@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -65,14 +65,14 @@ resource "f5xc_network_connector" "example" {
|
|
|
65
65
|
### Spec Argument Reference
|
|
66
66
|
|
|
67
67
|
-> **One of the following:**
|
|
68
|
-
• <a id="disable-forward-proxy"></a>[`disable_forward_proxy`](#disable-forward-proxy) - Optional Block<br>
|
|
68
|
+
• <a id="disable-forward-proxy"></a>[`disable_forward_proxy`](#disable-forward-proxy) - Optional Block<br>Can be used for messages where no values are needed
|
|
69
69
|
|
|
70
|
-
<a id="enable-forward-proxy"></a>• [`enable_forward_proxy`](#enable-forward-proxy) - Optional Block<br>
|
|
70
|
+
<a id="enable-forward-proxy"></a>• [`enable_forward_proxy`](#enable-forward-proxy) - Optional Block<br>Fine tune forward proxy behavior Few configurations allowed are White listed ports and IP prefixes: Forward proxy does application protocol detection and server name(SNI) detection by peeking into the traffic on the incoming downstream connection. Few protocols doesn't have client sending the<br>See [Enable Forward Proxy](#enable-forward-proxy) below for details.
|
|
71
71
|
|
|
72
72
|
-> **One of the following:**
|
|
73
|
-
• <a id="sli-to-global-dr"></a>[`sli_to_global_dr`](#sli-to-global-dr) - Optional Block<br>Global
|
|
73
|
+
• <a id="sli-to-global-dr"></a>[`sli_to_global_dr`](#sli-to-global-dr) - Optional Block<br>Global network reference for direct connection<br>See [SLI To Global DR](#sli-to-global-dr) below for details.
|
|
74
74
|
<br><br>• <a id="sli-to-slo-snat"></a>[`sli_to_slo_snat`](#sli-to-slo-snat) - Optional Block<br>SNAT Configuration. X-example: '' description<br>See [SLI To Slo Snat](#sli-to-slo-snat) below for details.
|
|
75
|
-
<br><br>• <a id="slo-to-global-dr"></a>[`slo_to_global_dr`](#slo-to-global-dr) - Optional Block<br>Global
|
|
75
|
+
<br><br>• <a id="slo-to-global-dr"></a>[`slo_to_global_dr`](#slo-to-global-dr) - Optional Block<br>Global network reference for direct connection<br>See [Slo To Global DR](#slo-to-global-dr) below for details.
|
|
76
76
|
|
|
77
77
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
78
78
|
|
|
@@ -88,17 +88,17 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
88
88
|
|
|
89
89
|
An [`enable_forward_proxy`](#enable-forward-proxy) block supports the following:
|
|
90
90
|
|
|
91
|
-
<a id="enable-forward-proxy-connection-timeout"></a>• [`connection_timeout`](#enable-forward-proxy-connection-timeout) - Optional Number Defaults to `2000` Specified in milliseconds<br>
|
|
91
|
+
<a id="enable-forward-proxy-connection-timeout"></a>• [`connection_timeout`](#enable-forward-proxy-connection-timeout) - Optional Number Defaults to `2000` Specified in milliseconds<br>The timeout for new network connections to upstream server. The (2 seconds)
|
|
92
92
|
|
|
93
|
-
<a id="attempts-e04850"></a>• [`max_connect_attempts`](#attempts-e04850) - Optional Number Defaults to `1`<br>
|
|
93
|
+
<a id="attempts-e04850"></a>• [`max_connect_attempts`](#attempts-e04850) - Optional Number Defaults to `1`<br>Specifies the allowed number of retries on connect failure to upstream server
|
|
94
94
|
|
|
95
|
-
<a id="enable-forward-proxy-no-interception"></a>• [`no_interception`](#enable-forward-proxy-no-interception) - Optional Block<br>
|
|
95
|
+
<a id="enable-forward-proxy-no-interception"></a>• [`no_interception`](#enable-forward-proxy-no-interception) - Optional Block<br>Can be used for messages where no values are needed
|
|
96
96
|
|
|
97
|
-
<a id="enable-forward-proxy-tls-intercept"></a>• [`tls_intercept`](#enable-forward-proxy-tls-intercept) - Optional Block<br>Configuration
|
|
97
|
+
<a id="enable-forward-proxy-tls-intercept"></a>• [`tls_intercept`](#enable-forward-proxy-tls-intercept) - Optional Block<br>Configuration to enable TLS interception<br>See [TLS Intercept](#enable-forward-proxy-tls-intercept) below.
|
|
98
98
|
|
|
99
|
-
<a id="enable-forward-proxy-white-listed-ports"></a>• [`white_listed_ports`](#enable-forward-proxy-white-listed-ports) - Optional List<br>
|
|
99
|
+
<a id="enable-forward-proxy-white-listed-ports"></a>• [`white_listed_ports`](#enable-forward-proxy-white-listed-ports) - Optional List<br>Traffic to these destination TCP ports is not subjected to protocol parsing Example 'tmate' server port
|
|
100
100
|
|
|
101
|
-
<a id="prefixes-f83493"></a>• [`white_listed_prefixes`](#prefixes-f83493) - Optional List<br>
|
|
101
|
+
<a id="prefixes-f83493"></a>• [`white_listed_prefixes`](#prefixes-f83493) - Optional List<br>Traffic to these destination IP prefixes is not subjected to protocol parsing Example 'tmate' server IP
|
|
102
102
|
|
|
103
103
|
#### Enable Forward Proxy TLS Intercept
|
|
104
104
|
|
|
@@ -106,31 +106,31 @@ A [`tls_intercept`](#enable-forward-proxy-tls-intercept) block (within [`enable_
|
|
|
106
106
|
|
|
107
107
|
<a id="certificate-1f025c"></a>• [`custom_certificate`](#certificate-1f025c) - Optional Block<br>TLS Certificate. Handle to fetch certificate and key<br>See [Custom Certificate](#certificate-1f025c) below.
|
|
108
108
|
|
|
109
|
-
<a id="domains-448895"></a>• [`enable_for_all_domains`](#domains-448895) - Optional Block<br>
|
|
109
|
+
<a id="domains-448895"></a>• [`enable_for_all_domains`](#domains-448895) - Optional Block<br>Can be used for messages where no values are needed
|
|
110
110
|
|
|
111
|
-
<a id="policy-3a19ff"></a>• [`policy`](#policy-3a19ff) - Optional Block<br>
|
|
111
|
+
<a id="policy-3a19ff"></a>• [`policy`](#policy-3a19ff) - Optional Block<br>Policy to enable or disable TLS interception<br>See [Policy](#policy-3a19ff) below.
|
|
112
112
|
|
|
113
|
-
<a id="url-498586"></a>• [`trusted_ca_url`](#url-498586) - Optional String<br>Custom Root CA Certificate
|
|
113
|
+
<a id="url-498586"></a>• [`trusted_ca_url`](#url-498586) - Optional String<br>Custom Root CA Certificate for validating upstream server certificate
|
|
114
114
|
|
|
115
|
-
<a id="certificate-028e29"></a>• [`volterra_certificate`](#certificate-028e29) - Optional Block<br>
|
|
115
|
+
<a id="certificate-028e29"></a>• [`volterra_certificate`](#certificate-028e29) - Optional Block<br>Can be used for messages where no values are needed
|
|
116
116
|
|
|
117
|
-
<a id="trusted-ca-89cb15"></a>• [`volterra_trusted_ca`](#trusted-ca-89cb15) - Optional Block<br>
|
|
117
|
+
<a id="trusted-ca-89cb15"></a>• [`volterra_trusted_ca`](#trusted-ca-89cb15) - Optional Block<br>Can be used for messages where no values are needed
|
|
118
118
|
|
|
119
119
|
#### Enable Forward Proxy TLS Intercept Custom Certificate
|
|
120
120
|
|
|
121
121
|
A [`custom_certificate`](#certificate-1f025c) block (within [`enable_forward_proxy.tls_intercept`](#enable-forward-proxy-tls-intercept)) supports the following:
|
|
122
122
|
|
|
123
|
-
<a id="url-4c4a3a"></a>• [`certificate_url`](#url-4c4a3a) - Optional String<br>
|
|
123
|
+
<a id="url-4c4a3a"></a>• [`certificate_url`](#url-4c4a3a) - Optional String<br>TLS certificate. Certificate or certificate chain in PEM format including the PEM headers
|
|
124
124
|
|
|
125
|
-
<a id="algorithms-5c3932"></a>• [`custom_hash_algorithms`](#algorithms-5c3932) - Optional Block<br>
|
|
125
|
+
<a id="algorithms-5c3932"></a>• [`custom_hash_algorithms`](#algorithms-5c3932) - Optional Block<br>Specifies the hash algorithms to be used<br>See [Custom Hash Algorithms](#algorithms-5c3932) below.
|
|
126
126
|
|
|
127
127
|
<a id="spec-00ecd4"></a>• [`description_spec`](#spec-00ecd4) - Optional String<br>Description. Description for the certificate
|
|
128
128
|
|
|
129
|
-
<a id="stapling-c941e6"></a>• [`disable_ocsp_stapling`](#stapling-c941e6) - Optional Block<br>
|
|
129
|
+
<a id="stapling-c941e6"></a>• [`disable_ocsp_stapling`](#stapling-c941e6) - Optional Block<br>Can be used for messages where no values are needed
|
|
130
130
|
|
|
131
|
-
<a id="key-363f83"></a>• [`private_key`](#key-363f83) - Optional Block<br>
|
|
131
|
+
<a id="key-363f83"></a>• [`private_key`](#key-363f83) - Optional Block<br>SecretType is used in an object to indicate a sensitive/confidential field<br>See [Private Key](#key-363f83) below.
|
|
132
132
|
|
|
133
|
-
<a id="defaults-cf3fd3"></a>• [`use_system_defaults`](#defaults-cf3fd3) - Optional Block<br>
|
|
133
|
+
<a id="defaults-cf3fd3"></a>• [`use_system_defaults`](#defaults-cf3fd3) - Optional Block<br>Can be used for messages where no values are needed
|
|
134
134
|
|
|
135
135
|
#### Enable Forward Proxy TLS Intercept Custom Certificate Custom Hash Algorithms
|
|
136
136
|
|
|
@@ -152,7 +152,7 @@ A [`custom_certificate`](#certificate-1f025c) block (within [`enable_forward_pro
|
|
|
152
152
|
|
|
153
153
|
A [`policy`](#policy-3a19ff) block (within [`enable_forward_proxy.tls_intercept`](#enable-forward-proxy-tls-intercept)) supports the following:
|
|
154
154
|
|
|
155
|
-
<a id="rules-e7522a"></a>• [`interception_rules`](#rules-e7522a) - Optional Block<br>
|
|
155
|
+
<a id="rules-e7522a"></a>• [`interception_rules`](#rules-e7522a) - Optional Block<br>List of ordered rules to enable or disable for TLS interception<br>See [Interception Rules](#rules-e7522a) below.
|
|
156
156
|
|
|
157
157
|
#### Enable Forward Proxy TLS Intercept Policy Interception Rules
|
|
158
158
|
|
|
@@ -166,41 +166,41 @@ A [`policy`](#policy-3a19ff) block (within [`enable_forward_proxy.tls_intercept`
|
|
|
166
166
|
|
|
167
167
|
A [`sli_to_global_dr`](#sli-to-global-dr) block supports the following:
|
|
168
168
|
|
|
169
|
-
<a id="sli-to-global-dr-global-vn"></a>• [`global_vn`](#sli-to-global-dr-global-vn) - Optional Block<br>
|
|
169
|
+
<a id="sli-to-global-dr-global-vn"></a>• [`global_vn`](#sli-to-global-dr-global-vn) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Global Vn](#sli-to-global-dr-global-vn) below.
|
|
170
170
|
|
|
171
171
|
#### SLI To Global DR Global Vn
|
|
172
172
|
|
|
173
173
|
A [`global_vn`](#sli-to-global-dr-global-vn) block (within [`sli_to_global_dr`](#sli-to-global-dr)) supports the following:
|
|
174
174
|
|
|
175
|
-
<a id="sli-to-global-dr-global-vn-name"></a>• [`name`](#sli-to-global-dr-global-vn-name) - Optional String<br>
|
|
175
|
+
<a id="sli-to-global-dr-global-vn-name"></a>• [`name`](#sli-to-global-dr-global-vn-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
176
176
|
|
|
177
|
-
<a id="sli-to-global-dr-global-vn-namespace"></a>• [`namespace`](#sli-to-global-dr-global-vn-namespace) - Optional String<br>
|
|
177
|
+
<a id="sli-to-global-dr-global-vn-namespace"></a>• [`namespace`](#sli-to-global-dr-global-vn-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
178
178
|
|
|
179
|
-
<a id="sli-to-global-dr-global-vn-tenant"></a>• [`tenant`](#sli-to-global-dr-global-vn-tenant) - Optional String<br>
|
|
179
|
+
<a id="sli-to-global-dr-global-vn-tenant"></a>• [`tenant`](#sli-to-global-dr-global-vn-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
180
180
|
|
|
181
181
|
#### SLI To Slo Snat
|
|
182
182
|
|
|
183
183
|
A [`sli_to_slo_snat`](#sli-to-slo-snat) block supports the following:
|
|
184
184
|
|
|
185
|
-
<a id="sli-to-slo-snat-default-gw-snat"></a>• [`default_gw_snat`](#sli-to-slo-snat-default-gw-snat) - Optional Block<br>
|
|
185
|
+
<a id="sli-to-slo-snat-default-gw-snat"></a>• [`default_gw_snat`](#sli-to-slo-snat-default-gw-snat) - Optional Block<br>Can be used for messages where no values are needed
|
|
186
186
|
|
|
187
|
-
<a id="sli-to-slo-snat-interface-ip"></a>• [`interface_ip`](#sli-to-slo-snat-interface-ip) - Optional Block<br>
|
|
187
|
+
<a id="sli-to-slo-snat-interface-ip"></a>• [`interface_ip`](#sli-to-slo-snat-interface-ip) - Optional Block<br>Can be used for messages where no values are needed
|
|
188
188
|
|
|
189
189
|
#### Slo To Global DR
|
|
190
190
|
|
|
191
191
|
A [`slo_to_global_dr`](#slo-to-global-dr) block supports the following:
|
|
192
192
|
|
|
193
|
-
<a id="slo-to-global-dr-global-vn"></a>• [`global_vn`](#slo-to-global-dr-global-vn) - Optional Block<br>
|
|
193
|
+
<a id="slo-to-global-dr-global-vn"></a>• [`global_vn`](#slo-to-global-dr-global-vn) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Global Vn](#slo-to-global-dr-global-vn) below.
|
|
194
194
|
|
|
195
195
|
#### Slo To Global DR Global Vn
|
|
196
196
|
|
|
197
197
|
A [`global_vn`](#slo-to-global-dr-global-vn) block (within [`slo_to_global_dr`](#slo-to-global-dr)) supports the following:
|
|
198
198
|
|
|
199
|
-
<a id="slo-to-global-dr-global-vn-name"></a>• [`name`](#slo-to-global-dr-global-vn-name) - Optional String<br>
|
|
199
|
+
<a id="slo-to-global-dr-global-vn-name"></a>• [`name`](#slo-to-global-dr-global-vn-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
200
200
|
|
|
201
|
-
<a id="slo-to-global-dr-global-vn-namespace"></a>• [`namespace`](#slo-to-global-dr-global-vn-namespace) - Optional String<br>
|
|
201
|
+
<a id="slo-to-global-dr-global-vn-namespace"></a>• [`namespace`](#slo-to-global-dr-global-vn-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
202
202
|
|
|
203
|
-
<a id="slo-to-global-dr-global-vn-tenant"></a>• [`tenant`](#slo-to-global-dr-global-vn-tenant) - Optional String<br>
|
|
203
|
+
<a id="slo-to-global-dr-global-vn-tenant"></a>• [`tenant`](#slo-to-global-dr-global-vn-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
204
204
|
|
|
205
205
|
#### Timeouts
|
|
206
206
|
|
|
@@ -36,7 +36,7 @@ resource "f5xc_network_firewall" "example" {
|
|
|
36
36
|
active_enhanced_firewall_policies {
|
|
37
37
|
# Configure active_enhanced_firewall_policies settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
39
|
+
# Ordered List of Enhanced Firewall Policies active .
|
|
40
40
|
enhanced_firewall_policies {
|
|
41
41
|
# Configure enhanced_firewall_policies settings
|
|
42
42
|
}
|
|
@@ -67,20 +67,20 @@ resource "f5xc_network_firewall" "example" {
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
69
|
-> **One of the following:**
|
|
70
|
-
• <a id="active-enhanced-firewall-policies"></a>[`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) - Optional Block<br>
|
|
70
|
+
• <a id="active-enhanced-firewall-policies"></a>[`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) - Optional Block<br>List of Enhanced Firewall Policies These policies use session-based rules and provide all OPTIONS available under firewall policies with an additional option for service insertion<br>See [Active Enhanced Firewall Policies](#active-enhanced-firewall-policies) below for details.
|
|
71
71
|
<br><br>• <a id="active-network-policies"></a>[`active_network_policies`](#active-network-policies) - Optional Block<br>Active Firewall Policies Type. List of firewall policy views<br>See [Active Network Policies](#active-network-policies) below for details.
|
|
72
72
|
|
|
73
73
|
-> **One of the following:**
|
|
74
74
|
• <a id="active-fast-acls"></a>[`active_fast_acls`](#active-fast-acls) - Optional Block<br>Active Fast ACL(s). List of Fast ACL(s)<br>See [Active Fast Acls](#active-fast-acls) below for details.
|
|
75
75
|
|
|
76
76
|
-> **One of the following:**
|
|
77
|
-
• <a id="active-forward-proxy-policies"></a>[`active_forward_proxy_policies`](#active-forward-proxy-policies) - Optional Block<br>
|
|
77
|
+
• <a id="active-forward-proxy-policies"></a>[`active_forward_proxy_policies`](#active-forward-proxy-policies) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Active Forward Proxy Policies](#active-forward-proxy-policies) below for details.
|
|
78
78
|
|
|
79
|
-
<a id="disable-fast-acl"></a>• [`disable_fast_acl`](#disable-fast-acl) - Optional Block<br>
|
|
79
|
+
<a id="disable-fast-acl"></a>• [`disable_fast_acl`](#disable-fast-acl) - Optional Block<br>Can be used for messages where no values are needed
|
|
80
80
|
|
|
81
|
-
<a id="disable-forward-proxy-policy"></a>• [`disable_forward_proxy_policy`](#disable-forward-proxy-policy) - Optional Block<br>
|
|
81
|
+
<a id="disable-forward-proxy-policy"></a>• [`disable_forward_proxy_policy`](#disable-forward-proxy-policy) - Optional Block<br>Can be used for messages where no values are needed
|
|
82
82
|
|
|
83
|
-
<a id="disable-network-policy"></a>• [`disable_network_policy`](#disable-network-policy) - Optional Block<br>
|
|
83
|
+
<a id="disable-network-policy"></a>• [`disable_network_policy`](#disable-network-policy) - Optional Block<br>Can be used for messages where no values are needed
|
|
84
84
|
|
|
85
85
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
86
86
|
|
|
@@ -96,65 +96,65 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
96
96
|
|
|
97
97
|
An [`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies) block supports the following:
|
|
98
98
|
|
|
99
|
-
<a id="policies-0d92c3"></a>• [`enhanced_firewall_policies`](#policies-0d92c3) - Optional Block<br>
|
|
99
|
+
<a id="policies-0d92c3"></a>• [`enhanced_firewall_policies`](#policies-0d92c3) - Optional Block<br>Ordered List of Enhanced Firewall Policies active<br>See [Enhanced Firewall Policies](#policies-0d92c3) below.
|
|
100
100
|
|
|
101
101
|
#### Active Enhanced Firewall Policies Enhanced Firewall Policies
|
|
102
102
|
|
|
103
103
|
An [`enhanced_firewall_policies`](#policies-0d92c3) block (within [`active_enhanced_firewall_policies`](#active-enhanced-firewall-policies)) supports the following:
|
|
104
104
|
|
|
105
|
-
<a id="name-09fc53"></a>• [`name`](#name-09fc53) - Optional String<br>
|
|
105
|
+
<a id="name-09fc53"></a>• [`name`](#name-09fc53) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
106
106
|
|
|
107
|
-
<a id="namespace-102d99"></a>• [`namespace`](#namespace-102d99) - Optional String<br>
|
|
107
|
+
<a id="namespace-102d99"></a>• [`namespace`](#namespace-102d99) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
108
108
|
|
|
109
|
-
<a id="tenant-0eef96"></a>• [`tenant`](#tenant-0eef96) - Optional String<br>
|
|
109
|
+
<a id="tenant-0eef96"></a>• [`tenant`](#tenant-0eef96) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
110
110
|
|
|
111
111
|
#### Active Fast Acls
|
|
112
112
|
|
|
113
113
|
An [`active_fast_acls`](#active-fast-acls) block supports the following:
|
|
114
114
|
|
|
115
|
-
<a id="active-fast-acls-fast-acls"></a>• [`fast_acls`](#active-fast-acls-fast-acls) - Optional Block<br>
|
|
115
|
+
<a id="active-fast-acls-fast-acls"></a>• [`fast_acls`](#active-fast-acls-fast-acls) - Optional Block<br>Ordered List of Fast ACL(s) active for this network firewall<br>See [Fast Acls](#active-fast-acls-fast-acls) below.
|
|
116
116
|
|
|
117
117
|
#### Active Fast Acls Fast Acls
|
|
118
118
|
|
|
119
119
|
A [`fast_acls`](#active-fast-acls-fast-acls) block (within [`active_fast_acls`](#active-fast-acls)) supports the following:
|
|
120
120
|
|
|
121
|
-
<a id="active-fast-acls-fast-acls-name"></a>• [`name`](#active-fast-acls-fast-acls-name) - Optional String<br>
|
|
121
|
+
<a id="active-fast-acls-fast-acls-name"></a>• [`name`](#active-fast-acls-fast-acls-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
122
122
|
|
|
123
|
-
<a id="active-fast-acls-fast-acls-namespace"></a>• [`namespace`](#active-fast-acls-fast-acls-namespace) - Optional String<br>
|
|
123
|
+
<a id="active-fast-acls-fast-acls-namespace"></a>• [`namespace`](#active-fast-acls-fast-acls-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
124
124
|
|
|
125
|
-
<a id="active-fast-acls-fast-acls-tenant"></a>• [`tenant`](#active-fast-acls-fast-acls-tenant) - Optional String<br>
|
|
125
|
+
<a id="active-fast-acls-fast-acls-tenant"></a>• [`tenant`](#active-fast-acls-fast-acls-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
126
126
|
|
|
127
127
|
#### Active Forward Proxy Policies
|
|
128
128
|
|
|
129
129
|
An [`active_forward_proxy_policies`](#active-forward-proxy-policies) block supports the following:
|
|
130
130
|
|
|
131
|
-
<a id="policies-42e2f7"></a>• [`forward_proxy_policies`](#policies-42e2f7) - Optional Block<br>
|
|
131
|
+
<a id="policies-42e2f7"></a>• [`forward_proxy_policies`](#policies-42e2f7) - Optional Block<br>Ordered List of Forward Proxy Policies active<br>See [Forward Proxy Policies](#policies-42e2f7) below.
|
|
132
132
|
|
|
133
133
|
#### Active Forward Proxy Policies Forward Proxy Policies
|
|
134
134
|
|
|
135
135
|
A [`forward_proxy_policies`](#policies-42e2f7) block (within [`active_forward_proxy_policies`](#active-forward-proxy-policies)) supports the following:
|
|
136
136
|
|
|
137
|
-
<a id="name-c2d06e"></a>• [`name`](#name-c2d06e) - Optional String<br>
|
|
137
|
+
<a id="name-c2d06e"></a>• [`name`](#name-c2d06e) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
138
138
|
|
|
139
|
-
<a id="namespace-63e125"></a>• [`namespace`](#namespace-63e125) - Optional String<br>
|
|
139
|
+
<a id="namespace-63e125"></a>• [`namespace`](#namespace-63e125) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
140
140
|
|
|
141
|
-
<a id="tenant-e68ab4"></a>• [`tenant`](#tenant-e68ab4) - Optional String<br>
|
|
141
|
+
<a id="tenant-e68ab4"></a>• [`tenant`](#tenant-e68ab4) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
142
142
|
|
|
143
143
|
#### Active Network Policies
|
|
144
144
|
|
|
145
145
|
An [`active_network_policies`](#active-network-policies) block supports the following:
|
|
146
146
|
|
|
147
|
-
<a id="policies-502cd4"></a>• [`network_policies`](#policies-502cd4) - Optional Block<br>
|
|
147
|
+
<a id="policies-502cd4"></a>• [`network_policies`](#policies-502cd4) - Optional Block<br>Ordered List of Firewall Policies active for this network firewall<br>See [Network Policies](#policies-502cd4) below.
|
|
148
148
|
|
|
149
149
|
#### Active Network Policies Network Policies
|
|
150
150
|
|
|
151
151
|
A [`network_policies`](#policies-502cd4) block (within [`active_network_policies`](#active-network-policies)) supports the following:
|
|
152
152
|
|
|
153
|
-
<a id="name-ad293f"></a>• [`name`](#name-ad293f) - Optional String<br>
|
|
153
|
+
<a id="name-ad293f"></a>• [`name`](#name-ad293f) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
154
154
|
|
|
155
|
-
<a id="namespace-3f338a"></a>• [`namespace`](#namespace-3f338a) - Optional String<br>
|
|
155
|
+
<a id="namespace-3f338a"></a>• [`namespace`](#namespace-3f338a) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
156
156
|
|
|
157
|
-
<a id="tenant-6ccfde"></a>• [`tenant`](#tenant-6ccfde) - Optional String<br>
|
|
157
|
+
<a id="tenant-6ccfde"></a>• [`tenant`](#tenant-6ccfde) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
158
158
|
|
|
159
159
|
#### Timeouts
|
|
160
160
|
|