public sealed class FirewallPolicyRuleMatcher : IMessage<FirewallPolicyRuleMatcher>, IEquatable<FirewallPolicyRuleMatcher>, IDeepCloneable<FirewallPolicyRuleMatcher>, IBufferMessage, IMessageReference documentation and code samples for the Compute Engine v1 API class FirewallPolicyRuleMatcher.
Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.
Implements
IMessageFirewallPolicyRuleMatcher, IEquatableFirewallPolicyRuleMatcher, IDeepCloneableFirewallPolicyRuleMatcher, IBufferMessage, IMessageNamespace
Google.Cloud.Compute.V1Assembly
Google.Cloud.Compute.V1.dll
Constructors
FirewallPolicyRuleMatcher()
public FirewallPolicyRuleMatcher()FirewallPolicyRuleMatcher(FirewallPolicyRuleMatcher)
public FirewallPolicyRuleMatcher(FirewallPolicyRuleMatcher other)| Parameter | |
|---|---|
| Name | Description |
other |
FirewallPolicyRuleMatcher |
Properties
DestAddressGroups
public RepeatedField<string> DestAddressGroups { get; }Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
DestFqdns
public RepeatedField<string> DestFqdns { get; }Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
DestIpRanges
public RepeatedField<string> DestIpRanges { get; }CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
DestNetworkType
public string DestNetworkType { get; set; }Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET Check the DestNetworkType enum for the list of possible values.
| Property Value | |
|---|---|
| Type | Description |
string |
|
DestRegionCodes
public RepeatedField<string> DestRegionCodes { get; }Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
DestThreatIntelligences
public RepeatedField<string> DestThreatIntelligences { get; }Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
HasDestNetworkType
public bool HasDestNetworkType { get; }Gets whether the "dest_network_type" field is set
| Property Value | |
|---|---|
| Type | Description |
bool |
|
HasSrcNetworkType
public bool HasSrcNetworkType { get; }Gets whether the "src_network_type" field is set
| Property Value | |
|---|---|
| Type | Description |
bool |
|
Layer4Configs
public RepeatedField<FirewallPolicyRuleMatcherLayer4Config> Layer4Configs { get; }Pairs of IP protocols and ports that the rule should match.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldFirewallPolicyRuleMatcherLayer4Config |
|
SrcAddressGroups
public RepeatedField<string> SrcAddressGroups { get; }Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
SrcFqdns
public RepeatedField<string> SrcFqdns { get; }Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
SrcIpRanges
public RepeatedField<string> SrcIpRanges { get; }CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
SrcNetworkType
public string SrcNetworkType { get; set; }Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS Check the SrcNetworkType enum for the list of possible values.
| Property Value | |
|---|---|
| Type | Description |
string |
|
SrcNetworks
public RepeatedField<string> SrcNetworks { get; }Networks of the traffic source. It can be either a full or partial url.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
SrcRegionCodes
public RepeatedField<string> SrcRegionCodes { get; }Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
SrcSecureTags
public RepeatedField<FirewallPolicyRuleSecureTag> SrcSecureTags { get; }List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldFirewallPolicyRuleSecureTag |
|
SrcThreatIntelligences
public RepeatedField<string> SrcThreatIntelligences { get; }Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|