@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -69,17 +69,17 @@ resource "f5xc_service_policy" "example" {
|
|
|
69
69
|
### Spec Argument Reference
|
|
70
70
|
|
|
71
71
|
-> **One of the following:**
|
|
72
|
-
• <a id="allow-all-requests"></a>[`allow_all_requests`](#allow-all-requests) - Optional Block<br>
|
|
73
|
-
<br><br>• <a id="allow-list"></a>[`allow_list`](#allow-list) - Optional Block<br>
|
|
74
|
-
<br><br>• <a id="deny-all-requests"></a>[`deny_all_requests`](#deny-all-requests) - Optional Block<br>
|
|
75
|
-
<br><br>• <a id="deny-list"></a>[`deny_list`](#deny-list) - Optional Block<br>
|
|
76
|
-
<br><br>• <a id="rule-list"></a>[`rule_list`](#rule-list) - Optional Block<br>
|
|
72
|
+
• <a id="allow-all-requests"></a>[`allow_all_requests`](#allow-all-requests) - Optional Block<br>Can be used for messages where no values are needed
|
|
73
|
+
<br><br>• <a id="allow-list"></a>[`allow_list`](#allow-list) - Optional Block<br>List of sources. A request belongs to this list if it satisfies any of the match criteria<br>See [Allow List](#allow-list) below for details.
|
|
74
|
+
<br><br>• <a id="deny-all-requests"></a>[`deny_all_requests`](#deny-all-requests) - Optional Block<br>Can be used for messages where no values are needed
|
|
75
|
+
<br><br>• <a id="deny-list"></a>[`deny_list`](#deny-list) - Optional Block<br>List of sources. A request belongs to this list if it satisfies any of the match criteria<br>See [Deny List](#deny-list) below for details.
|
|
76
|
+
<br><br>• <a id="rule-list"></a>[`rule_list`](#rule-list) - Optional Block<br>List of rules. The order of evaluation of the rules depends on the rule combining algorithm<br>See [Rule List](#rule-list) below for details.
|
|
77
77
|
|
|
78
78
|
-> **One of the following:**
|
|
79
|
-
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>
|
|
80
|
-
<br><br>• <a id="server-name"></a>[`server_name`](#server-name) - Optional String<br>
|
|
81
|
-
<br><br>• <a id="server-name-matcher"></a>[`server_name_matcher`](#server-name-matcher) - Optional Block<br>Matcher
|
|
82
|
-
<br><br>• <a id="server-selector"></a>[`server_selector`](#server-selector) - Optional Block<br>
|
|
79
|
+
• <a id="any-server"></a>[`any_server`](#any-server) - Optional Block<br>Can be used for messages where no values are needed
|
|
80
|
+
<br><br>• <a id="server-name"></a>[`server_name`](#server-name) - Optional String<br>The expected name of the server to which the request API is directed. The actual names for the server are extracted from the HTTP Host header and the name of the virtual_host to which the request is directed. If the request is
|
|
81
|
+
<br><br>• <a id="server-name-matcher"></a>[`server_name_matcher`](#server-name-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions
|
|
82
|
+
<br><br>• <a id="server-selector"></a>[`server_selector`](#server-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects
|
|
83
83
|
|
|
84
84
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
85
85
|
|
|
@@ -95,127 +95,127 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
95
95
|
|
|
96
96
|
An [`allow_list`](#allow-list) block supports the following:
|
|
97
97
|
|
|
98
|
-
<a id="allow-list-asn-list"></a>• [`asn_list`](#allow-list-asn-list) - Optional Block<br>
|
|
98
|
+
<a id="allow-list-asn-list"></a>• [`asn_list`](#allow-list-asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#allow-list-asn-list) below.
|
|
99
99
|
|
|
100
|
-
<a id="allow-list-asn-set"></a>• [`asn_set`](#allow-list-asn-set) - Optional Block<br>
|
|
100
|
+
<a id="allow-list-asn-set"></a>• [`asn_set`](#allow-list-asn-set) - Optional Block<br>Addresses that belong to the ASNs in the given bgp_asn_set The ASN is obtained by performing a lookup for the source IPv4 Address in a GeoIP DB<br>See [Asn Set](#allow-list-asn-set) below.
|
|
101
101
|
|
|
102
|
-
<a id="allow-list-country-list"></a>• [`country_list`](#allow-list-country-list) - Optional List Defaults to `COUNTRY_NONE`<br>Possible values are `COUNTRY_NONE`, `COUNTRY_AD`, `COUNTRY_AE`, `COUNTRY_AF`, `COUNTRY_AG`, `COUNTRY_AI`, `COUNTRY_AL`, `COUNTRY_AM`, `COUNTRY_AN`, `COUNTRY_AO`, `COUNTRY_AQ`, `COUNTRY_AR`, `COUNTRY_AS`, `COUNTRY_AT`, `COUNTRY_AU`, `COUNTRY_AW`, `COUNTRY_AX`, `COUNTRY_AZ`, `COUNTRY_BA`, `COUNTRY_BB`, `COUNTRY_BD`, `COUNTRY_BE`, `COUNTRY_BF`, `COUNTRY_BG`, `COUNTRY_BH`, `COUNTRY_BI`, `COUNTRY_BJ`, `COUNTRY_BL`, `COUNTRY_BM`, `COUNTRY_BN`, `COUNTRY_BO`, `COUNTRY_BQ`, `COUNTRY_BR`, `COUNTRY_BS`, `COUNTRY_BT`, `COUNTRY_BV`, `COUNTRY_BW`, `COUNTRY_BY`, `COUNTRY_BZ`, `COUNTRY_CA`, `COUNTRY_CC`, `COUNTRY_CD`, `COUNTRY_CF`, `COUNTRY_CG`, `COUNTRY_CH`, `COUNTRY_CI`, `COUNTRY_CK`, `COUNTRY_CL`, `COUNTRY_CM`, `COUNTRY_CN`, `COUNTRY_CO`, `COUNTRY_CR`, `COUNTRY_CS`, `COUNTRY_CU`, `COUNTRY_CV`, `COUNTRY_CW`, `COUNTRY_CX`, `COUNTRY_CY`, `COUNTRY_CZ`, `COUNTRY_DE`, `COUNTRY_DJ`, `COUNTRY_DK`, `COUNTRY_DM`, `COUNTRY_DO`, `COUNTRY_DZ`, `COUNTRY_EC`, `COUNTRY_EE`, `COUNTRY_EG`, `COUNTRY_EH`, `COUNTRY_ER`, `COUNTRY_ES`, `COUNTRY_ET`, `COUNTRY_FI`, `COUNTRY_FJ`, `COUNTRY_FK`, `COUNTRY_FM`, `COUNTRY_FO`, `COUNTRY_FR`, `COUNTRY_GA`, `COUNTRY_GB`, `COUNTRY_GD`, `COUNTRY_GE`, `COUNTRY_GF`, `COUNTRY_GG`, `COUNTRY_GH`, `COUNTRY_GI`, `COUNTRY_GL`, `COUNTRY_GM`, `COUNTRY_GN`, `COUNTRY_GP`, `COUNTRY_GQ`, `COUNTRY_GR`, `COUNTRY_GS`, `COUNTRY_GT`, `COUNTRY_GU`, `COUNTRY_GW`, `COUNTRY_GY`, `COUNTRY_HK`, `COUNTRY_HM`, `COUNTRY_HN`, `COUNTRY_HR`, `COUNTRY_HT`, `COUNTRY_HU`, `COUNTRY_ID`, `COUNTRY_IE`, `COUNTRY_IL`, `COUNTRY_IM`, `COUNTRY_IN`, `COUNTRY_IO`, `COUNTRY_IQ`, `COUNTRY_IR`, `COUNTRY_IS`, `COUNTRY_IT`, `COUNTRY_JE`, `COUNTRY_JM`, `COUNTRY_JO`, `COUNTRY_JP`, `COUNTRY_KE`, `COUNTRY_KG`, `COUNTRY_KH`, `COUNTRY_KI`, `COUNTRY_KM`, `COUNTRY_KN`, `COUNTRY_KP`, `COUNTRY_KR`, `COUNTRY_KW`, `COUNTRY_KY`, `COUNTRY_KZ`, `COUNTRY_LA`, `COUNTRY_LB`, `COUNTRY_LC`, `COUNTRY_LI`, `COUNTRY_LK`, `COUNTRY_LR`, `COUNTRY_LS`, `COUNTRY_LT`, `COUNTRY_LU`, `COUNTRY_LV`, `COUNTRY_LY`, `COUNTRY_MA`, `COUNTRY_MC`, `COUNTRY_MD`, `COUNTRY_ME`, `COUNTRY_MF`, `COUNTRY_MG`, `COUNTRY_MH`, `COUNTRY_MK`, `COUNTRY_ML`, `COUNTRY_MM`, `COUNTRY_MN`, `COUNTRY_MO`, `COUNTRY_MP`, `COUNTRY_MQ`, `COUNTRY_MR`, `COUNTRY_MS`, `COUNTRY_MT`, `COUNTRY_MU`, `COUNTRY_MV`, `COUNTRY_MW`, `COUNTRY_MX`, `COUNTRY_MY`, `COUNTRY_MZ`, `COUNTRY_NA`, `COUNTRY_NC`, `COUNTRY_NE`, `COUNTRY_NF`, `COUNTRY_NG`, `COUNTRY_NI`, `COUNTRY_NL`, `COUNTRY_NO`, `COUNTRY_NP`, `COUNTRY_NR`, `COUNTRY_NU`, `COUNTRY_NZ`, `COUNTRY_OM`, `COUNTRY_PA`, `COUNTRY_PE`, `COUNTRY_PF`, `COUNTRY_PG`, `COUNTRY_PH`, `COUNTRY_PK`, `COUNTRY_PL`, `COUNTRY_PM`, `COUNTRY_PN`, `COUNTRY_PR`, `COUNTRY_PS`, `COUNTRY_PT`, `COUNTRY_PW`, `COUNTRY_PY`, `COUNTRY_QA`, `COUNTRY_RE`, `COUNTRY_RO`, `COUNTRY_RS`, `COUNTRY_RU`, `COUNTRY_RW`, `COUNTRY_SA`, `COUNTRY_SB`, `COUNTRY_SC`, `COUNTRY_SD`, `COUNTRY_SE`, `COUNTRY_SG`, `COUNTRY_SH`, `COUNTRY_SI`, `COUNTRY_SJ`, `COUNTRY_SK`, `COUNTRY_SL`, `COUNTRY_SM`, `COUNTRY_SN`, `COUNTRY_SO`, `COUNTRY_SR`, `COUNTRY_SS`, `COUNTRY_ST`, `COUNTRY_SV`, `COUNTRY_SX`, `COUNTRY_SY`, `COUNTRY_SZ`, `COUNTRY_TC`, `COUNTRY_TD`, `COUNTRY_TF`, `COUNTRY_TG`, `COUNTRY_TH`, `COUNTRY_TJ`, `COUNTRY_TK`, `COUNTRY_TL`, `COUNTRY_TM`, `COUNTRY_TN`, `COUNTRY_TO`, `COUNTRY_TR`, `COUNTRY_TT`, `COUNTRY_TV`, `COUNTRY_TW`, `COUNTRY_TZ`, `COUNTRY_UA`, `COUNTRY_UG`, `COUNTRY_UM`, `COUNTRY_US`, `COUNTRY_UY`, `COUNTRY_UZ`, `COUNTRY_VA`, `COUNTRY_VC`, `COUNTRY_VE`, `COUNTRY_VG`, `COUNTRY_VI`, `COUNTRY_VN`, `COUNTRY_VU`, `COUNTRY_WF`, `COUNTRY_WS`, `COUNTRY_XK`, `COUNTRY_XT`, `COUNTRY_YE`, `COUNTRY_YT`, `COUNTRY_ZA`, `COUNTRY_ZM`, `COUNTRY_ZW`<br>[Enum: COUNTRY_NONE|COUNTRY_AD|COUNTRY_AE|COUNTRY_AF|COUNTRY_AG|COUNTRY_AI|COUNTRY_AL|COUNTRY_AM|COUNTRY_AN|COUNTRY_AO|COUNTRY_AQ|COUNTRY_AR|COUNTRY_AS|COUNTRY_AT|COUNTRY_AU|COUNTRY_AW|COUNTRY_AX|COUNTRY_AZ|COUNTRY_BA|COUNTRY_BB|COUNTRY_BD|COUNTRY_BE|COUNTRY_BF|COUNTRY_BG|COUNTRY_BH|COUNTRY_BI|COUNTRY_BJ|COUNTRY_BL|COUNTRY_BM|COUNTRY_BN|COUNTRY_BO|COUNTRY_BQ|COUNTRY_BR|COUNTRY_BS|COUNTRY_BT|COUNTRY_BV|COUNTRY_BW|COUNTRY_BY|COUNTRY_BZ|COUNTRY_CA|COUNTRY_CC|COUNTRY_CD|COUNTRY_CF|COUNTRY_CG|COUNTRY_CH|COUNTRY_CI|COUNTRY_CK|COUNTRY_CL|COUNTRY_CM|COUNTRY_CN|COUNTRY_CO|COUNTRY_CR|COUNTRY_CS|COUNTRY_CU|COUNTRY_CV|COUNTRY_CW|COUNTRY_CX|COUNTRY_CY|COUNTRY_CZ|COUNTRY_DE|COUNTRY_DJ|COUNTRY_DK|COUNTRY_DM|COUNTRY_DO|COUNTRY_DZ|COUNTRY_EC|COUNTRY_EE|COUNTRY_EG|COUNTRY_EH|COUNTRY_ER|COUNTRY_ES|COUNTRY_ET|COUNTRY_FI|COUNTRY_FJ|COUNTRY_FK|COUNTRY_FM|COUNTRY_FO|COUNTRY_FR|COUNTRY_GA|COUNTRY_GB|COUNTRY_GD|COUNTRY_GE|COUNTRY_GF|COUNTRY_GG|COUNTRY_GH|COUNTRY_GI|COUNTRY_GL|COUNTRY_GM|COUNTRY_GN|COUNTRY_GP|COUNTRY_GQ|COUNTRY_GR|COUNTRY_GS|COUNTRY_GT|COUNTRY_GU|COUNTRY_GW|COUNTRY_GY|COUNTRY_HK|COUNTRY_HM|COUNTRY_HN|COUNTRY_HR|COUNTRY_HT|COUNTRY_HU|COUNTRY_ID|COUNTRY_IE|COUNTRY_IL|COUNTRY_IM|COUNTRY_IN|COUNTRY_IO|COUNTRY_IQ|COUNTRY_IR|COUNTRY_IS|COUNTRY_IT|COUNTRY_JE|COUNTRY_JM|COUNTRY_JO|COUNTRY_JP|COUNTRY_KE|COUNTRY_KG|COUNTRY_KH|COUNTRY_KI|COUNTRY_KM|COUNTRY_KN|COUNTRY_KP|COUNTRY_KR|COUNTRY_KW|COUNTRY_KY|COUNTRY_KZ|COUNTRY_LA|COUNTRY_LB|COUNTRY_LC|COUNTRY_LI|COUNTRY_LK|COUNTRY_LR|COUNTRY_LS|COUNTRY_LT|COUNTRY_LU|COUNTRY_LV|COUNTRY_LY|COUNTRY_MA|COUNTRY_MC|COUNTRY_MD|COUNTRY_ME|COUNTRY_MF|COUNTRY_MG|COUNTRY_MH|COUNTRY_MK|COUNTRY_ML|COUNTRY_MM|COUNTRY_MN|COUNTRY_MO|COUNTRY_MP|COUNTRY_MQ|COUNTRY_MR|COUNTRY_MS|COUNTRY_MT|COUNTRY_MU|COUNTRY_MV|COUNTRY_MW|COUNTRY_MX|COUNTRY_MY|COUNTRY_MZ|COUNTRY_NA|COUNTRY_NC|COUNTRY_NE|COUNTRY_NF|COUNTRY_NG|COUNTRY_NI|COUNTRY_NL|COUNTRY_NO|COUNTRY_NP|COUNTRY_NR|COUNTRY_NU|COUNTRY_NZ|COUNTRY_OM|COUNTRY_PA|COUNTRY_PE|COUNTRY_PF|COUNTRY_PG|COUNTRY_PH|COUNTRY_PK|COUNTRY_PL|COUNTRY_PM|COUNTRY_PN|COUNTRY_PR|COUNTRY_PS|COUNTRY_PT|COUNTRY_PW|COUNTRY_PY|COUNTRY_QA|COUNTRY_RE|COUNTRY_RO|COUNTRY_RS|COUNTRY_RU|COUNTRY_RW|COUNTRY_SA|COUNTRY_SB|COUNTRY_SC|COUNTRY_SD|COUNTRY_SE|COUNTRY_SG|COUNTRY_SH|COUNTRY_SI|COUNTRY_SJ|COUNTRY_SK|COUNTRY_SL|COUNTRY_SM|COUNTRY_SN|COUNTRY_SO|COUNTRY_SR|COUNTRY_SS|COUNTRY_ST|COUNTRY_SV|COUNTRY_SX|COUNTRY_SY|COUNTRY_SZ|COUNTRY_TC|COUNTRY_TD|COUNTRY_TF|COUNTRY_TG|COUNTRY_TH|COUNTRY_TJ|COUNTRY_TK|COUNTRY_TL|COUNTRY_TM|COUNTRY_TN|COUNTRY_TO|COUNTRY_TR|COUNTRY_TT|COUNTRY_TV|COUNTRY_TW|COUNTRY_TZ|COUNTRY_UA|COUNTRY_UG|COUNTRY_UM|COUNTRY_US|COUNTRY_UY|COUNTRY_UZ|COUNTRY_VA|COUNTRY_VC|COUNTRY_VE|COUNTRY_VG|COUNTRY_VI|COUNTRY_VN|COUNTRY_VU|COUNTRY_WF|COUNTRY_WS|COUNTRY_XK|COUNTRY_XT|COUNTRY_YE|COUNTRY_YT|COUNTRY_ZA|COUNTRY_ZM|COUNTRY_ZW]
|
|
102
|
+
<a id="allow-list-country-list"></a>• [`country_list`](#allow-list-country-list) - Optional List Defaults to `COUNTRY_NONE`<br>Possible values are `COUNTRY_NONE`, `COUNTRY_AD`, `COUNTRY_AE`, `COUNTRY_AF`, `COUNTRY_AG`, `COUNTRY_AI`, `COUNTRY_AL`, `COUNTRY_AM`, `COUNTRY_AN`, `COUNTRY_AO`, `COUNTRY_AQ`, `COUNTRY_AR`, `COUNTRY_AS`, `COUNTRY_AT`, `COUNTRY_AU`, `COUNTRY_AW`, `COUNTRY_AX`, `COUNTRY_AZ`, `COUNTRY_BA`, `COUNTRY_BB`, `COUNTRY_BD`, `COUNTRY_BE`, `COUNTRY_BF`, `COUNTRY_BG`, `COUNTRY_BH`, `COUNTRY_BI`, `COUNTRY_BJ`, `COUNTRY_BL`, `COUNTRY_BM`, `COUNTRY_BN`, `COUNTRY_BO`, `COUNTRY_BQ`, `COUNTRY_BR`, `COUNTRY_BS`, `COUNTRY_BT`, `COUNTRY_BV`, `COUNTRY_BW`, `COUNTRY_BY`, `COUNTRY_BZ`, `COUNTRY_CA`, `COUNTRY_CC`, `COUNTRY_CD`, `COUNTRY_CF`, `COUNTRY_CG`, `COUNTRY_CH`, `COUNTRY_CI`, `COUNTRY_CK`, `COUNTRY_CL`, `COUNTRY_CM`, `COUNTRY_CN`, `COUNTRY_CO`, `COUNTRY_CR`, `COUNTRY_CS`, `COUNTRY_CU`, `COUNTRY_CV`, `COUNTRY_CW`, `COUNTRY_CX`, `COUNTRY_CY`, `COUNTRY_CZ`, `COUNTRY_DE`, `COUNTRY_DJ`, `COUNTRY_DK`, `COUNTRY_DM`, `COUNTRY_DO`, `COUNTRY_DZ`, `COUNTRY_EC`, `COUNTRY_EE`, `COUNTRY_EG`, `COUNTRY_EH`, `COUNTRY_ER`, `COUNTRY_ES`, `COUNTRY_ET`, `COUNTRY_FI`, `COUNTRY_FJ`, `COUNTRY_FK`, `COUNTRY_FM`, `COUNTRY_FO`, `COUNTRY_FR`, `COUNTRY_GA`, `COUNTRY_GB`, `COUNTRY_GD`, `COUNTRY_GE`, `COUNTRY_GF`, `COUNTRY_GG`, `COUNTRY_GH`, `COUNTRY_GI`, `COUNTRY_GL`, `COUNTRY_GM`, `COUNTRY_GN`, `COUNTRY_GP`, `COUNTRY_GQ`, `COUNTRY_GR`, `COUNTRY_GS`, `COUNTRY_GT`, `COUNTRY_GU`, `COUNTRY_GW`, `COUNTRY_GY`, `COUNTRY_HK`, `COUNTRY_HM`, `COUNTRY_HN`, `COUNTRY_HR`, `COUNTRY_HT`, `COUNTRY_HU`, `COUNTRY_ID`, `COUNTRY_IE`, `COUNTRY_IL`, `COUNTRY_IM`, `COUNTRY_IN`, `COUNTRY_IO`, `COUNTRY_IQ`, `COUNTRY_IR`, `COUNTRY_IS`, `COUNTRY_IT`, `COUNTRY_JE`, `COUNTRY_JM`, `COUNTRY_JO`, `COUNTRY_JP`, `COUNTRY_KE`, `COUNTRY_KG`, `COUNTRY_KH`, `COUNTRY_KI`, `COUNTRY_KM`, `COUNTRY_KN`, `COUNTRY_KP`, `COUNTRY_KR`, `COUNTRY_KW`, `COUNTRY_KY`, `COUNTRY_KZ`, `COUNTRY_LA`, `COUNTRY_LB`, `COUNTRY_LC`, `COUNTRY_LI`, `COUNTRY_LK`, `COUNTRY_LR`, `COUNTRY_LS`, `COUNTRY_LT`, `COUNTRY_LU`, `COUNTRY_LV`, `COUNTRY_LY`, `COUNTRY_MA`, `COUNTRY_MC`, `COUNTRY_MD`, `COUNTRY_ME`, `COUNTRY_MF`, `COUNTRY_MG`, `COUNTRY_MH`, `COUNTRY_MK`, `COUNTRY_ML`, `COUNTRY_MM`, `COUNTRY_MN`, `COUNTRY_MO`, `COUNTRY_MP`, `COUNTRY_MQ`, `COUNTRY_MR`, `COUNTRY_MS`, `COUNTRY_MT`, `COUNTRY_MU`, `COUNTRY_MV`, `COUNTRY_MW`, `COUNTRY_MX`, `COUNTRY_MY`, `COUNTRY_MZ`, `COUNTRY_NA`, `COUNTRY_NC`, `COUNTRY_NE`, `COUNTRY_NF`, `COUNTRY_NG`, `COUNTRY_NI`, `COUNTRY_NL`, `COUNTRY_NO`, `COUNTRY_NP`, `COUNTRY_NR`, `COUNTRY_NU`, `COUNTRY_NZ`, `COUNTRY_OM`, `COUNTRY_PA`, `COUNTRY_PE`, `COUNTRY_PF`, `COUNTRY_PG`, `COUNTRY_PH`, `COUNTRY_PK`, `COUNTRY_PL`, `COUNTRY_PM`, `COUNTRY_PN`, `COUNTRY_PR`, `COUNTRY_PS`, `COUNTRY_PT`, `COUNTRY_PW`, `COUNTRY_PY`, `COUNTRY_QA`, `COUNTRY_RE`, `COUNTRY_RO`, `COUNTRY_RS`, `COUNTRY_RU`, `COUNTRY_RW`, `COUNTRY_SA`, `COUNTRY_SB`, `COUNTRY_SC`, `COUNTRY_SD`, `COUNTRY_SE`, `COUNTRY_SG`, `COUNTRY_SH`, `COUNTRY_SI`, `COUNTRY_SJ`, `COUNTRY_SK`, `COUNTRY_SL`, `COUNTRY_SM`, `COUNTRY_SN`, `COUNTRY_SO`, `COUNTRY_SR`, `COUNTRY_SS`, `COUNTRY_ST`, `COUNTRY_SV`, `COUNTRY_SX`, `COUNTRY_SY`, `COUNTRY_SZ`, `COUNTRY_TC`, `COUNTRY_TD`, `COUNTRY_TF`, `COUNTRY_TG`, `COUNTRY_TH`, `COUNTRY_TJ`, `COUNTRY_TK`, `COUNTRY_TL`, `COUNTRY_TM`, `COUNTRY_TN`, `COUNTRY_TO`, `COUNTRY_TR`, `COUNTRY_TT`, `COUNTRY_TV`, `COUNTRY_TW`, `COUNTRY_TZ`, `COUNTRY_UA`, `COUNTRY_UG`, `COUNTRY_UM`, `COUNTRY_US`, `COUNTRY_UY`, `COUNTRY_UZ`, `COUNTRY_VA`, `COUNTRY_VC`, `COUNTRY_VE`, `COUNTRY_VG`, `COUNTRY_VI`, `COUNTRY_VN`, `COUNTRY_VU`, `COUNTRY_WF`, `COUNTRY_WS`, `COUNTRY_XK`, `COUNTRY_XT`, `COUNTRY_YE`, `COUNTRY_YT`, `COUNTRY_ZA`, `COUNTRY_ZM`, `COUNTRY_ZW`<br>[Enum: COUNTRY_NONE|COUNTRY_AD|COUNTRY_AE|COUNTRY_AF|COUNTRY_AG|COUNTRY_AI|COUNTRY_AL|COUNTRY_AM|COUNTRY_AN|COUNTRY_AO|COUNTRY_AQ|COUNTRY_AR|COUNTRY_AS|COUNTRY_AT|COUNTRY_AU|COUNTRY_AW|COUNTRY_AX|COUNTRY_AZ|COUNTRY_BA|COUNTRY_BB|COUNTRY_BD|COUNTRY_BE|COUNTRY_BF|COUNTRY_BG|COUNTRY_BH|COUNTRY_BI|COUNTRY_BJ|COUNTRY_BL|COUNTRY_BM|COUNTRY_BN|COUNTRY_BO|COUNTRY_BQ|COUNTRY_BR|COUNTRY_BS|COUNTRY_BT|COUNTRY_BV|COUNTRY_BW|COUNTRY_BY|COUNTRY_BZ|COUNTRY_CA|COUNTRY_CC|COUNTRY_CD|COUNTRY_CF|COUNTRY_CG|COUNTRY_CH|COUNTRY_CI|COUNTRY_CK|COUNTRY_CL|COUNTRY_CM|COUNTRY_CN|COUNTRY_CO|COUNTRY_CR|COUNTRY_CS|COUNTRY_CU|COUNTRY_CV|COUNTRY_CW|COUNTRY_CX|COUNTRY_CY|COUNTRY_CZ|COUNTRY_DE|COUNTRY_DJ|COUNTRY_DK|COUNTRY_DM|COUNTRY_DO|COUNTRY_DZ|COUNTRY_EC|COUNTRY_EE|COUNTRY_EG|COUNTRY_EH|COUNTRY_ER|COUNTRY_ES|COUNTRY_ET|COUNTRY_FI|COUNTRY_FJ|COUNTRY_FK|COUNTRY_FM|COUNTRY_FO|COUNTRY_FR|COUNTRY_GA|COUNTRY_GB|COUNTRY_GD|COUNTRY_GE|COUNTRY_GF|COUNTRY_GG|COUNTRY_GH|COUNTRY_GI|COUNTRY_GL|COUNTRY_GM|COUNTRY_GN|COUNTRY_GP|COUNTRY_GQ|COUNTRY_GR|COUNTRY_GS|COUNTRY_GT|COUNTRY_GU|COUNTRY_GW|COUNTRY_GY|COUNTRY_HK|COUNTRY_HM|COUNTRY_HN|COUNTRY_HR|COUNTRY_HT|COUNTRY_HU|COUNTRY_ID|COUNTRY_IE|COUNTRY_IL|COUNTRY_IM|COUNTRY_IN|COUNTRY_IO|COUNTRY_IQ|COUNTRY_IR|COUNTRY_IS|COUNTRY_IT|COUNTRY_JE|COUNTRY_JM|COUNTRY_JO|COUNTRY_JP|COUNTRY_KE|COUNTRY_KG|COUNTRY_KH|COUNTRY_KI|COUNTRY_KM|COUNTRY_KN|COUNTRY_KP|COUNTRY_KR|COUNTRY_KW|COUNTRY_KY|COUNTRY_KZ|COUNTRY_LA|COUNTRY_LB|COUNTRY_LC|COUNTRY_LI|COUNTRY_LK|COUNTRY_LR|COUNTRY_LS|COUNTRY_LT|COUNTRY_LU|COUNTRY_LV|COUNTRY_LY|COUNTRY_MA|COUNTRY_MC|COUNTRY_MD|COUNTRY_ME|COUNTRY_MF|COUNTRY_MG|COUNTRY_MH|COUNTRY_MK|COUNTRY_ML|COUNTRY_MM|COUNTRY_MN|COUNTRY_MO|COUNTRY_MP|COUNTRY_MQ|COUNTRY_MR|COUNTRY_MS|COUNTRY_MT|COUNTRY_MU|COUNTRY_MV|COUNTRY_MW|COUNTRY_MX|COUNTRY_MY|COUNTRY_MZ|COUNTRY_NA|COUNTRY_NC|COUNTRY_NE|COUNTRY_NF|COUNTRY_NG|COUNTRY_NI|COUNTRY_NL|COUNTRY_NO|COUNTRY_NP|COUNTRY_NR|COUNTRY_NU|COUNTRY_NZ|COUNTRY_OM|COUNTRY_PA|COUNTRY_PE|COUNTRY_PF|COUNTRY_PG|COUNTRY_PH|COUNTRY_PK|COUNTRY_PL|COUNTRY_PM|COUNTRY_PN|COUNTRY_PR|COUNTRY_PS|COUNTRY_PT|COUNTRY_PW|COUNTRY_PY|COUNTRY_QA|COUNTRY_RE|COUNTRY_RO|COUNTRY_RS|COUNTRY_RU|COUNTRY_RW|COUNTRY_SA|COUNTRY_SB|COUNTRY_SC|COUNTRY_SD|COUNTRY_SE|COUNTRY_SG|COUNTRY_SH|COUNTRY_SI|COUNTRY_SJ|COUNTRY_SK|COUNTRY_SL|COUNTRY_SM|COUNTRY_SN|COUNTRY_SO|COUNTRY_SR|COUNTRY_SS|COUNTRY_ST|COUNTRY_SV|COUNTRY_SX|COUNTRY_SY|COUNTRY_SZ|COUNTRY_TC|COUNTRY_TD|COUNTRY_TF|COUNTRY_TG|COUNTRY_TH|COUNTRY_TJ|COUNTRY_TK|COUNTRY_TL|COUNTRY_TM|COUNTRY_TN|COUNTRY_TO|COUNTRY_TR|COUNTRY_TT|COUNTRY_TV|COUNTRY_TW|COUNTRY_TZ|COUNTRY_UA|COUNTRY_UG|COUNTRY_UM|COUNTRY_US|COUNTRY_UY|COUNTRY_UZ|COUNTRY_VA|COUNTRY_VC|COUNTRY_VE|COUNTRY_VG|COUNTRY_VI|COUNTRY_VN|COUNTRY_VU|COUNTRY_WF|COUNTRY_WS|COUNTRY_XK|COUNTRY_XT|COUNTRY_YE|COUNTRY_YT|COUNTRY_ZA|COUNTRY_ZM|COUNTRY_ZW] Addresses that belong to one of the countries in the given list The country is obtained by performing a lookup for the source IPv4 Address in a GeoIP DB
|
|
103
103
|
|
|
104
|
-
<a id="allow-list-default-action-allow"></a>• [`default_action_allow`](#allow-list-default-action-allow) - Optional Block<br>
|
|
104
|
+
<a id="allow-list-default-action-allow"></a>• [`default_action_allow`](#allow-list-default-action-allow) - Optional Block<br>Can be used for messages where no values are needed
|
|
105
105
|
|
|
106
|
-
<a id="allow-list-default-action-deny"></a>• [`default_action_deny`](#allow-list-default-action-deny) - Optional Block<br>
|
|
106
|
+
<a id="allow-list-default-action-deny"></a>• [`default_action_deny`](#allow-list-default-action-deny) - Optional Block<br>Can be used for messages where no values are needed
|
|
107
107
|
|
|
108
|
-
<a id="allow-list-default-action-next-policy"></a>• [`default_action_next_policy`](#allow-list-default-action-next-policy) - Optional Block<br>
|
|
108
|
+
<a id="allow-list-default-action-next-policy"></a>• [`default_action_next_policy`](#allow-list-default-action-next-policy) - Optional Block<br>Can be used for messages where no values are needed
|
|
109
109
|
|
|
110
|
-
<a id="allow-list-ip-prefix-set"></a>• [`ip_prefix_set`](#allow-list-ip-prefix-set) - Optional Block<br>
|
|
110
|
+
<a id="allow-list-ip-prefix-set"></a>• [`ip_prefix_set`](#allow-list-ip-prefix-set) - Optional Block<br>Addresses that are covered by the prefixes in the given ip_prefix_set<br>See [IP Prefix Set](#allow-list-ip-prefix-set) below.
|
|
111
111
|
|
|
112
|
-
<a id="allow-list-prefix-list"></a>• [`prefix_list`](#allow-list-prefix-list) - Optional Block<br>
|
|
112
|
+
<a id="allow-list-prefix-list"></a>• [`prefix_list`](#allow-list-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#allow-list-prefix-list) below.
|
|
113
113
|
|
|
114
|
-
<a id="allow-list-tls-fingerprint-classes"></a>• [`tls_fingerprint_classes`](#allow-list-tls-fingerprint-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT]
|
|
114
|
+
<a id="allow-list-tls-fingerprint-classes"></a>• [`tls_fingerprint_classes`](#allow-list-tls-fingerprint-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT] List of known classes of TLS fingerprints to match the input TLS JA3 fingerprint against
|
|
115
115
|
|
|
116
|
-
<a id="allow-list-tls-fingerprint-values"></a>• [`tls_fingerprint_values`](#allow-list-tls-fingerprint-values) - Optional List<br>
|
|
116
|
+
<a id="allow-list-tls-fingerprint-values"></a>• [`tls_fingerprint_values`](#allow-list-tls-fingerprint-values) - Optional List<br>List of exact TLS JA3 fingerprints to match the input TLS JA3 fingerprint against
|
|
117
117
|
|
|
118
118
|
#### Allow List Asn List
|
|
119
119
|
|
|
120
120
|
An [`asn_list`](#allow-list-asn-list) block (within [`allow_list`](#allow-list)) supports the following:
|
|
121
121
|
|
|
122
|
-
<a id="allow-list-asn-list-as-numbers"></a>• [`as_numbers`](#allow-list-asn-list-as-numbers) - Optional List<br>
|
|
122
|
+
<a id="allow-list-asn-list-as-numbers"></a>• [`as_numbers`](#allow-list-asn-list-as-numbers) - Optional List<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer
|
|
123
123
|
|
|
124
124
|
#### Allow List Asn Set
|
|
125
125
|
|
|
126
126
|
An [`asn_set`](#allow-list-asn-set) block (within [`allow_list`](#allow-list)) supports the following:
|
|
127
127
|
|
|
128
|
-
<a id="allow-list-asn-set-name"></a>• [`name`](#allow-list-asn-set-name) - Optional String<br>
|
|
128
|
+
<a id="allow-list-asn-set-name"></a>• [`name`](#allow-list-asn-set-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
129
129
|
|
|
130
|
-
<a id="allow-list-asn-set-namespace"></a>• [`namespace`](#allow-list-asn-set-namespace) - Optional String<br>
|
|
130
|
+
<a id="allow-list-asn-set-namespace"></a>• [`namespace`](#allow-list-asn-set-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
131
131
|
|
|
132
|
-
<a id="allow-list-asn-set-tenant"></a>• [`tenant`](#allow-list-asn-set-tenant) - Optional String<br>
|
|
132
|
+
<a id="allow-list-asn-set-tenant"></a>• [`tenant`](#allow-list-asn-set-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
133
133
|
|
|
134
134
|
#### Allow List IP Prefix Set
|
|
135
135
|
|
|
136
136
|
An [`ip_prefix_set`](#allow-list-ip-prefix-set) block (within [`allow_list`](#allow-list)) supports the following:
|
|
137
137
|
|
|
138
|
-
<a id="allow-list-ip-prefix-set-name"></a>• [`name`](#allow-list-ip-prefix-set-name) - Optional String<br>
|
|
138
|
+
<a id="allow-list-ip-prefix-set-name"></a>• [`name`](#allow-list-ip-prefix-set-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
139
139
|
|
|
140
|
-
<a id="allow-list-ip-prefix-set-namespace"></a>• [`namespace`](#allow-list-ip-prefix-set-namespace) - Optional String<br>
|
|
140
|
+
<a id="allow-list-ip-prefix-set-namespace"></a>• [`namespace`](#allow-list-ip-prefix-set-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
141
141
|
|
|
142
|
-
<a id="allow-list-ip-prefix-set-tenant"></a>• [`tenant`](#allow-list-ip-prefix-set-tenant) - Optional String<br>
|
|
142
|
+
<a id="allow-list-ip-prefix-set-tenant"></a>• [`tenant`](#allow-list-ip-prefix-set-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
143
143
|
|
|
144
144
|
#### Allow List Prefix List
|
|
145
145
|
|
|
146
146
|
A [`prefix_list`](#allow-list-prefix-list) block (within [`allow_list`](#allow-list)) supports the following:
|
|
147
147
|
|
|
148
|
-
<a id="allow-list-prefix-list-prefixes"></a>• [`prefixes`](#allow-list-prefix-list-prefixes) - Optional List<br>
|
|
148
|
+
<a id="allow-list-prefix-list-prefixes"></a>• [`prefixes`](#allow-list-prefix-list-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
149
149
|
|
|
150
150
|
#### Deny List
|
|
151
151
|
|
|
152
152
|
A [`deny_list`](#deny-list) block supports the following:
|
|
153
153
|
|
|
154
|
-
<a id="deny-list-asn-list"></a>• [`asn_list`](#deny-list-asn-list) - Optional Block<br>
|
|
154
|
+
<a id="deny-list-asn-list"></a>• [`asn_list`](#deny-list-asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#deny-list-asn-list) below.
|
|
155
155
|
|
|
156
|
-
<a id="deny-list-asn-set"></a>• [`asn_set`](#deny-list-asn-set) - Optional Block<br>
|
|
156
|
+
<a id="deny-list-asn-set"></a>• [`asn_set`](#deny-list-asn-set) - Optional Block<br>Addresses that belong to the ASNs in the given bgp_asn_set The ASN is obtained by performing a lookup for the source IPv4 Address in a GeoIP DB<br>See [Asn Set](#deny-list-asn-set) below.
|
|
157
157
|
|
|
158
|
-
<a id="deny-list-country-list"></a>• [`country_list`](#deny-list-country-list) - Optional List Defaults to `COUNTRY_NONE`<br>Possible values are `COUNTRY_NONE`, `COUNTRY_AD`, `COUNTRY_AE`, `COUNTRY_AF`, `COUNTRY_AG`, `COUNTRY_AI`, `COUNTRY_AL`, `COUNTRY_AM`, `COUNTRY_AN`, `COUNTRY_AO`, `COUNTRY_AQ`, `COUNTRY_AR`, `COUNTRY_AS`, `COUNTRY_AT`, `COUNTRY_AU`, `COUNTRY_AW`, `COUNTRY_AX`, `COUNTRY_AZ`, `COUNTRY_BA`, `COUNTRY_BB`, `COUNTRY_BD`, `COUNTRY_BE`, `COUNTRY_BF`, `COUNTRY_BG`, `COUNTRY_BH`, `COUNTRY_BI`, `COUNTRY_BJ`, `COUNTRY_BL`, `COUNTRY_BM`, `COUNTRY_BN`, `COUNTRY_BO`, `COUNTRY_BQ`, `COUNTRY_BR`, `COUNTRY_BS`, `COUNTRY_BT`, `COUNTRY_BV`, `COUNTRY_BW`, `COUNTRY_BY`, `COUNTRY_BZ`, `COUNTRY_CA`, `COUNTRY_CC`, `COUNTRY_CD`, `COUNTRY_CF`, `COUNTRY_CG`, `COUNTRY_CH`, `COUNTRY_CI`, `COUNTRY_CK`, `COUNTRY_CL`, `COUNTRY_CM`, `COUNTRY_CN`, `COUNTRY_CO`, `COUNTRY_CR`, `COUNTRY_CS`, `COUNTRY_CU`, `COUNTRY_CV`, `COUNTRY_CW`, `COUNTRY_CX`, `COUNTRY_CY`, `COUNTRY_CZ`, `COUNTRY_DE`, `COUNTRY_DJ`, `COUNTRY_DK`, `COUNTRY_DM`, `COUNTRY_DO`, `COUNTRY_DZ`, `COUNTRY_EC`, `COUNTRY_EE`, `COUNTRY_EG`, `COUNTRY_EH`, `COUNTRY_ER`, `COUNTRY_ES`, `COUNTRY_ET`, `COUNTRY_FI`, `COUNTRY_FJ`, `COUNTRY_FK`, `COUNTRY_FM`, `COUNTRY_FO`, `COUNTRY_FR`, `COUNTRY_GA`, `COUNTRY_GB`, `COUNTRY_GD`, `COUNTRY_GE`, `COUNTRY_GF`, `COUNTRY_GG`, `COUNTRY_GH`, `COUNTRY_GI`, `COUNTRY_GL`, `COUNTRY_GM`, `COUNTRY_GN`, `COUNTRY_GP`, `COUNTRY_GQ`, `COUNTRY_GR`, `COUNTRY_GS`, `COUNTRY_GT`, `COUNTRY_GU`, `COUNTRY_GW`, `COUNTRY_GY`, `COUNTRY_HK`, `COUNTRY_HM`, `COUNTRY_HN`, `COUNTRY_HR`, `COUNTRY_HT`, `COUNTRY_HU`, `COUNTRY_ID`, `COUNTRY_IE`, `COUNTRY_IL`, `COUNTRY_IM`, `COUNTRY_IN`, `COUNTRY_IO`, `COUNTRY_IQ`, `COUNTRY_IR`, `COUNTRY_IS`, `COUNTRY_IT`, `COUNTRY_JE`, `COUNTRY_JM`, `COUNTRY_JO`, `COUNTRY_JP`, `COUNTRY_KE`, `COUNTRY_KG`, `COUNTRY_KH`, `COUNTRY_KI`, `COUNTRY_KM`, `COUNTRY_KN`, `COUNTRY_KP`, `COUNTRY_KR`, `COUNTRY_KW`, `COUNTRY_KY`, `COUNTRY_KZ`, `COUNTRY_LA`, `COUNTRY_LB`, `COUNTRY_LC`, `COUNTRY_LI`, `COUNTRY_LK`, `COUNTRY_LR`, `COUNTRY_LS`, `COUNTRY_LT`, `COUNTRY_LU`, `COUNTRY_LV`, `COUNTRY_LY`, `COUNTRY_MA`, `COUNTRY_MC`, `COUNTRY_MD`, `COUNTRY_ME`, `COUNTRY_MF`, `COUNTRY_MG`, `COUNTRY_MH`, `COUNTRY_MK`, `COUNTRY_ML`, `COUNTRY_MM`, `COUNTRY_MN`, `COUNTRY_MO`, `COUNTRY_MP`, `COUNTRY_MQ`, `COUNTRY_MR`, `COUNTRY_MS`, `COUNTRY_MT`, `COUNTRY_MU`, `COUNTRY_MV`, `COUNTRY_MW`, `COUNTRY_MX`, `COUNTRY_MY`, `COUNTRY_MZ`, `COUNTRY_NA`, `COUNTRY_NC`, `COUNTRY_NE`, `COUNTRY_NF`, `COUNTRY_NG`, `COUNTRY_NI`, `COUNTRY_NL`, `COUNTRY_NO`, `COUNTRY_NP`, `COUNTRY_NR`, `COUNTRY_NU`, `COUNTRY_NZ`, `COUNTRY_OM`, `COUNTRY_PA`, `COUNTRY_PE`, `COUNTRY_PF`, `COUNTRY_PG`, `COUNTRY_PH`, `COUNTRY_PK`, `COUNTRY_PL`, `COUNTRY_PM`, `COUNTRY_PN`, `COUNTRY_PR`, `COUNTRY_PS`, `COUNTRY_PT`, `COUNTRY_PW`, `COUNTRY_PY`, `COUNTRY_QA`, `COUNTRY_RE`, `COUNTRY_RO`, `COUNTRY_RS`, `COUNTRY_RU`, `COUNTRY_RW`, `COUNTRY_SA`, `COUNTRY_SB`, `COUNTRY_SC`, `COUNTRY_SD`, `COUNTRY_SE`, `COUNTRY_SG`, `COUNTRY_SH`, `COUNTRY_SI`, `COUNTRY_SJ`, `COUNTRY_SK`, `COUNTRY_SL`, `COUNTRY_SM`, `COUNTRY_SN`, `COUNTRY_SO`, `COUNTRY_SR`, `COUNTRY_SS`, `COUNTRY_ST`, `COUNTRY_SV`, `COUNTRY_SX`, `COUNTRY_SY`, `COUNTRY_SZ`, `COUNTRY_TC`, `COUNTRY_TD`, `COUNTRY_TF`, `COUNTRY_TG`, `COUNTRY_TH`, `COUNTRY_TJ`, `COUNTRY_TK`, `COUNTRY_TL`, `COUNTRY_TM`, `COUNTRY_TN`, `COUNTRY_TO`, `COUNTRY_TR`, `COUNTRY_TT`, `COUNTRY_TV`, `COUNTRY_TW`, `COUNTRY_TZ`, `COUNTRY_UA`, `COUNTRY_UG`, `COUNTRY_UM`, `COUNTRY_US`, `COUNTRY_UY`, `COUNTRY_UZ`, `COUNTRY_VA`, `COUNTRY_VC`, `COUNTRY_VE`, `COUNTRY_VG`, `COUNTRY_VI`, `COUNTRY_VN`, `COUNTRY_VU`, `COUNTRY_WF`, `COUNTRY_WS`, `COUNTRY_XK`, `COUNTRY_XT`, `COUNTRY_YE`, `COUNTRY_YT`, `COUNTRY_ZA`, `COUNTRY_ZM`, `COUNTRY_ZW`<br>[Enum: COUNTRY_NONE|COUNTRY_AD|COUNTRY_AE|COUNTRY_AF|COUNTRY_AG|COUNTRY_AI|COUNTRY_AL|COUNTRY_AM|COUNTRY_AN|COUNTRY_AO|COUNTRY_AQ|COUNTRY_AR|COUNTRY_AS|COUNTRY_AT|COUNTRY_AU|COUNTRY_AW|COUNTRY_AX|COUNTRY_AZ|COUNTRY_BA|COUNTRY_BB|COUNTRY_BD|COUNTRY_BE|COUNTRY_BF|COUNTRY_BG|COUNTRY_BH|COUNTRY_BI|COUNTRY_BJ|COUNTRY_BL|COUNTRY_BM|COUNTRY_BN|COUNTRY_BO|COUNTRY_BQ|COUNTRY_BR|COUNTRY_BS|COUNTRY_BT|COUNTRY_BV|COUNTRY_BW|COUNTRY_BY|COUNTRY_BZ|COUNTRY_CA|COUNTRY_CC|COUNTRY_CD|COUNTRY_CF|COUNTRY_CG|COUNTRY_CH|COUNTRY_CI|COUNTRY_CK|COUNTRY_CL|COUNTRY_CM|COUNTRY_CN|COUNTRY_CO|COUNTRY_CR|COUNTRY_CS|COUNTRY_CU|COUNTRY_CV|COUNTRY_CW|COUNTRY_CX|COUNTRY_CY|COUNTRY_CZ|COUNTRY_DE|COUNTRY_DJ|COUNTRY_DK|COUNTRY_DM|COUNTRY_DO|COUNTRY_DZ|COUNTRY_EC|COUNTRY_EE|COUNTRY_EG|COUNTRY_EH|COUNTRY_ER|COUNTRY_ES|COUNTRY_ET|COUNTRY_FI|COUNTRY_FJ|COUNTRY_FK|COUNTRY_FM|COUNTRY_FO|COUNTRY_FR|COUNTRY_GA|COUNTRY_GB|COUNTRY_GD|COUNTRY_GE|COUNTRY_GF|COUNTRY_GG|COUNTRY_GH|COUNTRY_GI|COUNTRY_GL|COUNTRY_GM|COUNTRY_GN|COUNTRY_GP|COUNTRY_GQ|COUNTRY_GR|COUNTRY_GS|COUNTRY_GT|COUNTRY_GU|COUNTRY_GW|COUNTRY_GY|COUNTRY_HK|COUNTRY_HM|COUNTRY_HN|COUNTRY_HR|COUNTRY_HT|COUNTRY_HU|COUNTRY_ID|COUNTRY_IE|COUNTRY_IL|COUNTRY_IM|COUNTRY_IN|COUNTRY_IO|COUNTRY_IQ|COUNTRY_IR|COUNTRY_IS|COUNTRY_IT|COUNTRY_JE|COUNTRY_JM|COUNTRY_JO|COUNTRY_JP|COUNTRY_KE|COUNTRY_KG|COUNTRY_KH|COUNTRY_KI|COUNTRY_KM|COUNTRY_KN|COUNTRY_KP|COUNTRY_KR|COUNTRY_KW|COUNTRY_KY|COUNTRY_KZ|COUNTRY_LA|COUNTRY_LB|COUNTRY_LC|COUNTRY_LI|COUNTRY_LK|COUNTRY_LR|COUNTRY_LS|COUNTRY_LT|COUNTRY_LU|COUNTRY_LV|COUNTRY_LY|COUNTRY_MA|COUNTRY_MC|COUNTRY_MD|COUNTRY_ME|COUNTRY_MF|COUNTRY_MG|COUNTRY_MH|COUNTRY_MK|COUNTRY_ML|COUNTRY_MM|COUNTRY_MN|COUNTRY_MO|COUNTRY_MP|COUNTRY_MQ|COUNTRY_MR|COUNTRY_MS|COUNTRY_MT|COUNTRY_MU|COUNTRY_MV|COUNTRY_MW|COUNTRY_MX|COUNTRY_MY|COUNTRY_MZ|COUNTRY_NA|COUNTRY_NC|COUNTRY_NE|COUNTRY_NF|COUNTRY_NG|COUNTRY_NI|COUNTRY_NL|COUNTRY_NO|COUNTRY_NP|COUNTRY_NR|COUNTRY_NU|COUNTRY_NZ|COUNTRY_OM|COUNTRY_PA|COUNTRY_PE|COUNTRY_PF|COUNTRY_PG|COUNTRY_PH|COUNTRY_PK|COUNTRY_PL|COUNTRY_PM|COUNTRY_PN|COUNTRY_PR|COUNTRY_PS|COUNTRY_PT|COUNTRY_PW|COUNTRY_PY|COUNTRY_QA|COUNTRY_RE|COUNTRY_RO|COUNTRY_RS|COUNTRY_RU|COUNTRY_RW|COUNTRY_SA|COUNTRY_SB|COUNTRY_SC|COUNTRY_SD|COUNTRY_SE|COUNTRY_SG|COUNTRY_SH|COUNTRY_SI|COUNTRY_SJ|COUNTRY_SK|COUNTRY_SL|COUNTRY_SM|COUNTRY_SN|COUNTRY_SO|COUNTRY_SR|COUNTRY_SS|COUNTRY_ST|COUNTRY_SV|COUNTRY_SX|COUNTRY_SY|COUNTRY_SZ|COUNTRY_TC|COUNTRY_TD|COUNTRY_TF|COUNTRY_TG|COUNTRY_TH|COUNTRY_TJ|COUNTRY_TK|COUNTRY_TL|COUNTRY_TM|COUNTRY_TN|COUNTRY_TO|COUNTRY_TR|COUNTRY_TT|COUNTRY_TV|COUNTRY_TW|COUNTRY_TZ|COUNTRY_UA|COUNTRY_UG|COUNTRY_UM|COUNTRY_US|COUNTRY_UY|COUNTRY_UZ|COUNTRY_VA|COUNTRY_VC|COUNTRY_VE|COUNTRY_VG|COUNTRY_VI|COUNTRY_VN|COUNTRY_VU|COUNTRY_WF|COUNTRY_WS|COUNTRY_XK|COUNTRY_XT|COUNTRY_YE|COUNTRY_YT|COUNTRY_ZA|COUNTRY_ZM|COUNTRY_ZW]
|
|
158
|
+
<a id="deny-list-country-list"></a>• [`country_list`](#deny-list-country-list) - Optional List Defaults to `COUNTRY_NONE`<br>Possible values are `COUNTRY_NONE`, `COUNTRY_AD`, `COUNTRY_AE`, `COUNTRY_AF`, `COUNTRY_AG`, `COUNTRY_AI`, `COUNTRY_AL`, `COUNTRY_AM`, `COUNTRY_AN`, `COUNTRY_AO`, `COUNTRY_AQ`, `COUNTRY_AR`, `COUNTRY_AS`, `COUNTRY_AT`, `COUNTRY_AU`, `COUNTRY_AW`, `COUNTRY_AX`, `COUNTRY_AZ`, `COUNTRY_BA`, `COUNTRY_BB`, `COUNTRY_BD`, `COUNTRY_BE`, `COUNTRY_BF`, `COUNTRY_BG`, `COUNTRY_BH`, `COUNTRY_BI`, `COUNTRY_BJ`, `COUNTRY_BL`, `COUNTRY_BM`, `COUNTRY_BN`, `COUNTRY_BO`, `COUNTRY_BQ`, `COUNTRY_BR`, `COUNTRY_BS`, `COUNTRY_BT`, `COUNTRY_BV`, `COUNTRY_BW`, `COUNTRY_BY`, `COUNTRY_BZ`, `COUNTRY_CA`, `COUNTRY_CC`, `COUNTRY_CD`, `COUNTRY_CF`, `COUNTRY_CG`, `COUNTRY_CH`, `COUNTRY_CI`, `COUNTRY_CK`, `COUNTRY_CL`, `COUNTRY_CM`, `COUNTRY_CN`, `COUNTRY_CO`, `COUNTRY_CR`, `COUNTRY_CS`, `COUNTRY_CU`, `COUNTRY_CV`, `COUNTRY_CW`, `COUNTRY_CX`, `COUNTRY_CY`, `COUNTRY_CZ`, `COUNTRY_DE`, `COUNTRY_DJ`, `COUNTRY_DK`, `COUNTRY_DM`, `COUNTRY_DO`, `COUNTRY_DZ`, `COUNTRY_EC`, `COUNTRY_EE`, `COUNTRY_EG`, `COUNTRY_EH`, `COUNTRY_ER`, `COUNTRY_ES`, `COUNTRY_ET`, `COUNTRY_FI`, `COUNTRY_FJ`, `COUNTRY_FK`, `COUNTRY_FM`, `COUNTRY_FO`, `COUNTRY_FR`, `COUNTRY_GA`, `COUNTRY_GB`, `COUNTRY_GD`, `COUNTRY_GE`, `COUNTRY_GF`, `COUNTRY_GG`, `COUNTRY_GH`, `COUNTRY_GI`, `COUNTRY_GL`, `COUNTRY_GM`, `COUNTRY_GN`, `COUNTRY_GP`, `COUNTRY_GQ`, `COUNTRY_GR`, `COUNTRY_GS`, `COUNTRY_GT`, `COUNTRY_GU`, `COUNTRY_GW`, `COUNTRY_GY`, `COUNTRY_HK`, `COUNTRY_HM`, `COUNTRY_HN`, `COUNTRY_HR`, `COUNTRY_HT`, `COUNTRY_HU`, `COUNTRY_ID`, `COUNTRY_IE`, `COUNTRY_IL`, `COUNTRY_IM`, `COUNTRY_IN`, `COUNTRY_IO`, `COUNTRY_IQ`, `COUNTRY_IR`, `COUNTRY_IS`, `COUNTRY_IT`, `COUNTRY_JE`, `COUNTRY_JM`, `COUNTRY_JO`, `COUNTRY_JP`, `COUNTRY_KE`, `COUNTRY_KG`, `COUNTRY_KH`, `COUNTRY_KI`, `COUNTRY_KM`, `COUNTRY_KN`, `COUNTRY_KP`, `COUNTRY_KR`, `COUNTRY_KW`, `COUNTRY_KY`, `COUNTRY_KZ`, `COUNTRY_LA`, `COUNTRY_LB`, `COUNTRY_LC`, `COUNTRY_LI`, `COUNTRY_LK`, `COUNTRY_LR`, `COUNTRY_LS`, `COUNTRY_LT`, `COUNTRY_LU`, `COUNTRY_LV`, `COUNTRY_LY`, `COUNTRY_MA`, `COUNTRY_MC`, `COUNTRY_MD`, `COUNTRY_ME`, `COUNTRY_MF`, `COUNTRY_MG`, `COUNTRY_MH`, `COUNTRY_MK`, `COUNTRY_ML`, `COUNTRY_MM`, `COUNTRY_MN`, `COUNTRY_MO`, `COUNTRY_MP`, `COUNTRY_MQ`, `COUNTRY_MR`, `COUNTRY_MS`, `COUNTRY_MT`, `COUNTRY_MU`, `COUNTRY_MV`, `COUNTRY_MW`, `COUNTRY_MX`, `COUNTRY_MY`, `COUNTRY_MZ`, `COUNTRY_NA`, `COUNTRY_NC`, `COUNTRY_NE`, `COUNTRY_NF`, `COUNTRY_NG`, `COUNTRY_NI`, `COUNTRY_NL`, `COUNTRY_NO`, `COUNTRY_NP`, `COUNTRY_NR`, `COUNTRY_NU`, `COUNTRY_NZ`, `COUNTRY_OM`, `COUNTRY_PA`, `COUNTRY_PE`, `COUNTRY_PF`, `COUNTRY_PG`, `COUNTRY_PH`, `COUNTRY_PK`, `COUNTRY_PL`, `COUNTRY_PM`, `COUNTRY_PN`, `COUNTRY_PR`, `COUNTRY_PS`, `COUNTRY_PT`, `COUNTRY_PW`, `COUNTRY_PY`, `COUNTRY_QA`, `COUNTRY_RE`, `COUNTRY_RO`, `COUNTRY_RS`, `COUNTRY_RU`, `COUNTRY_RW`, `COUNTRY_SA`, `COUNTRY_SB`, `COUNTRY_SC`, `COUNTRY_SD`, `COUNTRY_SE`, `COUNTRY_SG`, `COUNTRY_SH`, `COUNTRY_SI`, `COUNTRY_SJ`, `COUNTRY_SK`, `COUNTRY_SL`, `COUNTRY_SM`, `COUNTRY_SN`, `COUNTRY_SO`, `COUNTRY_SR`, `COUNTRY_SS`, `COUNTRY_ST`, `COUNTRY_SV`, `COUNTRY_SX`, `COUNTRY_SY`, `COUNTRY_SZ`, `COUNTRY_TC`, `COUNTRY_TD`, `COUNTRY_TF`, `COUNTRY_TG`, `COUNTRY_TH`, `COUNTRY_TJ`, `COUNTRY_TK`, `COUNTRY_TL`, `COUNTRY_TM`, `COUNTRY_TN`, `COUNTRY_TO`, `COUNTRY_TR`, `COUNTRY_TT`, `COUNTRY_TV`, `COUNTRY_TW`, `COUNTRY_TZ`, `COUNTRY_UA`, `COUNTRY_UG`, `COUNTRY_UM`, `COUNTRY_US`, `COUNTRY_UY`, `COUNTRY_UZ`, `COUNTRY_VA`, `COUNTRY_VC`, `COUNTRY_VE`, `COUNTRY_VG`, `COUNTRY_VI`, `COUNTRY_VN`, `COUNTRY_VU`, `COUNTRY_WF`, `COUNTRY_WS`, `COUNTRY_XK`, `COUNTRY_XT`, `COUNTRY_YE`, `COUNTRY_YT`, `COUNTRY_ZA`, `COUNTRY_ZM`, `COUNTRY_ZW`<br>[Enum: COUNTRY_NONE|COUNTRY_AD|COUNTRY_AE|COUNTRY_AF|COUNTRY_AG|COUNTRY_AI|COUNTRY_AL|COUNTRY_AM|COUNTRY_AN|COUNTRY_AO|COUNTRY_AQ|COUNTRY_AR|COUNTRY_AS|COUNTRY_AT|COUNTRY_AU|COUNTRY_AW|COUNTRY_AX|COUNTRY_AZ|COUNTRY_BA|COUNTRY_BB|COUNTRY_BD|COUNTRY_BE|COUNTRY_BF|COUNTRY_BG|COUNTRY_BH|COUNTRY_BI|COUNTRY_BJ|COUNTRY_BL|COUNTRY_BM|COUNTRY_BN|COUNTRY_BO|COUNTRY_BQ|COUNTRY_BR|COUNTRY_BS|COUNTRY_BT|COUNTRY_BV|COUNTRY_BW|COUNTRY_BY|COUNTRY_BZ|COUNTRY_CA|COUNTRY_CC|COUNTRY_CD|COUNTRY_CF|COUNTRY_CG|COUNTRY_CH|COUNTRY_CI|COUNTRY_CK|COUNTRY_CL|COUNTRY_CM|COUNTRY_CN|COUNTRY_CO|COUNTRY_CR|COUNTRY_CS|COUNTRY_CU|COUNTRY_CV|COUNTRY_CW|COUNTRY_CX|COUNTRY_CY|COUNTRY_CZ|COUNTRY_DE|COUNTRY_DJ|COUNTRY_DK|COUNTRY_DM|COUNTRY_DO|COUNTRY_DZ|COUNTRY_EC|COUNTRY_EE|COUNTRY_EG|COUNTRY_EH|COUNTRY_ER|COUNTRY_ES|COUNTRY_ET|COUNTRY_FI|COUNTRY_FJ|COUNTRY_FK|COUNTRY_FM|COUNTRY_FO|COUNTRY_FR|COUNTRY_GA|COUNTRY_GB|COUNTRY_GD|COUNTRY_GE|COUNTRY_GF|COUNTRY_GG|COUNTRY_GH|COUNTRY_GI|COUNTRY_GL|COUNTRY_GM|COUNTRY_GN|COUNTRY_GP|COUNTRY_GQ|COUNTRY_GR|COUNTRY_GS|COUNTRY_GT|COUNTRY_GU|COUNTRY_GW|COUNTRY_GY|COUNTRY_HK|COUNTRY_HM|COUNTRY_HN|COUNTRY_HR|COUNTRY_HT|COUNTRY_HU|COUNTRY_ID|COUNTRY_IE|COUNTRY_IL|COUNTRY_IM|COUNTRY_IN|COUNTRY_IO|COUNTRY_IQ|COUNTRY_IR|COUNTRY_IS|COUNTRY_IT|COUNTRY_JE|COUNTRY_JM|COUNTRY_JO|COUNTRY_JP|COUNTRY_KE|COUNTRY_KG|COUNTRY_KH|COUNTRY_KI|COUNTRY_KM|COUNTRY_KN|COUNTRY_KP|COUNTRY_KR|COUNTRY_KW|COUNTRY_KY|COUNTRY_KZ|COUNTRY_LA|COUNTRY_LB|COUNTRY_LC|COUNTRY_LI|COUNTRY_LK|COUNTRY_LR|COUNTRY_LS|COUNTRY_LT|COUNTRY_LU|COUNTRY_LV|COUNTRY_LY|COUNTRY_MA|COUNTRY_MC|COUNTRY_MD|COUNTRY_ME|COUNTRY_MF|COUNTRY_MG|COUNTRY_MH|COUNTRY_MK|COUNTRY_ML|COUNTRY_MM|COUNTRY_MN|COUNTRY_MO|COUNTRY_MP|COUNTRY_MQ|COUNTRY_MR|COUNTRY_MS|COUNTRY_MT|COUNTRY_MU|COUNTRY_MV|COUNTRY_MW|COUNTRY_MX|COUNTRY_MY|COUNTRY_MZ|COUNTRY_NA|COUNTRY_NC|COUNTRY_NE|COUNTRY_NF|COUNTRY_NG|COUNTRY_NI|COUNTRY_NL|COUNTRY_NO|COUNTRY_NP|COUNTRY_NR|COUNTRY_NU|COUNTRY_NZ|COUNTRY_OM|COUNTRY_PA|COUNTRY_PE|COUNTRY_PF|COUNTRY_PG|COUNTRY_PH|COUNTRY_PK|COUNTRY_PL|COUNTRY_PM|COUNTRY_PN|COUNTRY_PR|COUNTRY_PS|COUNTRY_PT|COUNTRY_PW|COUNTRY_PY|COUNTRY_QA|COUNTRY_RE|COUNTRY_RO|COUNTRY_RS|COUNTRY_RU|COUNTRY_RW|COUNTRY_SA|COUNTRY_SB|COUNTRY_SC|COUNTRY_SD|COUNTRY_SE|COUNTRY_SG|COUNTRY_SH|COUNTRY_SI|COUNTRY_SJ|COUNTRY_SK|COUNTRY_SL|COUNTRY_SM|COUNTRY_SN|COUNTRY_SO|COUNTRY_SR|COUNTRY_SS|COUNTRY_ST|COUNTRY_SV|COUNTRY_SX|COUNTRY_SY|COUNTRY_SZ|COUNTRY_TC|COUNTRY_TD|COUNTRY_TF|COUNTRY_TG|COUNTRY_TH|COUNTRY_TJ|COUNTRY_TK|COUNTRY_TL|COUNTRY_TM|COUNTRY_TN|COUNTRY_TO|COUNTRY_TR|COUNTRY_TT|COUNTRY_TV|COUNTRY_TW|COUNTRY_TZ|COUNTRY_UA|COUNTRY_UG|COUNTRY_UM|COUNTRY_US|COUNTRY_UY|COUNTRY_UZ|COUNTRY_VA|COUNTRY_VC|COUNTRY_VE|COUNTRY_VG|COUNTRY_VI|COUNTRY_VN|COUNTRY_VU|COUNTRY_WF|COUNTRY_WS|COUNTRY_XK|COUNTRY_XT|COUNTRY_YE|COUNTRY_YT|COUNTRY_ZA|COUNTRY_ZM|COUNTRY_ZW] Addresses that belong to one of the countries in the given list The country is obtained by performing a lookup for the source IPv4 Address in a GeoIP DB
|
|
159
159
|
|
|
160
|
-
<a id="deny-list-default-action-allow"></a>• [`default_action_allow`](#deny-list-default-action-allow) - Optional Block<br>
|
|
160
|
+
<a id="deny-list-default-action-allow"></a>• [`default_action_allow`](#deny-list-default-action-allow) - Optional Block<br>Can be used for messages where no values are needed
|
|
161
161
|
|
|
162
|
-
<a id="deny-list-default-action-deny"></a>• [`default_action_deny`](#deny-list-default-action-deny) - Optional Block<br>
|
|
162
|
+
<a id="deny-list-default-action-deny"></a>• [`default_action_deny`](#deny-list-default-action-deny) - Optional Block<br>Can be used for messages where no values are needed
|
|
163
163
|
|
|
164
|
-
<a id="deny-list-default-action-next-policy"></a>• [`default_action_next_policy`](#deny-list-default-action-next-policy) - Optional Block<br>
|
|
164
|
+
<a id="deny-list-default-action-next-policy"></a>• [`default_action_next_policy`](#deny-list-default-action-next-policy) - Optional Block<br>Can be used for messages where no values are needed
|
|
165
165
|
|
|
166
|
-
<a id="deny-list-ip-prefix-set"></a>• [`ip_prefix_set`](#deny-list-ip-prefix-set) - Optional Block<br>
|
|
166
|
+
<a id="deny-list-ip-prefix-set"></a>• [`ip_prefix_set`](#deny-list-ip-prefix-set) - Optional Block<br>Addresses that are covered by the prefixes in the given ip_prefix_set<br>See [IP Prefix Set](#deny-list-ip-prefix-set) below.
|
|
167
167
|
|
|
168
|
-
<a id="deny-list-prefix-list"></a>• [`prefix_list`](#deny-list-prefix-list) - Optional Block<br>
|
|
168
|
+
<a id="deny-list-prefix-list"></a>• [`prefix_list`](#deny-list-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#deny-list-prefix-list) below.
|
|
169
169
|
|
|
170
|
-
<a id="deny-list-tls-fingerprint-classes"></a>• [`tls_fingerprint_classes`](#deny-list-tls-fingerprint-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT]
|
|
170
|
+
<a id="deny-list-tls-fingerprint-classes"></a>• [`tls_fingerprint_classes`](#deny-list-tls-fingerprint-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT] List of known classes of TLS fingerprints to match the input TLS JA3 fingerprint against
|
|
171
171
|
|
|
172
|
-
<a id="deny-list-tls-fingerprint-values"></a>• [`tls_fingerprint_values`](#deny-list-tls-fingerprint-values) - Optional List<br>
|
|
172
|
+
<a id="deny-list-tls-fingerprint-values"></a>• [`tls_fingerprint_values`](#deny-list-tls-fingerprint-values) - Optional List<br>List of exact TLS JA3 fingerprints to match the input TLS JA3 fingerprint against
|
|
173
173
|
|
|
174
174
|
#### Deny List Asn List
|
|
175
175
|
|
|
176
176
|
An [`asn_list`](#deny-list-asn-list) block (within [`deny_list`](#deny-list)) supports the following:
|
|
177
177
|
|
|
178
|
-
<a id="deny-list-asn-list-as-numbers"></a>• [`as_numbers`](#deny-list-asn-list-as-numbers) - Optional List<br>
|
|
178
|
+
<a id="deny-list-asn-list-as-numbers"></a>• [`as_numbers`](#deny-list-asn-list-as-numbers) - Optional List<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer
|
|
179
179
|
|
|
180
180
|
#### Deny List Asn Set
|
|
181
181
|
|
|
182
182
|
An [`asn_set`](#deny-list-asn-set) block (within [`deny_list`](#deny-list)) supports the following:
|
|
183
183
|
|
|
184
|
-
<a id="deny-list-asn-set-name"></a>• [`name`](#deny-list-asn-set-name) - Optional String<br>
|
|
184
|
+
<a id="deny-list-asn-set-name"></a>• [`name`](#deny-list-asn-set-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
185
185
|
|
|
186
|
-
<a id="deny-list-asn-set-namespace"></a>• [`namespace`](#deny-list-asn-set-namespace) - Optional String<br>
|
|
186
|
+
<a id="deny-list-asn-set-namespace"></a>• [`namespace`](#deny-list-asn-set-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
187
187
|
|
|
188
|
-
<a id="deny-list-asn-set-tenant"></a>• [`tenant`](#deny-list-asn-set-tenant) - Optional String<br>
|
|
188
|
+
<a id="deny-list-asn-set-tenant"></a>• [`tenant`](#deny-list-asn-set-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
189
189
|
|
|
190
190
|
#### Deny List IP Prefix Set
|
|
191
191
|
|
|
192
192
|
An [`ip_prefix_set`](#deny-list-ip-prefix-set) block (within [`deny_list`](#deny-list)) supports the following:
|
|
193
193
|
|
|
194
|
-
<a id="deny-list-ip-prefix-set-name"></a>• [`name`](#deny-list-ip-prefix-set-name) - Optional String<br>
|
|
194
|
+
<a id="deny-list-ip-prefix-set-name"></a>• [`name`](#deny-list-ip-prefix-set-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
195
195
|
|
|
196
|
-
<a id="deny-list-ip-prefix-set-namespace"></a>• [`namespace`](#deny-list-ip-prefix-set-namespace) - Optional String<br>
|
|
196
|
+
<a id="deny-list-ip-prefix-set-namespace"></a>• [`namespace`](#deny-list-ip-prefix-set-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
197
197
|
|
|
198
|
-
<a id="deny-list-ip-prefix-set-tenant"></a>• [`tenant`](#deny-list-ip-prefix-set-tenant) - Optional String<br>
|
|
198
|
+
<a id="deny-list-ip-prefix-set-tenant"></a>• [`tenant`](#deny-list-ip-prefix-set-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
199
199
|
|
|
200
200
|
#### Deny List Prefix List
|
|
201
201
|
|
|
202
202
|
A [`prefix_list`](#deny-list-prefix-list) block (within [`deny_list`](#deny-list)) supports the following:
|
|
203
203
|
|
|
204
|
-
<a id="deny-list-prefix-list-prefixes"></a>• [`prefixes`](#deny-list-prefix-list-prefixes) - Optional List<br>
|
|
204
|
+
<a id="deny-list-prefix-list-prefixes"></a>• [`prefixes`](#deny-list-prefix-list-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
205
205
|
|
|
206
206
|
#### Rule List
|
|
207
207
|
|
|
208
208
|
A [`rule_list`](#rule-list) block supports the following:
|
|
209
209
|
|
|
210
|
-
<a id="rule-list-rules"></a>• [`rules`](#rule-list-rules) - Optional Block<br>
|
|
210
|
+
<a id="rule-list-rules"></a>• [`rules`](#rule-list-rules) - Optional Block<br>Define the list of rules (with an order) that should be evaluated by this service policy. Rules are evaluated from top to bottom in the list<br>See [Rules](#rule-list-rules) below.
|
|
211
211
|
|
|
212
212
|
#### Rule List Rules
|
|
213
213
|
|
|
214
214
|
A [`rules`](#rule-list-rules) block (within [`rule_list`](#rule-list)) supports the following:
|
|
215
215
|
|
|
216
|
-
<a id="rule-list-rules-metadata"></a>• [`metadata`](#rule-list-rules-metadata) - Optional Block<br>
|
|
216
|
+
<a id="rule-list-rules-metadata"></a>• [`metadata`](#rule-list-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#rule-list-rules-metadata) below.
|
|
217
217
|
|
|
218
|
-
<a id="rule-list-rules-spec"></a>• [`spec`](#rule-list-rules-spec) - Optional Block<br>
|
|
218
|
+
<a id="rule-list-rules-spec"></a>• [`spec`](#rule-list-rules-spec) - Optional Block<br>Shape of service_policy_rule in the storage backend<br>See [Spec](#rule-list-rules-spec) below.
|
|
219
219
|
|
|
220
220
|
#### Rule List Rules Metadata
|
|
221
221
|
|
|
@@ -223,77 +223,77 @@ A [`metadata`](#rule-list-rules-metadata) block (within [`rule_list.rules`](#rul
|
|
|
223
223
|
|
|
224
224
|
<a id="spec-118a99"></a>• [`description_spec`](#spec-118a99) - Optional String<br>Description. Human readable description
|
|
225
225
|
|
|
226
|
-
<a id="rule-list-rules-metadata-name"></a>• [`name`](#rule-list-rules-metadata-name) - Optional String<br>Name
|
|
226
|
+
<a id="rule-list-rules-metadata-name"></a>• [`name`](#rule-list-rules-metadata-name) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
227
227
|
|
|
228
228
|
#### Rule List Rules Spec
|
|
229
229
|
|
|
230
230
|
A [`spec`](#rule-list-rules-spec) block (within [`rule_list.rules`](#rule-list-rules)) supports the following:
|
|
231
231
|
|
|
232
|
-
<a id="rule-list-rules-spec-action"></a>• [`action`](#rule-list-rules-spec-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY]
|
|
232
|
+
<a id="rule-list-rules-spec-action"></a>• [`action`](#rule-list-rules-spec-action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY] The rule action determines the disposition of the input request API. If a policy matches a rule with an ALLOW action, the processing of the request proceeds forward. If it matches a rule with a DENY action, the processing of the request is terminated and an appropriate message/code returned to
|
|
233
233
|
|
|
234
|
-
<a id="rule-list-rules-spec-any-asn"></a>• [`any_asn`](#rule-list-rules-spec-any-asn) - Optional Block<br>
|
|
234
|
+
<a id="rule-list-rules-spec-any-asn"></a>• [`any_asn`](#rule-list-rules-spec-any-asn) - Optional Block<br>Can be used for messages where no values are needed
|
|
235
235
|
|
|
236
|
-
<a id="rule-list-rules-spec-any-client"></a>• [`any_client`](#rule-list-rules-spec-any-client) - Optional Block<br>
|
|
236
|
+
<a id="rule-list-rules-spec-any-client"></a>• [`any_client`](#rule-list-rules-spec-any-client) - Optional Block<br>Can be used for messages where no values are needed
|
|
237
237
|
|
|
238
|
-
<a id="rule-list-rules-spec-any-ip"></a>• [`any_ip`](#rule-list-rules-spec-any-ip) - Optional Block<br>
|
|
238
|
+
<a id="rule-list-rules-spec-any-ip"></a>• [`any_ip`](#rule-list-rules-spec-any-ip) - Optional Block<br>Can be used for messages where no values are needed
|
|
239
239
|
|
|
240
|
-
<a id="rule-list-rules-spec-api-group-matcher"></a>• [`api_group_matcher`](#rule-list-rules-spec-api-group-matcher) - Optional Block<br>
|
|
240
|
+
<a id="rule-list-rules-spec-api-group-matcher"></a>• [`api_group_matcher`](#rule-list-rules-spec-api-group-matcher) - Optional Block<br>Matcher specifies a list of values for matching an input string. The match is considered successful if the input value is present in the list. The result of the match is inverted if invert_matcher is true<br>See [API Group Matcher](#rule-list-rules-spec-api-group-matcher) below.
|
|
241
241
|
|
|
242
|
-
<a id="rule-list-rules-spec-arg-matchers"></a>• [`arg_matchers`](#rule-list-rules-spec-arg-matchers) - Optional Block<br>
|
|
242
|
+
<a id="rule-list-rules-spec-arg-matchers"></a>• [`arg_matchers`](#rule-list-rules-spec-arg-matchers) - Optional Block<br>List of predicates for all POST args that need to be matched. The criteria for matching each arg are described in individual instances of ArgMatcherType. The actual arg values are extracted from the request API as a list of strings for each arg selector name<br>See [Arg Matchers](#rule-list-rules-spec-arg-matchers) below.
|
|
243
243
|
|
|
244
|
-
<a id="rule-list-rules-spec-asn-list"></a>• [`asn_list`](#rule-list-rules-spec-asn-list) - Optional Block<br>
|
|
244
|
+
<a id="rule-list-rules-spec-asn-list"></a>• [`asn_list`](#rule-list-rules-spec-asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#rule-list-rules-spec-asn-list) below.
|
|
245
245
|
|
|
246
|
-
<a id="rule-list-rules-spec-asn-matcher"></a>• [`asn_matcher`](#rule-list-rules-spec-asn-matcher) - Optional Block<br>
|
|
246
|
+
<a id="rule-list-rules-spec-asn-matcher"></a>• [`asn_matcher`](#rule-list-rules-spec-asn-matcher) - Optional Block<br>Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#rule-list-rules-spec-asn-matcher) below.
|
|
247
247
|
|
|
248
|
-
<a id="rule-list-rules-spec-body-matcher"></a>• [`body_matcher`](#rule-list-rules-spec-body-matcher) - Optional Block<br>Matcher
|
|
248
|
+
<a id="rule-list-rules-spec-body-matcher"></a>• [`body_matcher`](#rule-list-rules-spec-body-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Body Matcher](#rule-list-rules-spec-body-matcher) below.
|
|
249
249
|
|
|
250
|
-
<a id="rule-list-rules-spec-bot-action"></a>• [`bot_action`](#rule-list-rules-spec-bot-action) - Optional Block<br>
|
|
250
|
+
<a id="rule-list-rules-spec-bot-action"></a>• [`bot_action`](#rule-list-rules-spec-bot-action) - Optional Block<br>Modify Bot protection behavior for a matching request. The modification could be to entirely skip Bot processing<br>See [Bot Action](#rule-list-rules-spec-bot-action) below.
|
|
251
251
|
|
|
252
|
-
<a id="rule-list-rules-spec-client-name"></a>• [`client_name`](#rule-list-rules-spec-client-name) - Optional String<br>
|
|
252
|
+
<a id="rule-list-rules-spec-client-name"></a>• [`client_name`](#rule-list-rules-spec-client-name) - Optional String<br>The expected name of the client invoking the request API. The predicate evaluates to true if any of the actual names is the same as the expected client name
|
|
253
253
|
|
|
254
|
-
<a id="matcher-ded25d"></a>• [`client_name_matcher`](#matcher-ded25d) - Optional Block<br>Matcher
|
|
254
|
+
<a id="matcher-ded25d"></a>• [`client_name_matcher`](#matcher-ded25d) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Client Name Matcher](#matcher-ded25d) below.
|
|
255
255
|
|
|
256
|
-
<a id="rule-list-rules-spec-client-selector"></a>• [`client_selector`](#rule-list-rules-spec-client-selector) - Optional Block<br>
|
|
256
|
+
<a id="rule-list-rules-spec-client-selector"></a>• [`client_selector`](#rule-list-rules-spec-client-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Client Selector](#rule-list-rules-spec-client-selector) below.
|
|
257
257
|
|
|
258
|
-
<a id="rule-list-rules-spec-cookie-matchers"></a>• [`cookie_matchers`](#rule-list-rules-spec-cookie-matchers) - Optional Block<br>
|
|
258
|
+
<a id="rule-list-rules-spec-cookie-matchers"></a>• [`cookie_matchers`](#rule-list-rules-spec-cookie-matchers) - Optional Block<br>List of predicates for all cookies that need to be matched. The criteria for matching each cookie is described in individual instances of CookieMatcherType. The actual cookie values are extracted from the request API as a list of strings for each cookie name<br>See [Cookie Matchers](#rule-list-rules-spec-cookie-matchers) below.
|
|
259
259
|
|
|
260
|
-
<a id="rule-list-rules-spec-domain-matcher"></a>• [`domain_matcher`](#rule-list-rules-spec-domain-matcher) - Optional Block<br>Matcher
|
|
260
|
+
<a id="rule-list-rules-spec-domain-matcher"></a>• [`domain_matcher`](#rule-list-rules-spec-domain-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Domain Matcher](#rule-list-rules-spec-domain-matcher) below.
|
|
261
261
|
|
|
262
|
-
<a id="timestamp-8e9743"></a>• [`expiration_timestamp`](#timestamp-8e9743) - Optional String<br>
|
|
262
|
+
<a id="timestamp-8e9743"></a>• [`expiration_timestamp`](#timestamp-8e9743) - Optional String<br>Specifies expiration_timestamp the RFC 3339 format timestamp at which the containing rule is considered to be logically expired. The rule continues to exist in the configuration but is not applied anymore
|
|
263
263
|
|
|
264
|
-
<a id="rule-list-rules-spec-headers"></a>• [`headers`](#rule-list-rules-spec-headers) - Optional Block<br>
|
|
264
|
+
<a id="rule-list-rules-spec-headers"></a>• [`headers`](#rule-list-rules-spec-headers) - Optional Block<br>List of predicates for various HTTP headers that need to match. The criteria for matching each HTTP header are described in individual HeaderMatcherType instances. The actual HTTP header values are extracted from the request API as a list of strings for each HTTP header type<br>See [Headers](#rule-list-rules-spec-headers) below.
|
|
265
265
|
|
|
266
|
-
<a id="rule-list-rules-spec-http-method"></a>• [`http_method`](#rule-list-rules-spec-http-method) - Optional Block<br>HTTP
|
|
266
|
+
<a id="rule-list-rules-spec-http-method"></a>• [`http_method`](#rule-list-rules-spec-http-method) - Optional Block<br>HTTP method matcher specifies a list of methods to match an input HTTP method. The match is considered successful if the input method is a member of the list. The result of the match based on the method list is inverted if invert_matcher is true<br>See [HTTP Method](#rule-list-rules-spec-http-method) below.
|
|
267
267
|
|
|
268
|
-
<a id="rule-list-rules-spec-ip-matcher"></a>• [`ip_matcher`](#rule-list-rules-spec-ip-matcher) - Optional Block<br>
|
|
268
|
+
<a id="rule-list-rules-spec-ip-matcher"></a>• [`ip_matcher`](#rule-list-rules-spec-ip-matcher) - Optional Block<br>Match any IP prefix contained in the list of ip_prefix_sets. The result of the match is inverted if invert_matcher is true<br>See [IP Matcher](#rule-list-rules-spec-ip-matcher) below.
|
|
269
269
|
|
|
270
|
-
<a id="rule-list-rules-spec-ip-prefix-list"></a>• [`ip_prefix_list`](#rule-list-rules-spec-ip-prefix-list) - Optional Block<br>
|
|
270
|
+
<a id="rule-list-rules-spec-ip-prefix-list"></a>• [`ip_prefix_list`](#rule-list-rules-spec-ip-prefix-list) - Optional Block<br>List of IP Prefix strings to match against<br>See [IP Prefix List](#rule-list-rules-spec-ip-prefix-list) below.
|
|
271
271
|
|
|
272
272
|
<a id="list-f2b1f3"></a>• [`ip_threat_category_list`](#list-f2b1f3) - Optional Block<br>IP Threat Category List Type. List of IP threat categories<br>See [IP Threat Category List](#list-f2b1f3) below.
|
|
273
273
|
|
|
274
|
-
<a id="fingerprint-dfb868"></a>• [`ja4_tls_fingerprint`](#fingerprint-dfb868) - Optional Block<br>
|
|
274
|
+
<a id="fingerprint-dfb868"></a>• [`ja4_tls_fingerprint`](#fingerprint-dfb868) - Optional Block<br>Extended version of JA3 that includes additional fields for more comprehensive fingerprinting of SSL/TLS clients and potentially has a different structure and length<br>See [Ja4 TLS Fingerprint](#fingerprint-dfb868) below.
|
|
275
275
|
|
|
276
|
-
<a id="rule-list-rules-spec-jwt-claims"></a>• [`jwt_claims`](#rule-list-rules-spec-jwt-claims) - Optional Block<br>
|
|
276
|
+
<a id="rule-list-rules-spec-jwt-claims"></a>• [`jwt_claims`](#rule-list-rules-spec-jwt-claims) - Optional Block<br>List of predicates for various JWT claims that need to match. The criteria for matching each JWT claim are described in individual JWTClaimMatcherType instances. The actual JWT claims values are extracted from the JWT payload as a list of strings<br>See [JWT Claims](#rule-list-rules-spec-jwt-claims) below.
|
|
277
277
|
|
|
278
|
-
<a id="rule-list-rules-spec-label-matcher"></a>• [`label_matcher`](#rule-list-rules-spec-label-matcher) - Optional Block<br>Label
|
|
278
|
+
<a id="rule-list-rules-spec-label-matcher"></a>• [`label_matcher`](#rule-list-rules-spec-label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#rule-list-rules-spec-label-matcher) below.
|
|
279
279
|
|
|
280
|
-
<a id="rule-list-rules-spec-mum-action"></a>• [`mum_action`](#rule-list-rules-spec-mum-action) - Optional Block<br>
|
|
280
|
+
<a id="rule-list-rules-spec-mum-action"></a>• [`mum_action`](#rule-list-rules-spec-mum-action) - Optional Block<br>Modify behavior for a matching request. The modification could be to entirely skip processing<br>See [Mum Action](#rule-list-rules-spec-mum-action) below.
|
|
281
281
|
|
|
282
|
-
<a id="rule-list-rules-spec-path"></a>• [`path`](#rule-list-rules-spec-path) - Optional Block<br>Path
|
|
282
|
+
<a id="rule-list-rules-spec-path"></a>• [`path`](#rule-list-rules-spec-path) - Optional Block<br>Path matcher specifies multiple criteria for matching an HTTP path string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of path prefixes, a list of exact path values and a list of regular expressions<br>See [Path](#rule-list-rules-spec-path) below.
|
|
283
283
|
|
|
284
|
-
<a id="rule-list-rules-spec-port-matcher"></a>• [`port_matcher`](#rule-list-rules-spec-port-matcher) - Optional Block<br>Port
|
|
284
|
+
<a id="rule-list-rules-spec-port-matcher"></a>• [`port_matcher`](#rule-list-rules-spec-port-matcher) - Optional Block<br>Port matcher specifies a list of port ranges as match criteria. The match is considered successful if the input port falls within any of the port ranges. The result of the match is inverted if invert_matcher is true<br>See [Port Matcher](#rule-list-rules-spec-port-matcher) below.
|
|
285
285
|
|
|
286
|
-
<a id="rule-list-rules-spec-query-params"></a>• [`query_params`](#rule-list-rules-spec-query-params) - Optional Block<br>
|
|
286
|
+
<a id="rule-list-rules-spec-query-params"></a>• [`query_params`](#rule-list-rules-spec-query-params) - Optional Block<br>List of predicates for all query parameters that need to be matched. The criteria for matching each query parameter are described in individual instances of QueryParameterMatcherType. The actual query parameter values are extracted from the request API as a list of strings for each query<br>See [Query Params](#rule-list-rules-spec-query-params) below.
|
|
287
287
|
|
|
288
288
|
<a id="constraints-a447da"></a>• [`request_constraints`](#constraints-a447da) - Optional Block<br>Request Constraints<br>See [Request Constraints](#constraints-a447da) below.
|
|
289
289
|
|
|
290
290
|
<a id="rule-list-rules-spec-segment-policy"></a>• [`segment_policy`](#rule-list-rules-spec-segment-policy) - Optional Block<br>X-displayName: 'Configure Segments' Configure source and destination segment for policy<br>See [Segment Policy](#rule-list-rules-spec-segment-policy) below.
|
|
291
291
|
|
|
292
|
-
<a id="matcher-95ee34"></a>• [`tls_fingerprint_matcher`](#matcher-95ee34) - Optional Block<br>TLS
|
|
292
|
+
<a id="matcher-95ee34"></a>• [`tls_fingerprint_matcher`](#matcher-95ee34) - Optional Block<br>TLS fingerprint matcher specifies multiple criteria for matching a TLS fingerprint. The set of supported positve match criteria includes a list of known classes of TLS fingerprints and a list of exact values. The match is considered successful if either of these positive criteria are satisfied<br>See [TLS Fingerprint Matcher](#matcher-95ee34) below.
|
|
293
293
|
|
|
294
|
-
<a id="matcher-744036"></a>• [`user_identity_matcher`](#matcher-744036) - Optional Block<br>Matcher
|
|
294
|
+
<a id="matcher-744036"></a>• [`user_identity_matcher`](#matcher-744036) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [User Identity Matcher](#matcher-744036) below.
|
|
295
295
|
|
|
296
|
-
<a id="rule-list-rules-spec-waf-action"></a>• [`waf_action`](#rule-list-rules-spec-waf-action) - Optional Block<br>
|
|
296
|
+
<a id="rule-list-rules-spec-waf-action"></a>• [`waf_action`](#rule-list-rules-spec-waf-action) - Optional Block<br>Modify App Firewall behavior for a matching request. The modification could either be to entirely skip firewall processing or to customize the firewall rules to be applied as defined by App Firewall Rule Control settings<br>See [WAF Action](#rule-list-rules-spec-waf-action) below.
|
|
297
297
|
|
|
298
298
|
#### Rule List Rules Spec API Group Matcher
|
|
299
299
|
|
|
@@ -301,43 +301,43 @@ An [`api_group_matcher`](#rule-list-rules-spec-api-group-matcher) block (within
|
|
|
301
301
|
|
|
302
302
|
<a id="matcher-2a47df"></a>• [`invert_matcher`](#matcher-2a47df) - Optional Bool<br>Invert String Matcher. Invert the match result
|
|
303
303
|
|
|
304
|
-
<a id="match-614318"></a>• [`match`](#match-614318) - Optional List<br>
|
|
304
|
+
<a id="match-614318"></a>• [`match`](#match-614318) - Optional List<br>List of exact values to match the input against
|
|
305
305
|
|
|
306
306
|
#### Rule List Rules Spec Arg Matchers
|
|
307
307
|
|
|
308
308
|
An [`arg_matchers`](#rule-list-rules-spec-arg-matchers) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
309
309
|
|
|
310
|
-
<a id="present-2c642d"></a>• [`check_not_present`](#present-2c642d) - Optional Block<br>
|
|
310
|
+
<a id="present-2c642d"></a>• [`check_not_present`](#present-2c642d) - Optional Block<br>Can be used for messages where no values are needed
|
|
311
311
|
|
|
312
|
-
<a id="present-643cdb"></a>• [`check_present`](#present-643cdb) - Optional Block<br>
|
|
312
|
+
<a id="present-643cdb"></a>• [`check_present`](#present-643cdb) - Optional Block<br>Can be used for messages where no values are needed
|
|
313
313
|
|
|
314
314
|
<a id="matcher-0461ac"></a>• [`invert_matcher`](#matcher-0461ac) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
315
315
|
|
|
316
|
-
<a id="rule-list-rules-spec-arg-matchers-item"></a>• [`item`](#rule-list-rules-spec-arg-matchers-item) - Optional Block<br>Matcher
|
|
316
|
+
<a id="rule-list-rules-spec-arg-matchers-item"></a>• [`item`](#rule-list-rules-spec-arg-matchers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#rule-list-rules-spec-arg-matchers-item) below.
|
|
317
317
|
|
|
318
|
-
<a id="rule-list-rules-spec-arg-matchers-name"></a>• [`name`](#rule-list-rules-spec-arg-matchers-name) - Optional String<br>
|
|
318
|
+
<a id="rule-list-rules-spec-arg-matchers-name"></a>• [`name`](#rule-list-rules-spec-arg-matchers-name) - Optional String<br>Case-sensitive JSON path in the HTTP request body
|
|
319
319
|
|
|
320
320
|
#### Rule List Rules Spec Arg Matchers Item
|
|
321
321
|
|
|
322
322
|
An [`item`](#rule-list-rules-spec-arg-matchers-item) block (within [`rule_list.rules.spec.arg_matchers`](#rule-list-rules-spec-arg-matchers)) supports the following:
|
|
323
323
|
|
|
324
|
-
<a id="values-c7a648"></a>• [`exact_values`](#values-c7a648) - Optional List<br>
|
|
324
|
+
<a id="values-c7a648"></a>• [`exact_values`](#values-c7a648) - Optional List<br>List of exact values to match the input against
|
|
325
325
|
|
|
326
|
-
<a id="values-8f2f21"></a>• [`regex_values`](#values-8f2f21) - Optional List<br>
|
|
326
|
+
<a id="values-8f2f21"></a>• [`regex_values`](#values-8f2f21) - Optional List<br>List of regular expressions to match the input against
|
|
327
327
|
|
|
328
|
-
<a id="transformers-0078cd"></a>• [`transformers`](#transformers-0078cd) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
328
|
+
<a id="transformers-0078cd"></a>• [`transformers`](#transformers-0078cd) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
329
329
|
|
|
330
330
|
#### Rule List Rules Spec Asn List
|
|
331
331
|
|
|
332
332
|
An [`asn_list`](#rule-list-rules-spec-asn-list) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
333
333
|
|
|
334
|
-
<a id="numbers-bc48fc"></a>• [`as_numbers`](#numbers-bc48fc) - Optional List<br>
|
|
334
|
+
<a id="numbers-bc48fc"></a>• [`as_numbers`](#numbers-bc48fc) - Optional List<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer
|
|
335
335
|
|
|
336
336
|
#### Rule List Rules Spec Asn Matcher
|
|
337
337
|
|
|
338
338
|
An [`asn_matcher`](#rule-list-rules-spec-asn-matcher) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
339
339
|
|
|
340
|
-
<a id="sets-0b3475"></a>• [`asn_sets`](#sets-0b3475) - Optional Block<br>
|
|
340
|
+
<a id="sets-0b3475"></a>• [`asn_sets`](#sets-0b3475) - Optional Block<br>List of references to bgp_asn_set objects<br>See [Asn Sets](#sets-0b3475) below.
|
|
341
341
|
|
|
342
342
|
#### Rule List Rules Spec Asn Matcher Asn Sets
|
|
343
343
|
|
|
@@ -347,93 +347,93 @@ An [`asn_matcher`](#rule-list-rules-spec-asn-matcher) block (within [`rule_list.
|
|
|
347
347
|
|
|
348
348
|
A [`body_matcher`](#rule-list-rules-spec-body-matcher) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
349
349
|
|
|
350
|
-
<a id="values-e56a42"></a>• [`exact_values`](#values-e56a42) - Optional List<br>
|
|
350
|
+
<a id="values-e56a42"></a>• [`exact_values`](#values-e56a42) - Optional List<br>List of exact values to match the input against
|
|
351
351
|
|
|
352
|
-
<a id="values-156f80"></a>• [`regex_values`](#values-156f80) - Optional List<br>
|
|
352
|
+
<a id="values-156f80"></a>• [`regex_values`](#values-156f80) - Optional List<br>List of regular expressions to match the input against
|
|
353
353
|
|
|
354
|
-
<a id="transformers-8d4f75"></a>• [`transformers`](#transformers-8d4f75) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
354
|
+
<a id="transformers-8d4f75"></a>• [`transformers`](#transformers-8d4f75) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
355
355
|
|
|
356
356
|
#### Rule List Rules Spec Bot Action
|
|
357
357
|
|
|
358
358
|
A [`bot_action`](#rule-list-rules-spec-bot-action) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
359
359
|
|
|
360
|
-
<a id="processing-583231"></a>• [`bot_skip_processing`](#processing-583231) - Optional Block<br>
|
|
360
|
+
<a id="processing-583231"></a>• [`bot_skip_processing`](#processing-583231) - Optional Block<br>Can be used for messages where no values are needed
|
|
361
361
|
|
|
362
|
-
<a id="rule-list-rules-spec-bot-action-none"></a>• [`none`](#rule-list-rules-spec-bot-action-none) - Optional Block<br>
|
|
362
|
+
<a id="rule-list-rules-spec-bot-action-none"></a>• [`none`](#rule-list-rules-spec-bot-action-none) - Optional Block<br>Can be used for messages where no values are needed
|
|
363
363
|
|
|
364
364
|
#### Rule List Rules Spec Client Name Matcher
|
|
365
365
|
|
|
366
366
|
A [`client_name_matcher`](#matcher-ded25d) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
367
367
|
|
|
368
|
-
<a id="values-835b8f"></a>• [`exact_values`](#values-835b8f) - Optional List<br>
|
|
368
|
+
<a id="values-835b8f"></a>• [`exact_values`](#values-835b8f) - Optional List<br>List of exact values to match the input against
|
|
369
369
|
|
|
370
|
-
<a id="values-4b3791"></a>• [`regex_values`](#values-4b3791) - Optional List<br>
|
|
370
|
+
<a id="values-4b3791"></a>• [`regex_values`](#values-4b3791) - Optional List<br>List of regular expressions to match the input against
|
|
371
371
|
|
|
372
|
-
<a id="transformers-fd5b88"></a>• [`transformers`](#transformers-fd5b88) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
372
|
+
<a id="transformers-fd5b88"></a>• [`transformers`](#transformers-fd5b88) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
373
373
|
|
|
374
374
|
#### Rule List Rules Spec Client Selector
|
|
375
375
|
|
|
376
376
|
A [`client_selector`](#rule-list-rules-spec-client-selector) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
377
377
|
|
|
378
|
-
<a id="expressions-248d45"></a>• [`expressions`](#expressions-248d45) - Optional List<br>
|
|
378
|
+
<a id="expressions-248d45"></a>• [`expressions`](#expressions-248d45) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
379
379
|
|
|
380
380
|
#### Rule List Rules Spec Cookie Matchers
|
|
381
381
|
|
|
382
382
|
A [`cookie_matchers`](#rule-list-rules-spec-cookie-matchers) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
383
383
|
|
|
384
|
-
<a id="present-485b0a"></a>• [`check_not_present`](#present-485b0a) - Optional Block<br>
|
|
384
|
+
<a id="present-485b0a"></a>• [`check_not_present`](#present-485b0a) - Optional Block<br>Can be used for messages where no values are needed
|
|
385
385
|
|
|
386
|
-
<a id="present-459192"></a>• [`check_present`](#present-459192) - Optional Block<br>
|
|
386
|
+
<a id="present-459192"></a>• [`check_present`](#present-459192) - Optional Block<br>Can be used for messages where no values are needed
|
|
387
387
|
|
|
388
388
|
<a id="matcher-c32a99"></a>• [`invert_matcher`](#matcher-c32a99) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
389
389
|
|
|
390
|
-
<a id="item-ab8ab4"></a>• [`item`](#item-ab8ab4) - Optional Block<br>Matcher
|
|
390
|
+
<a id="item-ab8ab4"></a>• [`item`](#item-ab8ab4) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#item-ab8ab4) below.
|
|
391
391
|
|
|
392
|
-
<a id="name-6a6bd0"></a>• [`name`](#name-6a6bd0) - Optional String<br>
|
|
392
|
+
<a id="name-6a6bd0"></a>• [`name`](#name-6a6bd0) - Optional String<br>Case-sensitive cookie name
|
|
393
393
|
|
|
394
394
|
#### Rule List Rules Spec Cookie Matchers Item
|
|
395
395
|
|
|
396
396
|
An [`item`](#item-ab8ab4) block (within [`rule_list.rules.spec.cookie_matchers`](#rule-list-rules-spec-cookie-matchers)) supports the following:
|
|
397
397
|
|
|
398
|
-
<a id="values-c48c4e"></a>• [`exact_values`](#values-c48c4e) - Optional List<br>
|
|
398
|
+
<a id="values-c48c4e"></a>• [`exact_values`](#values-c48c4e) - Optional List<br>List of exact values to match the input against
|
|
399
399
|
|
|
400
|
-
<a id="values-8e4fe5"></a>• [`regex_values`](#values-8e4fe5) - Optional List<br>
|
|
400
|
+
<a id="values-8e4fe5"></a>• [`regex_values`](#values-8e4fe5) - Optional List<br>List of regular expressions to match the input against
|
|
401
401
|
|
|
402
|
-
<a id="transformers-c061db"></a>• [`transformers`](#transformers-c061db) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
402
|
+
<a id="transformers-c061db"></a>• [`transformers`](#transformers-c061db) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
403
403
|
|
|
404
404
|
#### Rule List Rules Spec Domain Matcher
|
|
405
405
|
|
|
406
406
|
A [`domain_matcher`](#rule-list-rules-spec-domain-matcher) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
407
407
|
|
|
408
|
-
<a id="values-4e4043"></a>• [`exact_values`](#values-4e4043) - Optional List<br>
|
|
408
|
+
<a id="values-4e4043"></a>• [`exact_values`](#values-4e4043) - Optional List<br>List of exact values to match the input against
|
|
409
409
|
|
|
410
|
-
<a id="values-e318f7"></a>• [`regex_values`](#values-e318f7) - Optional List<br>
|
|
410
|
+
<a id="values-e318f7"></a>• [`regex_values`](#values-e318f7) - Optional List<br>List of regular expressions to match the input against
|
|
411
411
|
|
|
412
|
-
<a id="transformers-f69aff"></a>• [`transformers`](#transformers-f69aff) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
412
|
+
<a id="transformers-f69aff"></a>• [`transformers`](#transformers-f69aff) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
413
413
|
|
|
414
414
|
#### Rule List Rules Spec Headers
|
|
415
415
|
|
|
416
416
|
A [`headers`](#rule-list-rules-spec-headers) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
417
417
|
|
|
418
|
-
<a id="present-652e97"></a>• [`check_not_present`](#present-652e97) - Optional Block<br>
|
|
418
|
+
<a id="present-652e97"></a>• [`check_not_present`](#present-652e97) - Optional Block<br>Can be used for messages where no values are needed
|
|
419
419
|
|
|
420
|
-
<a id="present-fe2629"></a>• [`check_present`](#present-fe2629) - Optional Block<br>
|
|
420
|
+
<a id="present-fe2629"></a>• [`check_present`](#present-fe2629) - Optional Block<br>Can be used for messages where no values are needed
|
|
421
421
|
|
|
422
422
|
<a id="matcher-0d0548"></a>• [`invert_matcher`](#matcher-0d0548) - Optional Bool<br>Invert Header Matcher. Invert the match result
|
|
423
423
|
|
|
424
|
-
<a id="rule-list-rules-spec-headers-item"></a>• [`item`](#rule-list-rules-spec-headers-item) - Optional Block<br>Matcher
|
|
424
|
+
<a id="rule-list-rules-spec-headers-item"></a>• [`item`](#rule-list-rules-spec-headers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#rule-list-rules-spec-headers-item) below.
|
|
425
425
|
|
|
426
|
-
<a id="rule-list-rules-spec-headers-name"></a>• [`name`](#rule-list-rules-spec-headers-name) - Optional String<br>
|
|
426
|
+
<a id="rule-list-rules-spec-headers-name"></a>• [`name`](#rule-list-rules-spec-headers-name) - Optional String<br>Case-insensitive HTTP header name
|
|
427
427
|
|
|
428
428
|
#### Rule List Rules Spec Headers Item
|
|
429
429
|
|
|
430
430
|
An [`item`](#rule-list-rules-spec-headers-item) block (within [`rule_list.rules.spec.headers`](#rule-list-rules-spec-headers)) supports the following:
|
|
431
431
|
|
|
432
|
-
<a id="values-781f57"></a>• [`exact_values`](#values-781f57) - Optional List<br>
|
|
432
|
+
<a id="values-781f57"></a>• [`exact_values`](#values-781f57) - Optional List<br>List of exact values to match the input against
|
|
433
433
|
|
|
434
|
-
<a id="values-0db8b4"></a>• [`regex_values`](#values-0db8b4) - Optional List<br>
|
|
434
|
+
<a id="values-0db8b4"></a>• [`regex_values`](#values-0db8b4) - Optional List<br>List of regular expressions to match the input against
|
|
435
435
|
|
|
436
|
-
<a id="transformers-a3008a"></a>• [`transformers`](#transformers-a3008a) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
436
|
+
<a id="transformers-a3008a"></a>• [`transformers`](#transformers-a3008a) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
437
437
|
|
|
438
438
|
#### Rule List Rules Spec HTTP Method
|
|
439
439
|
|
|
@@ -441,7 +441,7 @@ A [`http_method`](#rule-list-rules-spec-http-method) block (within [`rule_list.r
|
|
|
441
441
|
|
|
442
442
|
<a id="matcher-ea16cd"></a>• [`invert_matcher`](#matcher-ea16cd) - Optional Bool<br>Invert Method Matcher. Invert the match result
|
|
443
443
|
|
|
444
|
-
<a id="methods-7419c4"></a>• [`methods`](#methods-7419c4) - Optional List Defaults to `ANY`<br>See [HTTP Methods](#common-http-methods)<br>
|
|
444
|
+
<a id="methods-7419c4"></a>• [`methods`](#methods-7419c4) - Optional List Defaults to `ANY`<br>See [HTTP Methods](#common-http-methods)<br> List of methods values to match against
|
|
445
445
|
|
|
446
446
|
#### Rule List Rules Spec IP Matcher
|
|
447
447
|
|
|
@@ -449,7 +449,7 @@ An [`ip_matcher`](#rule-list-rules-spec-ip-matcher) block (within [`rule_list.ru
|
|
|
449
449
|
|
|
450
450
|
<a id="matcher-fb6425"></a>• [`invert_matcher`](#matcher-fb6425) - Optional Bool<br>Invert IP Matcher. Invert the match result
|
|
451
451
|
|
|
452
|
-
<a id="sets-e4318a"></a>• [`prefix_sets`](#sets-e4318a) - Optional Block<br>
|
|
452
|
+
<a id="sets-e4318a"></a>• [`prefix_sets`](#sets-e4318a) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Prefix Sets](#sets-e4318a) below.
|
|
453
453
|
|
|
454
454
|
#### Rule List Rules Spec IP Matcher Prefix Sets
|
|
455
455
|
|
|
@@ -471,19 +471,19 @@ An [`ip_prefix_list`](#rule-list-rules-spec-ip-prefix-list) block (within [`rule
|
|
|
471
471
|
|
|
472
472
|
A [`ja4_tls_fingerprint`](#fingerprint-dfb868) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
473
473
|
|
|
474
|
-
<a id="values-1d5d4e"></a>• [`exact_values`](#values-1d5d4e) - Optional List<br>
|
|
474
|
+
<a id="values-1d5d4e"></a>• [`exact_values`](#values-1d5d4e) - Optional List<br>List of exact JA4 TLS fingerprint to match the input JA4 TLS fingerprint against
|
|
475
475
|
|
|
476
476
|
#### Rule List Rules Spec JWT Claims
|
|
477
477
|
|
|
478
478
|
A [`jwt_claims`](#rule-list-rules-spec-jwt-claims) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
479
479
|
|
|
480
|
-
<a id="present-2d6113"></a>• [`check_not_present`](#present-2d6113) - Optional Block<br>
|
|
480
|
+
<a id="present-2d6113"></a>• [`check_not_present`](#present-2d6113) - Optional Block<br>Can be used for messages where no values are needed
|
|
481
481
|
|
|
482
|
-
<a id="present-4eb640"></a>• [`check_present`](#present-4eb640) - Optional Block<br>
|
|
482
|
+
<a id="present-4eb640"></a>• [`check_present`](#present-4eb640) - Optional Block<br>Can be used for messages where no values are needed
|
|
483
483
|
|
|
484
484
|
<a id="matcher-03ed8d"></a>• [`invert_matcher`](#matcher-03ed8d) - Optional Bool<br>Invert Matcher. Invert the match result
|
|
485
485
|
|
|
486
|
-
<a id="rule-list-rules-spec-jwt-claims-item"></a>• [`item`](#rule-list-rules-spec-jwt-claims-item) - Optional Block<br>Matcher
|
|
486
|
+
<a id="rule-list-rules-spec-jwt-claims-item"></a>• [`item`](#rule-list-rules-spec-jwt-claims-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#rule-list-rules-spec-jwt-claims-item) below.
|
|
487
487
|
|
|
488
488
|
<a id="rule-list-rules-spec-jwt-claims-name"></a>• [`name`](#rule-list-rules-spec-jwt-claims-name) - Optional String<br>JWT Claim Name. JWT claim name
|
|
489
489
|
|
|
@@ -491,41 +491,41 @@ A [`jwt_claims`](#rule-list-rules-spec-jwt-claims) block (within [`rule_list.rul
|
|
|
491
491
|
|
|
492
492
|
An [`item`](#rule-list-rules-spec-jwt-claims-item) block (within [`rule_list.rules.spec.jwt_claims`](#rule-list-rules-spec-jwt-claims)) supports the following:
|
|
493
493
|
|
|
494
|
-
<a id="values-5cab64"></a>• [`exact_values`](#values-5cab64) - Optional List<br>
|
|
494
|
+
<a id="values-5cab64"></a>• [`exact_values`](#values-5cab64) - Optional List<br>List of exact values to match the input against
|
|
495
495
|
|
|
496
|
-
<a id="values-abf135"></a>• [`regex_values`](#values-abf135) - Optional List<br>
|
|
496
|
+
<a id="values-abf135"></a>• [`regex_values`](#values-abf135) - Optional List<br>List of regular expressions to match the input against
|
|
497
497
|
|
|
498
|
-
<a id="transformers-365d8a"></a>• [`transformers`](#transformers-365d8a) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
498
|
+
<a id="transformers-365d8a"></a>• [`transformers`](#transformers-365d8a) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
499
499
|
|
|
500
500
|
#### Rule List Rules Spec Label Matcher
|
|
501
501
|
|
|
502
502
|
A [`label_matcher`](#rule-list-rules-spec-label-matcher) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
503
503
|
|
|
504
|
-
<a id="rule-list-rules-spec-label-matcher-keys"></a>• [`keys`](#rule-list-rules-spec-label-matcher-keys) - Optional List<br>
|
|
504
|
+
<a id="rule-list-rules-spec-label-matcher-keys"></a>• [`keys`](#rule-list-rules-spec-label-matcher-keys) - Optional List<br>The list of label key names that have to match
|
|
505
505
|
|
|
506
506
|
#### Rule List Rules Spec Mum Action
|
|
507
507
|
|
|
508
508
|
A [`mum_action`](#rule-list-rules-spec-mum-action) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
509
509
|
|
|
510
|
-
<a id="rule-list-rules-spec-mum-action-default"></a>• [`default`](#rule-list-rules-spec-mum-action-default) - Optional Block<br>
|
|
510
|
+
<a id="rule-list-rules-spec-mum-action-default"></a>• [`default`](#rule-list-rules-spec-mum-action-default) - Optional Block<br>Can be used for messages where no values are needed
|
|
511
511
|
|
|
512
|
-
<a id="processing-d7aff9"></a>• [`skip_processing`](#processing-d7aff9) - Optional Block<br>
|
|
512
|
+
<a id="processing-d7aff9"></a>• [`skip_processing`](#processing-d7aff9) - Optional Block<br>Can be used for messages where no values are needed
|
|
513
513
|
|
|
514
514
|
#### Rule List Rules Spec Path
|
|
515
515
|
|
|
516
516
|
A [`path`](#rule-list-rules-spec-path) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
517
517
|
|
|
518
|
-
<a id="rule-list-rules-spec-path-exact-values"></a>• [`exact_values`](#rule-list-rules-spec-path-exact-values) - Optional List<br>
|
|
518
|
+
<a id="rule-list-rules-spec-path-exact-values"></a>• [`exact_values`](#rule-list-rules-spec-path-exact-values) - Optional List<br>List of exact path values to match the input HTTP path against
|
|
519
519
|
|
|
520
520
|
<a id="matcher-895246"></a>• [`invert_matcher`](#matcher-895246) - Optional Bool<br>Invert Path Matcher. Invert the match result
|
|
521
521
|
|
|
522
|
-
<a id="rule-list-rules-spec-path-prefix-values"></a>• [`prefix_values`](#rule-list-rules-spec-path-prefix-values) - Optional List<br>
|
|
522
|
+
<a id="rule-list-rules-spec-path-prefix-values"></a>• [`prefix_values`](#rule-list-rules-spec-path-prefix-values) - Optional List<br>List of path prefix values to match the input HTTP path against
|
|
523
523
|
|
|
524
|
-
<a id="rule-list-rules-spec-path-regex-values"></a>• [`regex_values`](#rule-list-rules-spec-path-regex-values) - Optional List<br>
|
|
524
|
+
<a id="rule-list-rules-spec-path-regex-values"></a>• [`regex_values`](#rule-list-rules-spec-path-regex-values) - Optional List<br>List of regular expressions to match the input HTTP path against
|
|
525
525
|
|
|
526
|
-
<a id="rule-list-rules-spec-path-suffix-values"></a>• [`suffix_values`](#rule-list-rules-spec-path-suffix-values) - Optional List<br>
|
|
526
|
+
<a id="rule-list-rules-spec-path-suffix-values"></a>• [`suffix_values`](#rule-list-rules-spec-path-suffix-values) - Optional List<br>List of path suffix values to match the input HTTP path against
|
|
527
527
|
|
|
528
|
-
<a id="rule-list-rules-spec-path-transformers"></a>• [`transformers`](#rule-list-rules-spec-path-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
528
|
+
<a id="rule-list-rules-spec-path-transformers"></a>• [`transformers`](#rule-list-rules-spec-path-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
529
529
|
|
|
530
530
|
#### Rule List Rules Spec Port Matcher
|
|
531
531
|
|
|
@@ -533,31 +533,31 @@ A [`port_matcher`](#rule-list-rules-spec-port-matcher) block (within [`rule_list
|
|
|
533
533
|
|
|
534
534
|
<a id="matcher-aee96e"></a>• [`invert_matcher`](#matcher-aee96e) - Optional Bool<br>Invert Port Matcher. Invert the match result
|
|
535
535
|
|
|
536
|
-
<a id="rule-list-rules-spec-port-matcher-ports"></a>• [`ports`](#rule-list-rules-spec-port-matcher-ports) - Optional List<br>
|
|
536
|
+
<a id="rule-list-rules-spec-port-matcher-ports"></a>• [`ports`](#rule-list-rules-spec-port-matcher-ports) - Optional List<br>List of strings, each of which is a single port value or a tuple of start and end port values separated by '-'. The start and end values are considered to be part of the range
|
|
537
537
|
|
|
538
538
|
#### Rule List Rules Spec Query Params
|
|
539
539
|
|
|
540
540
|
A [`query_params`](#rule-list-rules-spec-query-params) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
541
541
|
|
|
542
|
-
<a id="present-d92889"></a>• [`check_not_present`](#present-d92889) - Optional Block<br>
|
|
542
|
+
<a id="present-d92889"></a>• [`check_not_present`](#present-d92889) - Optional Block<br>Can be used for messages where no values are needed
|
|
543
543
|
|
|
544
|
-
<a id="present-bd865e"></a>• [`check_present`](#present-bd865e) - Optional Block<br>
|
|
544
|
+
<a id="present-bd865e"></a>• [`check_present`](#present-bd865e) - Optional Block<br>Can be used for messages where no values are needed
|
|
545
545
|
|
|
546
546
|
<a id="matcher-ea3b3a"></a>• [`invert_matcher`](#matcher-ea3b3a) - Optional Bool<br>Invert Query Parameter Matcher. Invert the match result
|
|
547
547
|
|
|
548
|
-
<a id="rule-list-rules-spec-query-params-item"></a>• [`item`](#rule-list-rules-spec-query-params-item) - Optional Block<br>Matcher
|
|
548
|
+
<a id="rule-list-rules-spec-query-params-item"></a>• [`item`](#rule-list-rules-spec-query-params-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#rule-list-rules-spec-query-params-item) below.
|
|
549
549
|
|
|
550
|
-
<a id="rule-list-rules-spec-query-params-key"></a>• [`key`](#rule-list-rules-spec-query-params-key) - Optional String<br>
|
|
550
|
+
<a id="rule-list-rules-spec-query-params-key"></a>• [`key`](#rule-list-rules-spec-query-params-key) - Optional String<br>Case-sensitive HTTP query parameter name
|
|
551
551
|
|
|
552
552
|
#### Rule List Rules Spec Query Params Item
|
|
553
553
|
|
|
554
554
|
An [`item`](#rule-list-rules-spec-query-params-item) block (within [`rule_list.rules.spec.query_params`](#rule-list-rules-spec-query-params)) supports the following:
|
|
555
555
|
|
|
556
|
-
<a id="values-0c3add"></a>• [`exact_values`](#values-0c3add) - Optional List<br>
|
|
556
|
+
<a id="values-0c3add"></a>• [`exact_values`](#values-0c3add) - Optional List<br>List of exact values to match the input against
|
|
557
557
|
|
|
558
|
-
<a id="values-b50c1e"></a>• [`regex_values`](#values-b50c1e) - Optional List<br>
|
|
558
|
+
<a id="values-b50c1e"></a>• [`regex_values`](#values-b50c1e) - Optional List<br>List of regular expressions to match the input against
|
|
559
559
|
|
|
560
|
-
<a id="transformers-499060"></a>• [`transformers`](#transformers-499060) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
560
|
+
<a id="transformers-499060"></a>• [`transformers`](#transformers-499060) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
561
561
|
|
|
562
562
|
#### Rule List Rules Spec Request Constraints
|
|
563
563
|
|
|
@@ -565,67 +565,67 @@ A [`request_constraints`](#constraints-a447da) block (within [`rule_list.rules.s
|
|
|
565
565
|
|
|
566
566
|
<a id="exceeds-88210d"></a>• [`max_cookie_count_exceeds`](#exceeds-88210d) - Optional Number<br>Match on the Count for all Cookies that exceed this value
|
|
567
567
|
|
|
568
|
-
<a id="none-3e70e3"></a>• [`max_cookie_count_none`](#none-3e70e3) - Optional Block<br>
|
|
568
|
+
<a id="none-3e70e3"></a>• [`max_cookie_count_none`](#none-3e70e3) - Optional Block<br>Can be used for messages where no values are needed
|
|
569
569
|
|
|
570
|
-
<a id="exceeds-a151df"></a>• [`max_cookie_key_size_exceeds`](#exceeds-a151df) - Optional Number
|
|
570
|
+
<a id="exceeds-a151df"></a>• [`max_cookie_key_size_exceeds`](#exceeds-a151df) - Optional Number
|
|
571
571
|
|
|
572
|
-
<a id="none-9984be"></a>• [`max_cookie_key_size_none`](#none-9984be) - Optional Block<br>
|
|
572
|
+
<a id="none-9984be"></a>• [`max_cookie_key_size_none`](#none-9984be) - Optional Block<br>Can be used for messages where no values are needed
|
|
573
573
|
|
|
574
|
-
<a id="exceeds-8f6fd2"></a>• [`max_cookie_value_size_exceeds`](#exceeds-8f6fd2) - Optional Number
|
|
574
|
+
<a id="exceeds-8f6fd2"></a>• [`max_cookie_value_size_exceeds`](#exceeds-8f6fd2) - Optional Number
|
|
575
575
|
|
|
576
|
-
<a id="none-7f78ad"></a>• [`max_cookie_value_size_none`](#none-7f78ad) - Optional Block<br>
|
|
576
|
+
<a id="none-7f78ad"></a>• [`max_cookie_value_size_none`](#none-7f78ad) - Optional Block<br>Can be used for messages where no values are needed
|
|
577
577
|
|
|
578
578
|
<a id="exceeds-5dc80b"></a>• [`max_header_count_exceeds`](#exceeds-5dc80b) - Optional Number<br>Match on the Count for all Headers that exceed this value
|
|
579
579
|
|
|
580
|
-
<a id="none-162eb4"></a>• [`max_header_count_none`](#none-162eb4) - Optional Block<br>
|
|
580
|
+
<a id="none-162eb4"></a>• [`max_header_count_none`](#none-162eb4) - Optional Block<br>Can be used for messages where no values are needed
|
|
581
581
|
|
|
582
|
-
<a id="exceeds-e960c1"></a>• [`max_header_key_size_exceeds`](#exceeds-e960c1) - Optional Number
|
|
582
|
+
<a id="exceeds-e960c1"></a>• [`max_header_key_size_exceeds`](#exceeds-e960c1) - Optional Number
|
|
583
583
|
|
|
584
|
-
<a id="none-b86486"></a>• [`max_header_key_size_none`](#none-b86486) - Optional Block<br>
|
|
584
|
+
<a id="none-b86486"></a>• [`max_header_key_size_none`](#none-b86486) - Optional Block<br>Can be used for messages where no values are needed
|
|
585
585
|
|
|
586
|
-
<a id="exceeds-2f6bfd"></a>• [`max_header_value_size_exceeds`](#exceeds-2f6bfd) - Optional Number
|
|
586
|
+
<a id="exceeds-2f6bfd"></a>• [`max_header_value_size_exceeds`](#exceeds-2f6bfd) - Optional Number
|
|
587
587
|
|
|
588
|
-
<a id="none-e5927d"></a>• [`max_header_value_size_none`](#none-e5927d) - Optional Block<br>
|
|
588
|
+
<a id="none-e5927d"></a>• [`max_header_value_size_none`](#none-e5927d) - Optional Block<br>Can be used for messages where no values are needed
|
|
589
589
|
|
|
590
|
-
<a id="exceeds-c0dcef"></a>• [`max_parameter_count_exceeds`](#exceeds-c0dcef) - Optional Number
|
|
590
|
+
<a id="exceeds-c0dcef"></a>• [`max_parameter_count_exceeds`](#exceeds-c0dcef) - Optional Number
|
|
591
591
|
|
|
592
|
-
<a id="none-6a4f57"></a>• [`max_parameter_count_none`](#none-6a4f57) - Optional Block<br>
|
|
592
|
+
<a id="none-6a4f57"></a>• [`max_parameter_count_none`](#none-6a4f57) - Optional Block<br>Can be used for messages where no values are needed
|
|
593
593
|
|
|
594
|
-
<a id="exceeds-878a8c"></a>• [`max_parameter_name_size_exceeds`](#exceeds-878a8c) - Optional Number
|
|
594
|
+
<a id="exceeds-878a8c"></a>• [`max_parameter_name_size_exceeds`](#exceeds-878a8c) - Optional Number
|
|
595
595
|
|
|
596
|
-
<a id="none-ed3f5c"></a>• [`max_parameter_name_size_none`](#none-ed3f5c) - Optional Block<br>
|
|
596
|
+
<a id="none-ed3f5c"></a>• [`max_parameter_name_size_none`](#none-ed3f5c) - Optional Block<br>Can be used for messages where no values are needed
|
|
597
597
|
|
|
598
|
-
<a id="exceeds-2753a2"></a>• [`max_parameter_value_size_exceeds`](#exceeds-2753a2) - Optional Number
|
|
598
|
+
<a id="exceeds-2753a2"></a>• [`max_parameter_value_size_exceeds`](#exceeds-2753a2) - Optional Number
|
|
599
599
|
|
|
600
|
-
<a id="none-aa518b"></a>• [`max_parameter_value_size_none`](#none-aa518b) - Optional Block<br>
|
|
600
|
+
<a id="none-aa518b"></a>• [`max_parameter_value_size_none`](#none-aa518b) - Optional Block<br>Can be used for messages where no values are needed
|
|
601
601
|
|
|
602
602
|
<a id="exceeds-09d792"></a>• [`max_query_size_exceeds`](#exceeds-09d792) - Optional Number<br>Match on the URL Query Size that exceed this value
|
|
603
603
|
|
|
604
|
-
<a id="none-420f9c"></a>• [`max_query_size_none`](#none-420f9c) - Optional Block<br>
|
|
604
|
+
<a id="none-420f9c"></a>• [`max_query_size_none`](#none-420f9c) - Optional Block<br>Can be used for messages where no values are needed
|
|
605
605
|
|
|
606
|
-
<a id="exceeds-e9386b"></a>• [`max_request_line_size_exceeds`](#exceeds-e9386b) - Optional Number
|
|
606
|
+
<a id="exceeds-e9386b"></a>• [`max_request_line_size_exceeds`](#exceeds-e9386b) - Optional Number
|
|
607
607
|
|
|
608
|
-
<a id="none-c1b4c5"></a>• [`max_request_line_size_none`](#none-c1b4c5) - Optional Block<br>
|
|
608
|
+
<a id="none-c1b4c5"></a>• [`max_request_line_size_none`](#none-c1b4c5) - Optional Block<br>Can be used for messages where no values are needed
|
|
609
609
|
|
|
610
610
|
<a id="exceeds-c9584b"></a>• [`max_request_size_exceeds`](#exceeds-c9584b) - Optional Number<br>Match on the Request Size that exceed this value
|
|
611
611
|
|
|
612
|
-
<a id="none-a7d587"></a>• [`max_request_size_none`](#none-a7d587) - Optional Block<br>
|
|
612
|
+
<a id="none-a7d587"></a>• [`max_request_size_none`](#none-a7d587) - Optional Block<br>Can be used for messages where no values are needed
|
|
613
613
|
|
|
614
614
|
<a id="exceeds-36b3ef"></a>• [`max_url_size_exceeds`](#exceeds-36b3ef) - Optional Number<br>Match on the URL Size that exceed this value
|
|
615
615
|
|
|
616
|
-
<a id="none-ce96c1"></a>• [`max_url_size_none`](#none-ce96c1) - Optional Block<br>
|
|
616
|
+
<a id="none-ce96c1"></a>• [`max_url_size_none`](#none-ce96c1) - Optional Block<br>Can be used for messages where no values are needed
|
|
617
617
|
|
|
618
618
|
#### Rule List Rules Spec Segment Policy
|
|
619
619
|
|
|
620
620
|
A [`segment_policy`](#rule-list-rules-spec-segment-policy) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
621
621
|
|
|
622
|
-
<a id="any-9c58b4"></a>• [`dst_any`](#any-9c58b4) - Optional Block<br>
|
|
622
|
+
<a id="any-9c58b4"></a>• [`dst_any`](#any-9c58b4) - Optional Block<br>Can be used for messages where no values are needed
|
|
623
623
|
|
|
624
624
|
<a id="segments-478f34"></a>• [`dst_segments`](#segments-478f34) - Optional Block<br>X-displayName: 'Segment List' List of references to Segments<br>See [Dst Segments](#segments-478f34) below.
|
|
625
625
|
|
|
626
|
-
<a id="segment-431a3a"></a>• [`intra_segment`](#segment-431a3a) - Optional Block<br>
|
|
626
|
+
<a id="segment-431a3a"></a>• [`intra_segment`](#segment-431a3a) - Optional Block<br>Can be used for messages where no values are needed
|
|
627
627
|
|
|
628
|
-
<a id="any-f3d551"></a>• [`src_any`](#any-f3d551) - Optional Block<br>
|
|
628
|
+
<a id="any-f3d551"></a>• [`src_any`](#any-f3d551) - Optional Block<br>Can be used for messages where no values are needed
|
|
629
629
|
|
|
630
630
|
<a id="segments-191ada"></a>• [`src_segments`](#segments-191ada) - Optional Block<br>X-displayName: 'Segment List' List of references to Segments<br>See [Src Segments](#segments-191ada) below.
|
|
631
631
|
|
|
@@ -649,29 +649,29 @@ A [`segment_policy`](#rule-list-rules-spec-segment-policy) block (within [`rule_
|
|
|
649
649
|
|
|
650
650
|
A [`tls_fingerprint_matcher`](#matcher-95ee34) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
651
651
|
|
|
652
|
-
<a id="classes-8d3695"></a>• [`classes`](#classes-8d3695) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT]
|
|
652
|
+
<a id="classes-8d3695"></a>• [`classes`](#classes-8d3695) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT] List of known classes of TLS fingerprints to match the input TLS JA3 fingerprint against
|
|
653
653
|
|
|
654
|
-
<a id="values-e523b3"></a>• [`exact_values`](#values-e523b3) - Optional List<br>
|
|
654
|
+
<a id="values-e523b3"></a>• [`exact_values`](#values-e523b3) - Optional List<br>List of exact TLS JA3 fingerprints to match the input TLS JA3 fingerprint against
|
|
655
655
|
|
|
656
|
-
<a id="values-8723e5"></a>• [`excluded_values`](#values-8723e5) - Optional List<br>
|
|
656
|
+
<a id="values-8723e5"></a>• [`excluded_values`](#values-8723e5) - Optional List<br>List of TLS JA3 fingerprints to be excluded when matching the input TLS JA3 fingerprint. This can be used to skip known false positives when using one or more known TLS fingerprint classes in the enclosing matcher
|
|
657
657
|
|
|
658
658
|
#### Rule List Rules Spec User Identity Matcher
|
|
659
659
|
|
|
660
660
|
An [`user_identity_matcher`](#matcher-744036) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
661
661
|
|
|
662
|
-
<a id="values-b8a285"></a>• [`exact_values`](#values-b8a285) - Optional List<br>
|
|
662
|
+
<a id="values-b8a285"></a>• [`exact_values`](#values-b8a285) - Optional List<br>List of exact values to match the input against
|
|
663
663
|
|
|
664
|
-
<a id="values-f0a0b2"></a>• [`regex_values`](#values-f0a0b2) - Optional List<br>
|
|
664
|
+
<a id="values-f0a0b2"></a>• [`regex_values`](#values-f0a0b2) - Optional List<br>List of regular expressions to match the input against
|
|
665
665
|
|
|
666
666
|
#### Rule List Rules Spec WAF Action
|
|
667
667
|
|
|
668
668
|
A [`waf_action`](#rule-list-rules-spec-waf-action) block (within [`rule_list.rules.spec`](#rule-list-rules-spec)) supports the following:
|
|
669
669
|
|
|
670
|
-
<a id="control-4fbf89"></a>• [`app_firewall_detection_control`](#control-4fbf89) - Optional Block<br>
|
|
670
|
+
<a id="control-4fbf89"></a>• [`app_firewall_detection_control`](#control-4fbf89) - Optional Block<br>Define the list of Signature IDs, Violations, Attack Types and Bot Names that should be excluded from triggering on the defined match criteria<br>See [App Firewall Detection Control](#control-4fbf89) below.
|
|
671
671
|
|
|
672
|
-
<a id="rule-list-rules-spec-waf-action-none"></a>• [`none`](#rule-list-rules-spec-waf-action-none) - Optional Block<br>
|
|
672
|
+
<a id="rule-list-rules-spec-waf-action-none"></a>• [`none`](#rule-list-rules-spec-waf-action-none) - Optional Block<br>Can be used for messages where no values are needed
|
|
673
673
|
|
|
674
|
-
<a id="processing-e97520"></a>• [`waf_skip_processing`](#processing-e97520) - Optional Block<br>
|
|
674
|
+
<a id="processing-e97520"></a>• [`waf_skip_processing`](#processing-e97520) - Optional Block<br>Can be used for messages where no values are needed
|
|
675
675
|
|
|
676
676
|
#### Rule List Rules Spec WAF Action App Firewall Detection Control
|
|
677
677
|
|
|
@@ -697,15 +697,15 @@ A [`waf_action`](#rule-list-rules-spec-waf-action) block (within [`rule_list.rul
|
|
|
697
697
|
|
|
698
698
|
A [`server_name_matcher`](#server-name-matcher) block supports the following:
|
|
699
699
|
|
|
700
|
-
<a id="server-name-matcher-exact-values"></a>• [`exact_values`](#server-name-matcher-exact-values) - Optional List<br>
|
|
700
|
+
<a id="server-name-matcher-exact-values"></a>• [`exact_values`](#server-name-matcher-exact-values) - Optional List<br>List of exact values to match the input against
|
|
701
701
|
|
|
702
|
-
<a id="server-name-matcher-regex-values"></a>• [`regex_values`](#server-name-matcher-regex-values) - Optional List<br>
|
|
702
|
+
<a id="server-name-matcher-regex-values"></a>• [`regex_values`](#server-name-matcher-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
703
703
|
|
|
704
704
|
#### Server Selector
|
|
705
705
|
|
|
706
706
|
A [`server_selector`](#server-selector) block supports the following:
|
|
707
707
|
|
|
708
|
-
<a id="server-selector-expressions"></a>• [`expressions`](#server-selector-expressions) - Optional List<br>
|
|
708
|
+
<a id="server-selector-expressions"></a>• [`expressions`](#server-selector-expressions) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
709
709
|
|
|
710
710
|
#### Timeouts
|
|
711
711
|
|