gcloud alpha compute network-firewall-policies mirroring-rules update

gcloud alpha compute network-firewall-policies mirroring-rules update - updates a Compute Engine network firewall policy packet mirroring rule

gcloud alpha compute network-firewall-policies mirroring-rules update PRIORITY --firewall-policy=FIREWALL_POLICY --global-firewall-policy [--action=ACTION] [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,…]] [--direction=DIRECTION] [--[no-]disabled] [--layer4-configs=[LAYER4_CONFIG,…]] [--new-priority=NEW_PRIORITY] [--security-profile-group=SECURITY_PROFILE_GROUP] [--src-ip-ranges=[SRC_IP_RANGE,…]] [GCLOUD_WIDE_FLAG …]

gcloud alpha compute network-firewall-policies mirroring-rules update 10 --firewall-policy=my-policy --action=mirror --description="new example rule"

PRIORITY

Priority of the rule to be updated. Valid in [0, 65535].

--firewall-policy=FIREWALL_POLICY

Firewall policy ID with which to update rule.

--global-firewall-policy

Use this flag to indicate that firewall policy is global.

--action=ACTION

Action to take if the request matches the match condition. ACTION must be one of: mirror, do_not_mirror, goto_next.

--description=DESCRIPTION

An optional, textual description for the rule.

--dest-ip-ranges=[DEST_IP_RANGE,…]

Destination IP ranges to match for this rule.

--direction=DIRECTION

Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS.

--[no-]disabled

Use this flag to disable the rule. Disabled rules will not affect traffic. Use --disabled to enable and --no-disabled to disable.

--layer4-configs=[LAYER4_CONFIG,…]

A list of destination protocols and ports to which the firewall rule will apply.

--new-priority=NEW_PRIORITY

New priority for the rule to update. Valid in [0, 65535].

--security-profile-group=SECURITY_PROFILE_GROUP

A security profile group to be used with apply_security_profile_group action.

--src-ip-ranges=[SRC_IP_RANGE,…]

A list of IP address blocks that are allowed to make inbound connections that match the firewall rule to the instances on the network. The IP address blocks must be specified in CIDR format: http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing.Either --src-ip-ranges or --src-secure-tags must be specified for INGRESS traffic. If both --src-ip-ranges and --src-secure-tags are specified, the rule matches if either the range of the source matches --src-ip-ranges or the secure tag of the source matches --src-secure-tags.Multiple IP address blocks can be specified if they are separated by commas.

Run $ gcloud help for details.