@robinmordasiewicz/f5xc-terraform-mcp 3.5.0 → 3.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (111) hide show
  1. package/README.md +283 -104
  2. package/dist/docs/data-sources/bgp.md +2 -2
  3. package/dist/docs/data-sources/discovery.md +2 -2
  4. package/dist/docs/data-sources/fast_acl.md +2 -2
  5. package/dist/docs/data-sources/fast_acl_rule.md +2 -2
  6. package/dist/docs/data-sources/irule.md +2 -2
  7. package/dist/docs/data-sources/log_receiver.md +2 -2
  8. package/dist/docs/data-sources/network_policy.md +2 -2
  9. package/dist/docs/data-sources/route.md +2 -2
  10. package/dist/docs/data-sources/site.md +2 -2
  11. package/dist/docs/resources/address_allocator.md +7 -7
  12. package/dist/docs/resources/advertise_policy.md +57 -57
  13. package/dist/docs/resources/alert_policy.md +40 -40
  14. package/dist/docs/resources/alert_receiver.md +57 -57
  15. package/dist/docs/resources/api_crawler.md +13 -13
  16. package/dist/docs/resources/api_definition.md +11 -11
  17. package/dist/docs/resources/api_discovery.md +4 -4
  18. package/dist/docs/resources/api_testing.md +27 -27
  19. package/dist/docs/resources/apm.md +40 -40
  20. package/dist/docs/resources/app_api_group.md +20 -20
  21. package/dist/docs/resources/app_firewall.md +50 -50
  22. package/dist/docs/resources/app_setting.md +19 -19
  23. package/dist/docs/resources/app_type.md +7 -7
  24. package/dist/docs/resources/authentication.md +29 -29
  25. package/dist/docs/resources/aws_tgw_site.md +140 -140
  26. package/dist/docs/resources/aws_vpc_site.md +174 -174
  27. package/dist/docs/resources/azure_vnet_site.md +245 -245
  28. package/dist/docs/resources/bgp.md +37 -205
  29. package/dist/docs/resources/bgp_asn_set.md +1 -1
  30. package/dist/docs/resources/bgp_routing_policy.md +19 -19
  31. package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
  32. package/dist/docs/resources/cdn_cache_rule.md +5 -5
  33. package/dist/docs/resources/cdn_loadbalancer.md +418 -418
  34. package/dist/docs/resources/certificate.md +1 -1
  35. package/dist/docs/resources/certificate_chain.md +1 -1
  36. package/dist/docs/resources/cloud_connect.md +28 -28
  37. package/dist/docs/resources/cloud_credentials.md +35 -35
  38. package/dist/docs/resources/cloud_elastic_ip.md +8 -8
  39. package/dist/docs/resources/cloud_link.md +36 -36
  40. package/dist/docs/resources/cluster.md +86 -86
  41. package/dist/docs/resources/cminstance.md +22 -22
  42. package/dist/docs/resources/code_base_integration.md +24 -24
  43. package/dist/docs/resources/container_registry.md +13 -13
  44. package/dist/docs/resources/crl.md +1 -1
  45. package/dist/docs/resources/data_type.md +16 -16
  46. package/dist/docs/resources/dc_cluster_group.md +4 -4
  47. package/dist/docs/resources/discovery.md +8 -259
  48. package/dist/docs/resources/dns_compliance_checks.md +1 -1
  49. package/dist/docs/resources/dns_domain.md +3 -3
  50. package/dist/docs/resources/endpoint.md +44 -44
  51. package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
  52. package/dist/docs/resources/external_connector.md +42 -42
  53. package/dist/docs/resources/fast_acl.md +60 -166
  54. package/dist/docs/resources/fast_acl_rule.md +28 -28
  55. package/dist/docs/resources/filter_set.md +10 -10
  56. package/dist/docs/resources/fleet.md +160 -160
  57. package/dist/docs/resources/forward_proxy_policy.md +82 -82
  58. package/dist/docs/resources/forwarding_class.md +14 -14
  59. package/dist/docs/resources/gcp_vpc_site.md +152 -152
  60. package/dist/docs/resources/global_log_receiver.md +238 -238
  61. package/dist/docs/resources/healthcheck.md +17 -17
  62. package/dist/docs/resources/http_loadbalancer.md +1003 -1003
  63. package/dist/docs/resources/irule.md +5 -7
  64. package/dist/docs/resources/log_receiver.md +825 -44
  65. package/dist/docs/resources/malicious_user_mitigation.md +10 -10
  66. package/dist/docs/resources/nat_policy.md +86 -86
  67. package/dist/docs/resources/network_connector.md +31 -31
  68. package/dist/docs/resources/network_firewall.md +22 -22
  69. package/dist/docs/resources/network_interface.md +77 -77
  70. package/dist/docs/resources/network_policy.md +38 -217
  71. package/dist/docs/resources/network_policy_rule.md +21 -21
  72. package/dist/docs/resources/network_policy_view.md +65 -65
  73. package/dist/docs/resources/nfv_service.md +76 -76
  74. package/dist/docs/resources/nginx_service_discovery.md +10 -10
  75. package/dist/docs/resources/origin_pool.md +166 -166
  76. package/dist/docs/resources/policer.md +4 -4
  77. package/dist/docs/resources/policy_based_routing.md +28 -28
  78. package/dist/docs/resources/protocol_inspection.md +12 -12
  79. package/dist/docs/resources/protocol_policer.md +14 -14
  80. package/dist/docs/resources/proxy.md +111 -111
  81. package/dist/docs/resources/rate_limiter.md +15 -15
  82. package/dist/docs/resources/rate_limiter_policy.md +56 -56
  83. package/dist/docs/resources/route.md +183 -183
  84. package/dist/docs/resources/secret_management_access.md +68 -68
  85. package/dist/docs/resources/securemesh_site.md +1619 -258
  86. package/dist/docs/resources/segment.md +4 -4
  87. package/dist/docs/resources/sensitive_data_policy.md +9 -9
  88. package/dist/docs/resources/service_policy.md +175 -175
  89. package/dist/docs/resources/service_policy_rule.md +142 -142
  90. package/dist/docs/resources/site.md +381 -303
  91. package/dist/docs/resources/site_mesh_group.md +18 -18
  92. package/dist/docs/resources/subnet.md +17 -17
  93. package/dist/docs/resources/tcp_loadbalancer.md +130 -130
  94. package/dist/docs/resources/tenant_configuration.md +10 -10
  95. package/dist/docs/resources/trusted_ca_list.md +1 -1
  96. package/dist/docs/resources/tunnel.md +36 -36
  97. package/dist/docs/resources/udp_loadbalancer.md +59 -59
  98. package/dist/docs/resources/usb_policy.md +6 -6
  99. package/dist/docs/resources/user_identification.md +16 -16
  100. package/dist/docs/resources/virtual_host.md +225 -225
  101. package/dist/docs/resources/virtual_network.md +14 -14
  102. package/dist/docs/resources/virtual_site.md +3 -3
  103. package/dist/docs/resources/voltstack_site.md +141 -141
  104. package/dist/docs/resources/waf_exclusion_policy.md +17 -17
  105. package/dist/docs/resources/workload.md +327 -327
  106. package/dist/docs/resources/workload_flavor.md +3 -3
  107. package/dist/metadata/resource-metadata.json +1484 -942
  108. package/dist/types.d.ts +11 -0
  109. package/dist/types.d.ts.map +1 -1
  110. package/dist/types.js.map +1 -1
  111. package/package.json +1 -1
@@ -32,7 +32,7 @@ resource "f5xc_service_policy_rule" "example" {
32
32
  }
33
33
 
34
34
  # Resource-specific configuration
35
- # [OneOf: any_asn, asn_list, asn_matcher] Enable this option
35
+ # [OneOf: any_asn, asn_list, asn_matcher] Can be used for m...
36
36
  any_asn {
37
37
  # Configure any_asn settings
38
38
  }
@@ -40,7 +40,7 @@ resource "f5xc_service_policy_rule" "example" {
40
40
  any_client {
41
41
  # Configure any_client settings
42
42
  }
43
- # [OneOf: any_ip, ip_matcher, ip_prefix_list] Enable this o...
43
+ # [OneOf: any_ip, ip_matcher, ip_prefix_list] Can be used f...
44
44
  any_ip {
45
45
  # Configure any_ip settings
46
46
  }
@@ -66,66 +66,66 @@ resource "f5xc_service_policy_rule" "example" {
66
66
 
67
67
  ### Spec Argument Reference
68
68
 
69
- <a id="action"></a>&#x2022; [`action`](#action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY] Rule Action. The rule action determines the disposition of the input request API. If a policy matches a rule with an ALLOW action, the processing of the request proceeds forward. If it matches a rule with a DENY action, the processing of the request is terminated and an appropriate message/code returned to the originator. If it matches a rule with a NEXT_POLICY_SET action, evaluation of the current policy set terminates and evaluation of the next policy set in the chain begins. - DENY: DENY Deny the request. - ALLOW: ALLOW Allow the request to proceed. - NEXT_POLICY_SET: NEXT_POLICY_SET Terminate evaluation of the current policy set and begin evaluating the next policy set in the chain. Note that the evaluation of any remaining policies in the current policy set is skipped. - NEXT_POLICY: NEXT_POLICY Terminate evaluation of the current policy and begin evaluating the next policy in the policy set. Note that the evaluation of any remaining rules in the current policy is skipped. - LAST_POLICY: LAST_POLICY Terminate evaluation of the current policy and begin evaluating the last policy in the policy set. Note that the evaluation of any remaining rules in the current policy is skipped. - GOTO_POLICY: GOTO_POLICY Terminate evaluation of the current policy and begin evaluating a specific policy in the policy set. The policy is specified using the goto_policy field in the rule and must be after the current policy in the policy set
69
+ <a id="action"></a>&#x2022; [`action`](#action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY] The rule action determines the disposition of the input request API. If a policy matches a rule with an ALLOW action, the processing of the request proceeds forward. If it matches a rule with a DENY action, the processing of the request is terminated and an appropriate message/code returned to
70
70
 
71
71
  -> **One of the following:**
72
- &#x2022; <a id="any-asn"></a>[`any_asn`](#any-asn) - Optional Block<br>Enable this option
73
- <br><br>&#x2022; <a id="asn-list"></a>[`asn_list`](#asn-list) - Optional Block<br>ASN Match List. An unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#asn-list) below for details.
74
- <br><br>&#x2022; <a id="asn-matcher"></a>[`asn_matcher`](#asn-matcher) - Optional Block<br>ASN Matcher. Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#asn-matcher) below for details.
72
+ &#x2022; <a id="any-asn"></a>[`any_asn`](#any-asn) - Optional Block<br>Can be used for messages where no values are needed
73
+ <br><br>&#x2022; <a id="asn-list"></a>[`asn_list`](#asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#asn-list) below for details.
74
+ <br><br>&#x2022; <a id="asn-matcher"></a>[`asn_matcher`](#asn-matcher) - Optional Block<br>Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#asn-matcher) below for details.
75
75
 
76
76
  -> **One of the following:**
77
- &#x2022; <a id="any-client"></a>[`any_client`](#any-client) - Optional Block<br>Enable this option
78
- <br><br>&#x2022; <a id="client-name"></a>[`client_name`](#client-name) - Optional String<br>Client Name. The expected name of the client invoking the request API. The predicate evaluates to true if any of the actual names is the same as the expected client name
79
- <br><br>&#x2022; <a id="client-name-matcher"></a>[`client_name_matcher`](#client-name-matcher) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Client Name Matcher](#client-name-matcher) below for details.
80
- <br><br>&#x2022; <a id="client-selector"></a>[`client_selector`](#client-selector) - Optional Block<br>Label Selector. This type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects. A null label selector matches no objects. Label selector is immutable. Expressions is a list of strings of label selection expression. Each string has ',' separated values which are 'AND' and all strings are logically 'OR'. BNF for expression string `<selector-syntax>` ::= `<requirement>` | `<requirement>` ',' `<selector-syntax>` `<requirement>` ::= [!] KEY [ `<set-based-restriction>` | `<exact-match-restriction>` ] `<set-based-restriction>` ::= '' | `<inclusion-exclusion>` `<value-set>` `<inclusion-exclusion>` ::= `<inclusion>` | `<exclusion>` `<exclusion>` ::= 'notin' `<inclusion>` ::= 'in' `<value-set>` ::= '(' `<values>` ')' `<values>` ::= VALUE | VALUE ',' `<values>` `<exact-match-restriction>` ::= ['='|'=='|'!='] VALUE<br>See [Client Selector](#client-selector) below for details.
77
+ &#x2022; <a id="any-client"></a>[`any_client`](#any-client) - Optional Block<br>Can be used for messages where no values are needed
78
+ <br><br>&#x2022; <a id="client-name"></a>[`client_name`](#client-name) - Optional String<br>The expected name of the client invoking the request API. The predicate evaluates to true if any of the actual names is the same as the expected client name
79
+ <br><br>&#x2022; <a id="client-name-matcher"></a>[`client_name_matcher`](#client-name-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Client Name Matcher](#client-name-matcher) below for details.
80
+ <br><br>&#x2022; <a id="client-selector"></a>[`client_selector`](#client-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Client Selector](#client-selector) below for details.
81
81
  <br><br>&#x2022; <a id="ip-threat-category-list"></a>[`ip_threat_category_list`](#ip-threat-category-list) - Optional Block<br>IP Threat Category List Type. List of IP threat categories<br>See [IP Threat Category List](#ip-threat-category-list) below for details.
82
82
 
83
83
  -> **One of the following:**
84
- &#x2022; <a id="any-ip"></a>[`any_ip`](#any-ip) - Optional Block<br>Enable this option
85
- <br><br>&#x2022; <a id="ip-matcher"></a>[`ip_matcher`](#ip-matcher) - Optional Block<br>IP Prefix Matcher. Match any IP prefix contained in the list of ip_prefix_sets. The result of the match is inverted if invert_matcher is true<br>See [IP Matcher](#ip-matcher) below for details.
86
- <br><br>&#x2022; <a id="ip-prefix-list"></a>[`ip_prefix_list`](#ip-prefix-list) - Optional Block<br>IP Prefix Match List. List of IP Prefix strings to match against<br>See [IP Prefix List](#ip-prefix-list) below for details.
84
+ &#x2022; <a id="any-ip"></a>[`any_ip`](#any-ip) - Optional Block<br>Can be used for messages where no values are needed
85
+ <br><br>&#x2022; <a id="ip-matcher"></a>[`ip_matcher`](#ip-matcher) - Optional Block<br>Match any IP prefix contained in the list of ip_prefix_sets. The result of the match is inverted if invert_matcher is true<br>See [IP Matcher](#ip-matcher) below for details.
86
+ <br><br>&#x2022; <a id="ip-prefix-list"></a>[`ip_prefix_list`](#ip-prefix-list) - Optional Block<br>List of IP Prefix strings to match against<br>See [IP Prefix List](#ip-prefix-list) below for details.
87
87
 
88
- <a id="api-group-matcher"></a>&#x2022; [`api_group_matcher`](#api-group-matcher) - Optional Block<br>String Matcher. A matcher specifies a list of values for matching an input string. The match is considered successful if the input value is present in the list. The result of the match is inverted if invert_matcher is true<br>See [API Group Matcher](#api-group-matcher) below for details.
88
+ <a id="api-group-matcher"></a>&#x2022; [`api_group_matcher`](#api-group-matcher) - Optional Block<br>Matcher specifies a list of values for matching an input string. The match is considered successful if the input value is present in the list. The result of the match is inverted if invert_matcher is true<br>See [API Group Matcher](#api-group-matcher) below for details.
89
89
 
90
- <a id="arg-matchers"></a>&#x2022; [`arg_matchers`](#arg-matchers) - Optional Block<br>Argument Matchers. A list of predicates for all POST args that need to be matched. The criteria for matching each arg are described in individual instances of ArgMatcherType. The actual arg values are extracted from the request API as a list of strings for each arg selector name. Note that all specified arg matcher predicates must evaluate to true<br>See [Arg Matchers](#arg-matchers) below for details.
90
+ <a id="arg-matchers"></a>&#x2022; [`arg_matchers`](#arg-matchers) - Optional Block<br>List of predicates for all POST args that need to be matched. The criteria for matching each arg are described in individual instances of ArgMatcherType. The actual arg values are extracted from the request API as a list of strings for each arg selector name<br>See [Arg Matchers](#arg-matchers) below for details.
91
91
 
92
- <a id="body-matcher"></a>&#x2022; [`body_matcher`](#body-matcher) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Body Matcher](#body-matcher) below for details.
92
+ <a id="body-matcher"></a>&#x2022; [`body_matcher`](#body-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Body Matcher](#body-matcher) below for details.
93
93
 
94
- <a id="bot-action"></a>&#x2022; [`bot_action`](#bot-action) - Optional Block<br>Bot Action. Modify Bot protection behavior for a matching request. The modification could be to entirely skip Bot processing<br>See [Bot Action](#bot-action) below for details.
94
+ <a id="bot-action"></a>&#x2022; [`bot_action`](#bot-action) - Optional Block<br>Modify Bot protection behavior for a matching request. The modification could be to entirely skip Bot processing<br>See [Bot Action](#bot-action) below for details.
95
95
 
96
- <a id="cookie-matchers"></a>&#x2022; [`cookie_matchers`](#cookie-matchers) - Optional Block<br>Cookie Matchers. A list of predicates for all cookies that need to be matched. The criteria for matching each cookie is described in individual instances of CookieMatcherType. The actual cookie values are extracted from the request API as a list of strings for each cookie name. Note that all specified cookie matcher predicates must evaluate to true<br>See [Cookie Matchers](#cookie-matchers) below for details.
96
+ <a id="cookie-matchers"></a>&#x2022; [`cookie_matchers`](#cookie-matchers) - Optional Block<br>List of predicates for all cookies that need to be matched. The criteria for matching each cookie is described in individual instances of CookieMatcherType. The actual cookie values are extracted from the request API as a list of strings for each cookie name<br>See [Cookie Matchers](#cookie-matchers) below for details.
97
97
 
98
- <a id="domain-matcher"></a>&#x2022; [`domain_matcher`](#domain-matcher) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Domain Matcher](#domain-matcher) below for details.
98
+ <a id="domain-matcher"></a>&#x2022; [`domain_matcher`](#domain-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Domain Matcher](#domain-matcher) below for details.
99
99
 
100
- <a id="expiration-timestamp"></a>&#x2022; [`expiration_timestamp`](#expiration-timestamp) - Optional String<br>Expiration Timestamp. The expiration_timestamp is the RFC 3339 format timestamp at which the containing rule is considered to be logically expired. The rule continues to exist in the configuration but is not applied anymore
100
+ <a id="expiration-timestamp"></a>&#x2022; [`expiration_timestamp`](#expiration-timestamp) - Optional String<br>Specifies expiration_timestamp the RFC 3339 format timestamp at which the containing rule is considered to be logically expired. The rule continues to exist in the configuration but is not applied anymore
101
101
 
102
- <a id="headers"></a>&#x2022; [`headers`](#headers) - Optional Block<br>HTTP Headers. A list of predicates for various HTTP headers that need to match. The criteria for matching each HTTP header are described in individual HeaderMatcherType instances. The actual HTTP header values are extracted from the request API as a list of strings for each HTTP header type. Note that all specified header predicates must evaluate to true<br>See [Headers](#headers) below for details.
102
+ <a id="headers"></a>&#x2022; [`headers`](#headers) - Optional Block<br>List of predicates for various HTTP headers that need to match. The criteria for matching each HTTP header are described in individual HeaderMatcherType instances. The actual HTTP header values are extracted from the request API as a list of strings for each HTTP header type<br>See [Headers](#headers) below for details.
103
103
 
104
- <a id="http-method"></a>&#x2022; [`http_method`](#http-method) - Optional Block<br>HTTP Method Matcher. A HTTP method matcher specifies a list of methods to match an input HTTP method. The match is considered successful if the input method is a member of the list. The result of the match based on the method list is inverted if invert_matcher is true<br>See [HTTP Method](#http-method) below for details.
104
+ <a id="http-method"></a>&#x2022; [`http_method`](#http-method) - Optional Block<br>HTTP method matcher specifies a list of methods to match an input HTTP method. The match is considered successful if the input method is a member of the list. The result of the match based on the method list is inverted if invert_matcher is true<br>See [HTTP Method](#http-method) below for details.
105
105
 
106
106
  -> **One of the following:**
107
- &#x2022; <a id="ja4-tls-fingerprint"></a>[`ja4_tls_fingerprint`](#ja4-tls-fingerprint) - Optional Block<br>JA4 TLS Fingerprint Matcher. An extended version of JA3 that includes additional fields for more comprehensive fingerprinting of SSL/TLS clients and potentially has a different structure and length<br>See [Ja4 TLS Fingerprint](#ja4-tls-fingerprint) below for details.
108
- <br><br>&#x2022; <a id="tls-fingerprint-matcher"></a>[`tls_fingerprint_matcher`](#tls-fingerprint-matcher) - Optional Block<br>TLS Fingerprint Matcher. A TLS fingerprint matcher specifies multiple criteria for matching a TLS fingerprint. The set of supported positve match criteria includes a list of known classes of TLS fingerprints and a list of exact values. The match is considered successful if either of these positive criteria are satisfied and the input fingerprint is not one of the excluded values
107
+ &#x2022; <a id="ja4-tls-fingerprint"></a>[`ja4_tls_fingerprint`](#ja4-tls-fingerprint) - Optional Block<br>Extended version of JA3 that includes additional fields for more comprehensive fingerprinting of SSL/TLS clients and potentially has a different structure and length<br>See [Ja4 TLS Fingerprint](#ja4-tls-fingerprint) below for details.
108
+ <br><br>&#x2022; <a id="tls-fingerprint-matcher"></a>[`tls_fingerprint_matcher`](#tls-fingerprint-matcher) - Optional Block<br>TLS fingerprint matcher specifies multiple criteria for matching a TLS fingerprint. The set of supported positve match criteria includes a list of known classes of TLS fingerprints and a list of exact values. The match is considered successful if either of these positive criteria are satisfied
109
109
 
110
- <a id="jwt-claims"></a>&#x2022; [`jwt_claims`](#jwt-claims) - Optional Block<br>JWT Claims. A list of predicates for various JWT claims that need to match. The criteria for matching each JWT claim are described in individual JWTClaimMatcherType instances. The actual JWT claims values are extracted from the JWT payload as a list of strings. Note that all specified JWT claim predicates must evaluate to true<br>See [JWT Claims](#jwt-claims) below for details.
110
+ <a id="jwt-claims"></a>&#x2022; [`jwt_claims`](#jwt-claims) - Optional Block<br>List of predicates for various JWT claims that need to match. The criteria for matching each JWT claim are described in individual JWTClaimMatcherType instances. The actual JWT claims values are extracted from the JWT payload as a list of strings<br>See [JWT Claims](#jwt-claims) below for details.
111
111
 
112
- <a id="label-matcher"></a>&#x2022; [`label_matcher`](#label-matcher) - Optional Block<br>Label Matcher. A label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#label-matcher) below for details.
112
+ <a id="label-matcher"></a>&#x2022; [`label_matcher`](#label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#label-matcher) below for details.
113
113
 
114
- <a id="mum-action"></a>&#x2022; [`mum_action`](#mum-action) - Optional Block<br>Select Modification Action. Modify behavior for a matching request. The modification could be to entirely skip processing<br>See [Mum Action](#mum-action) below for details.
114
+ <a id="mum-action"></a>&#x2022; [`mum_action`](#mum-action) - Optional Block<br>Modify behavior for a matching request. The modification could be to entirely skip processing<br>See [Mum Action](#mum-action) below for details.
115
115
 
116
- <a id="path"></a>&#x2022; [`path`](#path) - Optional Block<br>Path Matcher. A path matcher specifies multiple criteria for matching an HTTP path string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of path prefixes, a list of exact path values and a list of regular expressions<br>See [Path](#path) below for details.
116
+ <a id="path"></a>&#x2022; [`path`](#path) - Optional Block<br>Path matcher specifies multiple criteria for matching an HTTP path string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of path prefixes, a list of exact path values and a list of regular expressions<br>See [Path](#path) below for details.
117
117
 
118
- <a id="port-matcher"></a>&#x2022; [`port_matcher`](#port-matcher) - Optional Block<br>Port Matcher. A port matcher specifies a list of port ranges as match criteria. The match is considered successful if the input port falls within any of the port ranges. The result of the match is inverted if invert_matcher is true<br>See [Port Matcher](#port-matcher) below for details.
118
+ <a id="port-matcher"></a>&#x2022; [`port_matcher`](#port-matcher) - Optional Block<br>Port matcher specifies a list of port ranges as match criteria. The match is considered successful if the input port falls within any of the port ranges. The result of the match is inverted if invert_matcher is true<br>See [Port Matcher](#port-matcher) below for details.
119
119
 
120
- <a id="query-params"></a>&#x2022; [`query_params`](#query-params) - Optional Block<br>HTTP Query Parameters. A list of predicates for all query parameters that need to be matched. The criteria for matching each query parameter are described in individual instances of QueryParameterMatcherType. The actual query parameter values are extracted from the request API as a list of strings for each query parameter name. Note that all specified query parameter predicates must evaluate to true<br>See [Query Params](#query-params) below for details.
120
+ <a id="query-params"></a>&#x2022; [`query_params`](#query-params) - Optional Block<br>List of predicates for all query parameters that need to be matched. The criteria for matching each query parameter are described in individual instances of QueryParameterMatcherType. The actual query parameter values are extracted from the request API as a list of strings for each query<br>See [Query Params](#query-params) below for details.
121
121
 
122
122
  <a id="request-constraints"></a>&#x2022; [`request_constraints`](#request-constraints) - Optional Block<br>Request Constraints<br>See [Request Constraints](#request-constraints) below for details.
123
123
 
124
- <a id="segment-policy"></a>&#x2022; [`segment_policy`](#segment-policy) - Optional Block<br>Configure Segments. Configure source and destination segment for policy
124
+ <a id="segment-policy"></a>&#x2022; [`segment_policy`](#segment-policy) - Optional Block<br>Configure source and destination segment for policy
125
125
 
126
126
  <a id="timeouts"></a>&#x2022; [`timeouts`](#timeouts) - Optional Block
127
127
 
128
- <a id="waf-action"></a>&#x2022; [`waf_action`](#waf-action) - Optional Block<br>App Firewall Action. Modify App Firewall behavior for a matching request. The modification could either be to entirely skip firewall processing or to customize the firewall rules to be applied as defined by App Firewall Rule Control settings
128
+ <a id="waf-action"></a>&#x2022; [`waf_action`](#waf-action) - Optional Block<br>Modify App Firewall behavior for a matching request. The modification could either be to entirely skip firewall processing or to customize the firewall rules to be applied as defined by App Firewall Rule Control settings
129
129
 
130
130
  ### Attributes Reference
131
131
 
@@ -141,145 +141,145 @@ An [`api_group_matcher`](#api-group-matcher) block supports the following:
141
141
 
142
142
  <a id="api-group-matcher-invert-matcher"></a>&#x2022; [`invert_matcher`](#api-group-matcher-invert-matcher) - Optional Bool<br>Invert String Matcher. Invert the match result
143
143
 
144
- <a id="api-group-matcher-match"></a>&#x2022; [`match`](#api-group-matcher-match) - Optional List<br>Exact Values. A list of exact values to match the input against
144
+ <a id="api-group-matcher-match"></a>&#x2022; [`match`](#api-group-matcher-match) - Optional List<br>List of exact values to match the input against
145
145
 
146
146
  #### Arg Matchers
147
147
 
148
148
  An [`arg_matchers`](#arg-matchers) block supports the following:
149
149
 
150
- <a id="arg-matchers-check-not-present"></a>&#x2022; [`check_not_present`](#arg-matchers-check-not-present) - Optional Block<br>Enable this option
150
+ <a id="arg-matchers-check-not-present"></a>&#x2022; [`check_not_present`](#arg-matchers-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
151
151
 
152
- <a id="arg-matchers-check-present"></a>&#x2022; [`check_present`](#arg-matchers-check-present) - Optional Block<br>Enable this option
152
+ <a id="arg-matchers-check-present"></a>&#x2022; [`check_present`](#arg-matchers-check-present) - Optional Block<br>Can be used for messages where no values are needed
153
153
 
154
154
  <a id="arg-matchers-invert-matcher"></a>&#x2022; [`invert_matcher`](#arg-matchers-invert-matcher) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
155
155
 
156
- <a id="arg-matchers-item"></a>&#x2022; [`item`](#arg-matchers-item) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#arg-matchers-item) below.
156
+ <a id="arg-matchers-item"></a>&#x2022; [`item`](#arg-matchers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#arg-matchers-item) below.
157
157
 
158
- <a id="arg-matchers-name"></a>&#x2022; [`name`](#arg-matchers-name) - Optional String<br>Argument Name. A case-sensitive JSON path in the HTTP request body
158
+ <a id="arg-matchers-name"></a>&#x2022; [`name`](#arg-matchers-name) - Optional String<br>Case-sensitive JSON path in the HTTP request body
159
159
 
160
160
  #### Arg Matchers Item
161
161
 
162
162
  An [`item`](#arg-matchers-item) block (within [`arg_matchers`](#arg-matchers)) supports the following:
163
163
 
164
- <a id="arg-matchers-item-exact-values"></a>&#x2022; [`exact_values`](#arg-matchers-item-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
164
+ <a id="arg-matchers-item-exact-values"></a>&#x2022; [`exact_values`](#arg-matchers-item-exact-values) - Optional List<br>List of exact values to match the input against
165
165
 
166
- <a id="arg-matchers-item-regex-values"></a>&#x2022; [`regex_values`](#arg-matchers-item-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
166
+ <a id="arg-matchers-item-regex-values"></a>&#x2022; [`regex_values`](#arg-matchers-item-regex-values) - Optional List<br>List of regular expressions to match the input against
167
167
 
168
- <a id="arg-matchers-item-transformers"></a>&#x2022; [`transformers`](#arg-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Transformers. An ordered list of transformers (starting from index 0) to be applied to the path before matching
168
+ <a id="arg-matchers-item-transformers"></a>&#x2022; [`transformers`](#arg-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
169
169
 
170
170
  #### Asn List
171
171
 
172
172
  An [`asn_list`](#asn-list) block supports the following:
173
173
 
174
- <a id="asn-list-as-numbers"></a>&#x2022; [`as_numbers`](#asn-list-as-numbers) - Optional List<br>AS Numbers. An unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer
174
+ <a id="asn-list-as-numbers"></a>&#x2022; [`as_numbers`](#asn-list-as-numbers) - Optional List<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer
175
175
 
176
176
  #### Asn Matcher
177
177
 
178
178
  An [`asn_matcher`](#asn-matcher) block supports the following:
179
179
 
180
- <a id="asn-matcher-asn-sets"></a>&#x2022; [`asn_sets`](#asn-matcher-asn-sets) - Optional Block<br>BGP ASN Sets. A list of references to bgp_asn_set objects<br>See [Asn Sets](#asn-matcher-asn-sets) below.
180
+ <a id="asn-matcher-asn-sets"></a>&#x2022; [`asn_sets`](#asn-matcher-asn-sets) - Optional Block<br>List of references to bgp_asn_set objects<br>See [Asn Sets](#asn-matcher-asn-sets) below.
181
181
 
182
182
  #### Asn Matcher Asn Sets
183
183
 
184
184
  An [`asn_sets`](#asn-matcher-asn-sets) block (within [`asn_matcher`](#asn-matcher)) supports the following:
185
185
 
186
- <a id="asn-matcher-asn-sets-kind"></a>&#x2022; [`kind`](#asn-matcher-asn-sets-kind) - Optional String<br>Kind. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
186
+ <a id="asn-matcher-asn-sets-kind"></a>&#x2022; [`kind`](#asn-matcher-asn-sets-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
187
187
 
188
- <a id="asn-matcher-asn-sets-name"></a>&#x2022; [`name`](#asn-matcher-asn-sets-name) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
188
+ <a id="asn-matcher-asn-sets-name"></a>&#x2022; [`name`](#asn-matcher-asn-sets-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
189
189
 
190
- <a id="asn-matcher-asn-sets-namespace"></a>&#x2022; [`namespace`](#asn-matcher-asn-sets-namespace) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
190
+ <a id="asn-matcher-asn-sets-namespace"></a>&#x2022; [`namespace`](#asn-matcher-asn-sets-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
191
191
 
192
- <a id="asn-matcher-asn-sets-tenant"></a>&#x2022; [`tenant`](#asn-matcher-asn-sets-tenant) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
192
+ <a id="asn-matcher-asn-sets-tenant"></a>&#x2022; [`tenant`](#asn-matcher-asn-sets-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
193
193
 
194
- <a id="asn-matcher-asn-sets-uid"></a>&#x2022; [`uid`](#asn-matcher-asn-sets-uid) - Optional String<br>UID. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
194
+ <a id="asn-matcher-asn-sets-uid"></a>&#x2022; [`uid`](#asn-matcher-asn-sets-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
195
195
 
196
196
  #### Body Matcher
197
197
 
198
198
  A [`body_matcher`](#body-matcher) block supports the following:
199
199
 
200
- <a id="body-matcher-exact-values"></a>&#x2022; [`exact_values`](#body-matcher-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
200
+ <a id="body-matcher-exact-values"></a>&#x2022; [`exact_values`](#body-matcher-exact-values) - Optional List<br>List of exact values to match the input against
201
201
 
202
- <a id="body-matcher-regex-values"></a>&#x2022; [`regex_values`](#body-matcher-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
202
+ <a id="body-matcher-regex-values"></a>&#x2022; [`regex_values`](#body-matcher-regex-values) - Optional List<br>List of regular expressions to match the input against
203
203
 
204
- <a id="body-matcher-transformers"></a>&#x2022; [`transformers`](#body-matcher-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Transformers. An ordered list of transformers (starting from index 0) to be applied to the path before matching
204
+ <a id="body-matcher-transformers"></a>&#x2022; [`transformers`](#body-matcher-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
205
205
 
206
206
  #### Bot Action
207
207
 
208
208
  A [`bot_action`](#bot-action) block supports the following:
209
209
 
210
- <a id="bot-action-bot-skip-processing"></a>&#x2022; [`bot_skip_processing`](#bot-action-bot-skip-processing) - Optional Block<br>Enable this option
210
+ <a id="bot-action-bot-skip-processing"></a>&#x2022; [`bot_skip_processing`](#bot-action-bot-skip-processing) - Optional Block<br>Can be used for messages where no values are needed
211
211
 
212
- <a id="bot-action-none"></a>&#x2022; [`none`](#bot-action-none) - Optional Block<br>Enable this option
212
+ <a id="bot-action-none"></a>&#x2022; [`none`](#bot-action-none) - Optional Block<br>Can be used for messages where no values are needed
213
213
 
214
214
  #### Client Name Matcher
215
215
 
216
216
  A [`client_name_matcher`](#client-name-matcher) block supports the following:
217
217
 
218
- <a id="client-name-matcher-exact-values"></a>&#x2022; [`exact_values`](#client-name-matcher-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
218
+ <a id="client-name-matcher-exact-values"></a>&#x2022; [`exact_values`](#client-name-matcher-exact-values) - Optional List<br>List of exact values to match the input against
219
219
 
220
- <a id="client-name-matcher-regex-values"></a>&#x2022; [`regex_values`](#client-name-matcher-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
220
+ <a id="client-name-matcher-regex-values"></a>&#x2022; [`regex_values`](#client-name-matcher-regex-values) - Optional List<br>List of regular expressions to match the input against
221
221
 
222
222
  #### Client Selector
223
223
 
224
224
  A [`client_selector`](#client-selector) block supports the following:
225
225
 
226
- <a id="client-selector-expressions"></a>&#x2022; [`expressions`](#client-selector-expressions) - Optional List<br>Selector Expression. Expressions contains the Kubernetes style label expression for selections
226
+ <a id="client-selector-expressions"></a>&#x2022; [`expressions`](#client-selector-expressions) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
227
227
 
228
228
  #### Cookie Matchers
229
229
 
230
230
  A [`cookie_matchers`](#cookie-matchers) block supports the following:
231
231
 
232
- <a id="cookie-matchers-check-not-present"></a>&#x2022; [`check_not_present`](#cookie-matchers-check-not-present) - Optional Block<br>Enable this option
232
+ <a id="cookie-matchers-check-not-present"></a>&#x2022; [`check_not_present`](#cookie-matchers-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
233
233
 
234
- <a id="cookie-matchers-check-present"></a>&#x2022; [`check_present`](#cookie-matchers-check-present) - Optional Block<br>Enable this option
234
+ <a id="cookie-matchers-check-present"></a>&#x2022; [`check_present`](#cookie-matchers-check-present) - Optional Block<br>Can be used for messages where no values are needed
235
235
 
236
236
  <a id="cookie-matchers-invert-matcher"></a>&#x2022; [`invert_matcher`](#cookie-matchers-invert-matcher) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
237
237
 
238
- <a id="cookie-matchers-item"></a>&#x2022; [`item`](#cookie-matchers-item) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#cookie-matchers-item) below.
238
+ <a id="cookie-matchers-item"></a>&#x2022; [`item`](#cookie-matchers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#cookie-matchers-item) below.
239
239
 
240
- <a id="cookie-matchers-name"></a>&#x2022; [`name`](#cookie-matchers-name) - Optional String<br>Cookie Name. A case-sensitive cookie name
240
+ <a id="cookie-matchers-name"></a>&#x2022; [`name`](#cookie-matchers-name) - Optional String<br>Case-sensitive cookie name
241
241
 
242
242
  #### Cookie Matchers Item
243
243
 
244
244
  An [`item`](#cookie-matchers-item) block (within [`cookie_matchers`](#cookie-matchers)) supports the following:
245
245
 
246
- <a id="cookie-matchers-item-exact-values"></a>&#x2022; [`exact_values`](#cookie-matchers-item-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
246
+ <a id="cookie-matchers-item-exact-values"></a>&#x2022; [`exact_values`](#cookie-matchers-item-exact-values) - Optional List<br>List of exact values to match the input against
247
247
 
248
- <a id="cookie-matchers-item-regex-values"></a>&#x2022; [`regex_values`](#cookie-matchers-item-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
248
+ <a id="cookie-matchers-item-regex-values"></a>&#x2022; [`regex_values`](#cookie-matchers-item-regex-values) - Optional List<br>List of regular expressions to match the input against
249
249
 
250
- <a id="cookie-matchers-item-transformers"></a>&#x2022; [`transformers`](#cookie-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Transformers. An ordered list of transformers (starting from index 0) to be applied to the path before matching
250
+ <a id="cookie-matchers-item-transformers"></a>&#x2022; [`transformers`](#cookie-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
251
251
 
252
252
  #### Domain Matcher
253
253
 
254
254
  A [`domain_matcher`](#domain-matcher) block supports the following:
255
255
 
256
- <a id="domain-matcher-exact-values"></a>&#x2022; [`exact_values`](#domain-matcher-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
256
+ <a id="domain-matcher-exact-values"></a>&#x2022; [`exact_values`](#domain-matcher-exact-values) - Optional List<br>List of exact values to match the input against
257
257
 
258
- <a id="domain-matcher-regex-values"></a>&#x2022; [`regex_values`](#domain-matcher-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
258
+ <a id="domain-matcher-regex-values"></a>&#x2022; [`regex_values`](#domain-matcher-regex-values) - Optional List<br>List of regular expressions to match the input against
259
259
 
260
260
  #### Headers
261
261
 
262
262
  A [`headers`](#headers) block supports the following:
263
263
 
264
- <a id="headers-check-not-present"></a>&#x2022; [`check_not_present`](#headers-check-not-present) - Optional Block<br>Enable this option
264
+ <a id="headers-check-not-present"></a>&#x2022; [`check_not_present`](#headers-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
265
265
 
266
- <a id="headers-check-present"></a>&#x2022; [`check_present`](#headers-check-present) - Optional Block<br>Enable this option
266
+ <a id="headers-check-present"></a>&#x2022; [`check_present`](#headers-check-present) - Optional Block<br>Can be used for messages where no values are needed
267
267
 
268
268
  <a id="headers-invert-matcher"></a>&#x2022; [`invert_matcher`](#headers-invert-matcher) - Optional Bool<br>Invert Header Matcher. Invert the match result
269
269
 
270
- <a id="headers-item"></a>&#x2022; [`item`](#headers-item) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#headers-item) below.
270
+ <a id="headers-item"></a>&#x2022; [`item`](#headers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#headers-item) below.
271
271
 
272
- <a id="headers-name"></a>&#x2022; [`name`](#headers-name) - Optional String<br>Header Name. A case-insensitive HTTP header name
272
+ <a id="headers-name"></a>&#x2022; [`name`](#headers-name) - Optional String<br>Case-insensitive HTTP header name
273
273
 
274
274
  #### Headers Item
275
275
 
276
276
  An [`item`](#headers-item) block (within [`headers`](#headers)) supports the following:
277
277
 
278
- <a id="headers-item-exact-values"></a>&#x2022; [`exact_values`](#headers-item-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
278
+ <a id="headers-item-exact-values"></a>&#x2022; [`exact_values`](#headers-item-exact-values) - Optional List<br>List of exact values to match the input against
279
279
 
280
- <a id="headers-item-regex-values"></a>&#x2022; [`regex_values`](#headers-item-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
280
+ <a id="headers-item-regex-values"></a>&#x2022; [`regex_values`](#headers-item-regex-values) - Optional List<br>List of regular expressions to match the input against
281
281
 
282
- <a id="headers-item-transformers"></a>&#x2022; [`transformers`](#headers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Transformers. An ordered list of transformers (starting from index 0) to be applied to the path before matching
282
+ <a id="headers-item-transformers"></a>&#x2022; [`transformers`](#headers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
283
283
 
284
284
  #### HTTP Method
285
285
 
@@ -287,7 +287,7 @@ A [`http_method`](#http-method) block supports the following:
287
287
 
288
288
  <a id="http-method-invert-matcher"></a>&#x2022; [`invert_matcher`](#http-method-invert-matcher) - Optional Bool<br>Invert Method Matcher. Invert the match result
289
289
 
290
- <a id="http-method-methods"></a>&#x2022; [`methods`](#http-method-methods) - Optional List Defaults to `ANY`<br>See [HTTP Methods](#common-http-methods)<br> Method List. List of methods values to match against
290
+ <a id="http-method-methods"></a>&#x2022; [`methods`](#http-method-methods) - Optional List Defaults to `ANY`<br>See [HTTP Methods](#common-http-methods)<br> List of methods values to match against
291
291
 
292
292
  #### IP Matcher
293
293
 
@@ -295,21 +295,21 @@ An [`ip_matcher`](#ip-matcher) block supports the following:
295
295
 
296
296
  <a id="ip-matcher-invert-matcher"></a>&#x2022; [`invert_matcher`](#ip-matcher-invert-matcher) - Optional Bool<br>Invert IP Matcher. Invert the match result
297
297
 
298
- <a id="ip-matcher-prefix-sets"></a>&#x2022; [`prefix_sets`](#ip-matcher-prefix-sets) - Optional Block<br>IP Prefix Sets. A list of references to ip_prefix_set objects<br>See [Prefix Sets](#ip-matcher-prefix-sets) below.
298
+ <a id="ip-matcher-prefix-sets"></a>&#x2022; [`prefix_sets`](#ip-matcher-prefix-sets) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Prefix Sets](#ip-matcher-prefix-sets) below.
299
299
 
300
300
  #### IP Matcher Prefix Sets
301
301
 
302
302
  A [`prefix_sets`](#ip-matcher-prefix-sets) block (within [`ip_matcher`](#ip-matcher)) supports the following:
303
303
 
304
- <a id="ip-matcher-prefix-sets-kind"></a>&#x2022; [`kind`](#ip-matcher-prefix-sets-kind) - Optional String<br>Kind. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
304
+ <a id="ip-matcher-prefix-sets-kind"></a>&#x2022; [`kind`](#ip-matcher-prefix-sets-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
305
305
 
306
- <a id="ip-matcher-prefix-sets-name"></a>&#x2022; [`name`](#ip-matcher-prefix-sets-name) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
306
+ <a id="ip-matcher-prefix-sets-name"></a>&#x2022; [`name`](#ip-matcher-prefix-sets-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
307
307
 
308
- <a id="ip-matcher-prefix-sets-namespace"></a>&#x2022; [`namespace`](#ip-matcher-prefix-sets-namespace) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
308
+ <a id="ip-matcher-prefix-sets-namespace"></a>&#x2022; [`namespace`](#ip-matcher-prefix-sets-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
309
309
 
310
- <a id="ip-matcher-prefix-sets-tenant"></a>&#x2022; [`tenant`](#ip-matcher-prefix-sets-tenant) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
310
+ <a id="ip-matcher-prefix-sets-tenant"></a>&#x2022; [`tenant`](#ip-matcher-prefix-sets-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
311
311
 
312
- <a id="ip-matcher-prefix-sets-uid"></a>&#x2022; [`uid`](#ip-matcher-prefix-sets-uid) - Optional String<br>UID. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
312
+ <a id="ip-matcher-prefix-sets-uid"></a>&#x2022; [`uid`](#ip-matcher-prefix-sets-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
313
313
 
314
314
  #### IP Prefix List
315
315
 
@@ -323,25 +323,25 @@ An [`ip_prefix_list`](#ip-prefix-list) block supports the following:
323
323
 
324
324
  An [`ip_threat_category_list`](#ip-threat-category-list) block supports the following:
325
325
 
326
- <a id="categories-f2b328"></a>&#x2022; [`ip_threat_categories`](#categories-f2b328) - Optional List Defaults to `SPAM_SOURCES`<br>See [IP Threat Categories](#common-ip-threat-categories)<br>[Enum: SPAM_SOURCES|WINDOWS_EXPLOITS|WEB_ATTACKS|BOTNETS|SCANNERS|REPUTATION|PHISHING|PROXY|MOBILE_THREATS|TOR_PROXY|DENIAL_OF_SERVICE|NETWORK] List of IP Threat Categories to choose. The IP threat categories is obtained from the list and is used to auto-generate equivalent label selection expressions
326
+ <a id="categories-f2b328"></a>&#x2022; [`ip_threat_categories`](#categories-f2b328) - Optional List Defaults to `SPAM_SOURCES`<br>See [IP Threat Categories](#common-ip-threat-categories)<br>[Enum: SPAM_SOURCES|WINDOWS_EXPLOITS|WEB_ATTACKS|BOTNETS|SCANNERS|REPUTATION|PHISHING|PROXY|MOBILE_THREATS|TOR_PROXY|DENIAL_OF_SERVICE|NETWORK] The IP threat categories is obtained from the list and is used to auto-generate equivalent label selection expressions
327
327
 
328
328
  #### Ja4 TLS Fingerprint
329
329
 
330
330
  A [`ja4_tls_fingerprint`](#ja4-tls-fingerprint) block supports the following:
331
331
 
332
- <a id="ja4-tls-fingerprint-exact-values"></a>&#x2022; [`exact_values`](#ja4-tls-fingerprint-exact-values) - Optional List<br>Exact Values. A list of exact JA4 TLS fingerprint to match the input JA4 TLS fingerprint against
332
+ <a id="ja4-tls-fingerprint-exact-values"></a>&#x2022; [`exact_values`](#ja4-tls-fingerprint-exact-values) - Optional List<br>List of exact JA4 TLS fingerprint to match the input JA4 TLS fingerprint against
333
333
 
334
334
  #### JWT Claims
335
335
 
336
336
  A [`jwt_claims`](#jwt-claims) block supports the following:
337
337
 
338
- <a id="jwt-claims-check-not-present"></a>&#x2022; [`check_not_present`](#jwt-claims-check-not-present) - Optional Block<br>Enable this option
338
+ <a id="jwt-claims-check-not-present"></a>&#x2022; [`check_not_present`](#jwt-claims-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
339
339
 
340
- <a id="jwt-claims-check-present"></a>&#x2022; [`check_present`](#jwt-claims-check-present) - Optional Block<br>Enable this option
340
+ <a id="jwt-claims-check-present"></a>&#x2022; [`check_present`](#jwt-claims-check-present) - Optional Block<br>Can be used for messages where no values are needed
341
341
 
342
342
  <a id="jwt-claims-invert-matcher"></a>&#x2022; [`invert_matcher`](#jwt-claims-invert-matcher) - Optional Bool<br>Invert Matcher. Invert the match result
343
343
 
344
- <a id="jwt-claims-item"></a>&#x2022; [`item`](#jwt-claims-item) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#jwt-claims-item) below.
344
+ <a id="jwt-claims-item"></a>&#x2022; [`item`](#jwt-claims-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#jwt-claims-item) below.
345
345
 
346
346
  <a id="jwt-claims-name"></a>&#x2022; [`name`](#jwt-claims-name) - Optional String<br>JWT Claim Name. JWT claim name
347
347
 
@@ -349,41 +349,41 @@ A [`jwt_claims`](#jwt-claims) block supports the following:
349
349
 
350
350
  An [`item`](#jwt-claims-item) block (within [`jwt_claims`](#jwt-claims)) supports the following:
351
351
 
352
- <a id="jwt-claims-item-exact-values"></a>&#x2022; [`exact_values`](#jwt-claims-item-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
352
+ <a id="jwt-claims-item-exact-values"></a>&#x2022; [`exact_values`](#jwt-claims-item-exact-values) - Optional List<br>List of exact values to match the input against
353
353
 
354
- <a id="jwt-claims-item-regex-values"></a>&#x2022; [`regex_values`](#jwt-claims-item-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
354
+ <a id="jwt-claims-item-regex-values"></a>&#x2022; [`regex_values`](#jwt-claims-item-regex-values) - Optional List<br>List of regular expressions to match the input against
355
355
 
356
- <a id="jwt-claims-item-transformers"></a>&#x2022; [`transformers`](#jwt-claims-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Transformers. An ordered list of transformers (starting from index 0) to be applied to the path before matching
356
+ <a id="jwt-claims-item-transformers"></a>&#x2022; [`transformers`](#jwt-claims-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
357
357
 
358
358
  #### Label Matcher
359
359
 
360
360
  A [`label_matcher`](#label-matcher) block supports the following:
361
361
 
362
- <a id="label-matcher-keys"></a>&#x2022; [`keys`](#label-matcher-keys) - Optional List<br>Keys. The list of label key names that have to match
362
+ <a id="label-matcher-keys"></a>&#x2022; [`keys`](#label-matcher-keys) - Optional List<br>The list of label key names that have to match
363
363
 
364
364
  #### Mum Action
365
365
 
366
366
  A [`mum_action`](#mum-action) block supports the following:
367
367
 
368
- <a id="mum-action-default"></a>&#x2022; [`default`](#mum-action-default) - Optional Block<br>Enable this option
368
+ <a id="mum-action-default"></a>&#x2022; [`default`](#mum-action-default) - Optional Block<br>Can be used for messages where no values are needed
369
369
 
370
- <a id="mum-action-skip-processing"></a>&#x2022; [`skip_processing`](#mum-action-skip-processing) - Optional Block<br>Enable this option
370
+ <a id="mum-action-skip-processing"></a>&#x2022; [`skip_processing`](#mum-action-skip-processing) - Optional Block<br>Can be used for messages where no values are needed
371
371
 
372
372
  #### Path
373
373
 
374
374
  A [`path`](#path) block supports the following:
375
375
 
376
- <a id="path-exact-values"></a>&#x2022; [`exact_values`](#path-exact-values) - Optional List<br>Exact Values. A list of exact path values to match the input HTTP path against
376
+ <a id="path-exact-values"></a>&#x2022; [`exact_values`](#path-exact-values) - Optional List<br>List of exact path values to match the input HTTP path against
377
377
 
378
378
  <a id="path-invert-matcher"></a>&#x2022; [`invert_matcher`](#path-invert-matcher) - Optional Bool<br>Invert Path Matcher. Invert the match result
379
379
 
380
- <a id="path-prefix-values"></a>&#x2022; [`prefix_values`](#path-prefix-values) - Optional List<br>Prefix Values. A list of path prefix values to match the input HTTP path against
380
+ <a id="path-prefix-values"></a>&#x2022; [`prefix_values`](#path-prefix-values) - Optional List<br>List of path prefix values to match the input HTTP path against
381
381
 
382
- <a id="path-regex-values"></a>&#x2022; [`regex_values`](#path-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input HTTP path against
382
+ <a id="path-regex-values"></a>&#x2022; [`regex_values`](#path-regex-values) - Optional List<br>List of regular expressions to match the input HTTP path against
383
383
 
384
- <a id="path-suffix-values"></a>&#x2022; [`suffix_values`](#path-suffix-values) - Optional List<br>Suffix Values. A list of path suffix values to match the input HTTP path against
384
+ <a id="path-suffix-values"></a>&#x2022; [`suffix_values`](#path-suffix-values) - Optional List<br>List of path suffix values to match the input HTTP path against
385
385
 
386
- <a id="path-transformers"></a>&#x2022; [`transformers`](#path-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Transformers. An ordered list of transformers (starting from index 0) to be applied to the path before matching
386
+ <a id="path-transformers"></a>&#x2022; [`transformers`](#path-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
387
387
 
388
388
  #### Port Matcher
389
389
 
@@ -391,31 +391,31 @@ A [`port_matcher`](#port-matcher) block supports the following:
391
391
 
392
392
  <a id="port-matcher-invert-matcher"></a>&#x2022; [`invert_matcher`](#port-matcher-invert-matcher) - Optional Bool<br>Invert Port Matcher. Invert the match result
393
393
 
394
- <a id="port-matcher-ports"></a>&#x2022; [`ports`](#port-matcher-ports) - Optional List<br>Port Ranges. A list of strings, each of which is a single port value or a tuple of start and end port values separated by '-'. The start and end values are considered to be part of the range
394
+ <a id="port-matcher-ports"></a>&#x2022; [`ports`](#port-matcher-ports) - Optional List<br>List of strings, each of which is a single port value or a tuple of start and end port values separated by '-'. The start and end values are considered to be part of the range
395
395
 
396
396
  #### Query Params
397
397
 
398
398
  A [`query_params`](#query-params) block supports the following:
399
399
 
400
- <a id="query-params-check-not-present"></a>&#x2022; [`check_not_present`](#query-params-check-not-present) - Optional Block<br>Enable this option
400
+ <a id="query-params-check-not-present"></a>&#x2022; [`check_not_present`](#query-params-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
401
401
 
402
- <a id="query-params-check-present"></a>&#x2022; [`check_present`](#query-params-check-present) - Optional Block<br>Enable this option
402
+ <a id="query-params-check-present"></a>&#x2022; [`check_present`](#query-params-check-present) - Optional Block<br>Can be used for messages where no values are needed
403
403
 
404
404
  <a id="query-params-invert-matcher"></a>&#x2022; [`invert_matcher`](#query-params-invert-matcher) - Optional Bool<br>Invert Query Parameter Matcher. Invert the match result
405
405
 
406
- <a id="query-params-item"></a>&#x2022; [`item`](#query-params-item) - Optional Block<br>Matcher. A matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#query-params-item) below.
406
+ <a id="query-params-item"></a>&#x2022; [`item`](#query-params-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#query-params-item) below.
407
407
 
408
- <a id="query-params-key"></a>&#x2022; [`key`](#query-params-key) - Optional String<br>Query Parameter Name. A case-sensitive HTTP query parameter name
408
+ <a id="query-params-key"></a>&#x2022; [`key`](#query-params-key) - Optional String<br>Case-sensitive HTTP query parameter name
409
409
 
410
410
  #### Query Params Item
411
411
 
412
412
  An [`item`](#query-params-item) block (within [`query_params`](#query-params)) supports the following:
413
413
 
414
- <a id="query-params-item-exact-values"></a>&#x2022; [`exact_values`](#query-params-item-exact-values) - Optional List<br>Exact Values. A list of exact values to match the input against
414
+ <a id="query-params-item-exact-values"></a>&#x2022; [`exact_values`](#query-params-item-exact-values) - Optional List<br>List of exact values to match the input against
415
415
 
416
- <a id="query-params-item-regex-values"></a>&#x2022; [`regex_values`](#query-params-item-regex-values) - Optional List<br>Regex Values. A list of regular expressions to match the input against
416
+ <a id="query-params-item-regex-values"></a>&#x2022; [`regex_values`](#query-params-item-regex-values) - Optional List<br>List of regular expressions to match the input against
417
417
 
418
- <a id="query-params-item-transformers"></a>&#x2022; [`transformers`](#query-params-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Transformers. An ordered list of transformers (starting from index 0) to be applied to the path before matching
418
+ <a id="query-params-item-transformers"></a>&#x2022; [`transformers`](#query-params-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
419
419
 
420
420
  #### Request Constraints
421
421
 
@@ -423,67 +423,67 @@ A [`request_constraints`](#request-constraints) block supports the following:
423
423
 
424
424
  <a id="exceeds-0e8746"></a>&#x2022; [`max_cookie_count_exceeds`](#exceeds-0e8746) - Optional Number<br>Match on the Count for all Cookies that exceed this value
425
425
 
426
- <a id="none-291d57"></a>&#x2022; [`max_cookie_count_none`](#none-291d57) - Optional Block<br>Enable this option
426
+ <a id="none-291d57"></a>&#x2022; [`max_cookie_count_none`](#none-291d57) - Optional Block<br>Can be used for messages where no values are needed
427
427
 
428
- <a id="exceeds-7352a4"></a>&#x2022; [`max_cookie_key_size_exceeds`](#exceeds-7352a4) - Optional Number<br>Match on the Name Size per Cookie that exceed this value
428
+ <a id="exceeds-7352a4"></a>&#x2022; [`max_cookie_key_size_exceeds`](#exceeds-7352a4) - Optional Number
429
429
 
430
- <a id="none-0c2b38"></a>&#x2022; [`max_cookie_key_size_none`](#none-0c2b38) - Optional Block<br>Enable this option
430
+ <a id="none-0c2b38"></a>&#x2022; [`max_cookie_key_size_none`](#none-0c2b38) - Optional Block<br>Can be used for messages where no values are needed
431
431
 
432
- <a id="exceeds-ec487d"></a>&#x2022; [`max_cookie_value_size_exceeds`](#exceeds-ec487d) - Optional Number<br>Match on the Value Size per Cookie that exceed this value
432
+ <a id="exceeds-ec487d"></a>&#x2022; [`max_cookie_value_size_exceeds`](#exceeds-ec487d) - Optional Number
433
433
 
434
- <a id="none-cfea13"></a>&#x2022; [`max_cookie_value_size_none`](#none-cfea13) - Optional Block<br>Enable this option
434
+ <a id="none-cfea13"></a>&#x2022; [`max_cookie_value_size_none`](#none-cfea13) - Optional Block<br>Can be used for messages where no values are needed
435
435
 
436
436
  <a id="exceeds-d461a1"></a>&#x2022; [`max_header_count_exceeds`](#exceeds-d461a1) - Optional Number<br>Match on the Count for all Headers that exceed this value
437
437
 
438
- <a id="none-d12b83"></a>&#x2022; [`max_header_count_none`](#none-d12b83) - Optional Block<br>Enable this option
438
+ <a id="none-d12b83"></a>&#x2022; [`max_header_count_none`](#none-d12b83) - Optional Block<br>Can be used for messages where no values are needed
439
439
 
440
- <a id="exceeds-87df1c"></a>&#x2022; [`max_header_key_size_exceeds`](#exceeds-87df1c) - Optional Number<br>Match on the Name Size per Header that exceed this value
440
+ <a id="exceeds-87df1c"></a>&#x2022; [`max_header_key_size_exceeds`](#exceeds-87df1c) - Optional Number
441
441
 
442
- <a id="none-6ea93c"></a>&#x2022; [`max_header_key_size_none`](#none-6ea93c) - Optional Block<br>Enable this option
442
+ <a id="none-6ea93c"></a>&#x2022; [`max_header_key_size_none`](#none-6ea93c) - Optional Block<br>Can be used for messages where no values are needed
443
443
 
444
- <a id="exceeds-883323"></a>&#x2022; [`max_header_value_size_exceeds`](#exceeds-883323) - Optional Number<br>Match on the Value Size per Header that exceed this value
444
+ <a id="exceeds-883323"></a>&#x2022; [`max_header_value_size_exceeds`](#exceeds-883323) - Optional Number
445
445
 
446
- <a id="none-d2e74f"></a>&#x2022; [`max_header_value_size_none`](#none-d2e74f) - Optional Block<br>Enable this option
446
+ <a id="none-d2e74f"></a>&#x2022; [`max_header_value_size_none`](#none-d2e74f) - Optional Block<br>Can be used for messages where no values are needed
447
447
 
448
- <a id="exceeds-480590"></a>&#x2022; [`max_parameter_count_exceeds`](#exceeds-480590) - Optional Number<br>Match on the Parameter Count that exceed this value
448
+ <a id="exceeds-480590"></a>&#x2022; [`max_parameter_count_exceeds`](#exceeds-480590) - Optional Number
449
449
 
450
- <a id="none-cea22c"></a>&#x2022; [`max_parameter_count_none`](#none-cea22c) - Optional Block<br>Enable this option
450
+ <a id="none-cea22c"></a>&#x2022; [`max_parameter_count_none`](#none-cea22c) - Optional Block<br>Can be used for messages where no values are needed
451
451
 
452
- <a id="exceeds-c96298"></a>&#x2022; [`max_parameter_name_size_exceeds`](#exceeds-c96298) - Optional Number<br>Match on the Parameter Name Size that exceed this value
452
+ <a id="exceeds-c96298"></a>&#x2022; [`max_parameter_name_size_exceeds`](#exceeds-c96298) - Optional Number
453
453
 
454
- <a id="none-b2e47d"></a>&#x2022; [`max_parameter_name_size_none`](#none-b2e47d) - Optional Block<br>Enable this option
454
+ <a id="none-b2e47d"></a>&#x2022; [`max_parameter_name_size_none`](#none-b2e47d) - Optional Block<br>Can be used for messages where no values are needed
455
455
 
456
- <a id="exceeds-c345d4"></a>&#x2022; [`max_parameter_value_size_exceeds`](#exceeds-c345d4) - Optional Number<br>Match on the Parameter Value Size that exceed this value
456
+ <a id="exceeds-c345d4"></a>&#x2022; [`max_parameter_value_size_exceeds`](#exceeds-c345d4) - Optional Number
457
457
 
458
- <a id="none-bd1b4b"></a>&#x2022; [`max_parameter_value_size_none`](#none-bd1b4b) - Optional Block<br>Enable this option
458
+ <a id="none-bd1b4b"></a>&#x2022; [`max_parameter_value_size_none`](#none-bd1b4b) - Optional Block<br>Can be used for messages where no values are needed
459
459
 
460
460
  <a id="exceeds-a9b09b"></a>&#x2022; [`max_query_size_exceeds`](#exceeds-a9b09b) - Optional Number<br>Match on the URL Query Size that exceed this value
461
461
 
462
- <a id="request-constraints-max-query-size-none"></a>&#x2022; [`max_query_size_none`](#request-constraints-max-query-size-none) - Optional Block<br>Enable this option
462
+ <a id="request-constraints-max-query-size-none"></a>&#x2022; [`max_query_size_none`](#request-constraints-max-query-size-none) - Optional Block<br>Can be used for messages where no values are needed
463
463
 
464
- <a id="exceeds-80bd97"></a>&#x2022; [`max_request_line_size_exceeds`](#exceeds-80bd97) - Optional Number<br>Match on the Request Line Size that exceed this value
464
+ <a id="exceeds-80bd97"></a>&#x2022; [`max_request_line_size_exceeds`](#exceeds-80bd97) - Optional Number
465
465
 
466
- <a id="none-76b27d"></a>&#x2022; [`max_request_line_size_none`](#none-76b27d) - Optional Block<br>Enable this option
466
+ <a id="none-76b27d"></a>&#x2022; [`max_request_line_size_none`](#none-76b27d) - Optional Block<br>Can be used for messages where no values are needed
467
467
 
468
468
  <a id="exceeds-2156ce"></a>&#x2022; [`max_request_size_exceeds`](#exceeds-2156ce) - Optional Number<br>Match on the Request Size that exceed this value
469
469
 
470
- <a id="none-250223"></a>&#x2022; [`max_request_size_none`](#none-250223) - Optional Block<br>Enable this option
470
+ <a id="none-250223"></a>&#x2022; [`max_request_size_none`](#none-250223) - Optional Block<br>Can be used for messages where no values are needed
471
471
 
472
472
  <a id="exceeds-4ce081"></a>&#x2022; [`max_url_size_exceeds`](#exceeds-4ce081) - Optional Number<br>Match on the URL Size that exceed this value
473
473
 
474
- <a id="request-constraints-max-url-size-none"></a>&#x2022; [`max_url_size_none`](#request-constraints-max-url-size-none) - Optional Block<br>Enable this option
474
+ <a id="request-constraints-max-url-size-none"></a>&#x2022; [`max_url_size_none`](#request-constraints-max-url-size-none) - Optional Block<br>Can be used for messages where no values are needed
475
475
 
476
476
  #### Segment Policy
477
477
 
478
478
  A [`segment_policy`](#segment-policy) block supports the following:
479
479
 
480
- <a id="segment-policy-dst-any"></a>&#x2022; [`dst_any`](#segment-policy-dst-any) - Optional Block<br>Enable this option
480
+ <a id="segment-policy-dst-any"></a>&#x2022; [`dst_any`](#segment-policy-dst-any) - Optional Block<br>Can be used for messages where no values are needed
481
481
 
482
482
  <a id="segment-policy-dst-segments"></a>&#x2022; [`dst_segments`](#segment-policy-dst-segments) - Optional Block<br>Segment List. List of references to Segments<br>See [Dst Segments](#segment-policy-dst-segments) below.
483
483
 
484
- <a id="segment-policy-intra-segment"></a>&#x2022; [`intra_segment`](#segment-policy-intra-segment) - Optional Block<br>Enable this option
484
+ <a id="segment-policy-intra-segment"></a>&#x2022; [`intra_segment`](#segment-policy-intra-segment) - Optional Block<br>Can be used for messages where no values are needed
485
485
 
486
- <a id="segment-policy-src-any"></a>&#x2022; [`src_any`](#segment-policy-src-any) - Optional Block<br>Enable this option
486
+ <a id="segment-policy-src-any"></a>&#x2022; [`src_any`](#segment-policy-src-any) - Optional Block<br>Can be used for messages where no values are needed
487
487
 
488
488
  <a id="segment-policy-src-segments"></a>&#x2022; [`src_segments`](#segment-policy-src-segments) - Optional Block<br>Segment List. List of references to Segments<br>See [Src Segments](#segment-policy-src-segments) below.
489
489
 
@@ -497,11 +497,11 @@ A [`dst_segments`](#segment-policy-dst-segments) block (within [`segment_policy`
497
497
 
498
498
  A [`segments`](#segment-policy-dst-segments-segments) block (within [`segment_policy.dst_segments`](#segment-policy-dst-segments)) supports the following:
499
499
 
500
- <a id="name-f84b81"></a>&#x2022; [`name`](#name-f84b81) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
500
+ <a id="name-f84b81"></a>&#x2022; [`name`](#name-f84b81) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
501
501
 
502
- <a id="namespace-6bd8a4"></a>&#x2022; [`namespace`](#namespace-6bd8a4) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
502
+ <a id="namespace-6bd8a4"></a>&#x2022; [`namespace`](#namespace-6bd8a4) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
503
503
 
504
- <a id="tenant-0605a6"></a>&#x2022; [`tenant`](#tenant-0605a6) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
504
+ <a id="tenant-0605a6"></a>&#x2022; [`tenant`](#tenant-0605a6) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
505
505
 
506
506
  #### Segment Policy Src Segments
507
507
 
@@ -513,11 +513,11 @@ A [`src_segments`](#segment-policy-src-segments) block (within [`segment_policy`
513
513
 
514
514
  A [`segments`](#segment-policy-src-segments-segments) block (within [`segment_policy.src_segments`](#segment-policy-src-segments)) supports the following:
515
515
 
516
- <a id="name-cd8043"></a>&#x2022; [`name`](#name-cd8043) - Optional String<br>Name. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
516
+ <a id="name-cd8043"></a>&#x2022; [`name`](#name-cd8043) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
517
517
 
518
- <a id="namespace-692ca8"></a>&#x2022; [`namespace`](#namespace-692ca8) - Optional String<br>Namespace. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
518
+ <a id="namespace-692ca8"></a>&#x2022; [`namespace`](#namespace-692ca8) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
519
519
 
520
- <a id="tenant-b9608a"></a>&#x2022; [`tenant`](#tenant-b9608a) - Optional String<br>Tenant. When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
520
+ <a id="tenant-b9608a"></a>&#x2022; [`tenant`](#tenant-b9608a) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
521
521
 
522
522
  #### Timeouts
523
523
 
@@ -535,33 +535,33 @@ A [`timeouts`](#timeouts) block supports the following:
535
535
 
536
536
  A [`tls_fingerprint_matcher`](#tls-fingerprint-matcher) block supports the following:
537
537
 
538
- <a id="tls-fingerprint-matcher-classes"></a>&#x2022; [`classes`](#tls-fingerprint-matcher-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT] TLS fingerprint classes. A list of known classes of TLS fingerprints to match the input TLS JA3 fingerprint against
538
+ <a id="tls-fingerprint-matcher-classes"></a>&#x2022; [`classes`](#tls-fingerprint-matcher-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT] List of known classes of TLS fingerprints to match the input TLS JA3 fingerprint against
539
539
 
540
- <a id="tls-fingerprint-matcher-exact-values"></a>&#x2022; [`exact_values`](#tls-fingerprint-matcher-exact-values) - Optional List<br>Exact Values. A list of exact TLS JA3 fingerprints to match the input TLS JA3 fingerprint against
540
+ <a id="tls-fingerprint-matcher-exact-values"></a>&#x2022; [`exact_values`](#tls-fingerprint-matcher-exact-values) - Optional List<br>List of exact TLS JA3 fingerprints to match the input TLS JA3 fingerprint against
541
541
 
542
- <a id="tls-fingerprint-matcher-excluded-values"></a>&#x2022; [`excluded_values`](#tls-fingerprint-matcher-excluded-values) - Optional List<br>Excluded Values. A list of TLS JA3 fingerprints to be excluded when matching the input TLS JA3 fingerprint. This can be used to skip known false positives when using one or more known TLS fingerprint classes in the enclosing matcher
542
+ <a id="tls-fingerprint-matcher-excluded-values"></a>&#x2022; [`excluded_values`](#tls-fingerprint-matcher-excluded-values) - Optional List<br>List of TLS JA3 fingerprints to be excluded when matching the input TLS JA3 fingerprint. This can be used to skip known false positives when using one or more known TLS fingerprint classes in the enclosing matcher
543
543
 
544
544
  #### WAF Action
545
545
 
546
546
  A [`waf_action`](#waf-action) block supports the following:
547
547
 
548
- <a id="control-b9f62f"></a>&#x2022; [`app_firewall_detection_control`](#control-b9f62f) - Optional Block<br>App Firewall Detection Control. Define the list of Signature IDs, Violations, Attack Types and Bot Names that should be excluded from triggering on the defined match criteria<br>See [App Firewall Detection Control](#control-b9f62f) below.
548
+ <a id="control-b9f62f"></a>&#x2022; [`app_firewall_detection_control`](#control-b9f62f) - Optional Block<br>Define the list of Signature IDs, Violations, Attack Types and Bot Names that should be excluded from triggering on the defined match criteria<br>See [App Firewall Detection Control](#control-b9f62f) below.
549
549
 
550
- <a id="waf-action-none"></a>&#x2022; [`none`](#waf-action-none) - Optional Block<br>Enable this option
550
+ <a id="waf-action-none"></a>&#x2022; [`none`](#waf-action-none) - Optional Block<br>Can be used for messages where no values are needed
551
551
 
552
- <a id="waf-action-waf-skip-processing"></a>&#x2022; [`waf_skip_processing`](#waf-action-waf-skip-processing) - Optional Block<br>Enable this option
552
+ <a id="waf-action-waf-skip-processing"></a>&#x2022; [`waf_skip_processing`](#waf-action-waf-skip-processing) - Optional Block<br>Can be used for messages where no values are needed
553
553
 
554
554
  #### WAF Action App Firewall Detection Control
555
555
 
556
556
  An [`app_firewall_detection_control`](#control-b9f62f) block (within [`waf_action`](#waf-action)) supports the following:
557
557
 
558
- <a id="contexts-69b36c"></a>&#x2022; [`exclude_attack_type_contexts`](#contexts-69b36c) - Optional Block<br>Attack Types. Attack Types to be excluded for the defined match criteria<br>See [Exclude Attack Type Contexts](#contexts-69b36c) below.
558
+ <a id="contexts-69b36c"></a>&#x2022; [`exclude_attack_type_contexts`](#contexts-69b36c) - Optional Block<br>Attack Types to be excluded for the defined match criteria<br>See [Exclude Attack Type Contexts](#contexts-69b36c) below.
559
559
 
560
- <a id="contexts-08d37e"></a>&#x2022; [`exclude_bot_name_contexts`](#contexts-08d37e) - Optional Block<br>Bot Names. Bot Names to be excluded for the defined match criteria<br>See [Exclude Bot Name Contexts](#contexts-08d37e) below.
560
+ <a id="contexts-08d37e"></a>&#x2022; [`exclude_bot_name_contexts`](#contexts-08d37e) - Optional Block<br>Bot Names to be excluded for the defined match criteria<br>See [Exclude Bot Name Contexts](#contexts-08d37e) below.
561
561
 
562
- <a id="contexts-6b7dbc"></a>&#x2022; [`exclude_signature_contexts`](#contexts-6b7dbc) - Optional Block<br>Signature IDs. Signature IDs to be excluded for the defined match criteria<br>See [Exclude Signature Contexts](#contexts-6b7dbc) below.
562
+ <a id="contexts-6b7dbc"></a>&#x2022; [`exclude_signature_contexts`](#contexts-6b7dbc) - Optional Block<br>Signature IDs to be excluded for the defined match criteria<br>See [Exclude Signature Contexts](#contexts-6b7dbc) below.
563
563
 
564
- <a id="contexts-af5804"></a>&#x2022; [`exclude_violation_contexts`](#contexts-af5804) - Optional Block<br>Violations. Violations to be excluded for the defined match criteria<br>See [Exclude Violation Contexts](#contexts-af5804) below.
564
+ <a id="contexts-af5804"></a>&#x2022; [`exclude_violation_contexts`](#contexts-af5804) - Optional Block<br>Violations to be excluded for the defined match criteria<br>See [Exclude Violation Contexts](#contexts-af5804) below.
565
565
 
566
566
  #### WAF Action App Firewall Detection Control Exclude Attack Type Contexts
567
567