Class SslPolicy (1.18.0)

SslPolicy(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Represents an SSL Policy resource. Use SSL policies to control SSL features, such as versions and cipher suites, that are offered by Application Load Balancers and proxy Network Load Balancers. For more information, read SSL policies overview.

.. _oneof: https://proto-plus-python.readthedocs.io/en/stable/fields.html#oneofs-mutually-exclusive-fields

Attributes

NameDescription
creation_timestamp str
[Output Only] Creation timestamp in RFC3339 text format. This field is a member of oneof_ _creation_timestamp.
custom_features MutableSequence[str]
A list of features enabled when the selected profile is CUSTOM. The method returns the set of features that can be specified in this list. This field must be empty if the profile is not CUSTOM.
description str
An optional description of this resource. Provide this property when you create the resource. This field is a member of oneof_ _description.
enabled_features MutableSequence[str]
[Output Only] The list of features enabled in the SSL policy.
fingerprint str
Fingerprint of this resource. A hash of the contents stored in this object. This field is used in optimistic locking. This field will be ignored when inserting a SslPolicy. An up-to-date fingerprint must be provided in order to update the SslPolicy, otherwise the request will fail with error 412 conditionNotMet. To see the latest fingerprint, make a get() request to retrieve an SslPolicy. This field is a member of oneof_ _fingerprint.
id int
[Output Only] The unique identifier for the resource. This identifier is defined by the server. This field is a member of oneof_ _id.
kind str
[Output only] Type of the resource. Always compute#sslPolicyfor SSL policies. This field is a member of oneof_ _kind.
min_tls_version str
The minimum version of SSL protocol that can be used by the clients to establish a connection with the load balancer. This can be one of TLS_1_0, TLS_1_1, TLS_1_2. Check the MinTlsVersion enum for the list of possible values. This field is a member of oneof_ _min_tls_version.
name str
Name of the resource. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash. This field is a member of oneof_ _name.
profile str
Profile specifies the set of SSL features that can be used by the load balancer when negotiating SSL with clients. This can be one of COMPATIBLE, MODERN, RESTRICTED, or CUSTOM. If using CUSTOM, the set of SSL features to enable must be specified in the customFeatures field. Check the Profile enum for the list of possible values. This field is a member of oneof_ _profile.
region str
[Output Only] URL of the region where the regional SSL policy resides. This field is not applicable to global SSL policies. This field is a member of oneof_ _region.
self_link str
[Output Only] Server-defined URL for the resource. This field is a member of oneof_ _self_link.
warnings MutableSequence[google.cloud.compute_v1.types.Warnings]
[Output Only] If potential misconfigurations are detected for this SSL policy, this field will be populated with warning messages.

Classes

MinTlsVersion

MinTlsVersion(value)

The minimum version of SSL protocol that can be used by the clients to establish a connection with the load balancer. This can be one of TLS_1_0, TLS_1_1, TLS_1_2.

Values: UNDEFINED_MIN_TLS_VERSION (0): A value indicating that the enum field is not set. TLS_1_0 (33116734): TLS 1.0 TLS_1_1 (33116735): TLS 1.1 TLS_1_2 (33116736): TLS 1.2

Profile

Profile(value)

Profile specifies the set of SSL features that can be used by the load balancer when negotiating SSL with clients. This can be one of COMPATIBLE, MODERN, RESTRICTED, or CUSTOM. If using CUSTOM, the set of SSL features to enable must be specified in the customFeatures field.

Values: UNDEFINED_PROFILE (0): A value indicating that the enum field is not set. COMPATIBLE (179357396): Compatible profile. Allows the broadset set of clients, even those which support only out-of-date SSL features to negotiate with the load balancer. CUSTOM (388595569): Custom profile. Allow only the set of allowed SSL features specified in the customFeatures field. MODERN (132013855): Modern profile. Supports a wide set of SSL features, allowing modern clients to negotiate SSL with the load balancer. RESTRICTED (261551195): Restricted profile. Supports a reduced set of SSL features, intended to meet stricter compliance requirements.