
|
|
158
158
|
|
|
159
159
|
#### Ipsec IKE Parameters Rm IP Address IPv4
|
|
160
160
|
|
|
161
161
|
An [`ipv4`](#ipsec-ike-parameters-rm-ip-address-ipv4) block (within [`ipsec.ike_parameters.rm_ip_address`](#ipsec-ike-parameters-rm-ip-address)) supports the following:
|
|
162
162
|
|
|
163
|
-
<a id="addr-b80bce"></a>• [`addr`](#addr-b80bce) - Optional String<br>IPv4 Address
|
|
163
|
+
<a id="addr-b80bce"></a>• [`addr`](#addr-b80bce) - Optional String<br>IPv4 Address in string form with dot-decimal notation
|
|
164
164
|
|
|
165
165
|
#### Ipsec IKE Parameters Rm IP Address IPv6
|
|
166
166
|
|
|
167
167
|
An [`ipv6`](#ipsec-ike-parameters-rm-ip-address-ipv6) block (within [`ipsec.ike_parameters.rm_ip_address`](#ipsec-ike-parameters-rm-ip-address)) supports the following:
|
|
168
168
|
|
|
169
|
-
<a id="addr-bd8e56"></a>• [`addr`](#addr-bd8e56) - Optional String<br>IPv6 Address
|
|
169
|
+
<a id="addr-bd8e56"></a>• [`addr`](#addr-bd8e56) - Optional String<br>IPv6 Address in form of string. IPv6 address must be specified as hexadecimal numbers separated by ':' The address can be compacted by suppressing zeros e.g. '2001:db8:0:0:0:0:2:1' becomes '2001:db8::2:1' or '2001:db8:0:0:0:2:0:0' becomes '2001:db8::2::'
|
|
170
170
|
|
|
171
171
|
#### Ipsec Ipsec Tunnel Parameters
|
|
172
172
|
|
|
@@ -174,55 +174,55 @@ An [`ipsec_tunnel_parameters`](#ipsec-ipsec-tunnel-parameters) block (within [`i
|
|
|
174
174
|
|
|
175
175
|
<a id="address-7bfa30"></a>• [`peer_ip_address`](#address-7bfa30) - Optional Block<br>IPv4 Address. IPv4 Address in dot-decimal notation<br>See [Peer IP Address](#address-7bfa30) below.
|
|
176
176
|
|
|
177
|
-
<a id="ipsec-ipsec-tunnel-parameters-psk"></a>• [`psk`](#ipsec-ipsec-tunnel-parameters-psk) - Optional String<br>
|
|
177
|
+
<a id="ipsec-ipsec-tunnel-parameters-psk"></a>• [`psk`](#ipsec-ipsec-tunnel-parameters-psk) - Optional String<br>The IKE pre-shared key (PSK) is required to ensure the IKE peers can authenticate one another within IKE phase 1 negotiation
|
|
178
178
|
|
|
179
179
|
<a id="ipsec-ipsec-tunnel-parameters-segment"></a>• [`segment`](#ipsec-ipsec-tunnel-parameters-segment) - Optional Block<br>Segment Reference Type. Reference to Segment Object<br>See [Segment](#ipsec-ipsec-tunnel-parameters-segment) below.
|
|
180
180
|
|
|
181
|
-
<a id="network-44cee5"></a>• [`site_local_inside_network`](#network-44cee5) - Optional Block<br>
|
|
181
|
+
<a id="network-44cee5"></a>• [`site_local_inside_network`](#network-44cee5) - Optional Block<br>Can be used for messages where no values are needed
|
|
182
182
|
|
|
183
|
-
<a id="network-f96b8b"></a>• [`site_local_network`](#network-f96b8b) - Optional Block<br>
|
|
183
|
+
<a id="network-f96b8b"></a>• [`site_local_network`](#network-f96b8b) - Optional Block<br>Can be used for messages where no values are needed
|
|
184
184
|
|
|
185
|
-
<a id="eps-33e1fb"></a>• [`tunnel_eps`](#eps-33e1fb) - Optional Block<br>
|
|
185
|
+
<a id="eps-33e1fb"></a>• [`tunnel_eps`](#eps-33e1fb) - Optional Block<br>Configure tunnel parameters, local and remote IP addresses<br>See [Tunnel Eps](#eps-33e1fb) below.
|
|
186
186
|
|
|
187
|
-
<a id="mtu-12aafd"></a>• [`tunnel_mtu`](#mtu-12aafd) - Optional Number<br>
|
|
187
|
+
<a id="mtu-12aafd"></a>• [`tunnel_mtu`](#mtu-12aafd) - Optional Number<br>The tunnel MTU defines the maximum size of the packet that can be sent through the tunnel without needing to be fragmented
|
|
188
188
|
|
|
189
189
|
#### Ipsec Ipsec Tunnel Parameters Peer IP Address
|
|
190
190
|
|
|
191
191
|
A [`peer_ip_address`](#address-7bfa30) block (within [`ipsec.ipsec_tunnel_parameters`](#ipsec-ipsec-tunnel-parameters)) supports the following:
|
|
192
192
|
|
|
193
|
-
<a id="addr-6b5f18"></a>• [`addr`](#addr-6b5f18) - Optional String<br>IPv4 Address
|
|
193
|
+
<a id="addr-6b5f18"></a>• [`addr`](#addr-6b5f18) - Optional String<br>IPv4 Address in string form with dot-decimal notation
|
|
194
194
|
|
|
195
195
|
#### Ipsec Ipsec Tunnel Parameters Segment
|
|
196
196
|
|
|
197
197
|
A [`segment`](#ipsec-ipsec-tunnel-parameters-segment) block (within [`ipsec.ipsec_tunnel_parameters`](#ipsec-ipsec-tunnel-parameters)) supports the following:
|
|
198
198
|
|
|
199
|
-
<a id="refs-349f3e"></a>• [`refs`](#refs-349f3e) - Optional Block<br>
|
|
199
|
+
<a id="refs-349f3e"></a>• [`refs`](#refs-349f3e) - Optional Block<br>Reference to Segment Object<br>See [Refs](#refs-349f3e) below.
|
|
200
200
|
|
|
201
201
|
#### Ipsec Ipsec Tunnel Parameters Segment Refs
|
|
202
202
|
|
|
203
203
|
A [`refs`](#refs-349f3e) block (within [`ipsec.ipsec_tunnel_parameters.segment`](#ipsec-ipsec-tunnel-parameters-segment)) supports the following:
|
|
204
204
|
|
|
205
|
-
<a id="kind-035e6e"></a>• [`kind`](#kind-035e6e) - Optional String<br>
|
|
205
|
+
<a id="kind-035e6e"></a>• [`kind`](#kind-035e6e) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
206
206
|
|
|
207
|
-
<a id="name-cfde45"></a>• [`name`](#name-cfde45) - Optional String<br>
|
|
207
|
+
<a id="name-cfde45"></a>• [`name`](#name-cfde45) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
208
208
|
|
|
209
|
-
<a id="namespace-b2c80c"></a>• [`namespace`](#namespace-b2c80c) - Optional String<br>
|
|
209
|
+
<a id="namespace-b2c80c"></a>• [`namespace`](#namespace-b2c80c) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
210
210
|
|
|
211
|
-
<a id="tenant-f2a3ef"></a>• [`tenant`](#tenant-f2a3ef) - Optional String<br>
|
|
211
|
+
<a id="tenant-f2a3ef"></a>• [`tenant`](#tenant-f2a3ef) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
212
212
|
|
|
213
|
-
<a id="uid-c4bbc4"></a>• [`uid`](#uid-c4bbc4) - Optional String<br>
|
|
213
|
+
<a id="uid-c4bbc4"></a>• [`uid`](#uid-c4bbc4) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
214
214
|
|
|
215
215
|
#### Ipsec Ipsec Tunnel Parameters Tunnel Eps
|
|
216
216
|
|
|
217
217
|
A [`tunnel_eps`](#eps-33e1fb) block (within [`ipsec.ipsec_tunnel_parameters`](#ipsec-ipsec-tunnel-parameters)) supports the following:
|
|
218
218
|
|
|
219
|
-
<a id="interface-ea47ac"></a>• [`interface`](#interface-ea47ac) - Optional String<br>
|
|
219
|
+
<a id="interface-ea47ac"></a>• [`interface`](#interface-ea47ac) - Optional String<br>For the chosen node, specify the interface that will be the tunnel source
|
|
220
220
|
|
|
221
|
-
<a id="tunnel-ip-fefab5"></a>• [`local_tunnel_ip`](#tunnel-ip-fefab5) - Optional String<br>
|
|
221
|
+
<a id="tunnel-ip-fefab5"></a>• [`local_tunnel_ip`](#tunnel-ip-fefab5) - Optional String<br>For a particular tunnel on a node, specify the local tunnel IP Address i.e. The IP address of the tunnel on the CE node itself and a subnet prefix length
|
|
222
222
|
|
|
223
|
-
<a id="node-96f624"></a>• [`node`](#node-96f624) - Optional String<br>
|
|
223
|
+
<a id="node-96f624"></a>• [`node`](#node-96f624) - Optional String<br>CE site is composed of multiple nodes. Choose a node that will be part of this external connection
|
|
224
224
|
|
|
225
|
-
<a id="tunnel-ip-253faa"></a>• [`remote_tunnel_ip`](#tunnel-ip-253faa) - Optional String<br>
|
|
225
|
+
<a id="tunnel-ip-253faa"></a>• [`remote_tunnel_ip`](#tunnel-ip-253faa) - Optional String<br>For a particular tunnel on a node, specify the remote tunnel IP Address i.e. The IP address of the tunnel on the remote gateway and a subnet prefix length
|
|
226
226
|
|
|
227
227
|
#### Timeouts
|
|
228
228
|
|
|
@@ -2,12 +2,12 @@
|
|
|
2
2
|
page_title: "f5xc_fast_acl Resource - terraform-provider-f5xc"
|
|
3
3
|
subcategory: "Security"
|
|
4
4
|
description: |-
|
|
5
|
-
Manages
|
|
5
|
+
Manages new Fast ACL rule, has specification to match source IP, source port and action to apply. in F5 Distributed Cloud.
|
|
6
6
|
---
|
|
7
7
|
|
|
8
8
|
# f5xc_fast_acl (Resource)
|
|
9
9
|
|
|
10
|
-
Manages
|
|
10
|
+
Manages new Fast ACL rule, has specification to match source IP, source port and action to apply. in F5 Distributed Cloud.
|
|
11
11
|
|
|
12
12
|
~> **Note** For more information about this resource, please refer to the [F5 XC API Documentation](https://docs.cloud.f5.com/docs/api/).
|
|
13
13
|
|
|
@@ -15,7 +15,7 @@ Manages `fast_acl` object, `fast_acl` object contains rules to protect site from
|
|
|
15
15
|
|
|
16
16
|
```terraform
|
|
17
17
|
# Fast ACL Resource Example
|
|
18
|
-
# Manages
|
|
18
|
+
# Manages new Fast ACL rule, has specification to match source IP, source port and action to apply. in F5 Distributed Cloud.
|
|
19
19
|
|
|
20
20
|
# Basic Fast ACL configuration
|
|
21
21
|
resource "f5xc_fast_acl" "example" {
|
|
@@ -32,17 +32,17 @@ resource "f5xc_fast_acl" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
#
|
|
36
|
-
|
|
37
|
-
# Configure
|
|
35
|
+
# FastAclRuleAction specifies possible action to be applied...
|
|
36
|
+
action {
|
|
37
|
+
# Configure action settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
40
|
-
|
|
41
|
-
# Configure
|
|
39
|
+
# Policer Reference. Reference to policer object.
|
|
40
|
+
policer_action {
|
|
41
|
+
# Configure policer_action settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
44
|
-
|
|
45
|
-
# Configure
|
|
43
|
+
# Reference. A policer direct reference.
|
|
44
|
+
ref {
|
|
45
|
+
# Configure ref settings
|
|
46
46
|
}
|
|
47
47
|
}
|
|
48
48
|
```
|
|
@@ -66,11 +66,13 @@ resource "f5xc_fast_acl" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="
|
|
69
|
+
<a id="action"></a>• [`action`](#action) - Optional Block<br>FastAclRuleAction specifies possible action to be applied on traffic, possible action include dropping, forwarding or ratelimiting the traffic<br>See [Action](#action) below for details.
|
|
70
70
|
|
|
71
71
|
-> **One of the following:**
|
|
72
|
-
• <a id="
|
|
73
|
-
<br><br>• <a id="
|
|
72
|
+
• <a id="ip-prefix-set"></a>[`ip_prefix_set`](#ip-prefix-set) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#ip-prefix-set) below for details.
|
|
73
|
+
<br><br>• <a id="prefix"></a>[`prefix`](#prefix) - Optional Block<br>List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Prefix](#prefix) below for details.
|
|
74
|
+
|
|
75
|
+
<a id="port"></a>• [`port`](#port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#port) below for details.
|
|
74
76
|
|
|
75
77
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
76
78
|
|
|
@@ -82,199 +84,91 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
82
84
|
|
|
83
85
|
---
|
|
84
86
|
|
|
85
|
-
####
|
|
86
|
-
|
|
87
|
-
A [`protocol_policer`](#protocol-policer) block supports the following:
|
|
88
|
-
|
|
89
|
-
<a id="protocol-policer-name"></a>• [`name`](#protocol-policer-name) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
90
|
-
|
|
91
|
-
<a id="protocol-policer-namespace"></a>• [`namespace`](#protocol-policer-namespace) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
92
|
-
|
|
93
|
-
<a id="protocol-policer-tenant"></a>• [`tenant`](#protocol-policer-tenant) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
94
|
-
|
|
95
|
-
#### RE ACL
|
|
96
|
-
|
|
97
|
-
A [`re_acl`](#re-acl) block supports the following:
|
|
98
|
-
|
|
99
|
-
<a id="re-acl-all-public-vips"></a>• [`all_public_vips`](#re-acl-all-public-vips) - Optional Block<br>Enable this option
|
|
100
|
-
|
|
101
|
-
<a id="re-acl-default-tenant-vip"></a>• [`default_tenant_vip`](#re-acl-default-tenant-vip) - Optional Block<br>Enable this option
|
|
102
|
-
|
|
103
|
-
<a id="re-acl-fast-acl-rules"></a>• [`fast_acl_rules`](#re-acl-fast-acl-rules) - Optional Block<br>Rules. Fast ACL rules to match<br>See [Fast ACL Rules](#re-acl-fast-acl-rules) below.
|
|
104
|
-
|
|
105
|
-
<a id="re-acl-selected-tenant-vip"></a>• [`selected_tenant_vip`](#re-acl-selected-tenant-vip) - Optional Block<br>Specific Tenant VIP. Select various tenant public VIP(s)<br>See [Selected Tenant VIP](#re-acl-selected-tenant-vip) below.
|
|
106
|
-
|
|
107
|
-
#### RE ACL Fast ACL Rules
|
|
108
|
-
|
|
109
|
-
A [`fast_acl_rules`](#re-acl-fast-acl-rules) block (within [`re_acl`](#re-acl)) supports the following:
|
|
110
|
-
|
|
111
|
-
<a id="re-acl-fast-acl-rules-action"></a>• [`action`](#re-acl-fast-acl-rules-action) - Optional Block<br>Action. FastAclRuleAction specifies possible action to be applied on traffic, possible action include dropping, forwarding or ratelimiting the traffic<br>See [Action](#re-acl-fast-acl-rules-action) below.
|
|
112
|
-
|
|
113
|
-
<a id="re-acl-fast-acl-rules-ip-prefix-set"></a>• [`ip_prefix_set`](#re-acl-fast-acl-rules-ip-prefix-set) - Optional Block<br>IP Prefix Set Reference. A list of references to ip_prefix_set objects<br>See [IP Prefix Set](#re-acl-fast-acl-rules-ip-prefix-set) below.
|
|
114
|
-
|
|
115
|
-
<a id="re-acl-fast-acl-rules-metadata"></a>• [`metadata`](#re-acl-fast-acl-rules-metadata) - Optional Block<br>Message Metadata. MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create and replace APIs<br>See [Metadata](#re-acl-fast-acl-rules-metadata) below.
|
|
116
|
-
|
|
117
|
-
<a id="re-acl-fast-acl-rules-port"></a>• [`port`](#re-acl-fast-acl-rules-port) - Optional Block<br>Source Ports. L4 port numbers to match<br>See [Port](#re-acl-fast-acl-rules-port) below.
|
|
118
|
-
|
|
119
|
-
<a id="re-acl-fast-acl-rules-prefix"></a>• [`prefix`](#re-acl-fast-acl-rules-prefix) - Optional Block<br>IP Prefix List. List of IP Address prefixes. Prefix must contain both prefix and prefix-length The list can contain mix of both IPv4 and IPv6 prefixes<br>See [Prefix](#re-acl-fast-acl-rules-prefix) below.
|
|
120
|
-
|
|
121
|
-
#### RE ACL Fast ACL Rules Action
|
|
122
|
-
|
|
123
|
-
An [`action`](#re-acl-fast-acl-rules-action) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
124
|
-
|
|
125
|
-
<a id="action-09a22d"></a>• [`policer_action`](#action-09a22d) - Optional Block<br>Policer Reference. Reference to policer object<br>See [Policer Action](#action-09a22d) below.
|
|
126
|
-
|
|
127
|
-
<a id="action-1f2796"></a>• [`protocol_policer_action`](#action-1f2796) - Optional Block<br>Protocol Policer Reference. Reference to policer object<br>See [Protocol Policer Action](#action-1f2796) below.
|
|
128
|
-
|
|
129
|
-
<a id="action-551f44"></a>• [`simple_action`](#action-551f44) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] Simple Action. FastAclRuleSimpleAction specifies simple action like PASS or DENY Drop the traffic Forward the traffic
|
|
130
|
-
|
|
131
|
-
#### RE ACL Fast ACL Rules Action Policer Action
|
|
132
|
-
|
|
133
|
-
<a id="deep-64211b"></a>Deeply nested **Action** block collapsed for readability.
|
|
134
|
-
|
|
135
|
-
#### RE ACL Fast ACL Rules Action Policer Action Ref
|
|
136
|
-
|
|
137
|
-
<a id="deep-f6253f"></a>Deeply nested **Ref** block collapsed for readability.
|
|
138
|
-
|
|
139
|
-
#### RE ACL Fast ACL Rules Action Protocol Policer Action
|
|
140
|
-
|
|
141
|
-
<a id="deep-eb61a3"></a>Deeply nested **Action** block collapsed for readability.
|
|
142
|
-
|
|
143
|
-
#### RE ACL Fast ACL Rules Action Protocol Policer Action Ref
|
|
144
|
-
|
|
145
|
-
<a id="deep-8ac143"></a>Deeply nested **Ref** block collapsed for readability.
|
|
146
|
-
|
|
147
|
-
#### RE ACL Fast ACL Rules IP Prefix Set
|
|
148
|
-
|
|
149
|
-
<a id="deep-5eb942"></a>Deeply nested **Set** block collapsed for readability.
|
|
150
|
-
|
|
151
|
-
#### RE ACL Fast ACL Rules IP Prefix Set Ref
|
|
152
|
-
|
|
153
|
-
<a id="deep-8005c0"></a>Deeply nested **Ref** block collapsed for readability.
|
|
154
|
-
|
|
155
|
-
#### RE ACL Fast ACL Rules Metadata
|
|
156
|
-
|
|
157
|
-
A [`metadata`](#re-acl-fast-acl-rules-metadata) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
158
|
-
|
|
159
|
-
<a id="spec-e77730"></a>• [`description_spec`](#spec-e77730) - Optional String<br>Description. Human readable description
|
|
160
|
-
|
|
161
|
-
<a id="re-acl-fast-acl-rules-metadata-name"></a>• [`name`](#re-acl-fast-acl-rules-metadata-name) - Optional String<br>Name. This is the name of the message. The value of name has to follow DNS-1035 format
|
|
162
|
-
|
|
163
|
-
#### RE ACL Fast ACL Rules Port
|
|
164
|
-
|
|
165
|
-
A [`port`](#re-acl-fast-acl-rules-port) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
166
|
-
|
|
167
|
-
<a id="re-acl-fast-acl-rules-port-all"></a>• [`all`](#re-acl-fast-acl-rules-port-all) - Optional Block<br>Enable this option
|
|
168
|
-
|
|
169
|
-
<a id="re-acl-fast-acl-rules-port-dns"></a>• [`dns`](#re-acl-fast-acl-rules-port-dns) - Optional Block<br>Enable this option
|
|
170
|
-
|
|
171
|
-
<a id="re-acl-fast-acl-rules-port-user-defined"></a>• [`user_defined`](#re-acl-fast-acl-rules-port-user-defined) - Optional Number<br>User defined port. Matches the user defined port
|
|
172
|
-
|
|
173
|
-
#### RE ACL Fast ACL Rules Prefix
|
|
174
|
-
|
|
175
|
-
A [`prefix`](#re-acl-fast-acl-rules-prefix) block (within [`re_acl.fast_acl_rules`](#re-acl-fast-acl-rules)) supports the following:
|
|
176
|
-
|
|
177
|
-
<a id="re-acl-fast-acl-rules-prefix-prefix"></a>• [`prefix`](#re-acl-fast-acl-rules-prefix-prefix) - Optional List<br>Prefix. IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
178
|
-
|
|
179
|
-
#### RE ACL Selected Tenant VIP
|
|
180
|
-
|
|
181
|
-
A [`selected_tenant_vip`](#re-acl-selected-tenant-vip) block (within [`re_acl`](#re-acl)) supports the following:
|
|
182
|
-
|
|
183
|
-
<a id="vip-1d894b"></a>• [`default_tenant_vip`](#vip-1d894b) - Optional Bool<br>Include Tenant VIP. Include tenant VIP in list of specific VIP(s)
|
|
184
|
-
|
|
185
|
-
<a id="refs-523a60"></a>• [`public_ip_refs`](#refs-523a60) - Optional Block<br>Select Public VIP(s). Select additional public VIP(s)<br>See [Public IP Refs](#refs-523a60) below.
|
|
186
|
-
|
|
187
|
-
#### RE ACL Selected Tenant VIP Public IP Refs
|
|
188
|
-
|
|
189
|
-
<a id="deep-2edc68"></a>Deeply nested **Refs** block collapsed for readability.
|
|
190
|
-
|
|
191
|
-
#### Site ACL
|
|
192
|
-
|
|
193
|
-
A [`site_acl`](#site-acl) block supports the following:
|
|
87
|
+
#### Action
|
|
194
88
|
|
|
195
|
-
|
|
89
|
+
An [`action`](#action) block supports the following:
|
|
196
90
|
|
|
197
|
-
<a id="
|
|
91
|
+
<a id="action-policer-action"></a>• [`policer_action`](#action-policer-action) - Optional Block<br>Policer Reference. Reference to policer object<br>See [Policer Action](#action-policer-action) below.
|
|
198
92
|
|
|
199
|
-
<a id="
|
|
93
|
+
<a id="action-protocol-policer-action"></a>• [`protocol_policer_action`](#action-protocol-policer-action) - Optional Block<br>Protocol Policer Reference. Reference to policer object<br>See [Protocol Policer Action](#action-protocol-policer-action) below.
|
|
200
94
|
|
|
201
|
-
<a id="
|
|
95
|
+
<a id="action-simple-action"></a>• [`simple_action`](#action-simple-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`<br>[Enum: DENY|ALLOW] FastAclRuleSimpleAction specifies simple action like PASS or DENY Drop the traffic Forward the traffic
|
|
202
96
|
|
|
203
|
-
|
|
97
|
+
#### Action Policer Action
|
|
204
98
|
|
|
205
|
-
|
|
99
|
+
A [`policer_action`](#action-policer-action) block (within [`action`](#action)) supports the following:
|
|
206
100
|
|
|
207
|
-
|
|
101
|
+
<a id="action-policer-action-ref"></a>• [`ref`](#action-policer-action-ref) - Optional Block<br>Reference. A policer direct reference<br>See [Ref](#action-policer-action-ref) below.
|
|
208
102
|
|
|
209
|
-
|
|
103
|
+
#### Action Policer Action Ref
|
|
210
104
|
|
|
211
|
-
|
|
105
|
+
A [`ref`](#action-policer-action-ref) block (within [`action.policer_action`](#action-policer-action)) supports the following:
|
|
212
106
|
|
|
213
|
-
<a id="
|
|
107
|
+
<a id="action-policer-action-ref-kind"></a>• [`kind`](#action-policer-action-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
214
108
|
|
|
215
|
-
<a id="
|
|
109
|
+
<a id="action-policer-action-ref-name"></a>• [`name`](#action-policer-action-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
216
110
|
|
|
217
|
-
<a id="
|
|
111
|
+
<a id="action-policer-action-ref-namespace"></a>• [`namespace`](#action-policer-action-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
218
112
|
|
|
219
|
-
<a id="
|
|
113
|
+
<a id="action-policer-action-ref-tenant"></a>• [`tenant`](#action-policer-action-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
220
114
|
|
|
221
|
-
|
|
115
|
+
<a id="action-policer-action-ref-uid"></a>• [`uid`](#action-policer-action-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
222
116
|
|
|
223
|
-
|
|
117
|
+
#### Action Protocol Policer Action
|
|
224
118
|
|
|
225
|
-
|
|
119
|
+
A [`protocol_policer_action`](#action-protocol-policer-action) block (within [`action`](#action)) supports the following:
|
|
226
120
|
|
|
227
|
-
<a id="action-
|
|
121
|
+
<a id="action-protocol-policer-action-ref"></a>• [`ref`](#action-protocol-policer-action-ref) - Optional Block<br>Protocol policer Reference. Reference to protocol policer object<br>See [Ref](#action-protocol-policer-action-ref) below.
|
|
228
122
|
|
|
229
|
-
|
|
123
|
+
#### Action Protocol Policer Action Ref
|
|
230
124
|
|
|
231
|
-
|
|
125
|
+
A [`ref`](#action-protocol-policer-action-ref) block (within [`action.protocol_policer_action`](#action-protocol-policer-action)) supports the following:
|
|
232
126
|
|
|
233
|
-
<a id="
|
|
127
|
+
<a id="action-protocol-policer-action-ref-kind"></a>• [`kind`](#action-protocol-policer-action-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
234
128
|
|
|
235
|
-
|
|
129
|
+
<a id="action-protocol-policer-action-ref-name"></a>• [`name`](#action-protocol-policer-action-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
236
130
|
|
|
237
|
-
<a id="
|
|
131
|
+
<a id="namespace-b31006"></a>• [`namespace`](#namespace-b31006) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
238
132
|
|
|
239
|
-
|
|
133
|
+
<a id="tenant-2622a3"></a>• [`tenant`](#tenant-2622a3) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
240
134
|
|
|
241
|
-
<a id="
|
|
135
|
+
<a id="action-protocol-policer-action-ref-uid"></a>• [`uid`](#action-protocol-policer-action-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
242
136
|
|
|
243
|
-
####
|
|
137
|
+
#### IP Prefix Set
|
|
244
138
|
|
|
245
|
-
|
|
139
|
+
An [`ip_prefix_set`](#ip-prefix-set) block supports the following:
|
|
246
140
|
|
|
247
|
-
|
|
141
|
+
<a id="ip-prefix-set-ref"></a>• [`ref`](#ip-prefix-set-ref) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Ref](#ip-prefix-set-ref) below.
|
|
248
142
|
|
|
249
|
-
|
|
143
|
+
#### IP Prefix Set Ref
|
|
250
144
|
|
|
251
|
-
|
|
145
|
+
A [`ref`](#ip-prefix-set-ref) block (within [`ip_prefix_set`](#ip-prefix-set)) supports the following:
|
|
252
146
|
|
|
253
|
-
<a id="
|
|
147
|
+
<a id="ip-prefix-set-ref-kind"></a>• [`kind`](#ip-prefix-set-ref-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
254
148
|
|
|
255
|
-
|
|
149
|
+
<a id="ip-prefix-set-ref-name"></a>• [`name`](#ip-prefix-set-ref-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
256
150
|
|
|
257
|
-
|
|
151
|
+
<a id="ip-prefix-set-ref-namespace"></a>• [`namespace`](#ip-prefix-set-ref-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
258
152
|
|
|
259
|
-
<a id="
|
|
153
|
+
<a id="ip-prefix-set-ref-tenant"></a>• [`tenant`](#ip-prefix-set-ref-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
260
154
|
|
|
261
|
-
<a id="
|
|
155
|
+
<a id="ip-prefix-set-ref-uid"></a>• [`uid`](#ip-prefix-set-ref-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
262
156
|
|
|
263
|
-
####
|
|
157
|
+
#### Port
|
|
264
158
|
|
|
265
|
-
A [`port`](#
|
|
159
|
+
A [`port`](#port) block supports the following:
|
|
266
160
|
|
|
267
|
-
<a id="
|
|
161
|
+
<a id="port-all"></a>• [`all`](#port-all) - Optional Block<br>Can be used for messages where no values are needed
|
|
268
162
|
|
|
269
|
-
<a id="
|
|
163
|
+
<a id="port-dns"></a>• [`dns`](#port-dns) - Optional Block<br>Can be used for messages where no values are needed
|
|
270
164
|
|
|
271
|
-
<a id="defined
|
|
165
|
+
<a id="port-user-defined"></a>• [`user_defined`](#port-user-defined) - Optional Number<br>Matches the user defined port
|
|
272
166
|
|
|
273
|
-
####
|
|
167
|
+
#### Prefix
|
|
274
168
|
|
|
275
|
-
A [`prefix`](#
|
|
169
|
+
A [`prefix`](#prefix) block supports the following:
|
|
276
170
|
|
|
277
|
-
<a id="
|
|
171
|
+
<a id="prefix-prefix"></a>• [`prefix`](#prefix-prefix) - Optional List<br>IP Address prefix in string format. String must contain both prefix and prefix-length
|
|
278
172
|
|
|
279
173
|
#### Timeouts
|
|
280
174
|
|