FirewallPolicyRuleMatch class
Constructors
-
FirewallPolicyRuleMatch({Input<List<String>?>? destAddressGroups, Input<List<String>?>? destFqdns, Input<List<String>?>? destIpRanges, Input<String?>? destNetworkContext, Input<String?>? destNetworkScope, Input<List<String>?>? destRegionCodes, Input<List<String>?>? destThreatIntelligences, required Input<List<FirewallPolicyRuleMatchLayer4Config>> layer4Configs, Input<List<String>?>? srcAddressGroups, Input<List<String>?>? srcFqdns, Input<List<String>?>? srcIpRanges, Input<String?>? srcNetworkContext, Input<String?>? srcNetworkScope, Input<List<String>?>? srcNetworks, Input<List<String>?>? srcRegionCodes, Input<List<FirewallPolicyRuleMatchSrcSecureTag>?>? srcSecureTags, Input<List<String>?>? srcThreatIntelligences})
-
Creates a new FirewallPolicyRuleMatch.
destAddressGroups Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.
destFqdns Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.
destIpRanges CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
destNetworkContext Network context of the traffic destination.
destNetworkScope (Optional, Beta)
destRegionCodes Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.
destThreatIntelligences Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.
layer4Configs Pairs of IP protocols and ports that the rule should match.
srcAddressGroups Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.
srcFqdns Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.
srcIpRanges CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
srcNetworkContext Network context of the traffic source.
srcNetworkScope (Optional, Beta)
srcNetworks Networks of the traffic source. It can be either a full or partial url.
srcRegionCodes Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.
srcSecureTags List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.
srcThreatIntelligences Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.
const
-
FirewallPolicyRuleMatch.fromMap(Map<String, dynamic> map)
-
factory
Properties
-
destAddressGroups
→ Input<List<String>?>?
-
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.
final
-
destFqdns
→ Input<List<String>?>?
-
Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.
final
-
destIpRanges
→ Input<List<String>?>?
-
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
final
-
destNetworkContext
→ Input<String?>?
-
Network context of the traffic destination.
Possible values are:
UNSPECIFIED, INTERNET, INTRA_VPC, NON_INTERNET, VPC_NETWORKS.
final
-
destNetworkScope
→ Input<String?>?
-
(Optional, Beta)
Network scope of the traffic destination.
Possible values are:
UNSPECIFIED, INTERNET, INTRA_VPC, NON_INTERNET, VPC_NETWORKS.
final
-
destRegionCodes
→ Input<List<String>?>?
-
Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.
final
-
destThreatIntelligences
→ Input<List<String>?>?
-
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.
final
-
hashCode
→ int
-
The hash code for this object.
no setterinherited
-
layer4Configs
→ Input<List<FirewallPolicyRuleMatchLayer4Config>>
-
Pairs of IP protocols and ports that the rule should match.
Structure is documented below.
final
-
runtimeType
→ Type
-
A representation of the runtime type of the object.
no setterinherited
-
srcAddressGroups
→ Input<List<String>?>?
-
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.
final
-
srcFqdns
→ Input<List<String>?>?
-
Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.
final
-
srcIpRanges
→ Input<List<String>?>?
-
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
final
-
srcNetworkContext
→ Input<String?>?
-
Network context of the traffic source.
Possible values are:
UNSPECIFIED, INTERNET, INTRA_VPC, NON_INTERNET, VPC_NETWORKS.
final
-
srcNetworks
→ Input<List<String>?>?
-
Networks of the traffic source. It can be either a full or partial url.
final
-
srcNetworkScope
→ Input<String?>?
-
(Optional, Beta)
Network scope of the traffic source.
Possible values are:
UNSPECIFIED, INTERNET, INTRA_VPC, NON_INTERNET, VPC_NETWORKS.
final
-
srcRegionCodes
→ Input<List<String>?>?
-
Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.
final
-
srcSecureTags
→ Input<List<FirewallPolicyRuleMatchSrcSecureTag>?>?
-
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.
Structure is documented below.
final
-
srcThreatIntelligences
→ Input<List<String>?>?
-
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.
final