Class: Google::Cloud::Compute::V1::FirewallPolicyRuleMatcher
- Inherits:
-
Object
- Object
- Google::Cloud::Compute::V1::FirewallPolicyRuleMatcher
- Extended by:
- Protobuf::MessageExts::ClassMethods
- Includes:
- Protobuf::MessageExts
- Defined in:
- proto_docs/google/cloud/compute/v1/compute.rb
Overview
Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.
Defined Under Namespace
Modules: DestNetworkType, SrcNetworkType
Instance Attribute Summary collapse
-
#dest_address_groups ⇒ ::Array<::String>
Address groups which should be matched against the traffic destination.
-
#dest_fqdns ⇒ ::Array<::String>
Fully Qualified Domain Name (FQDN) which should be matched against traffic destination.
-
#dest_ip_ranges ⇒ ::Array<::String>
CIDR IP address range.
-
#dest_network_type ⇒ ::String
Network type of the traffic destination.
-
#dest_region_codes ⇒ ::Array<::String>
Region codes whose IP addresses will be used to match for destination of traffic.
-
#dest_threat_intelligences ⇒ ::Array<::String>
Names of Network Threat Intelligence lists.
-
#layer4_configs ⇒ ::Array<::Google::Cloud::Compute::V1::FirewallPolicyRuleMatcherLayer4Config>
Pairs of IP protocols and ports that the rule should match.
-
#src_address_groups ⇒ ::Array<::String>
Address groups which should be matched against the traffic source.
-
#src_fqdns ⇒ ::Array<::String>
Fully Qualified Domain Name (FQDN) which should be matched against traffic source.
-
#src_ip_ranges ⇒ ::Array<::String>
CIDR IP address range.
-
#src_network_type ⇒ ::String
Network type of the traffic source.
-
#src_networks ⇒ ::Array<::String>
Networks of the traffic source.
-
#src_region_codes ⇒ ::Array<::String>
Region codes whose IP addresses will be used to match for source of traffic.
-
#src_secure_tags ⇒ ::Array<::Google::Cloud::Compute::V1::FirewallPolicyRuleSecureTag>
List of secure tag values, which should be matched at the source of the traffic.
-
#src_threat_intelligences ⇒ ::Array<::String>
Names of Network Threat Intelligence lists.
Instance Attribute Details
#dest_address_groups ⇒ ::Array<::String>
Returns Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#dest_fqdns ⇒ ::Array<::String>
Returns Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#dest_ip_ranges ⇒ ::Array<::String>
Returns CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#dest_network_type ⇒ ::String
Returns Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET Check the DestNetworkType enum for the list of possible values.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#dest_region_codes ⇒ ::Array<::String>
Returns Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#dest_threat_intelligences ⇒ ::Array<::String>
Returns Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#layer4_configs ⇒ ::Array<::Google::Cloud::Compute::V1::FirewallPolicyRuleMatcherLayer4Config>
Returns Pairs of IP protocols and ports that the rule should match.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_address_groups ⇒ ::Array<::String>
Returns Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_fqdns ⇒ ::Array<::String>
Returns Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_ip_ranges ⇒ ::Array<::String>
Returns CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_network_type ⇒ ::String
Returns Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS Check the SrcNetworkType enum for the list of possible values.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_networks ⇒ ::Array<::String>
Returns Networks of the traffic source. It can be either a full or partial url.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_region_codes ⇒ ::Array<::String>
Returns Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_secure_tags ⇒ ::Array<::Google::Cloud::Compute::V1::FirewallPolicyRuleSecureTag>
Returns List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |
#src_threat_intelligences ⇒ ::Array<::String>
Returns Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.
8860 8861 8862 8863 8864 8865 8866 8867 8868 8869 8870 8871 8872 8873 8874 8875 8876 8877 8878 8879 8880 8881 8882 8883 8884 8885 8886 8887 |
# File 'proto_docs/google/cloud/compute/v1/compute.rb', line 8860 class FirewallPolicyRuleMatcher include ::Google::Protobuf::MessageExts extend ::Google::Protobuf::MessageExts::ClassMethods # Network type of the traffic destination. Allowed values are: - UNSPECIFIED - INTERNET - NON_INTERNET # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module DestNetworkType # A value indicating that the enum field is not set. UNDEFINED_DEST_NETWORK_TYPE = 0 end # Network type of the traffic source. Allowed values are: - UNSPECIFIED - INTERNET - INTRA_VPC - NON_INTERNET - VPC_NETWORKS # Additional supported values which may be not listed in the enum directly due to technical reasons: # INTERNET # INTRA_VPC # NON_INTERNET # UNSPECIFIED # VPC_NETWORKS module SrcNetworkType # A value indicating that the enum field is not set. UNDEFINED_SRC_NETWORK_TYPE = 0 end end |