@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -32,7 +32,7 @@ resource "f5xc_service_policy_rule" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
# [OneOf: any_asn, asn_list, asn_matcher]
|
|
35
|
+
# [OneOf: any_asn, asn_list, asn_matcher] Can be used for m...
|
|
36
36
|
any_asn {
|
|
37
37
|
# Configure any_asn settings
|
|
38
38
|
}
|
|
@@ -40,7 +40,7 @@ resource "f5xc_service_policy_rule" "example" {
|
|
|
40
40
|
any_client {
|
|
41
41
|
# Configure any_client settings
|
|
42
42
|
}
|
|
43
|
-
# [OneOf: any_ip, ip_matcher, ip_prefix_list]
|
|
43
|
+
# [OneOf: any_ip, ip_matcher, ip_prefix_list] Can be used f...
|
|
44
44
|
any_ip {
|
|
45
45
|
# Configure any_ip settings
|
|
46
46
|
}
|
|
@@ -66,66 +66,66 @@ resource "f5xc_service_policy_rule" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="action"></a>• [`action`](#action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY]
|
|
69
|
+
<a id="action"></a>• [`action`](#action) - Optional String Defaults to `DENY`<br>Possible values are `DENY`, `ALLOW`, `NEXT_POLICY`<br>[Enum: DENY|ALLOW|NEXT_POLICY] The rule action determines the disposition of the input request API. If a policy matches a rule with an ALLOW action, the processing of the request proceeds forward. If it matches a rule with a DENY action, the processing of the request is terminated and an appropriate message/code returned to
|
|
70
70
|
|
|
71
71
|
-> **One of the following:**
|
|
72
|
-
• <a id="any-asn"></a>[`any_asn`](#any-asn) - Optional Block<br>
|
|
73
|
-
<br><br>• <a id="asn-list"></a>[`asn_list`](#asn-list) - Optional Block<br>
|
|
74
|
-
<br><br>• <a id="asn-matcher"></a>[`asn_matcher`](#asn-matcher) - Optional Block<br>
|
|
72
|
+
• <a id="any-asn"></a>[`any_asn`](#any-asn) - Optional Block<br>Can be used for messages where no values are needed
|
|
73
|
+
<br><br>• <a id="asn-list"></a>[`asn_list`](#asn-list) - Optional Block<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer<br>See [Asn List](#asn-list) below for details.
|
|
74
|
+
<br><br>• <a id="asn-matcher"></a>[`asn_matcher`](#asn-matcher) - Optional Block<br>Match any AS number contained in the list of bgp_asn_sets<br>See [Asn Matcher](#asn-matcher) below for details.
|
|
75
75
|
|
|
76
76
|
-> **One of the following:**
|
|
77
|
-
• <a id="any-client"></a>[`any_client`](#any-client) - Optional Block<br>
|
|
78
|
-
<br><br>• <a id="client-name"></a>[`client_name`](#client-name) - Optional String<br>
|
|
79
|
-
<br><br>• <a id="client-name-matcher"></a>[`client_name_matcher`](#client-name-matcher) - Optional Block<br>Matcher
|
|
80
|
-
<br><br>• <a id="client-selector"></a>[`client_selector`](#client-selector) - Optional Block<br>
|
|
77
|
+
• <a id="any-client"></a>[`any_client`](#any-client) - Optional Block<br>Can be used for messages where no values are needed
|
|
78
|
+
<br><br>• <a id="client-name"></a>[`client_name`](#client-name) - Optional String<br>The expected name of the client invoking the request API. The predicate evaluates to true if any of the actual names is the same as the expected client name
|
|
79
|
+
<br><br>• <a id="client-name-matcher"></a>[`client_name_matcher`](#client-name-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Client Name Matcher](#client-name-matcher) below for details.
|
|
80
|
+
<br><br>• <a id="client-selector"></a>[`client_selector`](#client-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Client Selector](#client-selector) below for details.
|
|
81
81
|
<br><br>• <a id="ip-threat-category-list"></a>[`ip_threat_category_list`](#ip-threat-category-list) - Optional Block<br>IP Threat Category List Type. List of IP threat categories<br>See [IP Threat Category List](#ip-threat-category-list) below for details.
|
|
82
82
|
|
|
83
83
|
-> **One of the following:**
|
|
84
|
-
• <a id="any-ip"></a>[`any_ip`](#any-ip) - Optional Block<br>
|
|
85
|
-
<br><br>• <a id="ip-matcher"></a>[`ip_matcher`](#ip-matcher) - Optional Block<br>
|
|
86
|
-
<br><br>• <a id="ip-prefix-list"></a>[`ip_prefix_list`](#ip-prefix-list) - Optional Block<br>
|
|
84
|
+
• <a id="any-ip"></a>[`any_ip`](#any-ip) - Optional Block<br>Can be used for messages where no values are needed
|
|
85
|
+
<br><br>• <a id="ip-matcher"></a>[`ip_matcher`](#ip-matcher) - Optional Block<br>Match any IP prefix contained in the list of ip_prefix_sets. The result of the match is inverted if invert_matcher is true<br>See [IP Matcher](#ip-matcher) below for details.
|
|
86
|
+
<br><br>• <a id="ip-prefix-list"></a>[`ip_prefix_list`](#ip-prefix-list) - Optional Block<br>List of IP Prefix strings to match against<br>See [IP Prefix List](#ip-prefix-list) below for details.
|
|
87
87
|
|
|
88
|
-
<a id="api-group-matcher"></a>• [`api_group_matcher`](#api-group-matcher) - Optional Block<br>
|
|
88
|
+
<a id="api-group-matcher"></a>• [`api_group_matcher`](#api-group-matcher) - Optional Block<br>Matcher specifies a list of values for matching an input string. The match is considered successful if the input value is present in the list. The result of the match is inverted if invert_matcher is true<br>See [API Group Matcher](#api-group-matcher) below for details.
|
|
89
89
|
|
|
90
|
-
<a id="arg-matchers"></a>• [`arg_matchers`](#arg-matchers) - Optional Block<br>
|
|
90
|
+
<a id="arg-matchers"></a>• [`arg_matchers`](#arg-matchers) - Optional Block<br>List of predicates for all POST args that need to be matched. The criteria for matching each arg are described in individual instances of ArgMatcherType. The actual arg values are extracted from the request API as a list of strings for each arg selector name<br>See [Arg Matchers](#arg-matchers) below for details.
|
|
91
91
|
|
|
92
|
-
<a id="body-matcher"></a>• [`body_matcher`](#body-matcher) - Optional Block<br>Matcher
|
|
92
|
+
<a id="body-matcher"></a>• [`body_matcher`](#body-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Body Matcher](#body-matcher) below for details.
|
|
93
93
|
|
|
94
|
-
<a id="bot-action"></a>• [`bot_action`](#bot-action) - Optional Block<br>
|
|
94
|
+
<a id="bot-action"></a>• [`bot_action`](#bot-action) - Optional Block<br>Modify Bot protection behavior for a matching request. The modification could be to entirely skip Bot processing<br>See [Bot Action](#bot-action) below for details.
|
|
95
95
|
|
|
96
|
-
<a id="cookie-matchers"></a>• [`cookie_matchers`](#cookie-matchers) - Optional Block<br>
|
|
96
|
+
<a id="cookie-matchers"></a>• [`cookie_matchers`](#cookie-matchers) - Optional Block<br>List of predicates for all cookies that need to be matched. The criteria for matching each cookie is described in individual instances of CookieMatcherType. The actual cookie values are extracted from the request API as a list of strings for each cookie name<br>See [Cookie Matchers](#cookie-matchers) below for details.
|
|
97
97
|
|
|
98
|
-
<a id="domain-matcher"></a>• [`domain_matcher`](#domain-matcher) - Optional Block<br>Matcher
|
|
98
|
+
<a id="domain-matcher"></a>• [`domain_matcher`](#domain-matcher) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Domain Matcher](#domain-matcher) below for details.
|
|
99
99
|
|
|
100
|
-
<a id="expiration-timestamp"></a>• [`expiration_timestamp`](#expiration-timestamp) - Optional String<br>
|
|
100
|
+
<a id="expiration-timestamp"></a>• [`expiration_timestamp`](#expiration-timestamp) - Optional String<br>Specifies expiration_timestamp the RFC 3339 format timestamp at which the containing rule is considered to be logically expired. The rule continues to exist in the configuration but is not applied anymore
|
|
101
101
|
|
|
102
|
-
<a id="headers"></a>• [`headers`](#headers) - Optional Block<br>
|
|
102
|
+
<a id="headers"></a>• [`headers`](#headers) - Optional Block<br>List of predicates for various HTTP headers that need to match. The criteria for matching each HTTP header are described in individual HeaderMatcherType instances. The actual HTTP header values are extracted from the request API as a list of strings for each HTTP header type<br>See [Headers](#headers) below for details.
|
|
103
103
|
|
|
104
|
-
<a id="http-method"></a>• [`http_method`](#http-method) - Optional Block<br>HTTP
|
|
104
|
+
<a id="http-method"></a>• [`http_method`](#http-method) - Optional Block<br>HTTP method matcher specifies a list of methods to match an input HTTP method. The match is considered successful if the input method is a member of the list. The result of the match based on the method list is inverted if invert_matcher is true<br>See [HTTP Method](#http-method) below for details.
|
|
105
105
|
|
|
106
106
|
-> **One of the following:**
|
|
107
|
-
• <a id="ja4-tls-fingerprint"></a>[`ja4_tls_fingerprint`](#ja4-tls-fingerprint) - Optional Block<br>
|
|
108
|
-
<br><br>• <a id="tls-fingerprint-matcher"></a>[`tls_fingerprint_matcher`](#tls-fingerprint-matcher) - Optional Block<br>TLS
|
|
107
|
+
• <a id="ja4-tls-fingerprint"></a>[`ja4_tls_fingerprint`](#ja4-tls-fingerprint) - Optional Block<br>Extended version of JA3 that includes additional fields for more comprehensive fingerprinting of SSL/TLS clients and potentially has a different structure and length<br>See [Ja4 TLS Fingerprint](#ja4-tls-fingerprint) below for details.
|
|
108
|
+
<br><br>• <a id="tls-fingerprint-matcher"></a>[`tls_fingerprint_matcher`](#tls-fingerprint-matcher) - Optional Block<br>TLS fingerprint matcher specifies multiple criteria for matching a TLS fingerprint. The set of supported positve match criteria includes a list of known classes of TLS fingerprints and a list of exact values. The match is considered successful if either of these positive criteria are satisfied
|
|
109
109
|
|
|
110
|
-
<a id="jwt-claims"></a>• [`jwt_claims`](#jwt-claims) - Optional Block<br>
|
|
110
|
+
<a id="jwt-claims"></a>• [`jwt_claims`](#jwt-claims) - Optional Block<br>List of predicates for various JWT claims that need to match. The criteria for matching each JWT claim are described in individual JWTClaimMatcherType instances. The actual JWT claims values are extracted from the JWT payload as a list of strings<br>See [JWT Claims](#jwt-claims) below for details.
|
|
111
111
|
|
|
112
|
-
<a id="label-matcher"></a>• [`label_matcher`](#label-matcher) - Optional Block<br>Label
|
|
112
|
+
<a id="label-matcher"></a>• [`label_matcher`](#label-matcher) - Optional Block<br>Label matcher specifies a list of label keys whose values need to match for source/client and destination/server. Note that the actual label values are not specified and do not matter. This allows an ability to scope grouping by the label key name<br>See [Label Matcher](#label-matcher) below for details.
|
|
113
113
|
|
|
114
|
-
<a id="mum-action"></a>• [`mum_action`](#mum-action) - Optional Block<br>
|
|
114
|
+
<a id="mum-action"></a>• [`mum_action`](#mum-action) - Optional Block<br>Modify behavior for a matching request. The modification could be to entirely skip processing<br>See [Mum Action](#mum-action) below for details.
|
|
115
115
|
|
|
116
|
-
<a id="path"></a>• [`path`](#path) - Optional Block<br>Path
|
|
116
|
+
<a id="path"></a>• [`path`](#path) - Optional Block<br>Path matcher specifies multiple criteria for matching an HTTP path string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of path prefixes, a list of exact path values and a list of regular expressions<br>See [Path](#path) below for details.
|
|
117
117
|
|
|
118
|
-
<a id="port-matcher"></a>• [`port_matcher`](#port-matcher) - Optional Block<br>Port
|
|
118
|
+
<a id="port-matcher"></a>• [`port_matcher`](#port-matcher) - Optional Block<br>Port matcher specifies a list of port ranges as match criteria. The match is considered successful if the input port falls within any of the port ranges. The result of the match is inverted if invert_matcher is true<br>See [Port Matcher](#port-matcher) below for details.
|
|
119
119
|
|
|
120
|
-
<a id="query-params"></a>• [`query_params`](#query-params) - Optional Block<br>
|
|
120
|
+
<a id="query-params"></a>• [`query_params`](#query-params) - Optional Block<br>List of predicates for all query parameters that need to be matched. The criteria for matching each query parameter are described in individual instances of QueryParameterMatcherType. The actual query parameter values are extracted from the request API as a list of strings for each query<br>See [Query Params](#query-params) below for details.
|
|
121
121
|
|
|
122
122
|
<a id="request-constraints"></a>• [`request_constraints`](#request-constraints) - Optional Block<br>Request Constraints<br>See [Request Constraints](#request-constraints) below for details.
|
|
123
123
|
|
|
124
|
-
<a id="segment-policy"></a>• [`segment_policy`](#segment-policy) - Optional Block<br>Configure
|
|
124
|
+
<a id="segment-policy"></a>• [`segment_policy`](#segment-policy) - Optional Block<br>Configure source and destination segment for policy
|
|
125
125
|
|
|
126
126
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block
|
|
127
127
|
|
|
128
|
-
<a id="waf-action"></a>• [`waf_action`](#waf-action) - Optional Block<br>
|
|
128
|
+
<a id="waf-action"></a>• [`waf_action`](#waf-action) - Optional Block<br>Modify App Firewall behavior for a matching request. The modification could either be to entirely skip firewall processing or to customize the firewall rules to be applied as defined by App Firewall Rule Control settings
|
|
129
129
|
|
|
130
130
|
### Attributes Reference
|
|
131
131
|
|
|
@@ -141,145 +141,145 @@ An [`api_group_matcher`](#api-group-matcher) block supports the following:
|
|
|
141
141
|
|
|
142
142
|
<a id="api-group-matcher-invert-matcher"></a>• [`invert_matcher`](#api-group-matcher-invert-matcher) - Optional Bool<br>Invert String Matcher. Invert the match result
|
|
143
143
|
|
|
144
|
-
<a id="api-group-matcher-match"></a>• [`match`](#api-group-matcher-match) - Optional List<br>
|
|
144
|
+
<a id="api-group-matcher-match"></a>• [`match`](#api-group-matcher-match) - Optional List<br>List of exact values to match the input against
|
|
145
145
|
|
|
146
146
|
#### Arg Matchers
|
|
147
147
|
|
|
148
148
|
An [`arg_matchers`](#arg-matchers) block supports the following:
|
|
149
149
|
|
|
150
|
-
<a id="arg-matchers-check-not-present"></a>• [`check_not_present`](#arg-matchers-check-not-present) - Optional Block<br>
|
|
150
|
+
<a id="arg-matchers-check-not-present"></a>• [`check_not_present`](#arg-matchers-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
151
151
|
|
|
152
|
-
<a id="arg-matchers-check-present"></a>• [`check_present`](#arg-matchers-check-present) - Optional Block<br>
|
|
152
|
+
<a id="arg-matchers-check-present"></a>• [`check_present`](#arg-matchers-check-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
153
153
|
|
|
154
154
|
<a id="arg-matchers-invert-matcher"></a>• [`invert_matcher`](#arg-matchers-invert-matcher) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
155
155
|
|
|
156
|
-
<a id="arg-matchers-item"></a>• [`item`](#arg-matchers-item) - Optional Block<br>Matcher
|
|
156
|
+
<a id="arg-matchers-item"></a>• [`item`](#arg-matchers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#arg-matchers-item) below.
|
|
157
157
|
|
|
158
|
-
<a id="arg-matchers-name"></a>• [`name`](#arg-matchers-name) - Optional String<br>
|
|
158
|
+
<a id="arg-matchers-name"></a>• [`name`](#arg-matchers-name) - Optional String<br>Case-sensitive JSON path in the HTTP request body
|
|
159
159
|
|
|
160
160
|
#### Arg Matchers Item
|
|
161
161
|
|
|
162
162
|
An [`item`](#arg-matchers-item) block (within [`arg_matchers`](#arg-matchers)) supports the following:
|
|
163
163
|
|
|
164
|
-
<a id="arg-matchers-item-exact-values"></a>• [`exact_values`](#arg-matchers-item-exact-values) - Optional List<br>
|
|
164
|
+
<a id="arg-matchers-item-exact-values"></a>• [`exact_values`](#arg-matchers-item-exact-values) - Optional List<br>List of exact values to match the input against
|
|
165
165
|
|
|
166
|
-
<a id="arg-matchers-item-regex-values"></a>• [`regex_values`](#arg-matchers-item-regex-values) - Optional List<br>
|
|
166
|
+
<a id="arg-matchers-item-regex-values"></a>• [`regex_values`](#arg-matchers-item-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
167
167
|
|
|
168
|
-
<a id="arg-matchers-item-transformers"></a>• [`transformers`](#arg-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
168
|
+
<a id="arg-matchers-item-transformers"></a>• [`transformers`](#arg-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
169
169
|
|
|
170
170
|
#### Asn List
|
|
171
171
|
|
|
172
172
|
An [`asn_list`](#asn-list) block supports the following:
|
|
173
173
|
|
|
174
|
-
<a id="asn-list-as-numbers"></a>• [`as_numbers`](#asn-list-as-numbers) - Optional List<br>
|
|
174
|
+
<a id="asn-list-as-numbers"></a>• [`as_numbers`](#asn-list-as-numbers) - Optional List<br>Unordered set of RFC 6793 defined 4-byte AS numbers that can be used to create allow or deny lists for use in network policy or service policy. It can be used to create the allow list only for DNS Load Balancer
|
|
175
175
|
|
|
176
176
|
#### Asn Matcher
|
|
177
177
|
|
|
178
178
|
An [`asn_matcher`](#asn-matcher) block supports the following:
|
|
179
179
|
|
|
180
|
-
<a id="asn-matcher-asn-sets"></a>• [`asn_sets`](#asn-matcher-asn-sets) - Optional Block<br>
|
|
180
|
+
<a id="asn-matcher-asn-sets"></a>• [`asn_sets`](#asn-matcher-asn-sets) - Optional Block<br>List of references to bgp_asn_set objects<br>See [Asn Sets](#asn-matcher-asn-sets) below.
|
|
181
181
|
|
|
182
182
|
#### Asn Matcher Asn Sets
|
|
183
183
|
|
|
184
184
|
An [`asn_sets`](#asn-matcher-asn-sets) block (within [`asn_matcher`](#asn-matcher)) supports the following:
|
|
185
185
|
|
|
186
|
-
<a id="asn-matcher-asn-sets-kind"></a>• [`kind`](#asn-matcher-asn-sets-kind) - Optional String<br>
|
|
186
|
+
<a id="asn-matcher-asn-sets-kind"></a>• [`kind`](#asn-matcher-asn-sets-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
187
187
|
|
|
188
|
-
<a id="asn-matcher-asn-sets-name"></a>• [`name`](#asn-matcher-asn-sets-name) - Optional String<br>
|
|
188
|
+
<a id="asn-matcher-asn-sets-name"></a>• [`name`](#asn-matcher-asn-sets-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
189
189
|
|
|
190
|
-
<a id="asn-matcher-asn-sets-namespace"></a>• [`namespace`](#asn-matcher-asn-sets-namespace) - Optional String<br>
|
|
190
|
+
<a id="asn-matcher-asn-sets-namespace"></a>• [`namespace`](#asn-matcher-asn-sets-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
191
191
|
|
|
192
|
-
<a id="asn-matcher-asn-sets-tenant"></a>• [`tenant`](#asn-matcher-asn-sets-tenant) - Optional String<br>
|
|
192
|
+
<a id="asn-matcher-asn-sets-tenant"></a>• [`tenant`](#asn-matcher-asn-sets-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
193
193
|
|
|
194
|
-
<a id="asn-matcher-asn-sets-uid"></a>• [`uid`](#asn-matcher-asn-sets-uid) - Optional String<br>
|
|
194
|
+
<a id="asn-matcher-asn-sets-uid"></a>• [`uid`](#asn-matcher-asn-sets-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
195
195
|
|
|
196
196
|
#### Body Matcher
|
|
197
197
|
|
|
198
198
|
A [`body_matcher`](#body-matcher) block supports the following:
|
|
199
199
|
|
|
200
|
-
<a id="body-matcher-exact-values"></a>• [`exact_values`](#body-matcher-exact-values) - Optional List<br>
|
|
200
|
+
<a id="body-matcher-exact-values"></a>• [`exact_values`](#body-matcher-exact-values) - Optional List<br>List of exact values to match the input against
|
|
201
201
|
|
|
202
|
-
<a id="body-matcher-regex-values"></a>• [`regex_values`](#body-matcher-regex-values) - Optional List<br>
|
|
202
|
+
<a id="body-matcher-regex-values"></a>• [`regex_values`](#body-matcher-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
203
203
|
|
|
204
|
-
<a id="body-matcher-transformers"></a>• [`transformers`](#body-matcher-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
204
|
+
<a id="body-matcher-transformers"></a>• [`transformers`](#body-matcher-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
205
205
|
|
|
206
206
|
#### Bot Action
|
|
207
207
|
|
|
208
208
|
A [`bot_action`](#bot-action) block supports the following:
|
|
209
209
|
|
|
210
|
-
<a id="bot-action-bot-skip-processing"></a>• [`bot_skip_processing`](#bot-action-bot-skip-processing) - Optional Block<br>
|
|
210
|
+
<a id="bot-action-bot-skip-processing"></a>• [`bot_skip_processing`](#bot-action-bot-skip-processing) - Optional Block<br>Can be used for messages where no values are needed
|
|
211
211
|
|
|
212
|
-
<a id="bot-action-none"></a>• [`none`](#bot-action-none) - Optional Block<br>
|
|
212
|
+
<a id="bot-action-none"></a>• [`none`](#bot-action-none) - Optional Block<br>Can be used for messages where no values are needed
|
|
213
213
|
|
|
214
214
|
#### Client Name Matcher
|
|
215
215
|
|
|
216
216
|
A [`client_name_matcher`](#client-name-matcher) block supports the following:
|
|
217
217
|
|
|
218
|
-
<a id="client-name-matcher-exact-values"></a>• [`exact_values`](#client-name-matcher-exact-values) - Optional List<br>
|
|
218
|
+
<a id="client-name-matcher-exact-values"></a>• [`exact_values`](#client-name-matcher-exact-values) - Optional List<br>List of exact values to match the input against
|
|
219
219
|
|
|
220
|
-
<a id="client-name-matcher-regex-values"></a>• [`regex_values`](#client-name-matcher-regex-values) - Optional List<br>
|
|
220
|
+
<a id="client-name-matcher-regex-values"></a>• [`regex_values`](#client-name-matcher-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
221
221
|
|
|
222
222
|
#### Client Selector
|
|
223
223
|
|
|
224
224
|
A [`client_selector`](#client-selector) block supports the following:
|
|
225
225
|
|
|
226
|
-
<a id="client-selector-expressions"></a>• [`expressions`](#client-selector-expressions) - Optional List<br>
|
|
226
|
+
<a id="client-selector-expressions"></a>• [`expressions`](#client-selector-expressions) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
227
227
|
|
|
228
228
|
#### Cookie Matchers
|
|
229
229
|
|
|
230
230
|
A [`cookie_matchers`](#cookie-matchers) block supports the following:
|
|
231
231
|
|
|
232
|
-
<a id="cookie-matchers-check-not-present"></a>• [`check_not_present`](#cookie-matchers-check-not-present) - Optional Block<br>
|
|
232
|
+
<a id="cookie-matchers-check-not-present"></a>• [`check_not_present`](#cookie-matchers-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
233
233
|
|
|
234
|
-
<a id="cookie-matchers-check-present"></a>• [`check_present`](#cookie-matchers-check-present) - Optional Block<br>
|
|
234
|
+
<a id="cookie-matchers-check-present"></a>• [`check_present`](#cookie-matchers-check-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
235
235
|
|
|
236
236
|
<a id="cookie-matchers-invert-matcher"></a>• [`invert_matcher`](#cookie-matchers-invert-matcher) - Optional Bool<br>Invert Matcher. Invert Match of the expression defined
|
|
237
237
|
|
|
238
|
-
<a id="cookie-matchers-item"></a>• [`item`](#cookie-matchers-item) - Optional Block<br>Matcher
|
|
238
|
+
<a id="cookie-matchers-item"></a>• [`item`](#cookie-matchers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#cookie-matchers-item) below.
|
|
239
239
|
|
|
240
|
-
<a id="cookie-matchers-name"></a>• [`name`](#cookie-matchers-name) - Optional String<br>
|
|
240
|
+
<a id="cookie-matchers-name"></a>• [`name`](#cookie-matchers-name) - Optional String<br>Case-sensitive cookie name
|
|
241
241
|
|
|
242
242
|
#### Cookie Matchers Item
|
|
243
243
|
|
|
244
244
|
An [`item`](#cookie-matchers-item) block (within [`cookie_matchers`](#cookie-matchers)) supports the following:
|
|
245
245
|
|
|
246
|
-
<a id="cookie-matchers-item-exact-values"></a>• [`exact_values`](#cookie-matchers-item-exact-values) - Optional List<br>
|
|
246
|
+
<a id="cookie-matchers-item-exact-values"></a>• [`exact_values`](#cookie-matchers-item-exact-values) - Optional List<br>List of exact values to match the input against
|
|
247
247
|
|
|
248
|
-
<a id="cookie-matchers-item-regex-values"></a>• [`regex_values`](#cookie-matchers-item-regex-values) - Optional List<br>
|
|
248
|
+
<a id="cookie-matchers-item-regex-values"></a>• [`regex_values`](#cookie-matchers-item-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
249
249
|
|
|
250
|
-
<a id="cookie-matchers-item-transformers"></a>• [`transformers`](#cookie-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
250
|
+
<a id="cookie-matchers-item-transformers"></a>• [`transformers`](#cookie-matchers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
251
251
|
|
|
252
252
|
#### Domain Matcher
|
|
253
253
|
|
|
254
254
|
A [`domain_matcher`](#domain-matcher) block supports the following:
|
|
255
255
|
|
|
256
|
-
<a id="domain-matcher-exact-values"></a>• [`exact_values`](#domain-matcher-exact-values) - Optional List<br>
|
|
256
|
+
<a id="domain-matcher-exact-values"></a>• [`exact_values`](#domain-matcher-exact-values) - Optional List<br>List of exact values to match the input against
|
|
257
257
|
|
|
258
|
-
<a id="domain-matcher-regex-values"></a>• [`regex_values`](#domain-matcher-regex-values) - Optional List<br>
|
|
258
|
+
<a id="domain-matcher-regex-values"></a>• [`regex_values`](#domain-matcher-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
259
259
|
|
|
260
260
|
#### Headers
|
|
261
261
|
|
|
262
262
|
A [`headers`](#headers) block supports the following:
|
|
263
263
|
|
|
264
|
-
<a id="headers-check-not-present"></a>• [`check_not_present`](#headers-check-not-present) - Optional Block<br>
|
|
264
|
+
<a id="headers-check-not-present"></a>• [`check_not_present`](#headers-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
265
265
|
|
|
266
|
-
<a id="headers-check-present"></a>• [`check_present`](#headers-check-present) - Optional Block<br>
|
|
266
|
+
<a id="headers-check-present"></a>• [`check_present`](#headers-check-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
267
267
|
|
|
268
268
|
<a id="headers-invert-matcher"></a>• [`invert_matcher`](#headers-invert-matcher) - Optional Bool<br>Invert Header Matcher. Invert the match result
|
|
269
269
|
|
|
270
|
-
<a id="headers-item"></a>• [`item`](#headers-item) - Optional Block<br>Matcher
|
|
270
|
+
<a id="headers-item"></a>• [`item`](#headers-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#headers-item) below.
|
|
271
271
|
|
|
272
|
-
<a id="headers-name"></a>• [`name`](#headers-name) - Optional String<br>
|
|
272
|
+
<a id="headers-name"></a>• [`name`](#headers-name) - Optional String<br>Case-insensitive HTTP header name
|
|
273
273
|
|
|
274
274
|
#### Headers Item
|
|
275
275
|
|
|
276
276
|
An [`item`](#headers-item) block (within [`headers`](#headers)) supports the following:
|
|
277
277
|
|
|
278
|
-
<a id="headers-item-exact-values"></a>• [`exact_values`](#headers-item-exact-values) - Optional List<br>
|
|
278
|
+
<a id="headers-item-exact-values"></a>• [`exact_values`](#headers-item-exact-values) - Optional List<br>List of exact values to match the input against
|
|
279
279
|
|
|
280
|
-
<a id="headers-item-regex-values"></a>• [`regex_values`](#headers-item-regex-values) - Optional List<br>
|
|
280
|
+
<a id="headers-item-regex-values"></a>• [`regex_values`](#headers-item-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
281
281
|
|
|
282
|
-
<a id="headers-item-transformers"></a>• [`transformers`](#headers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
282
|
+
<a id="headers-item-transformers"></a>• [`transformers`](#headers-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
283
283
|
|
|
284
284
|
#### HTTP Method
|
|
285
285
|
|
|
@@ -287,7 +287,7 @@ A [`http_method`](#http-method) block supports the following:
|
|
|
287
287
|
|
|
288
288
|
<a id="http-method-invert-matcher"></a>• [`invert_matcher`](#http-method-invert-matcher) - Optional Bool<br>Invert Method Matcher. Invert the match result
|
|
289
289
|
|
|
290
|
-
<a id="http-method-methods"></a>• [`methods`](#http-method-methods) - Optional List Defaults to `ANY`<br>See [HTTP Methods](#common-http-methods)<br>
|
|
290
|
+
<a id="http-method-methods"></a>• [`methods`](#http-method-methods) - Optional List Defaults to `ANY`<br>See [HTTP Methods](#common-http-methods)<br> List of methods values to match against
|
|
291
291
|
|
|
292
292
|
#### IP Matcher
|
|
293
293
|
|
|
@@ -295,21 +295,21 @@ An [`ip_matcher`](#ip-matcher) block supports the following:
|
|
|
295
295
|
|
|
296
296
|
<a id="ip-matcher-invert-matcher"></a>• [`invert_matcher`](#ip-matcher-invert-matcher) - Optional Bool<br>Invert IP Matcher. Invert the match result
|
|
297
297
|
|
|
298
|
-
<a id="ip-matcher-prefix-sets"></a>• [`prefix_sets`](#ip-matcher-prefix-sets) - Optional Block<br>
|
|
298
|
+
<a id="ip-matcher-prefix-sets"></a>• [`prefix_sets`](#ip-matcher-prefix-sets) - Optional Block<br>List of references to ip_prefix_set objects<br>See [Prefix Sets](#ip-matcher-prefix-sets) below.
|
|
299
299
|
|
|
300
300
|
#### IP Matcher Prefix Sets
|
|
301
301
|
|
|
302
302
|
A [`prefix_sets`](#ip-matcher-prefix-sets) block (within [`ip_matcher`](#ip-matcher)) supports the following:
|
|
303
303
|
|
|
304
|
-
<a id="ip-matcher-prefix-sets-kind"></a>• [`kind`](#ip-matcher-prefix-sets-kind) - Optional String<br>
|
|
304
|
+
<a id="ip-matcher-prefix-sets-kind"></a>• [`kind`](#ip-matcher-prefix-sets-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
305
305
|
|
|
306
|
-
<a id="ip-matcher-prefix-sets-name"></a>• [`name`](#ip-matcher-prefix-sets-name) - Optional String<br>
|
|
306
|
+
<a id="ip-matcher-prefix-sets-name"></a>• [`name`](#ip-matcher-prefix-sets-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
307
307
|
|
|
308
|
-
<a id="ip-matcher-prefix-sets-namespace"></a>• [`namespace`](#ip-matcher-prefix-sets-namespace) - Optional String<br>
|
|
308
|
+
<a id="ip-matcher-prefix-sets-namespace"></a>• [`namespace`](#ip-matcher-prefix-sets-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
309
309
|
|
|
310
|
-
<a id="ip-matcher-prefix-sets-tenant"></a>• [`tenant`](#ip-matcher-prefix-sets-tenant) - Optional String<br>
|
|
310
|
+
<a id="ip-matcher-prefix-sets-tenant"></a>• [`tenant`](#ip-matcher-prefix-sets-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
311
311
|
|
|
312
|
-
<a id="ip-matcher-prefix-sets-uid"></a>• [`uid`](#ip-matcher-prefix-sets-uid) - Optional String<br>
|
|
312
|
+
<a id="ip-matcher-prefix-sets-uid"></a>• [`uid`](#ip-matcher-prefix-sets-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
313
313
|
|
|
314
314
|
#### IP Prefix List
|
|
315
315
|
|
|
@@ -323,25 +323,25 @@ An [`ip_prefix_list`](#ip-prefix-list) block supports the following:
|
|
|
323
323
|
|
|
324
324
|
An [`ip_threat_category_list`](#ip-threat-category-list) block supports the following:
|
|
325
325
|
|
|
326
|
-
<a id="categories-f2b328"></a>• [`ip_threat_categories`](#categories-f2b328) - Optional List Defaults to `SPAM_SOURCES`<br>See [IP Threat Categories](#common-ip-threat-categories)<br>[Enum: SPAM_SOURCES|WINDOWS_EXPLOITS|WEB_ATTACKS|BOTNETS|SCANNERS|REPUTATION|PHISHING|PROXY|MOBILE_THREATS|TOR_PROXY|DENIAL_OF_SERVICE|NETWORK]
|
|
326
|
+
<a id="categories-f2b328"></a>• [`ip_threat_categories`](#categories-f2b328) - Optional List Defaults to `SPAM_SOURCES`<br>See [IP Threat Categories](#common-ip-threat-categories)<br>[Enum: SPAM_SOURCES|WINDOWS_EXPLOITS|WEB_ATTACKS|BOTNETS|SCANNERS|REPUTATION|PHISHING|PROXY|MOBILE_THREATS|TOR_PROXY|DENIAL_OF_SERVICE|NETWORK] The IP threat categories is obtained from the list and is used to auto-generate equivalent label selection expressions
|
|
327
327
|
|
|
328
328
|
#### Ja4 TLS Fingerprint
|
|
329
329
|
|
|
330
330
|
A [`ja4_tls_fingerprint`](#ja4-tls-fingerprint) block supports the following:
|
|
331
331
|
|
|
332
|
-
<a id="ja4-tls-fingerprint-exact-values"></a>• [`exact_values`](#ja4-tls-fingerprint-exact-values) - Optional List<br>
|
|
332
|
+
<a id="ja4-tls-fingerprint-exact-values"></a>• [`exact_values`](#ja4-tls-fingerprint-exact-values) - Optional List<br>List of exact JA4 TLS fingerprint to match the input JA4 TLS fingerprint against
|
|
333
333
|
|
|
334
334
|
#### JWT Claims
|
|
335
335
|
|
|
336
336
|
A [`jwt_claims`](#jwt-claims) block supports the following:
|
|
337
337
|
|
|
338
|
-
<a id="jwt-claims-check-not-present"></a>• [`check_not_present`](#jwt-claims-check-not-present) - Optional Block<br>
|
|
338
|
+
<a id="jwt-claims-check-not-present"></a>• [`check_not_present`](#jwt-claims-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
339
339
|
|
|
340
|
-
<a id="jwt-claims-check-present"></a>• [`check_present`](#jwt-claims-check-present) - Optional Block<br>
|
|
340
|
+
<a id="jwt-claims-check-present"></a>• [`check_present`](#jwt-claims-check-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
341
341
|
|
|
342
342
|
<a id="jwt-claims-invert-matcher"></a>• [`invert_matcher`](#jwt-claims-invert-matcher) - Optional Bool<br>Invert Matcher. Invert the match result
|
|
343
343
|
|
|
344
|
-
<a id="jwt-claims-item"></a>• [`item`](#jwt-claims-item) - Optional Block<br>Matcher
|
|
344
|
+
<a id="jwt-claims-item"></a>• [`item`](#jwt-claims-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#jwt-claims-item) below.
|
|
345
345
|
|
|
346
346
|
<a id="jwt-claims-name"></a>• [`name`](#jwt-claims-name) - Optional String<br>JWT Claim Name. JWT claim name
|
|
347
347
|
|
|
@@ -349,41 +349,41 @@ A [`jwt_claims`](#jwt-claims) block supports the following:
|
|
|
349
349
|
|
|
350
350
|
An [`item`](#jwt-claims-item) block (within [`jwt_claims`](#jwt-claims)) supports the following:
|
|
351
351
|
|
|
352
|
-
<a id="jwt-claims-item-exact-values"></a>• [`exact_values`](#jwt-claims-item-exact-values) - Optional List<br>
|
|
352
|
+
<a id="jwt-claims-item-exact-values"></a>• [`exact_values`](#jwt-claims-item-exact-values) - Optional List<br>List of exact values to match the input against
|
|
353
353
|
|
|
354
|
-
<a id="jwt-claims-item-regex-values"></a>• [`regex_values`](#jwt-claims-item-regex-values) - Optional List<br>
|
|
354
|
+
<a id="jwt-claims-item-regex-values"></a>• [`regex_values`](#jwt-claims-item-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
355
355
|
|
|
356
|
-
<a id="jwt-claims-item-transformers"></a>• [`transformers`](#jwt-claims-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
356
|
+
<a id="jwt-claims-item-transformers"></a>• [`transformers`](#jwt-claims-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
357
357
|
|
|
358
358
|
#### Label Matcher
|
|
359
359
|
|
|
360
360
|
A [`label_matcher`](#label-matcher) block supports the following:
|
|
361
361
|
|
|
362
|
-
<a id="label-matcher-keys"></a>• [`keys`](#label-matcher-keys) - Optional List<br>
|
|
362
|
+
<a id="label-matcher-keys"></a>• [`keys`](#label-matcher-keys) - Optional List<br>The list of label key names that have to match
|
|
363
363
|
|
|
364
364
|
#### Mum Action
|
|
365
365
|
|
|
366
366
|
A [`mum_action`](#mum-action) block supports the following:
|
|
367
367
|
|
|
368
|
-
<a id="mum-action-default"></a>• [`default`](#mum-action-default) - Optional Block<br>
|
|
368
|
+
<a id="mum-action-default"></a>• [`default`](#mum-action-default) - Optional Block<br>Can be used for messages where no values are needed
|
|
369
369
|
|
|
370
|
-
<a id="mum-action-skip-processing"></a>• [`skip_processing`](#mum-action-skip-processing) - Optional Block<br>
|
|
370
|
+
<a id="mum-action-skip-processing"></a>• [`skip_processing`](#mum-action-skip-processing) - Optional Block<br>Can be used for messages where no values are needed
|
|
371
371
|
|
|
372
372
|
#### Path
|
|
373
373
|
|
|
374
374
|
A [`path`](#path) block supports the following:
|
|
375
375
|
|
|
376
|
-
<a id="path-exact-values"></a>• [`exact_values`](#path-exact-values) - Optional List<br>
|
|
376
|
+
<a id="path-exact-values"></a>• [`exact_values`](#path-exact-values) - Optional List<br>List of exact path values to match the input HTTP path against
|
|
377
377
|
|
|
378
378
|
<a id="path-invert-matcher"></a>• [`invert_matcher`](#path-invert-matcher) - Optional Bool<br>Invert Path Matcher. Invert the match result
|
|
379
379
|
|
|
380
|
-
<a id="path-prefix-values"></a>• [`prefix_values`](#path-prefix-values) - Optional List<br>
|
|
380
|
+
<a id="path-prefix-values"></a>• [`prefix_values`](#path-prefix-values) - Optional List<br>List of path prefix values to match the input HTTP path against
|
|
381
381
|
|
|
382
|
-
<a id="path-regex-values"></a>• [`regex_values`](#path-regex-values) - Optional List<br>
|
|
382
|
+
<a id="path-regex-values"></a>• [`regex_values`](#path-regex-values) - Optional List<br>List of regular expressions to match the input HTTP path against
|
|
383
383
|
|
|
384
|
-
<a id="path-suffix-values"></a>• [`suffix_values`](#path-suffix-values) - Optional List<br>
|
|
384
|
+
<a id="path-suffix-values"></a>• [`suffix_values`](#path-suffix-values) - Optional List<br>List of path suffix values to match the input HTTP path against
|
|
385
385
|
|
|
386
|
-
<a id="path-transformers"></a>• [`transformers`](#path-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
386
|
+
<a id="path-transformers"></a>• [`transformers`](#path-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
387
387
|
|
|
388
388
|
#### Port Matcher
|
|
389
389
|
|
|
@@ -391,31 +391,31 @@ A [`port_matcher`](#port-matcher) block supports the following:
|
|
|
391
391
|
|
|
392
392
|
<a id="port-matcher-invert-matcher"></a>• [`invert_matcher`](#port-matcher-invert-matcher) - Optional Bool<br>Invert Port Matcher. Invert the match result
|
|
393
393
|
|
|
394
|
-
<a id="port-matcher-ports"></a>• [`ports`](#port-matcher-ports) - Optional List<br>
|
|
394
|
+
<a id="port-matcher-ports"></a>• [`ports`](#port-matcher-ports) - Optional List<br>List of strings, each of which is a single port value or a tuple of start and end port values separated by '-'. The start and end values are considered to be part of the range
|
|
395
395
|
|
|
396
396
|
#### Query Params
|
|
397
397
|
|
|
398
398
|
A [`query_params`](#query-params) block supports the following:
|
|
399
399
|
|
|
400
|
-
<a id="query-params-check-not-present"></a>• [`check_not_present`](#query-params-check-not-present) - Optional Block<br>
|
|
400
|
+
<a id="query-params-check-not-present"></a>• [`check_not_present`](#query-params-check-not-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
401
401
|
|
|
402
|
-
<a id="query-params-check-present"></a>• [`check_present`](#query-params-check-present) - Optional Block<br>
|
|
402
|
+
<a id="query-params-check-present"></a>• [`check_present`](#query-params-check-present) - Optional Block<br>Can be used for messages where no values are needed
|
|
403
403
|
|
|
404
404
|
<a id="query-params-invert-matcher"></a>• [`invert_matcher`](#query-params-invert-matcher) - Optional Bool<br>Invert Query Parameter Matcher. Invert the match result
|
|
405
405
|
|
|
406
|
-
<a id="query-params-item"></a>• [`item`](#query-params-item) - Optional Block<br>Matcher
|
|
406
|
+
<a id="query-params-item"></a>• [`item`](#query-params-item) - Optional Block<br>Matcher specifies multiple criteria for matching an input string. The match is considered successful if any of the criteria are satisfied. The set of supported match criteria includes a list of exact values and a list of regular expressions<br>See [Item](#query-params-item) below.
|
|
407
407
|
|
|
408
|
-
<a id="query-params-key"></a>• [`key`](#query-params-key) - Optional String<br>
|
|
408
|
+
<a id="query-params-key"></a>• [`key`](#query-params-key) - Optional String<br>Case-sensitive HTTP query parameter name
|
|
409
409
|
|
|
410
410
|
#### Query Params Item
|
|
411
411
|
|
|
412
412
|
An [`item`](#query-params-item) block (within [`query_params`](#query-params)) supports the following:
|
|
413
413
|
|
|
414
|
-
<a id="query-params-item-exact-values"></a>• [`exact_values`](#query-params-item-exact-values) - Optional List<br>
|
|
414
|
+
<a id="query-params-item-exact-values"></a>• [`exact_values`](#query-params-item-exact-values) - Optional List<br>List of exact values to match the input against
|
|
415
415
|
|
|
416
|
-
<a id="query-params-item-regex-values"></a>• [`regex_values`](#query-params-item-regex-values) - Optional List<br>
|
|
416
|
+
<a id="query-params-item-regex-values"></a>• [`regex_values`](#query-params-item-regex-values) - Optional List<br>List of regular expressions to match the input against
|
|
417
417
|
|
|
418
|
-
<a id="query-params-item-transformers"></a>• [`transformers`](#query-params-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br>
|
|
418
|
+
<a id="query-params-item-transformers"></a>• [`transformers`](#query-params-item-transformers) - Optional List Defaults to `TRANSFORMER_NONE`<br>See [Transformers](#common-transformers)<br> Ordered list of transformers (starting from index 0) to be applied to the path before matching
|
|
419
419
|
|
|
420
420
|
#### Request Constraints
|
|
421
421
|
|
|
@@ -423,67 +423,67 @@ A [`request_constraints`](#request-constraints) block supports the following:
|
|
|
423
423
|
|
|
424
424
|
<a id="exceeds-0e8746"></a>• [`max_cookie_count_exceeds`](#exceeds-0e8746) - Optional Number<br>Match on the Count for all Cookies that exceed this value
|
|
425
425
|
|
|
426
|
-
<a id="none-291d57"></a>• [`max_cookie_count_none`](#none-291d57) - Optional Block<br>
|
|
426
|
+
<a id="none-291d57"></a>• [`max_cookie_count_none`](#none-291d57) - Optional Block<br>Can be used for messages where no values are needed
|
|
427
427
|
|
|
428
|
-
<a id="exceeds-7352a4"></a>• [`max_cookie_key_size_exceeds`](#exceeds-7352a4) - Optional Number
|
|
428
|
+
<a id="exceeds-7352a4"></a>• [`max_cookie_key_size_exceeds`](#exceeds-7352a4) - Optional Number
|
|
429
429
|
|
|
430
|
-
<a id="none-0c2b38"></a>• [`max_cookie_key_size_none`](#none-0c2b38) - Optional Block<br>
|
|
430
|
+
<a id="none-0c2b38"></a>• [`max_cookie_key_size_none`](#none-0c2b38) - Optional Block<br>Can be used for messages where no values are needed
|
|
431
431
|
|
|
432
|
-
<a id="exceeds-ec487d"></a>• [`max_cookie_value_size_exceeds`](#exceeds-ec487d) - Optional Number
|
|
432
|
+
<a id="exceeds-ec487d"></a>• [`max_cookie_value_size_exceeds`](#exceeds-ec487d) - Optional Number
|
|
433
433
|
|
|
434
|
-
<a id="none-cfea13"></a>• [`max_cookie_value_size_none`](#none-cfea13) - Optional Block<br>
|
|
434
|
+
<a id="none-cfea13"></a>• [`max_cookie_value_size_none`](#none-cfea13) - Optional Block<br>Can be used for messages where no values are needed
|
|
435
435
|
|
|
436
436
|
<a id="exceeds-d461a1"></a>• [`max_header_count_exceeds`](#exceeds-d461a1) - Optional Number<br>Match on the Count for all Headers that exceed this value
|
|
437
437
|
|
|
438
|
-
<a id="none-d12b83"></a>• [`max_header_count_none`](#none-d12b83) - Optional Block<br>
|
|
438
|
+
<a id="none-d12b83"></a>• [`max_header_count_none`](#none-d12b83) - Optional Block<br>Can be used for messages where no values are needed
|
|
439
439
|
|
|
440
|
-
<a id="exceeds-87df1c"></a>• [`max_header_key_size_exceeds`](#exceeds-87df1c) - Optional Number
|
|
440
|
+
<a id="exceeds-87df1c"></a>• [`max_header_key_size_exceeds`](#exceeds-87df1c) - Optional Number
|
|
441
441
|
|
|
442
|
-
<a id="none-6ea93c"></a>• [`max_header_key_size_none`](#none-6ea93c) - Optional Block<br>
|
|
442
|
+
<a id="none-6ea93c"></a>• [`max_header_key_size_none`](#none-6ea93c) - Optional Block<br>Can be used for messages where no values are needed
|
|
443
443
|
|
|
444
|
-
<a id="exceeds-883323"></a>• [`max_header_value_size_exceeds`](#exceeds-883323) - Optional Number
|
|
444
|
+
<a id="exceeds-883323"></a>• [`max_header_value_size_exceeds`](#exceeds-883323) - Optional Number
|
|
445
445
|
|
|
446
|
-
<a id="none-d2e74f"></a>• [`max_header_value_size_none`](#none-d2e74f) - Optional Block<br>
|
|
446
|
+
<a id="none-d2e74f"></a>• [`max_header_value_size_none`](#none-d2e74f) - Optional Block<br>Can be used for messages where no values are needed
|
|
447
447
|
|
|
448
|
-
<a id="exceeds-480590"></a>• [`max_parameter_count_exceeds`](#exceeds-480590) - Optional Number
|
|
448
|
+
<a id="exceeds-480590"></a>• [`max_parameter_count_exceeds`](#exceeds-480590) - Optional Number
|
|
449
449
|
|
|
450
|
-
<a id="none-cea22c"></a>• [`max_parameter_count_none`](#none-cea22c) - Optional Block<br>
|
|
450
|
+
<a id="none-cea22c"></a>• [`max_parameter_count_none`](#none-cea22c) - Optional Block<br>Can be used for messages where no values are needed
|
|
451
451
|
|
|
452
|
-
<a id="exceeds-c96298"></a>• [`max_parameter_name_size_exceeds`](#exceeds-c96298) - Optional Number
|
|
452
|
+
<a id="exceeds-c96298"></a>• [`max_parameter_name_size_exceeds`](#exceeds-c96298) - Optional Number
|
|
453
453
|
|
|
454
|
-
<a id="none-b2e47d"></a>• [`max_parameter_name_size_none`](#none-b2e47d) - Optional Block<br>
|
|
454
|
+
<a id="none-b2e47d"></a>• [`max_parameter_name_size_none`](#none-b2e47d) - Optional Block<br>Can be used for messages where no values are needed
|
|
455
455
|
|
|
456
|
-
<a id="exceeds-c345d4"></a>• [`max_parameter_value_size_exceeds`](#exceeds-c345d4) - Optional Number
|
|
456
|
+
<a id="exceeds-c345d4"></a>• [`max_parameter_value_size_exceeds`](#exceeds-c345d4) - Optional Number
|
|
457
457
|
|
|
458
|
-
<a id="none-bd1b4b"></a>• [`max_parameter_value_size_none`](#none-bd1b4b) - Optional Block<br>
|
|
458
|
+
<a id="none-bd1b4b"></a>• [`max_parameter_value_size_none`](#none-bd1b4b) - Optional Block<br>Can be used for messages where no values are needed
|
|
459
459
|
|
|
460
460
|
<a id="exceeds-a9b09b"></a>• [`max_query_size_exceeds`](#exceeds-a9b09b) - Optional Number<br>Match on the URL Query Size that exceed this value
|
|
461
461
|
|
|
462
|
-
<a id="request-constraints-max-query-size-none"></a>• [`max_query_size_none`](#request-constraints-max-query-size-none) - Optional Block<br>
|
|
462
|
+
<a id="request-constraints-max-query-size-none"></a>• [`max_query_size_none`](#request-constraints-max-query-size-none) - Optional Block<br>Can be used for messages where no values are needed
|
|
463
463
|
|
|
464
|
-
<a id="exceeds-80bd97"></a>• [`max_request_line_size_exceeds`](#exceeds-80bd97) - Optional Number
|
|
464
|
+
<a id="exceeds-80bd97"></a>• [`max_request_line_size_exceeds`](#exceeds-80bd97) - Optional Number
|
|
465
465
|
|
|
466
|
-
<a id="none-76b27d"></a>• [`max_request_line_size_none`](#none-76b27d) - Optional Block<br>
|
|
466
|
+
<a id="none-76b27d"></a>• [`max_request_line_size_none`](#none-76b27d) - Optional Block<br>Can be used for messages where no values are needed
|
|
467
467
|
|
|
468
468
|
<a id="exceeds-2156ce"></a>• [`max_request_size_exceeds`](#exceeds-2156ce) - Optional Number<br>Match on the Request Size that exceed this value
|
|
469
469
|
|
|
470
|
-
<a id="none-250223"></a>• [`max_request_size_none`](#none-250223) - Optional Block<br>
|
|
470
|
+
<a id="none-250223"></a>• [`max_request_size_none`](#none-250223) - Optional Block<br>Can be used for messages where no values are needed
|
|
471
471
|
|
|
472
472
|
<a id="exceeds-4ce081"></a>• [`max_url_size_exceeds`](#exceeds-4ce081) - Optional Number<br>Match on the URL Size that exceed this value
|
|
473
473
|
|
|
474
|
-
<a id="request-constraints-max-url-size-none"></a>• [`max_url_size_none`](#request-constraints-max-url-size-none) - Optional Block<br>
|
|
474
|
+
<a id="request-constraints-max-url-size-none"></a>• [`max_url_size_none`](#request-constraints-max-url-size-none) - Optional Block<br>Can be used for messages where no values are needed
|
|
475
475
|
|
|
476
476
|
#### Segment Policy
|
|
477
477
|
|
|
478
478
|
A [`segment_policy`](#segment-policy) block supports the following:
|
|
479
479
|
|
|
480
|
-
<a id="segment-policy-dst-any"></a>• [`dst_any`](#segment-policy-dst-any) - Optional Block<br>
|
|
480
|
+
<a id="segment-policy-dst-any"></a>• [`dst_any`](#segment-policy-dst-any) - Optional Block<br>Can be used for messages where no values are needed
|
|
481
481
|
|
|
482
482
|
<a id="segment-policy-dst-segments"></a>• [`dst_segments`](#segment-policy-dst-segments) - Optional Block<br>Segment List. List of references to Segments<br>See [Dst Segments](#segment-policy-dst-segments) below.
|
|
483
483
|
|
|
484
|
-
<a id="segment-policy-intra-segment"></a>• [`intra_segment`](#segment-policy-intra-segment) - Optional Block<br>
|
|
484
|
+
<a id="segment-policy-intra-segment"></a>• [`intra_segment`](#segment-policy-intra-segment) - Optional Block<br>Can be used for messages where no values are needed
|
|
485
485
|
|
|
486
|
-
<a id="segment-policy-src-any"></a>• [`src_any`](#segment-policy-src-any) - Optional Block<br>
|
|
486
|
+
<a id="segment-policy-src-any"></a>• [`src_any`](#segment-policy-src-any) - Optional Block<br>Can be used for messages where no values are needed
|
|
487
487
|
|
|
488
488
|
<a id="segment-policy-src-segments"></a>• [`src_segments`](#segment-policy-src-segments) - Optional Block<br>Segment List. List of references to Segments<br>See [Src Segments](#segment-policy-src-segments) below.
|
|
489
489
|
|
|
@@ -497,11 +497,11 @@ A [`dst_segments`](#segment-policy-dst-segments) block (within [`segment_policy`
|
|
|
497
497
|
|
|
498
498
|
A [`segments`](#segment-policy-dst-segments-segments) block (within [`segment_policy.dst_segments`](#segment-policy-dst-segments)) supports the following:
|
|
499
499
|
|
|
500
|
-
<a id="name-f84b81"></a>• [`name`](#name-f84b81) - Optional String<br>
|
|
500
|
+
<a id="name-f84b81"></a>• [`name`](#name-f84b81) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
501
501
|
|
|
502
|
-
<a id="namespace-6bd8a4"></a>• [`namespace`](#namespace-6bd8a4) - Optional String<br>
|
|
502
|
+
<a id="namespace-6bd8a4"></a>• [`namespace`](#namespace-6bd8a4) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
503
503
|
|
|
504
|
-
<a id="tenant-0605a6"></a>• [`tenant`](#tenant-0605a6) - Optional String<br>
|
|
504
|
+
<a id="tenant-0605a6"></a>• [`tenant`](#tenant-0605a6) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
505
505
|
|
|
506
506
|
#### Segment Policy Src Segments
|
|
507
507
|
|
|
@@ -513,11 +513,11 @@ A [`src_segments`](#segment-policy-src-segments) block (within [`segment_policy`
|
|
|
513
513
|
|
|
514
514
|
A [`segments`](#segment-policy-src-segments-segments) block (within [`segment_policy.src_segments`](#segment-policy-src-segments)) supports the following:
|
|
515
515
|
|
|
516
|
-
<a id="name-cd8043"></a>• [`name`](#name-cd8043) - Optional String<br>
|
|
516
|
+
<a id="name-cd8043"></a>• [`name`](#name-cd8043) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
517
517
|
|
|
518
|
-
<a id="namespace-692ca8"></a>• [`namespace`](#namespace-692ca8) - Optional String<br>
|
|
518
|
+
<a id="namespace-692ca8"></a>• [`namespace`](#namespace-692ca8) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
519
519
|
|
|
520
|
-
<a id="tenant-b9608a"></a>• [`tenant`](#tenant-b9608a) - Optional String<br>
|
|
520
|
+
<a id="tenant-b9608a"></a>• [`tenant`](#tenant-b9608a) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
521
521
|
|
|
522
522
|
#### Timeouts
|
|
523
523
|
|
|
@@ -535,33 +535,33 @@ A [`timeouts`](#timeouts) block supports the following:
|
|
|
535
535
|
|
|
536
536
|
A [`tls_fingerprint_matcher`](#tls-fingerprint-matcher) block supports the following:
|
|
537
537
|
|
|
538
|
-
<a id="tls-fingerprint-matcher-classes"></a>• [`classes`](#tls-fingerprint-matcher-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT]
|
|
538
|
+
<a id="tls-fingerprint-matcher-classes"></a>• [`classes`](#tls-fingerprint-matcher-classes) - Optional List Defaults to `TLS_FINGERPRINT_NONE`<br>See [TLS Fingerprints](#common-tls-fingerprints)<br>[Enum: TLS_FINGERPRINT_NONE|ANY_MALICIOUS_FINGERPRINT|ADWARE|ADWIND|DRIDEX|GOOTKIT|GOZI|JBIFROST|QUAKBOT|RANSOMWARE|TROLDESH|TOFSEE|TORRENTLOCKER|TRICKBOT] List of known classes of TLS fingerprints to match the input TLS JA3 fingerprint against
|
|
539
539
|
|
|
540
|
-
<a id="tls-fingerprint-matcher-exact-values"></a>• [`exact_values`](#tls-fingerprint-matcher-exact-values) - Optional List<br>
|
|
540
|
+
<a id="tls-fingerprint-matcher-exact-values"></a>• [`exact_values`](#tls-fingerprint-matcher-exact-values) - Optional List<br>List of exact TLS JA3 fingerprints to match the input TLS JA3 fingerprint against
|
|
541
541
|
|
|
542
|
-
<a id="tls-fingerprint-matcher-excluded-values"></a>• [`excluded_values`](#tls-fingerprint-matcher-excluded-values) - Optional List<br>
|
|
542
|
+
<a id="tls-fingerprint-matcher-excluded-values"></a>• [`excluded_values`](#tls-fingerprint-matcher-excluded-values) - Optional List<br>List of TLS JA3 fingerprints to be excluded when matching the input TLS JA3 fingerprint. This can be used to skip known false positives when using one or more known TLS fingerprint classes in the enclosing matcher
|
|
543
543
|
|
|
544
544
|
#### WAF Action
|
|
545
545
|
|
|
546
546
|
A [`waf_action`](#waf-action) block supports the following:
|
|
547
547
|
|
|
548
|
-
<a id="control-b9f62f"></a>• [`app_firewall_detection_control`](#control-b9f62f) - Optional Block<br>
|
|
548
|
+
<a id="control-b9f62f"></a>• [`app_firewall_detection_control`](#control-b9f62f) - Optional Block<br>Define the list of Signature IDs, Violations, Attack Types and Bot Names that should be excluded from triggering on the defined match criteria<br>See [App Firewall Detection Control](#control-b9f62f) below.
|
|
549
549
|
|
|
550
|
-
<a id="waf-action-none"></a>• [`none`](#waf-action-none) - Optional Block<br>
|
|
550
|
+
<a id="waf-action-none"></a>• [`none`](#waf-action-none) - Optional Block<br>Can be used for messages where no values are needed
|
|
551
551
|
|
|
552
|
-
<a id="waf-action-waf-skip-processing"></a>• [`waf_skip_processing`](#waf-action-waf-skip-processing) - Optional Block<br>
|
|
552
|
+
<a id="waf-action-waf-skip-processing"></a>• [`waf_skip_processing`](#waf-action-waf-skip-processing) - Optional Block<br>Can be used for messages where no values are needed
|
|
553
553
|
|
|
554
554
|
#### WAF Action App Firewall Detection Control
|
|
555
555
|
|
|
556
556
|
An [`app_firewall_detection_control`](#control-b9f62f) block (within [`waf_action`](#waf-action)) supports the following:
|
|
557
557
|
|
|
558
|
-
<a id="contexts-69b36c"></a>• [`exclude_attack_type_contexts`](#contexts-69b36c) - Optional Block<br>Attack Types
|
|
558
|
+
<a id="contexts-69b36c"></a>• [`exclude_attack_type_contexts`](#contexts-69b36c) - Optional Block<br>Attack Types to be excluded for the defined match criteria<br>See [Exclude Attack Type Contexts](#contexts-69b36c) below.
|
|
559
559
|
|
|
560
|
-
<a id="contexts-08d37e"></a>• [`exclude_bot_name_contexts`](#contexts-08d37e) - Optional Block<br>Bot Names
|
|
560
|
+
<a id="contexts-08d37e"></a>• [`exclude_bot_name_contexts`](#contexts-08d37e) - Optional Block<br>Bot Names to be excluded for the defined match criteria<br>See [Exclude Bot Name Contexts](#contexts-08d37e) below.
|
|
561
561
|
|
|
562
|
-
<a id="contexts-6b7dbc"></a>• [`exclude_signature_contexts`](#contexts-6b7dbc) - Optional Block<br>Signature IDs
|
|
562
|
+
<a id="contexts-6b7dbc"></a>• [`exclude_signature_contexts`](#contexts-6b7dbc) - Optional Block<br>Signature IDs to be excluded for the defined match criteria<br>See [Exclude Signature Contexts](#contexts-6b7dbc) below.
|
|
563
563
|
|
|
564
|
-
<a id="contexts-af5804"></a>• [`exclude_violation_contexts`](#contexts-af5804) - Optional Block<br>Violations
|
|
564
|
+
<a id="contexts-af5804"></a>• [`exclude_violation_contexts`](#contexts-af5804) - Optional Block<br>Violations to be excluded for the defined match criteria<br>See [Exclude Violation Contexts](#contexts-af5804) below.
|
|
565
565
|
|
|
566
566
|
#### WAF Action App Firewall Detection Control Exclude Attack Type Contexts
|
|
567
567
|
|