pulumi-alicloud 3.51.0a1710157550__py3-none-any.whl → 3.73.0a1736832142__py3-none-any.whl

pulumi_alicloud/nlb/listener.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['ListenerArgs', 'Listener']
@@ -33,45 +38,55 @@ class ListenerArgs:
                  security_policy_id: Optional[pulumi.Input[str]] = None,
                  start_port: Optional[pulumi.Input[int]] = None,
                  status: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None):
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         The set of arguments for constructing a Listener resource.
-        :param pulumi.Input[int] listener_port: Listening port. Valid values: **0** ~ **65535 * *. **0**: indicates that full port listening is used. When set to **0**, you must configure **StartPort** and **EndPort**.
-        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: **TCP**, **UDP**, or **TCPSSL**.
-        :param pulumi.Input[str] load_balancer_id: The ID of the network-based server load balancer instance.
+        :param pulumi.Input[int] listener_port: The listener port. Valid values: `0` to `65535`.
+               
+               If you set the value to `0`, the listener listens by port range. If you set the value to `0`, you must specify `StartPort` and `EndPort`.
+        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: `TCP`, `UDP`, and `TCPSSL`.
+        :param pulumi.Input[str] load_balancer_id: The ID of the Network Load Balancer (NLB) instance.
         :param pulumi.Input[str] server_group_id: The ID of the server group.
-        :param pulumi.Input[bool] alpn_enabled: Whether ALPN is turned on. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] alpn_policy: ALPN policy. Value:
-               - **HTTP1Only**
-               - **HTTP2Only**
-               - **HTTP2Preferred**
-               - **HTTP2Optional**.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: CA certificate list information. Currently, only one CA certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[bool] ca_enabled: Whether to start two-way authentication. Value:
-               - **true**: start.
-               - **false**: closed.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: Server certificate list information. Currently, only one server certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[int] cps: The new connection speed limit for a network-based load balancing instance per second. Valid values: **0** ~ **1000000**. **0** indicates unlimited speed.
-        :param pulumi.Input[int] end_port: Full port listening end port. Valid values: **0** ~ **65535 * *. The value of the end port is less than the start port.
-        :param pulumi.Input[int] idle_timeout: Connection idle timeout time. Unit: seconds. Valid values: **1** ~ **900**.
-        :param pulumi.Input[str] listener_description: Custom listener name.The length is limited to 2 to 256 characters, supports Chinese and English letters, and can include numbers, commas (,), half-width periods (.), half-width semicolons (;), forward slashes (/), at(@), underscores (_), and dashes (-).
-        :param pulumi.Input[int] mss: The maximum segment size of the TCP message. Unit: Bytes. Valid values: **0** ~ **1500**. **0** indicates that the MSS value of the TCP message is not modified.
-               > **NOTE:**  only TCP and TCPSSL listeners support this field value.
-        :param pulumi.Input[bool] proxy_protocol_enabled: Whether to enable the Proxy Protocol to carry the source address of the client to the backend server. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[bool] sec_sensor_enabled: Whether to turn on the second-level monitoring function. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] security_policy_id: Security policy ID. Support system security policies and custom security policies. Valid values: **tls_cipher_policy_1_0**, **tls_cipher_policy_1_1**, **tls_cipher_policy_1_2**, **tls_cipher_policy_1_2_strict**, or **tls_cipher_policy_1_2_strict_with_1_3**.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[int] start_port: Full Port listens to the starting port. Valid values: **0** ~ **65535**.
-        :param pulumi.Input[str] status: The status of the resource.
-        :param pulumi.Input[Mapping[str, Any]] tags: The tag of the resource.
+        :param pulumi.Input[bool] alpn_enabled: Specifies whether to enable Application-Layer Protocol Negotiation (ALPN). Valid values:
+        :param pulumi.Input[str] alpn_policy: The ALPN policy. Valid values:
+               - `HTTP1Only`: uses only HTTP 1.x. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               - `HTTP2Only`: uses only HTTP 2.0.
+               - `HTTP2Optional`: preferentially uses HTTP 1.x over HTTP 2.0. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0, and the priority of HTTP 1.0 is higher than the priority of HTTP 2.0.
+               - `HTTP2Preferred`: preferentially uses HTTP 2.0 over HTTP 1.x. The priority of HTTP 2.0 is higher than the priority of HTTP 1.1, and the priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               
+               > **NOTE:**  This parameter is required if AlpnEnabled is set to true.
+               
+               > **NOTE:**  Effective only for TCPSSL listener.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: The list of certificate authority (CA) certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  Only one CA certificate is supported.
+        :param pulumi.Input[bool] ca_enabled: Specifies whether to enable mutual authentication. Valid values:
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: The list of server certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  This parameter takes effect only for TCPSSL listeners.
+        :param pulumi.Input[int] cps: The maximum number of connections that can be created per second on the NLB instance. Valid values: `0` to `1000000`. `0` specifies that the number of connections is unlimited.
+        :param pulumi.Input[int] end_port: The last port in the listener port range. Valid values: `0` to `65535`. The number of the last port must be greater than the number of the first port.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[int] idle_timeout: The timeout period of idle connections. Unit: seconds. Valid values: `1` to `900`. Default value: `900`.
+        :param pulumi.Input[str] listener_description: Enter a name for the listener.
+               
+               The description must be 2 to 256 characters in length, and can contain letters, digits, commas (,), periods (.), semicolons (;), forward slashes (/), at signs (@), underscores (\\_), and hyphens (-).
+        :param pulumi.Input[int] mss: The maximum size of a TCP segment. Unit: bytes. Valid values: `0` to `1500`. `0` specifies that the maximum segment size remains unchanged.
+               
+               > **NOTE:**  This parameter is supported only by TCP listeners and listeners that use SSL over TCP.
+        :param pulumi.Input[bool] proxy_protocol_enabled: Specifies whether to use the Proxy protocol to pass client IP addresses to backend servers. Valid values:
+        :param pulumi.Input[bool] sec_sensor_enabled: Specifies whether to enable fine-grained monitoring. Valid values:
+        :param pulumi.Input[str] security_policy_id: The security policy ID. System security policies and custom security policies are supported.
+               
+               Valid values: `tls_cipher_policy\\_1\\_0` (default), `tls_cipher_policy\\_1\\_1`, `tls_cipher_policy\\_1\\_2`, `tls_cipher_policy\\_1\\_2\\_strict`, and `tls_cipher_policy\\_1\\_2\\_strict_with\\_1\\_3`.
+               
+               > **NOTE:**  This parameter takes effect only for listeners that use SSL over TCP.
+        :param pulumi.Input[int] start_port: The first port in the listener port range. Valid values: `0` to `65535`.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[str] status: The status of the resource. Valid values: `Running`, `Stopped`. When you want to enable this instance, you can set the property value to `Running`;
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: The tag of the resource
         """
         pulumi.set(__self__, "listener_port", listener_port)
         pulumi.set(__self__, "listener_protocol", listener_protocol)
@@ -114,7 +129,9 @@ class ListenerArgs:
     @pulumi.getter(name="listenerPort")
     def listener_port(self) -> pulumi.Input[int]:
         """
-        Listening port. Valid values: **0** ~ **65535 * *. **0**: indicates that full port listening is used. When set to **0**, you must configure **StartPort** and **EndPort**.
+        The listener port. Valid values: `0` to `65535`.
+
+        If you set the value to `0`, the listener listens by port range. If you set the value to `0`, you must specify `StartPort` and `EndPort`.
         """
         return pulumi.get(self, "listener_port")
 
@@ -126,7 +143,7 @@ class ListenerArgs:
     @pulumi.getter(name="listenerProtocol")
     def listener_protocol(self) -> pulumi.Input[str]:
         """
-        The listening protocol. Valid values: **TCP**, **UDP**, or **TCPSSL**.
+        The listening protocol. Valid values: `TCP`, `UDP`, and `TCPSSL`.
         """
         return pulumi.get(self, "listener_protocol")
 
@@ -138,7 +155,7 @@ class ListenerArgs:
     @pulumi.getter(name="loadBalancerId")
     def load_balancer_id(self) -> pulumi.Input[str]:
         """
-        The ID of the network-based server load balancer instance.
+        The ID of the Network Load Balancer (NLB) instance.
         """
         return pulumi.get(self, "load_balancer_id")
 
@@ -162,9 +179,7 @@ class ListenerArgs:
     @pulumi.getter(name="alpnEnabled")
     def alpn_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether ALPN is turned on. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to enable Application-Layer Protocol Negotiation (ALPN). Valid values:
         """
         return pulumi.get(self, "alpn_enabled")
 
@@ -176,11 +191,15 @@ class ListenerArgs:
     @pulumi.getter(name="alpnPolicy")
     def alpn_policy(self) -> Optional[pulumi.Input[str]]:
         """
-        ALPN policy. Value:
-        - **HTTP1Only**
-        - **HTTP2Only**
-        - **HTTP2Preferred**
-        - **HTTP2Optional**.
+        The ALPN policy. Valid values:
+        - `HTTP1Only`: uses only HTTP 1.x. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+        - `HTTP2Only`: uses only HTTP 2.0.
+        - `HTTP2Optional`: preferentially uses HTTP 1.x over HTTP 2.0. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0, and the priority of HTTP 1.0 is higher than the priority of HTTP 2.0.
+        - `HTTP2Preferred`: preferentially uses HTTP 2.0 over HTTP 1.x. The priority of HTTP 2.0 is higher than the priority of HTTP 1.1, and the priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+
+        > **NOTE:**  This parameter is required if AlpnEnabled is set to true.
+
+        > **NOTE:**  Effective only for TCPSSL listener.
         """
         return pulumi.get(self, "alpn_policy")
 
@@ -192,8 +211,9 @@ class ListenerArgs:
     @pulumi.getter(name="caCertificateIds")
     def ca_certificate_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        CA certificate list information. Currently, only one CA certificate can be added.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The list of certificate authority (CA) certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+
+        > **NOTE:**  Only one CA certificate is supported.
         """
         return pulumi.get(self, "ca_certificate_ids")
 
@@ -205,9 +225,7 @@ class ListenerArgs:
     @pulumi.getter(name="caEnabled")
     def ca_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether to start two-way authentication. Value:
-        - **true**: start.
-        - **false**: closed.
+        Specifies whether to enable mutual authentication. Valid values:
         """
         return pulumi.get(self, "ca_enabled")
 
@@ -219,8 +237,9 @@ class ListenerArgs:
     @pulumi.getter(name="certificateIds")
     def certificate_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Server certificate list information. Currently, only one server certificate can be added.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The list of server certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+
+        > **NOTE:**  This parameter takes effect only for TCPSSL listeners.
         """
         return pulumi.get(self, "certificate_ids")
 
@@ -232,7 +251,7 @@ class ListenerArgs:
     @pulumi.getter
     def cps(self) -> Optional[pulumi.Input[int]]:
         """
-        The new connection speed limit for a network-based load balancing instance per second. Valid values: **0** ~ **1000000**. **0** indicates unlimited speed.
+        The maximum number of connections that can be created per second on the NLB instance. Valid values: `0` to `1000000`. `0` specifies that the number of connections is unlimited.
         """
         return pulumi.get(self, "cps")
 
@@ -244,7 +263,9 @@ class ListenerArgs:
     @pulumi.getter(name="endPort")
     def end_port(self) -> Optional[pulumi.Input[int]]:
         """
-        Full port listening end port. Valid values: **0** ~ **65535 * *. The value of the end port is less than the start port.
+        The last port in the listener port range. Valid values: `0` to `65535`. The number of the last port must be greater than the number of the first port.
+
+        > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
         """
         return pulumi.get(self, "end_port")
 
@@ -256,7 +277,7 @@ class ListenerArgs:
     @pulumi.getter(name="idleTimeout")
     def idle_timeout(self) -> Optional[pulumi.Input[int]]:
         """
-        Connection idle timeout time. Unit: seconds. Valid values: **1** ~ **900**.
+        The timeout period of idle connections. Unit: seconds. Valid values: `1` to `900`. Default value: `900`.
         """
         return pulumi.get(self, "idle_timeout")
 
@@ -268,7 +289,9 @@ class ListenerArgs:
     @pulumi.getter(name="listenerDescription")
     def listener_description(self) -> Optional[pulumi.Input[str]]:
         """
-        Custom listener name.The length is limited to 2 to 256 characters, supports Chinese and English letters, and can include numbers, commas (,), half-width periods (.), half-width semicolons (;), forward slashes (/), at(@), underscores (_), and dashes (-).
+        Enter a name for the listener.
+
+        The description must be 2 to 256 characters in length, and can contain letters, digits, commas (,), periods (.), semicolons (;), forward slashes (/), at signs (@), underscores (\\_), and hyphens (-).
         """
         return pulumi.get(self, "listener_description")
 
@@ -280,8 +303,9 @@ class ListenerArgs:
     @pulumi.getter
     def mss(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum segment size of the TCP message. Unit: Bytes. Valid values: **0** ~ **1500**. **0** indicates that the MSS value of the TCP message is not modified.
-        > **NOTE:**  only TCP and TCPSSL listeners support this field value.
+        The maximum size of a TCP segment. Unit: bytes. Valid values: `0` to `1500`. `0` specifies that the maximum segment size remains unchanged.
+
+        > **NOTE:**  This parameter is supported only by TCP listeners and listeners that use SSL over TCP.
         """
         return pulumi.get(self, "mss")
 
@@ -293,9 +317,7 @@ class ListenerArgs:
     @pulumi.getter(name="proxyProtocolEnabled")
     def proxy_protocol_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether to enable the Proxy Protocol to carry the source address of the client to the backend server. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to use the Proxy protocol to pass client IP addresses to backend servers. Valid values:
         """
         return pulumi.get(self, "proxy_protocol_enabled")
 
@@ -307,9 +329,7 @@ class ListenerArgs:
     @pulumi.getter(name="secSensorEnabled")
     def sec_sensor_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether to turn on the second-level monitoring function. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to enable fine-grained monitoring. Valid values:
         """
         return pulumi.get(self, "sec_sensor_enabled")
 
@@ -321,8 +341,11 @@ class ListenerArgs:
     @pulumi.getter(name="securityPolicyId")
     def security_policy_id(self) -> Optional[pulumi.Input[str]]:
         """
-        Security policy ID. Support system security policies and custom security policies. Valid values: **tls_cipher_policy_1_0**, **tls_cipher_policy_1_1**, **tls_cipher_policy_1_2**, **tls_cipher_policy_1_2_strict**, or **tls_cipher_policy_1_2_strict_with_1_3**.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The security policy ID. System security policies and custom security policies are supported.
+
+        Valid values: `tls_cipher_policy\\_1\\_0` (default), `tls_cipher_policy\\_1\\_1`, `tls_cipher_policy\\_1\\_2`, `tls_cipher_policy\\_1\\_2\\_strict`, and `tls_cipher_policy\\_1\\_2\\_strict_with\\_1\\_3`.
+
+        > **NOTE:**  This parameter takes effect only for listeners that use SSL over TCP.
         """
         return pulumi.get(self, "security_policy_id")
 
@@ -334,7 +357,9 @@ class ListenerArgs:
     @pulumi.getter(name="startPort")
     def start_port(self) -> Optional[pulumi.Input[int]]:
         """
-        Full Port listens to the starting port. Valid values: **0** ~ **65535**.
+        The first port in the listener port range. Valid values: `0` to `65535`.
+
+        > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
         """
         return pulumi.get(self, "start_port")
 
@@ -346,7 +371,7 @@ class ListenerArgs:
     @pulumi.getter
     def status(self) -> Optional[pulumi.Input[str]]:
         """
-        The status of the resource.
+        The status of the resource. Valid values: `Running`, `Stopped`. When you want to enable this instance, you can set the property value to `Running`;
         """
         return pulumi.get(self, "status")
 
@@ -356,14 +381,14 @@ class ListenerArgs:
 
     @property
     @pulumi.getter
-    def tags(self) -> Optional[pulumi.Input[Mapping[str, Any]]]:
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
-        The tag of the resource.
+        The tag of the resource
         """
         return pulumi.get(self, "tags")
 
     @tags.setter
-    def tags(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "tags", value)
 
 
@@ -389,45 +414,55 @@ class _ListenerState:
                  server_group_id: Optional[pulumi.Input[str]] = None,
                  start_port: Optional[pulumi.Input[int]] = None,
                  status: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None):
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         Input properties used for looking up and filtering Listener resources.
-        :param pulumi.Input[bool] alpn_enabled: Whether ALPN is turned on. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] alpn_policy: ALPN policy. Value:
-               - **HTTP1Only**
-               - **HTTP2Only**
-               - **HTTP2Preferred**
-               - **HTTP2Optional**.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: CA certificate list information. Currently, only one CA certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[bool] ca_enabled: Whether to start two-way authentication. Value:
-               - **true**: start.
-               - **false**: closed.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: Server certificate list information. Currently, only one server certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[int] cps: The new connection speed limit for a network-based load balancing instance per second. Valid values: **0** ~ **1000000**. **0** indicates unlimited speed.
-        :param pulumi.Input[int] end_port: Full port listening end port. Valid values: **0** ~ **65535 * *. The value of the end port is less than the start port.
-        :param pulumi.Input[int] idle_timeout: Connection idle timeout time. Unit: seconds. Valid values: **1** ~ **900**.
-        :param pulumi.Input[str] listener_description: Custom listener name.The length is limited to 2 to 256 characters, supports Chinese and English letters, and can include numbers, commas (,), half-width periods (.), half-width semicolons (;), forward slashes (/), at(@), underscores (_), and dashes (-).
-        :param pulumi.Input[int] listener_port: Listening port. Valid values: **0** ~ **65535 * *. **0**: indicates that full port listening is used. When set to **0**, you must configure **StartPort** and **EndPort**.
-        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: **TCP**, **UDP**, or **TCPSSL**.
-        :param pulumi.Input[str] load_balancer_id: The ID of the network-based server load balancer instance.
-        :param pulumi.Input[int] mss: The maximum segment size of the TCP message. Unit: Bytes. Valid values: **0** ~ **1500**. **0** indicates that the MSS value of the TCP message is not modified.
-               > **NOTE:**  only TCP and TCPSSL listeners support this field value.
-        :param pulumi.Input[bool] proxy_protocol_enabled: Whether to enable the Proxy Protocol to carry the source address of the client to the backend server. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[bool] sec_sensor_enabled: Whether to turn on the second-level monitoring function. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] security_policy_id: Security policy ID. Support system security policies and custom security policies. Valid values: **tls_cipher_policy_1_0**, **tls_cipher_policy_1_1**, **tls_cipher_policy_1_2**, **tls_cipher_policy_1_2_strict**, or **tls_cipher_policy_1_2_strict_with_1_3**.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        :param pulumi.Input[bool] alpn_enabled: Specifies whether to enable Application-Layer Protocol Negotiation (ALPN). Valid values:
+        :param pulumi.Input[str] alpn_policy: The ALPN policy. Valid values:
+               - `HTTP1Only`: uses only HTTP 1.x. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               - `HTTP2Only`: uses only HTTP 2.0.
+               - `HTTP2Optional`: preferentially uses HTTP 1.x over HTTP 2.0. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0, and the priority of HTTP 1.0 is higher than the priority of HTTP 2.0.
+               - `HTTP2Preferred`: preferentially uses HTTP 2.0 over HTTP 1.x. The priority of HTTP 2.0 is higher than the priority of HTTP 1.1, and the priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               
+               > **NOTE:**  This parameter is required if AlpnEnabled is set to true.
+               
+               > **NOTE:**  Effective only for TCPSSL listener.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: The list of certificate authority (CA) certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  Only one CA certificate is supported.
+        :param pulumi.Input[bool] ca_enabled: Specifies whether to enable mutual authentication. Valid values:
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: The list of server certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  This parameter takes effect only for TCPSSL listeners.
+        :param pulumi.Input[int] cps: The maximum number of connections that can be created per second on the NLB instance. Valid values: `0` to `1000000`. `0` specifies that the number of connections is unlimited.
+        :param pulumi.Input[int] end_port: The last port in the listener port range. Valid values: `0` to `65535`. The number of the last port must be greater than the number of the first port.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[int] idle_timeout: The timeout period of idle connections. Unit: seconds. Valid values: `1` to `900`. Default value: `900`.
+        :param pulumi.Input[str] listener_description: Enter a name for the listener.
+               
+               The description must be 2 to 256 characters in length, and can contain letters, digits, commas (,), periods (.), semicolons (;), forward slashes (/), at signs (@), underscores (\\_), and hyphens (-).
+        :param pulumi.Input[int] listener_port: The listener port. Valid values: `0` to `65535`.
+               
+               If you set the value to `0`, the listener listens by port range. If you set the value to `0`, you must specify `StartPort` and `EndPort`.
+        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: `TCP`, `UDP`, and `TCPSSL`.
+        :param pulumi.Input[str] load_balancer_id: The ID of the Network Load Balancer (NLB) instance.
+        :param pulumi.Input[int] mss: The maximum size of a TCP segment. Unit: bytes. Valid values: `0` to `1500`. `0` specifies that the maximum segment size remains unchanged.
+               
+               > **NOTE:**  This parameter is supported only by TCP listeners and listeners that use SSL over TCP.
+        :param pulumi.Input[bool] proxy_protocol_enabled: Specifies whether to use the Proxy protocol to pass client IP addresses to backend servers. Valid values:
+        :param pulumi.Input[bool] sec_sensor_enabled: Specifies whether to enable fine-grained monitoring. Valid values:
+        :param pulumi.Input[str] security_policy_id: The security policy ID. System security policies and custom security policies are supported.
+               
+               Valid values: `tls_cipher_policy\\_1\\_0` (default), `tls_cipher_policy\\_1\\_1`, `tls_cipher_policy\\_1\\_2`, `tls_cipher_policy\\_1\\_2\\_strict`, and `tls_cipher_policy\\_1\\_2\\_strict_with\\_1\\_3`.
+               
+               > **NOTE:**  This parameter takes effect only for listeners that use SSL over TCP.
         :param pulumi.Input[str] server_group_id: The ID of the server group.
-        :param pulumi.Input[int] start_port: Full Port listens to the starting port. Valid values: **0** ~ **65535**.
-        :param pulumi.Input[str] status: The status of the resource.
-        :param pulumi.Input[Mapping[str, Any]] tags: The tag of the resource.
+        :param pulumi.Input[int] start_port: The first port in the listener port range. Valid values: `0` to `65535`.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[str] status: The status of the resource. Valid values: `Running`, `Stopped`. When you want to enable this instance, you can set the property value to `Running`;
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: The tag of the resource
         """
         if alpn_enabled is not None:
             pulumi.set(__self__, "alpn_enabled", alpn_enabled)
@@ -474,9 +509,7 @@ class _ListenerState:
     @pulumi.getter(name="alpnEnabled")
     def alpn_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether ALPN is turned on. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to enable Application-Layer Protocol Negotiation (ALPN). Valid values:
         """
         return pulumi.get(self, "alpn_enabled")
 
@@ -488,11 +521,15 @@ class _ListenerState:
     @pulumi.getter(name="alpnPolicy")
     def alpn_policy(self) -> Optional[pulumi.Input[str]]:
         """
-        ALPN policy. Value:
-        - **HTTP1Only**
-        - **HTTP2Only**
-        - **HTTP2Preferred**
-        - **HTTP2Optional**.
+        The ALPN policy. Valid values:
+        - `HTTP1Only`: uses only HTTP 1.x. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+        - `HTTP2Only`: uses only HTTP 2.0.
+        - `HTTP2Optional`: preferentially uses HTTP 1.x over HTTP 2.0. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0, and the priority of HTTP 1.0 is higher than the priority of HTTP 2.0.
+        - `HTTP2Preferred`: preferentially uses HTTP 2.0 over HTTP 1.x. The priority of HTTP 2.0 is higher than the priority of HTTP 1.1, and the priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+
+        > **NOTE:**  This parameter is required if AlpnEnabled is set to true.
+
+        > **NOTE:**  Effective only for TCPSSL listener.
         """
         return pulumi.get(self, "alpn_policy")
 
@@ -504,8 +541,9 @@ class _ListenerState:
     @pulumi.getter(name="caCertificateIds")
     def ca_certificate_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        CA certificate list information. Currently, only one CA certificate can be added.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The list of certificate authority (CA) certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+
+        > **NOTE:**  Only one CA certificate is supported.
         """
         return pulumi.get(self, "ca_certificate_ids")
 
@@ -517,9 +555,7 @@ class _ListenerState:
     @pulumi.getter(name="caEnabled")
     def ca_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether to start two-way authentication. Value:
-        - **true**: start.
-        - **false**: closed.
+        Specifies whether to enable mutual authentication. Valid values:
         """
         return pulumi.get(self, "ca_enabled")
 
@@ -531,8 +567,9 @@ class _ListenerState:
     @pulumi.getter(name="certificateIds")
     def certificate_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Server certificate list information. Currently, only one server certificate can be added.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The list of server certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+
+        > **NOTE:**  This parameter takes effect only for TCPSSL listeners.
         """
         return pulumi.get(self, "certificate_ids")
 
@@ -544,7 +581,7 @@ class _ListenerState:
     @pulumi.getter
     def cps(self) -> Optional[pulumi.Input[int]]:
         """
-        The new connection speed limit for a network-based load balancing instance per second. Valid values: **0** ~ **1000000**. **0** indicates unlimited speed.
+        The maximum number of connections that can be created per second on the NLB instance. Valid values: `0` to `1000000`. `0` specifies that the number of connections is unlimited.
         """
         return pulumi.get(self, "cps")
 
@@ -556,7 +593,9 @@ class _ListenerState:
     @pulumi.getter(name="endPort")
     def end_port(self) -> Optional[pulumi.Input[int]]:
         """
-        Full port listening end port. Valid values: **0** ~ **65535 * *. The value of the end port is less than the start port.
+        The last port in the listener port range. Valid values: `0` to `65535`. The number of the last port must be greater than the number of the first port.
+
+        > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
         """
         return pulumi.get(self, "end_port")
 
@@ -568,7 +607,7 @@ class _ListenerState:
     @pulumi.getter(name="idleTimeout")
     def idle_timeout(self) -> Optional[pulumi.Input[int]]:
         """
-        Connection idle timeout time. Unit: seconds. Valid values: **1** ~ **900**.
+        The timeout period of idle connections. Unit: seconds. Valid values: `1` to `900`. Default value: `900`.
         """
         return pulumi.get(self, "idle_timeout")
 
@@ -580,7 +619,9 @@ class _ListenerState:
     @pulumi.getter(name="listenerDescription")
     def listener_description(self) -> Optional[pulumi.Input[str]]:
         """
-        Custom listener name.The length is limited to 2 to 256 characters, supports Chinese and English letters, and can include numbers, commas (,), half-width periods (.), half-width semicolons (;), forward slashes (/), at(@), underscores (_), and dashes (-).
+        Enter a name for the listener.
+
+        The description must be 2 to 256 characters in length, and can contain letters, digits, commas (,), periods (.), semicolons (;), forward slashes (/), at signs (@), underscores (\\_), and hyphens (-).
         """
         return pulumi.get(self, "listener_description")
 
@@ -592,7 +633,9 @@ class _ListenerState:
     @pulumi.getter(name="listenerPort")
     def listener_port(self) -> Optional[pulumi.Input[int]]:
         """
-        Listening port. Valid values: **0** ~ **65535 * *. **0**: indicates that full port listening is used. When set to **0**, you must configure **StartPort** and **EndPort**.
+        The listener port. Valid values: `0` to `65535`.
+
+        If you set the value to `0`, the listener listens by port range. If you set the value to `0`, you must specify `StartPort` and `EndPort`.
         """
         return pulumi.get(self, "listener_port")
 
@@ -604,7 +647,7 @@ class _ListenerState:
     @pulumi.getter(name="listenerProtocol")
     def listener_protocol(self) -> Optional[pulumi.Input[str]]:
         """
-        The listening protocol. Valid values: **TCP**, **UDP**, or **TCPSSL**.
+        The listening protocol. Valid values: `TCP`, `UDP`, and `TCPSSL`.
         """
         return pulumi.get(self, "listener_protocol")
 
@@ -616,7 +659,7 @@ class _ListenerState:
     @pulumi.getter(name="loadBalancerId")
     def load_balancer_id(self) -> Optional[pulumi.Input[str]]:
         """
-        The ID of the network-based server load balancer instance.
+        The ID of the Network Load Balancer (NLB) instance.
         """
         return pulumi.get(self, "load_balancer_id")
 
@@ -628,8 +671,9 @@ class _ListenerState:
     @pulumi.getter
     def mss(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum segment size of the TCP message. Unit: Bytes. Valid values: **0** ~ **1500**. **0** indicates that the MSS value of the TCP message is not modified.
-        > **NOTE:**  only TCP and TCPSSL listeners support this field value.
+        The maximum size of a TCP segment. Unit: bytes. Valid values: `0` to `1500`. `0` specifies that the maximum segment size remains unchanged.
+
+        > **NOTE:**  This parameter is supported only by TCP listeners and listeners that use SSL over TCP.
         """
         return pulumi.get(self, "mss")
 
@@ -641,9 +685,7 @@ class _ListenerState:
     @pulumi.getter(name="proxyProtocolEnabled")
     def proxy_protocol_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether to enable the Proxy Protocol to carry the source address of the client to the backend server. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to use the Proxy protocol to pass client IP addresses to backend servers. Valid values:
         """
         return pulumi.get(self, "proxy_protocol_enabled")
 
@@ -655,9 +697,7 @@ class _ListenerState:
     @pulumi.getter(name="secSensorEnabled")
     def sec_sensor_enabled(self) -> Optional[pulumi.Input[bool]]:
         """
-        Whether to turn on the second-level monitoring function. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to enable fine-grained monitoring. Valid values:
         """
         return pulumi.get(self, "sec_sensor_enabled")
 
@@ -669,8 +709,11 @@ class _ListenerState:
     @pulumi.getter(name="securityPolicyId")
     def security_policy_id(self) -> Optional[pulumi.Input[str]]:
         """
-        Security policy ID. Support system security policies and custom security policies. Valid values: **tls_cipher_policy_1_0**, **tls_cipher_policy_1_1**, **tls_cipher_policy_1_2**, **tls_cipher_policy_1_2_strict**, or **tls_cipher_policy_1_2_strict_with_1_3**.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The security policy ID. System security policies and custom security policies are supported.
+
+        Valid values: `tls_cipher_policy\\_1\\_0` (default), `tls_cipher_policy\\_1\\_1`, `tls_cipher_policy\\_1\\_2`, `tls_cipher_policy\\_1\\_2\\_strict`, and `tls_cipher_policy\\_1\\_2\\_strict_with\\_1\\_3`.
+
+        > **NOTE:**  This parameter takes effect only for listeners that use SSL over TCP.
         """
         return pulumi.get(self, "security_policy_id")
 
@@ -694,7 +737,9 @@ class _ListenerState:
     @pulumi.getter(name="startPort")
     def start_port(self) -> Optional[pulumi.Input[int]]:
         """
-        Full Port listens to the starting port. Valid values: **0** ~ **65535**.
+        The first port in the listener port range. Valid values: `0` to `65535`.
+
+        > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
         """
         return pulumi.get(self, "start_port")
 
@@ -706,7 +751,7 @@ class _ListenerState:
     @pulumi.getter
     def status(self) -> Optional[pulumi.Input[str]]:
         """
-        The status of the resource.
+        The status of the resource. Valid values: `Running`, `Stopped`. When you want to enable this instance, you can set the property value to `Running`;
         """
         return pulumi.get(self, "status")
 
@@ -716,14 +761,14 @@ class _ListenerState:
 
     @property
     @pulumi.getter
-    def tags(self) -> Optional[pulumi.Input[Mapping[str, Any]]]:
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
-        The tag of the resource.
+        The tag of the resource
         """
         return pulumi.get(self, "tags")
 
     @tags.setter
-    def tags(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "tags", value)
 
 
@@ -751,7 +796,7 @@ class Listener(pulumi.CustomResource):
                  server_group_id: Optional[pulumi.Input[str]] = None,
                  start_port: Optional[pulumi.Input[int]] = None,
                  status: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         """
         Provides a NLB Listener resource.
@@ -764,7 +809,6 @@ class Listener(pulumi.CustomResource):
 
         Basic Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_alicloud as alicloud
@@ -773,25 +817,27 @@ class Listener(pulumi.CustomResource):
         name = config.get("name")
         if name is None:
             name = "tf-example"
-        default_resource_groups = alicloud.resourcemanager.get_resource_groups()
-        default_zones = alicloud.nlb.get_zones()
-        default_network = alicloud.vpc.Network("defaultNetwork",
+        default = alicloud.resourcemanager.get_resource_groups()
+        default_get_zones = alicloud.nlb.get_zones()
+        default_network = alicloud.vpc.Network("default",
             vpc_name=name,
             cidr_block="10.4.0.0/16")
-        default_switch = alicloud.vpc.Switch("defaultSwitch",
+        default_switch = alicloud.vpc.Switch("default",
             vswitch_name=name,
             cidr_block="10.4.0.0/24",
             vpc_id=default_network.id,
-            zone_id=default_zones.zones[0].id)
+            zone_id=default_get_zones.zones[0].id)
         default1 = alicloud.vpc.Switch("default1",
             vswitch_name=name,
             cidr_block="10.4.1.0/24",
             vpc_id=default_network.id,
-            zone_id=default_zones.zones[1].id)
-        default_security_group = alicloud.ecs.SecurityGroup("defaultSecurityGroup", vpc_id=default_network.id)
-        default_load_balancer = alicloud.nlb.LoadBalancer("defaultLoadBalancer",
+            zone_id=default_get_zones.zones[1].id)
+        default_security_group = alicloud.ecs.SecurityGroup("default",
+            name=name,
+            vpc_id=default_network.id)
+        default_load_balancer = alicloud.nlb.LoadBalancer("default",
             load_balancer_name=name,
-            resource_group_id=default_resource_groups.ids[0],
+            resource_group_id=default.ids[0],
             load_balancer_type="Network",
             address_type="Internet",
             address_ip_version="Ipv4",
@@ -801,45 +847,45 @@ class Listener(pulumi.CustomResource):
                 "For": "example",
             },
             zone_mappings=[
-                alicloud.nlb.LoadBalancerZoneMappingArgs(
-                    vswitch_id=default_switch.id,
-                    zone_id=default_zones.zones[0].id,
-                ),
-                alicloud.nlb.LoadBalancerZoneMappingArgs(
-                    vswitch_id=default1.id,
-                    zone_id=default_zones.zones[1].id,
-                ),
+                {
+                    "vswitch_id": default_switch.id,
+                    "zone_id": default_get_zones.zones[0].id,
+                },
+                {
+                    "vswitch_id": default1.id,
+                    "zone_id": default_get_zones.zones[1].id,
+                },
             ])
-        default_server_group = alicloud.nlb.ServerGroup("defaultServerGroup",
-            resource_group_id=default_resource_groups.ids[0],
+        default_server_group = alicloud.nlb.ServerGroup("default",
+            resource_group_id=default.ids[0],
             server_group_name=name,
             server_group_type="Instance",
             vpc_id=default_network.id,
             scheduler="Wrr",
             protocol="TCP",
-            connection_drain=True,
+            connection_drain_enabled=True,
             connection_drain_timeout=60,
             address_ip_version="Ipv4",
-            health_check=alicloud.nlb.ServerGroupHealthCheckArgs(
-                health_check_enabled=True,
-                health_check_type="TCP",
-                health_check_connect_port=0,
-                healthy_threshold=2,
-                unhealthy_threshold=2,
-                health_check_connect_timeout=5,
-                health_check_interval=10,
-                http_check_method="GET",
-                health_check_http_codes=[
+            health_check={
+                "health_check_enabled": True,
+                "health_check_type": "TCP",
+                "health_check_connect_port": 0,
+                "healthy_threshold": 2,
+                "unhealthy_threshold": 2,
+                "health_check_connect_timeout": 5,
+                "health_check_interval": 10,
+                "http_check_method": "GET",
+                "health_check_http_codes": [
                     "http_2xx",
                     "http_3xx",
                     "http_4xx",
                 ],
-            ),
+            },
             tags={
                 "Created": "TF",
                 "For": "example",
             })
-        default_listener = alicloud.nlb.Listener("defaultListener",
+        default_listener = alicloud.nlb.Listener("default",
             listener_protocol="TCP",
             listener_port=80,
             listener_description=name,
@@ -847,11 +893,9 @@ class Listener(pulumi.CustomResource):
             server_group_id=default_server_group.id,
             idle_timeout=900,
             proxy_protocol_enabled=True,
-            sec_sensor_enabled=True,
             cps=10000,
             mss=0)
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Import
 
@@ -863,42 +907,52 @@ class Listener(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[bool] alpn_enabled: Whether ALPN is turned on. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] alpn_policy: ALPN policy. Value:
-               - **HTTP1Only**
-               - **HTTP2Only**
-               - **HTTP2Preferred**
-               - **HTTP2Optional**.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: CA certificate list information. Currently, only one CA certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[bool] ca_enabled: Whether to start two-way authentication. Value:
-               - **true**: start.
-               - **false**: closed.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: Server certificate list information. Currently, only one server certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[int] cps: The new connection speed limit for a network-based load balancing instance per second. Valid values: **0** ~ **1000000**. **0** indicates unlimited speed.
-        :param pulumi.Input[int] end_port: Full port listening end port. Valid values: **0** ~ **65535 * *. The value of the end port is less than the start port.
-        :param pulumi.Input[int] idle_timeout: Connection idle timeout time. Unit: seconds. Valid values: **1** ~ **900**.
-        :param pulumi.Input[str] listener_description: Custom listener name.The length is limited to 2 to 256 characters, supports Chinese and English letters, and can include numbers, commas (,), half-width periods (.), half-width semicolons (;), forward slashes (/), at(@), underscores (_), and dashes (-).
-        :param pulumi.Input[int] listener_port: Listening port. Valid values: **0** ~ **65535 * *. **0**: indicates that full port listening is used. When set to **0**, you must configure **StartPort** and **EndPort**.
-        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: **TCP**, **UDP**, or **TCPSSL**.
-        :param pulumi.Input[str] load_balancer_id: The ID of the network-based server load balancer instance.
-        :param pulumi.Input[int] mss: The maximum segment size of the TCP message. Unit: Bytes. Valid values: **0** ~ **1500**. **0** indicates that the MSS value of the TCP message is not modified.
-               > **NOTE:**  only TCP and TCPSSL listeners support this field value.
-        :param pulumi.Input[bool] proxy_protocol_enabled: Whether to enable the Proxy Protocol to carry the source address of the client to the backend server. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[bool] sec_sensor_enabled: Whether to turn on the second-level monitoring function. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] security_policy_id: Security policy ID. Support system security policies and custom security policies. Valid values: **tls_cipher_policy_1_0**, **tls_cipher_policy_1_1**, **tls_cipher_policy_1_2**, **tls_cipher_policy_1_2_strict**, or **tls_cipher_policy_1_2_strict_with_1_3**.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        :param pulumi.Input[bool] alpn_enabled: Specifies whether to enable Application-Layer Protocol Negotiation (ALPN). Valid values:
+        :param pulumi.Input[str] alpn_policy: The ALPN policy. Valid values:
+               - `HTTP1Only`: uses only HTTP 1.x. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               - `HTTP2Only`: uses only HTTP 2.0.
+               - `HTTP2Optional`: preferentially uses HTTP 1.x over HTTP 2.0. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0, and the priority of HTTP 1.0 is higher than the priority of HTTP 2.0.
+               - `HTTP2Preferred`: preferentially uses HTTP 2.0 over HTTP 1.x. The priority of HTTP 2.0 is higher than the priority of HTTP 1.1, and the priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               
+               > **NOTE:**  This parameter is required if AlpnEnabled is set to true.
+               
+               > **NOTE:**  Effective only for TCPSSL listener.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: The list of certificate authority (CA) certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  Only one CA certificate is supported.
+        :param pulumi.Input[bool] ca_enabled: Specifies whether to enable mutual authentication. Valid values:
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: The list of server certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  This parameter takes effect only for TCPSSL listeners.
+        :param pulumi.Input[int] cps: The maximum number of connections that can be created per second on the NLB instance. Valid values: `0` to `1000000`. `0` specifies that the number of connections is unlimited.
+        :param pulumi.Input[int] end_port: The last port in the listener port range. Valid values: `0` to `65535`. The number of the last port must be greater than the number of the first port.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[int] idle_timeout: The timeout period of idle connections. Unit: seconds. Valid values: `1` to `900`. Default value: `900`.
+        :param pulumi.Input[str] listener_description: Enter a name for the listener.
+               
+               The description must be 2 to 256 characters in length, and can contain letters, digits, commas (,), periods (.), semicolons (;), forward slashes (/), at signs (@), underscores (\\_), and hyphens (-).
+        :param pulumi.Input[int] listener_port: The listener port. Valid values: `0` to `65535`.
+               
+               If you set the value to `0`, the listener listens by port range. If you set the value to `0`, you must specify `StartPort` and `EndPort`.
+        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: `TCP`, `UDP`, and `TCPSSL`.
+        :param pulumi.Input[str] load_balancer_id: The ID of the Network Load Balancer (NLB) instance.
+        :param pulumi.Input[int] mss: The maximum size of a TCP segment. Unit: bytes. Valid values: `0` to `1500`. `0` specifies that the maximum segment size remains unchanged.
+               
+               > **NOTE:**  This parameter is supported only by TCP listeners and listeners that use SSL over TCP.
+        :param pulumi.Input[bool] proxy_protocol_enabled: Specifies whether to use the Proxy protocol to pass client IP addresses to backend servers. Valid values:
+        :param pulumi.Input[bool] sec_sensor_enabled: Specifies whether to enable fine-grained monitoring. Valid values:
+        :param pulumi.Input[str] security_policy_id: The security policy ID. System security policies and custom security policies are supported.
+               
+               Valid values: `tls_cipher_policy\\_1\\_0` (default), `tls_cipher_policy\\_1\\_1`, `tls_cipher_policy\\_1\\_2`, `tls_cipher_policy\\_1\\_2\\_strict`, and `tls_cipher_policy\\_1\\_2\\_strict_with\\_1\\_3`.
+               
+               > **NOTE:**  This parameter takes effect only for listeners that use SSL over TCP.
         :param pulumi.Input[str] server_group_id: The ID of the server group.
-        :param pulumi.Input[int] start_port: Full Port listens to the starting port. Valid values: **0** ~ **65535**.
-        :param pulumi.Input[str] status: The status of the resource.
-        :param pulumi.Input[Mapping[str, Any]] tags: The tag of the resource.
+        :param pulumi.Input[int] start_port: The first port in the listener port range. Valid values: `0` to `65535`.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[str] status: The status of the resource. Valid values: `Running`, `Stopped`. When you want to enable this instance, you can set the property value to `Running`;
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: The tag of the resource
         """
         ...
     @overload
@@ -917,7 +971,6 @@ class Listener(pulumi.CustomResource):
 
         Basic Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_alicloud as alicloud
@@ -926,25 +979,27 @@ class Listener(pulumi.CustomResource):
         name = config.get("name")
         if name is None:
             name = "tf-example"
-        default_resource_groups = alicloud.resourcemanager.get_resource_groups()
-        default_zones = alicloud.nlb.get_zones()
-        default_network = alicloud.vpc.Network("defaultNetwork",
+        default = alicloud.resourcemanager.get_resource_groups()
+        default_get_zones = alicloud.nlb.get_zones()
+        default_network = alicloud.vpc.Network("default",
             vpc_name=name,
             cidr_block="10.4.0.0/16")
-        default_switch = alicloud.vpc.Switch("defaultSwitch",
+        default_switch = alicloud.vpc.Switch("default",
             vswitch_name=name,
             cidr_block="10.4.0.0/24",
             vpc_id=default_network.id,
-            zone_id=default_zones.zones[0].id)
+            zone_id=default_get_zones.zones[0].id)
         default1 = alicloud.vpc.Switch("default1",
             vswitch_name=name,
             cidr_block="10.4.1.0/24",
             vpc_id=default_network.id,
-            zone_id=default_zones.zones[1].id)
-        default_security_group = alicloud.ecs.SecurityGroup("defaultSecurityGroup", vpc_id=default_network.id)
-        default_load_balancer = alicloud.nlb.LoadBalancer("defaultLoadBalancer",
+            zone_id=default_get_zones.zones[1].id)
+        default_security_group = alicloud.ecs.SecurityGroup("default",
+            name=name,
+            vpc_id=default_network.id)
+        default_load_balancer = alicloud.nlb.LoadBalancer("default",
             load_balancer_name=name,
-            resource_group_id=default_resource_groups.ids[0],
+            resource_group_id=default.ids[0],
             load_balancer_type="Network",
             address_type="Internet",
             address_ip_version="Ipv4",
@@ -954,45 +1009,45 @@ class Listener(pulumi.CustomResource):
                 "For": "example",
             },
             zone_mappings=[
-                alicloud.nlb.LoadBalancerZoneMappingArgs(
-                    vswitch_id=default_switch.id,
-                    zone_id=default_zones.zones[0].id,
-                ),
-                alicloud.nlb.LoadBalancerZoneMappingArgs(
-                    vswitch_id=default1.id,
-                    zone_id=default_zones.zones[1].id,
-                ),
+                {
+                    "vswitch_id": default_switch.id,
+                    "zone_id": default_get_zones.zones[0].id,
+                },
+                {
+                    "vswitch_id": default1.id,
+                    "zone_id": default_get_zones.zones[1].id,
+                },
             ])
-        default_server_group = alicloud.nlb.ServerGroup("defaultServerGroup",
-            resource_group_id=default_resource_groups.ids[0],
+        default_server_group = alicloud.nlb.ServerGroup("default",
+            resource_group_id=default.ids[0],
             server_group_name=name,
             server_group_type="Instance",
             vpc_id=default_network.id,
             scheduler="Wrr",
             protocol="TCP",
-            connection_drain=True,
+            connection_drain_enabled=True,
             connection_drain_timeout=60,
             address_ip_version="Ipv4",
-            health_check=alicloud.nlb.ServerGroupHealthCheckArgs(
-                health_check_enabled=True,
-                health_check_type="TCP",
-                health_check_connect_port=0,
-                healthy_threshold=2,
-                unhealthy_threshold=2,
-                health_check_connect_timeout=5,
-                health_check_interval=10,
-                http_check_method="GET",
-                health_check_http_codes=[
+            health_check={
+                "health_check_enabled": True,
+                "health_check_type": "TCP",
+                "health_check_connect_port": 0,
+                "healthy_threshold": 2,
+                "unhealthy_threshold": 2,
+                "health_check_connect_timeout": 5,
+                "health_check_interval": 10,
+                "http_check_method": "GET",
+                "health_check_http_codes": [
                     "http_2xx",
                     "http_3xx",
                     "http_4xx",
                 ],
-            ),
+            },
             tags={
                 "Created": "TF",
                 "For": "example",
             })
-        default_listener = alicloud.nlb.Listener("defaultListener",
+        default_listener = alicloud.nlb.Listener("default",
             listener_protocol="TCP",
             listener_port=80,
             listener_description=name,
@@ -1000,11 +1055,9 @@ class Listener(pulumi.CustomResource):
             server_group_id=default_server_group.id,
             idle_timeout=900,
             proxy_protocol_enabled=True,
-            sec_sensor_enabled=True,
             cps=10000,
             mss=0)
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Import
 
@@ -1048,7 +1101,7 @@ class Listener(pulumi.CustomResource):
                  server_group_id: Optional[pulumi.Input[str]] = None,
                  start_port: Optional[pulumi.Input[int]] = None,
                  status: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -1115,7 +1168,7 @@ class Listener(pulumi.CustomResource):
             server_group_id: Optional[pulumi.Input[str]] = None,
             start_port: Optional[pulumi.Input[int]] = None,
             status: Optional[pulumi.Input[str]] = None,
-            tags: Optional[pulumi.Input[Mapping[str, Any]]] = None) -> 'Listener':
+            tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None) -> 'Listener':
         """
         Get an existing Listener resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -1123,42 +1176,52 @@ class Listener(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[bool] alpn_enabled: Whether ALPN is turned on. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] alpn_policy: ALPN policy. Value:
-               - **HTTP1Only**
-               - **HTTP2Only**
-               - **HTTP2Preferred**
-               - **HTTP2Optional**.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: CA certificate list information. Currently, only one CA certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[bool] ca_enabled: Whether to start two-way authentication. Value:
-               - **true**: start.
-               - **false**: closed.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: Server certificate list information. Currently, only one server certificate can be added.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
-        :param pulumi.Input[int] cps: The new connection speed limit for a network-based load balancing instance per second. Valid values: **0** ~ **1000000**. **0** indicates unlimited speed.
-        :param pulumi.Input[int] end_port: Full port listening end port. Valid values: **0** ~ **65535 * *. The value of the end port is less than the start port.
-        :param pulumi.Input[int] idle_timeout: Connection idle timeout time. Unit: seconds. Valid values: **1** ~ **900**.
-        :param pulumi.Input[str] listener_description: Custom listener name.The length is limited to 2 to 256 characters, supports Chinese and English letters, and can include numbers, commas (,), half-width periods (.), half-width semicolons (;), forward slashes (/), at(@), underscores (_), and dashes (-).
-        :param pulumi.Input[int] listener_port: Listening port. Valid values: **0** ~ **65535 * *. **0**: indicates that full port listening is used. When set to **0**, you must configure **StartPort** and **EndPort**.
-        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: **TCP**, **UDP**, or **TCPSSL**.
-        :param pulumi.Input[str] load_balancer_id: The ID of the network-based server load balancer instance.
-        :param pulumi.Input[int] mss: The maximum segment size of the TCP message. Unit: Bytes. Valid values: **0** ~ **1500**. **0** indicates that the MSS value of the TCP message is not modified.
-               > **NOTE:**  only TCP and TCPSSL listeners support this field value.
-        :param pulumi.Input[bool] proxy_protocol_enabled: Whether to enable the Proxy Protocol to carry the source address of the client to the backend server. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[bool] sec_sensor_enabled: Whether to turn on the second-level monitoring function. Value:
-               - **true**: on.
-               - **false**: closed.
-        :param pulumi.Input[str] security_policy_id: Security policy ID. Support system security policies and custom security policies. Valid values: **tls_cipher_policy_1_0**, **tls_cipher_policy_1_1**, **tls_cipher_policy_1_2**, **tls_cipher_policy_1_2_strict**, or **tls_cipher_policy_1_2_strict_with_1_3**.
-               > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        :param pulumi.Input[bool] alpn_enabled: Specifies whether to enable Application-Layer Protocol Negotiation (ALPN). Valid values:
+        :param pulumi.Input[str] alpn_policy: The ALPN policy. Valid values:
+               - `HTTP1Only`: uses only HTTP 1.x. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               - `HTTP2Only`: uses only HTTP 2.0.
+               - `HTTP2Optional`: preferentially uses HTTP 1.x over HTTP 2.0. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0, and the priority of HTTP 1.0 is higher than the priority of HTTP 2.0.
+               - `HTTP2Preferred`: preferentially uses HTTP 2.0 over HTTP 1.x. The priority of HTTP 2.0 is higher than the priority of HTTP 1.1, and the priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+               
+               > **NOTE:**  This parameter is required if AlpnEnabled is set to true.
+               
+               > **NOTE:**  Effective only for TCPSSL listener.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] ca_certificate_ids: The list of certificate authority (CA) certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  Only one CA certificate is supported.
+        :param pulumi.Input[bool] ca_enabled: Specifies whether to enable mutual authentication. Valid values:
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] certificate_ids: The list of server certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+               
+               > **NOTE:**  This parameter takes effect only for TCPSSL listeners.
+        :param pulumi.Input[int] cps: The maximum number of connections that can be created per second on the NLB instance. Valid values: `0` to `1000000`. `0` specifies that the number of connections is unlimited.
+        :param pulumi.Input[int] end_port: The last port in the listener port range. Valid values: `0` to `65535`. The number of the last port must be greater than the number of the first port.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[int] idle_timeout: The timeout period of idle connections. Unit: seconds. Valid values: `1` to `900`. Default value: `900`.
+        :param pulumi.Input[str] listener_description: Enter a name for the listener.
+               
+               The description must be 2 to 256 characters in length, and can contain letters, digits, commas (,), periods (.), semicolons (;), forward slashes (/), at signs (@), underscores (\\_), and hyphens (-).
+        :param pulumi.Input[int] listener_port: The listener port. Valid values: `0` to `65535`.
+               
+               If you set the value to `0`, the listener listens by port range. If you set the value to `0`, you must specify `StartPort` and `EndPort`.
+        :param pulumi.Input[str] listener_protocol: The listening protocol. Valid values: `TCP`, `UDP`, and `TCPSSL`.
+        :param pulumi.Input[str] load_balancer_id: The ID of the Network Load Balancer (NLB) instance.
+        :param pulumi.Input[int] mss: The maximum size of a TCP segment. Unit: bytes. Valid values: `0` to `1500`. `0` specifies that the maximum segment size remains unchanged.
+               
+               > **NOTE:**  This parameter is supported only by TCP listeners and listeners that use SSL over TCP.
+        :param pulumi.Input[bool] proxy_protocol_enabled: Specifies whether to use the Proxy protocol to pass client IP addresses to backend servers. Valid values:
+        :param pulumi.Input[bool] sec_sensor_enabled: Specifies whether to enable fine-grained monitoring. Valid values:
+        :param pulumi.Input[str] security_policy_id: The security policy ID. System security policies and custom security policies are supported.
+               
+               Valid values: `tls_cipher_policy\\_1\\_0` (default), `tls_cipher_policy\\_1\\_1`, `tls_cipher_policy\\_1\\_2`, `tls_cipher_policy\\_1\\_2\\_strict`, and `tls_cipher_policy\\_1\\_2\\_strict_with\\_1\\_3`.
+               
+               > **NOTE:**  This parameter takes effect only for listeners that use SSL over TCP.
         :param pulumi.Input[str] server_group_id: The ID of the server group.
-        :param pulumi.Input[int] start_port: Full Port listens to the starting port. Valid values: **0** ~ **65535**.
-        :param pulumi.Input[str] status: The status of the resource.
-        :param pulumi.Input[Mapping[str, Any]] tags: The tag of the resource.
+        :param pulumi.Input[int] start_port: The first port in the listener port range. Valid values: `0` to `65535`.
+               
+               > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
+        :param pulumi.Input[str] status: The status of the resource. Valid values: `Running`, `Stopped`. When you want to enable this instance, you can set the property value to `Running`;
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: The tag of the resource
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -1190,9 +1253,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="alpnEnabled")
     def alpn_enabled(self) -> pulumi.Output[bool]:
         """
-        Whether ALPN is turned on. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to enable Application-Layer Protocol Negotiation (ALPN). Valid values:
         """
         return pulumi.get(self, "alpn_enabled")
 
@@ -1200,11 +1261,15 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="alpnPolicy")
     def alpn_policy(self) -> pulumi.Output[Optional[str]]:
         """
-        ALPN policy. Value:
-        - **HTTP1Only**
-        - **HTTP2Only**
-        - **HTTP2Preferred**
-        - **HTTP2Optional**.
+        The ALPN policy. Valid values:
+        - `HTTP1Only`: uses only HTTP 1.x. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+        - `HTTP2Only`: uses only HTTP 2.0.
+        - `HTTP2Optional`: preferentially uses HTTP 1.x over HTTP 2.0. The priority of HTTP 1.1 is higher than the priority of HTTP 1.0, and the priority of HTTP 1.0 is higher than the priority of HTTP 2.0.
+        - `HTTP2Preferred`: preferentially uses HTTP 2.0 over HTTP 1.x. The priority of HTTP 2.0 is higher than the priority of HTTP 1.1, and the priority of HTTP 1.1 is higher than the priority of HTTP 1.0.
+
+        > **NOTE:**  This parameter is required if AlpnEnabled is set to true.
+
+        > **NOTE:**  Effective only for TCPSSL listener.
         """
         return pulumi.get(self, "alpn_policy")
 
@@ -1212,8 +1277,9 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="caCertificateIds")
     def ca_certificate_ids(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        CA certificate list information. Currently, only one CA certificate can be added.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The list of certificate authority (CA) certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+
+        > **NOTE:**  Only one CA certificate is supported.
         """
         return pulumi.get(self, "ca_certificate_ids")
 
@@ -1221,9 +1287,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="caEnabled")
     def ca_enabled(self) -> pulumi.Output[bool]:
         """
-        Whether to start two-way authentication. Value:
-        - **true**: start.
-        - **false**: closed.
+        Specifies whether to enable mutual authentication. Valid values:
         """
         return pulumi.get(self, "ca_enabled")
 
@@ -1231,8 +1295,9 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="certificateIds")
     def certificate_ids(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        Server certificate list information. Currently, only one server certificate can be added.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The list of server certificates. This parameter takes effect only for listeners that use SSL over TCP. 
+
+        > **NOTE:**  This parameter takes effect only for TCPSSL listeners.
         """
         return pulumi.get(self, "certificate_ids")
 
@@ -1240,7 +1305,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter
     def cps(self) -> pulumi.Output[Optional[int]]:
         """
-        The new connection speed limit for a network-based load balancing instance per second. Valid values: **0** ~ **1000000**. **0** indicates unlimited speed.
+        The maximum number of connections that can be created per second on the NLB instance. Valid values: `0` to `1000000`. `0` specifies that the number of connections is unlimited.
         """
         return pulumi.get(self, "cps")
 
@@ -1248,7 +1313,9 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="endPort")
     def end_port(self) -> pulumi.Output[Optional[int]]:
         """
-        Full port listening end port. Valid values: **0** ~ **65535 * *. The value of the end port is less than the start port.
+        The last port in the listener port range. Valid values: `0` to `65535`. The number of the last port must be greater than the number of the first port.
+
+        > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
         """
         return pulumi.get(self, "end_port")
 
@@ -1256,7 +1323,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="idleTimeout")
     def idle_timeout(self) -> pulumi.Output[int]:
         """
-        Connection idle timeout time. Unit: seconds. Valid values: **1** ~ **900**.
+        The timeout period of idle connections. Unit: seconds. Valid values: `1` to `900`. Default value: `900`.
         """
         return pulumi.get(self, "idle_timeout")
 
@@ -1264,7 +1331,9 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="listenerDescription")
     def listener_description(self) -> pulumi.Output[Optional[str]]:
         """
-        Custom listener name.The length is limited to 2 to 256 characters, supports Chinese and English letters, and can include numbers, commas (,), half-width periods (.), half-width semicolons (;), forward slashes (/), at(@), underscores (_), and dashes (-).
+        Enter a name for the listener.
+
+        The description must be 2 to 256 characters in length, and can contain letters, digits, commas (,), periods (.), semicolons (;), forward slashes (/), at signs (@), underscores (\\_), and hyphens (-).
         """
         return pulumi.get(self, "listener_description")
 
@@ -1272,7 +1341,9 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="listenerPort")
     def listener_port(self) -> pulumi.Output[int]:
         """
-        Listening port. Valid values: **0** ~ **65535 * *. **0**: indicates that full port listening is used. When set to **0**, you must configure **StartPort** and **EndPort**.
+        The listener port. Valid values: `0` to `65535`.
+
+        If you set the value to `0`, the listener listens by port range. If you set the value to `0`, you must specify `StartPort` and `EndPort`.
         """
         return pulumi.get(self, "listener_port")
 
@@ -1280,7 +1351,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="listenerProtocol")
     def listener_protocol(self) -> pulumi.Output[str]:
         """
-        The listening protocol. Valid values: **TCP**, **UDP**, or **TCPSSL**.
+        The listening protocol. Valid values: `TCP`, `UDP`, and `TCPSSL`.
         """
         return pulumi.get(self, "listener_protocol")
 
@@ -1288,7 +1359,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="loadBalancerId")
     def load_balancer_id(self) -> pulumi.Output[str]:
         """
-        The ID of the network-based server load balancer instance.
+        The ID of the Network Load Balancer (NLB) instance.
         """
         return pulumi.get(self, "load_balancer_id")
 
@@ -1296,8 +1367,9 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter
     def mss(self) -> pulumi.Output[Optional[int]]:
         """
-        The maximum segment size of the TCP message. Unit: Bytes. Valid values: **0** ~ **1500**. **0** indicates that the MSS value of the TCP message is not modified.
-        > **NOTE:**  only TCP and TCPSSL listeners support this field value.
+        The maximum size of a TCP segment. Unit: bytes. Valid values: `0` to `1500`. `0` specifies that the maximum segment size remains unchanged.
+
+        > **NOTE:**  This parameter is supported only by TCP listeners and listeners that use SSL over TCP.
         """
         return pulumi.get(self, "mss")
 
@@ -1305,9 +1377,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="proxyProtocolEnabled")
     def proxy_protocol_enabled(self) -> pulumi.Output[bool]:
         """
-        Whether to enable the Proxy Protocol to carry the source address of the client to the backend server. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to use the Proxy protocol to pass client IP addresses to backend servers. Valid values:
         """
         return pulumi.get(self, "proxy_protocol_enabled")
 
@@ -1315,9 +1385,7 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="secSensorEnabled")
     def sec_sensor_enabled(self) -> pulumi.Output[bool]:
         """
-        Whether to turn on the second-level monitoring function. Value:
-        - **true**: on.
-        - **false**: closed.
+        Specifies whether to enable fine-grained monitoring. Valid values:
         """
         return pulumi.get(self, "sec_sensor_enabled")
 
@@ -1325,8 +1393,11 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="securityPolicyId")
     def security_policy_id(self) -> pulumi.Output[str]:
         """
-        Security policy ID. Support system security policies and custom security policies. Valid values: **tls_cipher_policy_1_0**, **tls_cipher_policy_1_1**, **tls_cipher_policy_1_2**, **tls_cipher_policy_1_2_strict**, or **tls_cipher_policy_1_2_strict_with_1_3**.
-        > **NOTE:**  This parameter only takes effect for TCPSSL listeners.
+        The security policy ID. System security policies and custom security policies are supported.
+
+        Valid values: `tls_cipher_policy\\_1\\_0` (default), `tls_cipher_policy\\_1\\_1`, `tls_cipher_policy\\_1\\_2`, `tls_cipher_policy\\_1\\_2\\_strict`, and `tls_cipher_policy\\_1\\_2\\_strict_with\\_1\\_3`.
+
+        > **NOTE:**  This parameter takes effect only for listeners that use SSL over TCP.
         """
         return pulumi.get(self, "security_policy_id")
 
@@ -1342,7 +1413,9 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter(name="startPort")
     def start_port(self) -> pulumi.Output[Optional[int]]:
         """
-        Full Port listens to the starting port. Valid values: **0** ~ **65535**.
+        The first port in the listener port range. Valid values: `0` to `65535`.
+
+        > **NOTE:**  This parameter is required when `ListenerPort` is set to `0`.
         """
         return pulumi.get(self, "start_port")
 
@@ -1350,15 +1423,15 @@ class Listener(pulumi.CustomResource):
     @pulumi.getter
     def status(self) -> pulumi.Output[str]:
         """
-        The status of the resource.
+        The status of the resource. Valid values: `Running`, `Stopped`. When you want to enable this instance, you can set the property value to `Running`;
         """
         return pulumi.get(self, "status")
 
     @property
     @pulumi.getter
-    def tags(self) -> pulumi.Output[Optional[Mapping[str, Any]]]:
+    def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
         """
-        The tag of the resource.
+        The tag of the resource
         """
         return pulumi.get(self, "tags")