@robinmordasiewicz/f5xc-terraform-mcp 3.5.1 → 3.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +104 -283
- package/dist/docs/data-sources/bgp.md +2 -2
- package/dist/docs/data-sources/discovery.md +2 -2
- package/dist/docs/data-sources/fast_acl.md +2 -2
- package/dist/docs/data-sources/fast_acl_rule.md +2 -2
- package/dist/docs/data-sources/irule.md +2 -2
- package/dist/docs/data-sources/log_receiver.md +2 -2
- package/dist/docs/data-sources/network_policy.md +2 -2
- package/dist/docs/data-sources/route.md +2 -2
- package/dist/docs/data-sources/site.md +2 -2
- package/dist/docs/resources/address_allocator.md +7 -7
- package/dist/docs/resources/advertise_policy.md +57 -57
- package/dist/docs/resources/alert_policy.md +40 -40
- package/dist/docs/resources/alert_receiver.md +57 -57
- package/dist/docs/resources/api_crawler.md +13 -13
- package/dist/docs/resources/api_definition.md +11 -11
- package/dist/docs/resources/api_discovery.md +4 -4
- package/dist/docs/resources/api_testing.md +27 -27
- package/dist/docs/resources/apm.md +40 -40
- package/dist/docs/resources/app_api_group.md +20 -20
- package/dist/docs/resources/app_firewall.md +50 -50
- package/dist/docs/resources/app_setting.md +19 -19
- package/dist/docs/resources/app_type.md +7 -7
- package/dist/docs/resources/authentication.md +29 -29
- package/dist/docs/resources/aws_tgw_site.md +140 -140
- package/dist/docs/resources/aws_vpc_site.md +174 -174
- package/dist/docs/resources/azure_vnet_site.md +245 -245
- package/dist/docs/resources/bgp.md +37 -205
- package/dist/docs/resources/bgp_asn_set.md +1 -1
- package/dist/docs/resources/bgp_routing_policy.md +19 -19
- package/dist/docs/resources/bot_defense_app_infrastructure.md +12 -12
- package/dist/docs/resources/cdn_cache_rule.md +5 -5
- package/dist/docs/resources/cdn_loadbalancer.md +418 -418
- package/dist/docs/resources/certificate.md +1 -1
- package/dist/docs/resources/certificate_chain.md +1 -1
- package/dist/docs/resources/cloud_connect.md +28 -28
- package/dist/docs/resources/cloud_credentials.md +35 -35
- package/dist/docs/resources/cloud_elastic_ip.md +8 -8
- package/dist/docs/resources/cloud_link.md +36 -36
- package/dist/docs/resources/cluster.md +86 -86
- package/dist/docs/resources/cminstance.md +22 -22
- package/dist/docs/resources/code_base_integration.md +24 -24
- package/dist/docs/resources/container_registry.md +13 -13
- package/dist/docs/resources/crl.md +1 -1
- package/dist/docs/resources/data_type.md +16 -16
- package/dist/docs/resources/dc_cluster_group.md +4 -4
- package/dist/docs/resources/discovery.md +8 -259
- package/dist/docs/resources/dns_compliance_checks.md +1 -1
- package/dist/docs/resources/dns_domain.md +3 -3
- package/dist/docs/resources/endpoint.md +44 -44
- package/dist/docs/resources/enhanced_firewall_policy.md +51 -51
- package/dist/docs/resources/external_connector.md +42 -42
- package/dist/docs/resources/fast_acl.md +60 -166
- package/dist/docs/resources/fast_acl_rule.md +28 -28
- package/dist/docs/resources/filter_set.md +10 -10
- package/dist/docs/resources/fleet.md +160 -160
- package/dist/docs/resources/forward_proxy_policy.md +82 -82
- package/dist/docs/resources/forwarding_class.md +14 -14
- package/dist/docs/resources/gcp_vpc_site.md +152 -152
- package/dist/docs/resources/global_log_receiver.md +238 -238
- package/dist/docs/resources/healthcheck.md +17 -17
- package/dist/docs/resources/http_loadbalancer.md +1003 -1003
- package/dist/docs/resources/irule.md +5 -7
- package/dist/docs/resources/log_receiver.md +825 -44
- package/dist/docs/resources/malicious_user_mitigation.md +10 -10
- package/dist/docs/resources/nat_policy.md +86 -86
- package/dist/docs/resources/network_connector.md +31 -31
- package/dist/docs/resources/network_firewall.md +22 -22
- package/dist/docs/resources/network_interface.md +77 -77
- package/dist/docs/resources/network_policy.md +38 -217
- package/dist/docs/resources/network_policy_rule.md +21 -21
- package/dist/docs/resources/network_policy_view.md +65 -65
- package/dist/docs/resources/nfv_service.md +76 -76
- package/dist/docs/resources/nginx_service_discovery.md +10 -10
- package/dist/docs/resources/origin_pool.md +166 -166
- package/dist/docs/resources/policer.md +4 -4
- package/dist/docs/resources/policy_based_routing.md +28 -28
- package/dist/docs/resources/protocol_inspection.md +12 -12
- package/dist/docs/resources/protocol_policer.md +14 -14
- package/dist/docs/resources/proxy.md +111 -111
- package/dist/docs/resources/rate_limiter.md +15 -15
- package/dist/docs/resources/rate_limiter_policy.md +56 -56
- package/dist/docs/resources/route.md +183 -183
- package/dist/docs/resources/secret_management_access.md +68 -68
- package/dist/docs/resources/securemesh_site.md +1619 -258
- package/dist/docs/resources/segment.md +4 -4
- package/dist/docs/resources/sensitive_data_policy.md +9 -9
- package/dist/docs/resources/service_policy.md +175 -175
- package/dist/docs/resources/service_policy_rule.md +142 -142
- package/dist/docs/resources/site.md +381 -303
- package/dist/docs/resources/site_mesh_group.md +18 -18
- package/dist/docs/resources/subnet.md +17 -17
- package/dist/docs/resources/tcp_loadbalancer.md +130 -130
- package/dist/docs/resources/tenant_configuration.md +10 -10
- package/dist/docs/resources/trusted_ca_list.md +1 -1
- package/dist/docs/resources/tunnel.md +36 -36
- package/dist/docs/resources/udp_loadbalancer.md +59 -59
- package/dist/docs/resources/usb_policy.md +6 -6
- package/dist/docs/resources/user_identification.md +16 -16
- package/dist/docs/resources/virtual_host.md +225 -225
- package/dist/docs/resources/virtual_network.md +14 -14
- package/dist/docs/resources/virtual_site.md +3 -3
- package/dist/docs/resources/voltstack_site.md +141 -141
- package/dist/docs/resources/waf_exclusion_policy.md +17 -17
- package/dist/docs/resources/workload.md +327 -327
- package/dist/docs/resources/workload_flavor.md +3 -3
- package/dist/metadata/resource-metadata.json +1484 -942
- package/dist/types.d.ts +11 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js.map +1 -1
- package/package.json +1 -1
|
@@ -57,13 +57,13 @@ resource "f5xc_policer" "example" {
|
|
|
57
57
|
|
|
58
58
|
### Spec Argument Reference
|
|
59
59
|
|
|
60
|
-
<a id="burst-size"></a>• [`burst_size`](#burst-size) - Optional Number<br>
|
|
60
|
+
<a id="burst-size"></a>• [`burst_size`](#burst-size) - Optional Number<br>The maximum size permitted for bursts of data. E.g. 10000 pps burst
|
|
61
61
|
|
|
62
|
-
<a id="committed-information-rate"></a>• [`committed_information_rate`](#committed-information-rate) - Optional Number<br>
|
|
62
|
+
<a id="committed-information-rate"></a>• [`committed_information_rate`](#committed-information-rate) - Optional Number<br>The committed information rate is the guaranteed packets rate for traffic arriving or departing under normal conditions. E.g. 10000 pps
|
|
63
63
|
|
|
64
|
-
<a id="policer-mode"></a>• [`policer_mode`](#policer-mode) - Optional String Defaults to `POLICER_MODE_NOT_SHARED`<br>Possible values are `POLICER_MODE_NOT_SHARED`, `POLICER_MODE_SHARED`<br>[Enum: POLICER_MODE_NOT_SHARED|POLICER_MODE_SHARED]
|
|
64
|
+
<a id="policer-mode"></a>• [`policer_mode`](#policer-mode) - Optional String Defaults to `POLICER_MODE_NOT_SHARED`<br>Possible values are `POLICER_MODE_NOT_SHARED`, `POLICER_MODE_SHARED`<br>[Enum: POLICER_MODE_NOT_SHARED|POLICER_MODE_SHARED] - POLICER_MODE_NOT_SHARED: Not Shared A separate policer instance is created for each reference to the policer - POLICER_MODE_SHARED: Shared A common policer instance is used for for all references to the policer
|
|
65
65
|
|
|
66
|
-
<a id="policer-type"></a>• [`policer_type`](#policer-type) - Optional String Defaults to `POLICER_SINGLE_RATE_TWO_COLOR`<br>[Enum: POLICER_SINGLE_RATE_TWO_COLOR]
|
|
66
|
+
<a id="policer-type"></a>• [`policer_type`](#policer-type) - Optional String Defaults to `POLICER_SINGLE_RATE_TWO_COLOR`<br>[Enum: POLICER_SINGLE_RATE_TWO_COLOR] Specifies the type of Policer Basic Single-Rate Two-Color Policer. The only possible value is `POLICER_SINGLE_RATE_TWO_COLOR`
|
|
67
67
|
|
|
68
68
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
69
69
|
|
|
@@ -40,7 +40,7 @@ resource "f5xc_policy_based_routing" "example" {
|
|
|
40
40
|
forward_proxy_pbr_rules {
|
|
41
41
|
# Configure forward_proxy_pbr_rules settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
43
|
+
# Can be used for messages where no values are needed.
|
|
44
44
|
all_destinations {
|
|
45
45
|
# Configure all_destinations settings
|
|
46
46
|
}
|
|
@@ -70,7 +70,7 @@ resource "f5xc_policy_based_routing" "example" {
|
|
|
70
70
|
• <a id="forward-proxy-pbr"></a>[`forward_proxy_pbr`](#forward-proxy-pbr) - Optional Block<br>L3/L4 routing rule. Network(L3/L4) routing policy rule<br>See [Forward Proxy Pbr](#forward-proxy-pbr) below for details.
|
|
71
71
|
<br><br>• <a id="network-pbr"></a>[`network_pbr`](#network-pbr) - Optional Block<br>Network (L2/L3) routing Policy. Network(L3/L4) routing policy rule<br>See [Network Pbr](#network-pbr) below for details.
|
|
72
72
|
|
|
73
|
-
<a id="forwarding-class-list"></a>• [`forwarding_class_list`](#forwarding-class-list) - Optional Block<br>
|
|
73
|
+
<a id="forwarding-class-list"></a>• [`forwarding_class_list`](#forwarding-class-list) - Optional Block<br>Ordered list of forwarding Class to be used if source application match and no rule match<br>See [Forwarding Class List](#forwarding-class-list) below for details.
|
|
74
74
|
|
|
75
75
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
76
76
|
|
|
@@ -92,21 +92,21 @@ A [`forward_proxy_pbr`](#forward-proxy-pbr) block supports the following:
|
|
|
92
92
|
|
|
93
93
|
A [`forward_proxy_pbr_rules`](#rules-67a5cc) block (within [`forward_proxy_pbr`](#forward-proxy-pbr)) supports the following:
|
|
94
94
|
|
|
95
|
-
<a id="destinations-1e0cd9"></a>• [`all_destinations`](#destinations-1e0cd9) - Optional Block<br>
|
|
95
|
+
<a id="destinations-1e0cd9"></a>• [`all_destinations`](#destinations-1e0cd9) - Optional Block<br>Can be used for messages where no values are needed
|
|
96
96
|
|
|
97
|
-
<a id="sources-4f8004"></a>• [`all_sources`](#sources-4f8004) - Optional Block<br>
|
|
97
|
+
<a id="sources-4f8004"></a>• [`all_sources`](#sources-4f8004) - Optional Block<br>Can be used for messages where no values are needed
|
|
98
98
|
|
|
99
|
-
<a id="list-a3b35a"></a>• [`forwarding_class_list`](#list-a3b35a) - Optional Block<br>
|
|
99
|
+
<a id="list-a3b35a"></a>• [`forwarding_class_list`](#list-a3b35a) - Optional Block<br>Ordered list of forwarding Class to be used if no rule match<br>See [Forwarding Class List](#list-a3b35a) below.
|
|
100
100
|
|
|
101
101
|
<a id="list-892bc2"></a>• [`http_list`](#list-892bc2) - Optional Block<br>URLListType<br>See [HTTP List](#list-892bc2) below.
|
|
102
102
|
|
|
103
|
-
<a id="set-b84ad7"></a>• [`ip_prefix_set`](#set-b84ad7) - Optional Block<br>
|
|
103
|
+
<a id="set-b84ad7"></a>• [`ip_prefix_set`](#set-b84ad7) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [IP Prefix Set](#set-b84ad7) below.
|
|
104
104
|
|
|
105
|
-
<a id="selector-c5a5b4"></a>• [`label_selector`](#selector-c5a5b4) - Optional Block<br>
|
|
105
|
+
<a id="selector-c5a5b4"></a>• [`label_selector`](#selector-c5a5b4) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Label Selector](#selector-c5a5b4) below.
|
|
106
106
|
|
|
107
|
-
<a id="metadata-4bce2b"></a>• [`metadata`](#metadata-4bce2b) - Optional Block<br>
|
|
107
|
+
<a id="metadata-4bce2b"></a>• [`metadata`](#metadata-4bce2b) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#metadata-4bce2b) below.
|
|
108
108
|
|
|
109
|
-
<a id="list-b2cc8b"></a>• [`prefix_list`](#list-b2cc8b) - Optional Block<br>
|
|
109
|
+
<a id="list-b2cc8b"></a>• [`prefix_list`](#list-b2cc8b) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#list-b2cc8b) below.
|
|
110
110
|
|
|
111
111
|
<a id="list-cd1082"></a>• [`tls_list`](#list-cd1082) - Optional Block<br>DomainListType<br>See [TLS List](#list-cd1082) below.
|
|
112
112
|
|
|
@@ -150,53 +150,53 @@ A [`forward_proxy_pbr_rules`](#rules-67a5cc) block (within [`forward_proxy_pbr`]
|
|
|
150
150
|
|
|
151
151
|
A [`forwarding_class_list`](#forwarding-class-list) block supports the following:
|
|
152
152
|
|
|
153
|
-
<a id="forwarding-class-list-name"></a>• [`name`](#forwarding-class-list-name) - Optional String<br>
|
|
153
|
+
<a id="forwarding-class-list-name"></a>• [`name`](#forwarding-class-list-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
154
154
|
|
|
155
|
-
<a id="forwarding-class-list-namespace"></a>• [`namespace`](#forwarding-class-list-namespace) - Optional String<br>
|
|
155
|
+
<a id="forwarding-class-list-namespace"></a>• [`namespace`](#forwarding-class-list-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
156
156
|
|
|
157
|
-
<a id="forwarding-class-list-tenant"></a>• [`tenant`](#forwarding-class-list-tenant) - Optional String<br>
|
|
157
|
+
<a id="forwarding-class-list-tenant"></a>• [`tenant`](#forwarding-class-list-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
158
158
|
|
|
159
159
|
#### Network Pbr
|
|
160
160
|
|
|
161
161
|
A [`network_pbr`](#network-pbr) block supports the following:
|
|
162
162
|
|
|
163
|
-
<a id="network-pbr-any"></a>• [`any`](#network-pbr-any) - Optional Block<br>
|
|
163
|
+
<a id="network-pbr-any"></a>• [`any`](#network-pbr-any) - Optional Block<br>Can be used for messages where no values are needed
|
|
164
164
|
|
|
165
|
-
<a id="network-pbr-label-selector"></a>• [`label_selector`](#network-pbr-label-selector) - Optional Block<br>
|
|
165
|
+
<a id="network-pbr-label-selector"></a>• [`label_selector`](#network-pbr-label-selector) - Optional Block<br>Type can be used to establish a 'selector reference' from one object(called selector) to a set of other objects(called selectees) based on the value of expresssions. A label selector is a label query over a set of resources. An empty label selector matches all objects<br>See [Label Selector](#network-pbr-label-selector) below.
|
|
166
166
|
|
|
167
167
|
<a id="network-pbr-network-pbr-rules"></a>• [`network_pbr_rules`](#network-pbr-network-pbr-rules) - Optional Block<br>L3/L4 Destination Routing Rules. Network(L3/L4) routing policy rule<br>See [Network Pbr Rules](#network-pbr-network-pbr-rules) below.
|
|
168
168
|
|
|
169
|
-
<a id="network-pbr-prefix-list"></a>• [`prefix_list`](#network-pbr-prefix-list) - Optional Block<br>
|
|
169
|
+
<a id="network-pbr-prefix-list"></a>• [`prefix_list`](#network-pbr-prefix-list) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#network-pbr-prefix-list) below.
|
|
170
170
|
|
|
171
171
|
#### Network Pbr Label Selector
|
|
172
172
|
|
|
173
173
|
A [`label_selector`](#network-pbr-label-selector) block (within [`network_pbr`](#network-pbr)) supports the following:
|
|
174
174
|
|
|
175
|
-
<a id="network-pbr-label-selector-expressions"></a>• [`expressions`](#network-pbr-label-selector-expressions) - Optional List<br>
|
|
175
|
+
<a id="network-pbr-label-selector-expressions"></a>• [`expressions`](#network-pbr-label-selector-expressions) - Optional List<br>Expressions contains the Kubernetes style label expression for selections
|
|
176
176
|
|
|
177
177
|
#### Network Pbr Network Pbr Rules
|
|
178
178
|
|
|
179
179
|
A [`network_pbr_rules`](#network-pbr-network-pbr-rules) block (within [`network_pbr`](#network-pbr)) supports the following:
|
|
180
180
|
|
|
181
|
-
<a id="traffic-e56c3b"></a>• [`all_tcp_traffic`](#traffic-e56c3b) - Optional Block<br>
|
|
181
|
+
<a id="traffic-e56c3b"></a>• [`all_tcp_traffic`](#traffic-e56c3b) - Optional Block<br>Can be used for messages where no values are needed
|
|
182
182
|
|
|
183
|
-
<a id="traffic-5b23a8"></a>• [`all_traffic`](#traffic-5b23a8) - Optional Block<br>
|
|
183
|
+
<a id="traffic-5b23a8"></a>• [`all_traffic`](#traffic-5b23a8) - Optional Block<br>Can be used for messages where no values are needed
|
|
184
184
|
|
|
185
|
-
<a id="traffic-d923ff"></a>• [`all_udp_traffic`](#traffic-d923ff) - Optional Block<br>
|
|
185
|
+
<a id="traffic-d923ff"></a>• [`all_udp_traffic`](#traffic-d923ff) - Optional Block<br>Can be used for messages where no values are needed
|
|
186
186
|
|
|
187
|
-
<a id="network-pbr-network-pbr-rules-any"></a>• [`any`](#network-pbr-network-pbr-rules-any) - Optional Block<br>
|
|
187
|
+
<a id="network-pbr-network-pbr-rules-any"></a>• [`any`](#network-pbr-network-pbr-rules-any) - Optional Block<br>Can be used for messages where no values are needed
|
|
188
188
|
|
|
189
189
|
<a id="applications-913ddd"></a>• [`applications`](#applications-913ddd) - Optional Block<br>Applications. Application protocols like HTTP, SNMP<br>See [Applications](#applications-913ddd) below.
|
|
190
190
|
|
|
191
|
-
<a id="network-pbr-network-pbr-rules-dns-name"></a>• [`dns_name`](#network-pbr-network-pbr-rules-dns-name) - Optional String<br>
|
|
191
|
+
<a id="network-pbr-network-pbr-rules-dns-name"></a>• [`dns_name`](#network-pbr-network-pbr-rules-dns-name) - Optional String<br>Resolve hostname to GET the IP
|
|
192
192
|
|
|
193
|
-
<a id="list-b3bc91"></a>• [`forwarding_class_list`](#list-b3bc91) - Optional Block<br>
|
|
193
|
+
<a id="list-b3bc91"></a>• [`forwarding_class_list`](#list-b3bc91) - Optional Block<br>Ordered list of forwarding Class to be used if rule match<br>See [Forwarding Class List](#list-b3bc91) below.
|
|
194
194
|
|
|
195
|
-
<a id="set-4a1382"></a>• [`ip_prefix_set`](#set-4a1382) - Optional Block<br>
|
|
195
|
+
<a id="set-4a1382"></a>• [`ip_prefix_set`](#set-4a1382) - Optional Block<br>List of references to ip_prefix_set objects<br>See [IP Prefix Set](#set-4a1382) below.
|
|
196
196
|
|
|
197
|
-
<a id="network-pbr-network-pbr-rules-metadata"></a>• [`metadata`](#network-pbr-network-pbr-rules-metadata) - Optional Block<br>
|
|
197
|
+
<a id="network-pbr-network-pbr-rules-metadata"></a>• [`metadata`](#network-pbr-network-pbr-rules-metadata) - Optional Block<br>MessageMetaType is metadata (common attributes) of a message that only certain messages have. This information is propagated to the metadata of a child object that gets created from the containing message during view processing. The information in this type can be specified by user during create<br>See [Metadata](#network-pbr-network-pbr-rules-metadata) below.
|
|
198
198
|
|
|
199
|
-
<a id="list-1fa06a"></a>• [`prefix_list`](#list-1fa06a) - Optional Block<br>
|
|
199
|
+
<a id="list-1fa06a"></a>• [`prefix_list`](#list-1fa06a) - Optional Block<br>List of IPv4 prefixes that represent an endpoint<br>See [Prefix List](#list-1fa06a) below.
|
|
200
200
|
|
|
201
201
|
<a id="range-c03943"></a>• [`protocol_port_range`](#range-c03943) - Optional Block<br>Protocol and Port. Protocol and Port ranges<br>See [Protocol Port Range](#range-c03943) below.
|
|
202
202
|
|
|
@@ -224,13 +224,13 @@ A [`metadata`](#network-pbr-network-pbr-rules-metadata) block (within [`network_
|
|
|
224
224
|
|
|
225
225
|
<a id="spec-92545f"></a>• [`description_spec`](#spec-92545f) - Optional String<br>Description. Human readable description
|
|
226
226
|
|
|
227
|
-
<a id="name-2c010e"></a>• [`name`](#name-2c010e) - Optional String<br>Name
|
|
227
|
+
<a id="name-2c010e"></a>• [`name`](#name-2c010e) - Optional String<br>Name of the message. The value of name has to follow DNS-1035 format
|
|
228
228
|
|
|
229
229
|
#### Network Pbr Network Pbr Rules Prefix List
|
|
230
230
|
|
|
231
231
|
A [`prefix_list`](#list-1fa06a) block (within [`network_pbr.network_pbr_rules`](#network-pbr-network-pbr-rules)) supports the following:
|
|
232
232
|
|
|
233
|
-
<a id="prefixes-97d3ee"></a>• [`prefixes`](#prefixes-97d3ee) - Optional List<br>
|
|
233
|
+
<a id="prefixes-97d3ee"></a>• [`prefixes`](#prefixes-97d3ee) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
234
234
|
|
|
235
235
|
#### Network Pbr Network Pbr Rules Protocol Port Range
|
|
236
236
|
|
|
@@ -240,7 +240,7 @@ A [`prefix_list`](#list-1fa06a) block (within [`network_pbr.network_pbr_rules`](
|
|
|
240
240
|
|
|
241
241
|
A [`prefix_list`](#network-pbr-prefix-list) block (within [`network_pbr`](#network-pbr)) supports the following:
|
|
242
242
|
|
|
243
|
-
<a id="network-pbr-prefix-list-prefixes"></a>• [`prefixes`](#network-pbr-prefix-list-prefixes) - Optional List<br>
|
|
243
|
+
<a id="network-pbr-prefix-list-prefixes"></a>• [`prefixes`](#network-pbr-prefix-list-prefixes) - Optional List<br>List of IPv4 prefixes that represent an endpoint
|
|
244
244
|
|
|
245
245
|
#### Timeouts
|
|
246
246
|
|
|
@@ -32,15 +32,15 @@ resource "f5xc_protocol_inspection" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
# Enable
|
|
35
|
+
# Enable Disable Compliance Checks Choice.
|
|
36
36
|
enable_disable_compliance_checks {
|
|
37
37
|
# Configure enable_disable_compliance_checks settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
39
|
+
# Can be used for messages where no values are needed.
|
|
40
40
|
disable_compliance_checks {
|
|
41
41
|
# Configure disable_compliance_checks settings
|
|
42
42
|
}
|
|
43
|
-
#
|
|
43
|
+
# Type establishes a direct reference from one object(the r...
|
|
44
44
|
enable_compliance_checks {
|
|
45
45
|
# Configure enable_compliance_checks settings
|
|
46
46
|
}
|
|
@@ -66,9 +66,9 @@ resource "f5xc_protocol_inspection" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="action"></a>• [`action`](#action) - Optional String Defaults to `ALLOW`<br>Possible values are `ALLOW`, `DENY`, `DROP`<br>[Enum: ALLOW|DENY|DROP] Action
|
|
69
|
+
<a id="action"></a>• [`action`](#action) - Optional String Defaults to `ALLOW`<br>Possible values are `ALLOW`, `DENY`, `DROP`<br>[Enum: ALLOW|DENY|DROP] Action after inspection - ALLOW: Allow Allow traffic - DENY: Deny Throw RST error for TCP and ICMP error for UDP - DROP: DROP Silently drop traffic
|
|
70
70
|
|
|
71
|
-
<a id="enable-disable-compliance-checks"></a>• [`enable_disable_compliance_checks`](#enable-disable-compliance-checks) - Optional Block<br>Enable
|
|
71
|
+
<a id="enable-disable-compliance-checks"></a>• [`enable_disable_compliance_checks`](#enable-disable-compliance-checks) - Optional Block<br>Enable Disable Compliance Checks Choice<br>See [Enable Disable Compliance Checks](#enable-disable-compliance-checks) below for details.
|
|
72
72
|
|
|
73
73
|
<a id="enable-disable-signatures"></a>• [`enable_disable_signatures`](#enable-disable-signatures) - Optional Block<br>Enable/Disable Signatures Choice. Enable Disable Signature Choice<br>See [Enable Disable Signatures](#enable-disable-signatures) below for details.
|
|
74
74
|
|
|
@@ -86,27 +86,27 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
86
86
|
|
|
87
87
|
An [`enable_disable_compliance_checks`](#enable-disable-compliance-checks) block supports the following:
|
|
88
88
|
|
|
89
|
-
<a id="checks-6c8eaa"></a>• [`disable_compliance_checks`](#checks-6c8eaa) - Optional Block<br>
|
|
89
|
+
<a id="checks-6c8eaa"></a>• [`disable_compliance_checks`](#checks-6c8eaa) - Optional Block<br>Can be used for messages where no values are needed
|
|
90
90
|
|
|
91
|
-
<a id="checks-68d3e1"></a>• [`enable_compliance_checks`](#checks-68d3e1) - Optional Block<br>
|
|
91
|
+
<a id="checks-68d3e1"></a>• [`enable_compliance_checks`](#checks-68d3e1) - Optional Block<br>Type establishes a direct reference from one object(the referrer) to another(the referred). Such a reference is in form of tenant/namespace/name<br>See [Enable Compliance Checks](#checks-68d3e1) below.
|
|
92
92
|
|
|
93
93
|
#### Enable Disable Compliance Checks Enable Compliance Checks
|
|
94
94
|
|
|
95
95
|
An [`enable_compliance_checks`](#checks-68d3e1) block (within [`enable_disable_compliance_checks`](#enable-disable-compliance-checks)) supports the following:
|
|
96
96
|
|
|
97
|
-
<a id="name-8e6d21"></a>• [`name`](#name-8e6d21) - Optional String<br>
|
|
97
|
+
<a id="name-8e6d21"></a>• [`name`](#name-8e6d21) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
98
98
|
|
|
99
|
-
<a id="namespace-93e0ee"></a>• [`namespace`](#namespace-93e0ee) - Optional String<br>
|
|
99
|
+
<a id="namespace-93e0ee"></a>• [`namespace`](#namespace-93e0ee) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
100
100
|
|
|
101
|
-
<a id="tenant-67ac8b"></a>• [`tenant`](#tenant-67ac8b) - Optional String<br>
|
|
101
|
+
<a id="tenant-67ac8b"></a>• [`tenant`](#tenant-67ac8b) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
102
102
|
|
|
103
103
|
#### Enable Disable Signatures
|
|
104
104
|
|
|
105
105
|
An [`enable_disable_signatures`](#enable-disable-signatures) block supports the following:
|
|
106
106
|
|
|
107
|
-
<a id="signature-dd5a1e"></a>• [`disable_signature`](#signature-dd5a1e) - Optional Block<br>
|
|
107
|
+
<a id="signature-dd5a1e"></a>• [`disable_signature`](#signature-dd5a1e) - Optional Block<br>Can be used for messages where no values are needed
|
|
108
108
|
|
|
109
|
-
<a id="signature-359b96"></a>• [`enable_signature`](#signature-359b96) - Optional Block<br>
|
|
109
|
+
<a id="signature-359b96"></a>• [`enable_signature`](#signature-359b96) - Optional Block<br>Can be used for messages where no values are needed
|
|
110
110
|
|
|
111
111
|
#### Timeouts
|
|
112
112
|
|
|
@@ -32,15 +32,15 @@ resource "f5xc_protocol_policer" "example" {
|
|
|
32
32
|
}
|
|
33
33
|
|
|
34
34
|
# Resource-specific configuration
|
|
35
|
-
#
|
|
35
|
+
# List of L4 protocol match condition and associated traffi...
|
|
36
36
|
protocol_policer {
|
|
37
37
|
# Configure protocol_policer settings
|
|
38
38
|
}
|
|
39
|
-
#
|
|
39
|
+
# Reference to policer object to apply traffic rate limits .
|
|
40
40
|
policer {
|
|
41
41
|
# Configure policer settings
|
|
42
42
|
}
|
|
43
|
-
# Protocol
|
|
43
|
+
# Protocol and protocol specific flags to be matched in pac...
|
|
44
44
|
protocol {
|
|
45
45
|
# Configure protocol settings
|
|
46
46
|
}
|
|
@@ -66,7 +66,7 @@ resource "f5xc_protocol_policer" "example" {
|
|
|
66
66
|
|
|
67
67
|
### Spec Argument Reference
|
|
68
68
|
|
|
69
|
-
<a id="protocol-policer"></a>• [`protocol_policer`](#protocol-policer) - Optional Block<br>
|
|
69
|
+
<a id="protocol-policer"></a>• [`protocol_policer`](#protocol-policer) - Optional Block<br>List of L4 protocol match condition and associated traffic rate limits<br>See [Protocol Policer](#protocol-policer) below for details.
|
|
70
70
|
|
|
71
71
|
<a id="timeouts"></a>• [`timeouts`](#timeouts) - Optional Block<br>See [Timeouts](#timeouts) below for details.
|
|
72
72
|
|
|
@@ -82,33 +82,33 @@ In addition to all arguments above, the following attributes are exported:
|
|
|
82
82
|
|
|
83
83
|
A [`protocol_policer`](#protocol-policer) block supports the following:
|
|
84
84
|
|
|
85
|
-
<a id="protocol-policer-policer"></a>• [`policer`](#protocol-policer-policer) - Optional Block<br>
|
|
85
|
+
<a id="protocol-policer-policer"></a>• [`policer`](#protocol-policer-policer) - Optional Block<br>Reference to policer object to apply traffic rate limits<br>See [Policer](#protocol-policer-policer) below.
|
|
86
86
|
|
|
87
|
-
<a id="protocol-policer-protocol"></a>• [`protocol`](#protocol-policer-protocol) - Optional Block<br>Protocol
|
|
87
|
+
<a id="protocol-policer-protocol"></a>• [`protocol`](#protocol-policer-protocol) - Optional Block<br>Protocol and protocol specific flags to be matched in packet<br>See [Protocol](#protocol-policer-protocol) below.
|
|
88
88
|
|
|
89
89
|
#### Protocol Policer Policer
|
|
90
90
|
|
|
91
91
|
A [`policer`](#protocol-policer-policer) block (within [`protocol_policer`](#protocol-policer)) supports the following:
|
|
92
92
|
|
|
93
|
-
<a id="protocol-policer-policer-kind"></a>• [`kind`](#protocol-policer-policer-kind) - Optional String<br>
|
|
93
|
+
<a id="protocol-policer-policer-kind"></a>• [`kind`](#protocol-policer-policer-kind) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then kind will hold the referred object's kind (e.g. 'route')
|
|
94
94
|
|
|
95
|
-
<a id="protocol-policer-policer-name"></a>• [`name`](#protocol-policer-policer-name) - Optional String<br>
|
|
95
|
+
<a id="protocol-policer-policer-name"></a>• [`name`](#protocol-policer-policer-name) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then name will hold the referred object's(e.g. Route's) name
|
|
96
96
|
|
|
97
|
-
<a id="protocol-policer-policer-namespace"></a>• [`namespace`](#protocol-policer-policer-namespace) - Optional String<br>
|
|
97
|
+
<a id="protocol-policer-policer-namespace"></a>• [`namespace`](#protocol-policer-policer-namespace) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then namespace will hold the referred object's(e.g. Route's) namespace
|
|
98
98
|
|
|
99
|
-
<a id="protocol-policer-policer-tenant"></a>• [`tenant`](#protocol-policer-policer-tenant) - Optional String<br>
|
|
99
|
+
<a id="protocol-policer-policer-tenant"></a>• [`tenant`](#protocol-policer-policer-tenant) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then tenant will hold the referred object's(e.g. Route's) tenant
|
|
100
100
|
|
|
101
|
-
<a id="protocol-policer-policer-uid"></a>• [`uid`](#protocol-policer-policer-uid) - Optional String<br>
|
|
101
|
+
<a id="protocol-policer-policer-uid"></a>• [`uid`](#protocol-policer-policer-uid) - Optional String<br>When a configuration object(e.g. Virtual_host) refers to another(e.g route) then uid will hold the referred object's(e.g. Route's) uid
|
|
102
102
|
|
|
103
103
|
#### Protocol Policer Protocol
|
|
104
104
|
|
|
105
105
|
A [`protocol`](#protocol-policer-protocol) block (within [`protocol_policer`](#protocol-policer)) supports the following:
|
|
106
106
|
|
|
107
|
-
<a id="protocol-policer-protocol-dns"></a>• [`dns`](#protocol-policer-protocol-dns) - Optional Block<br>
|
|
107
|
+
<a id="protocol-policer-protocol-dns"></a>• [`dns`](#protocol-policer-protocol-dns) - Optional Block<br>Match all DNS packets inclusing UDP and TCP
|
|
108
108
|
|
|
109
109
|
<a id="protocol-policer-protocol-icmp"></a>• [`icmp`](#protocol-policer-protocol-icmp) - Optional Block<br>ICMP Packet Type. ICMP message type to match in packet<br>See [ICMP](#protocol-policer-protocol-icmp) below.
|
|
110
110
|
|
|
111
|
-
<a id="protocol-policer-protocol-tcp"></a>• [`tcp`](#protocol-policer-protocol-tcp) - Optional Block<br>
|
|
111
|
+
<a id="protocol-policer-protocol-tcp"></a>• [`tcp`](#protocol-policer-protocol-tcp) - Optional Block<br>Specification of TCP flag to be matched in a TCP packet<br>See [TCP](#protocol-policer-protocol-tcp) below.
|
|
112
112
|
|
|
113
113
|
<a id="protocol-policer-protocol-udp"></a>• [`udp`](#protocol-policer-protocol-udp) - Optional Block<br>UDP Packets. Match all UDP packets
|
|
114
114
|
|
|
@@ -116,7 +116,7 @@ A [`protocol`](#protocol-policer-protocol) block (within [`protocol_policer`](#p
|
|
|
116
116
|
|
|
117
117
|
An [`icmp`](#protocol-policer-protocol-icmp) block (within [`protocol_policer.protocol`](#protocol-policer-protocol)) supports the following:
|
|
118
118
|
|
|
119
|
-
<a id="protocol-policer-protocol-icmp-type"></a>• [`type`](#protocol-policer-protocol-icmp-type) - Optional List Defaults to `ECHO_REPLY`<br>Possible values are `ECHO_REPLY`, `ECHO_REQUEST`, `ALL_ICMP_MSG`<br>[Enum: ECHO_REPLY|ECHO_REQUEST|ALL_ICMP_MSG] ICMP
|
|
119
|
+
<a id="protocol-policer-protocol-icmp-type"></a>• [`type`](#protocol-policer-protocol-icmp-type) - Optional List Defaults to `ECHO_REPLY`<br>Possible values are `ECHO_REPLY`, `ECHO_REQUEST`, `ALL_ICMP_MSG`<br>[Enum: ECHO_REPLY|ECHO_REQUEST|ALL_ICMP_MSG] ICMP message type to be matched in packet
|
|
120
120
|
|
|
121
121
|
#### Protocol Policer Protocol TCP
|
|
122
122
|
|