ProfileServerSsl

f5bigip.ltm.ProfileServerSsl Manages server SSL profiles on a BIG-IP

Example Usage

using Pulumi;
using F5BigIP = Pulumi.F5BigIP;

class MyStack : Stack
{
    public MyStack()
    {
        var test_ServerSsl = new F5BigIP.Ltm.ProfileServerSsl("test-ServerSsl", new F5BigIP.Ltm.ProfileServerSslArgs
        {
            Authenticate = "always",
            Ciphers = "DEFAULT",
            DefaultsFrom = "/Common/serverssl",
            Name = "/Common/test-ServerSsl",
            Partition = "Common",
        });
    }

}

Coming soon!

import pulumi
import pulumi_f5bigip as f5bigip

test__server_ssl = f5bigip.ltm.ProfileServerSsl("test-ServerSsl",
    authenticate="always",
    ciphers="DEFAULT",
    defaults_from="/Common/serverssl",
    name="/Common/test-ServerSsl",
    partition="Common")

import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";

const test_ServerSsl = new f5bigip.ltm.ProfileServerSsl("test-ServerSsl", {
    authenticate: "always",
    ciphers: "DEFAULT",
    defaultsFrom: "/Common/serverssl",
    name: "/Common/test-ServerSsl",
    partition: "Common",
});

Create a ProfileServerSsl Resource

new ProfileServerSsl(name: string, args: ProfileServerSslArgs, opts?: CustomResourceOptions);

def ProfileServerSsl(resource_name, opts=None, alert_timeout=None, authenticate=None, authenticate_depth=None, ca_file=None, cache_size=None, cache_timeout=None, cert=None, chain=None, ciphers=None, defaults_from=None, expire_cert_response_control=None, full_path=None, generation=None, generic_alert=None, handshake_timeout=None, key=None, mod_ssl_methods=None, mode=None, name=None, partition=None, passphrase=None, peer_cert_mode=None, proxy_ssl=None, renegotiate_period=None, renegotiate_size=None, renegotiation=None, retain_certificate=None, secure_renegotiation=None, server_name=None, session_mirroring=None, session_ticket=None, sni_default=None, sni_require=None, ssl_forward_proxy=None, ssl_forward_proxy_bypass=None, ssl_sign_hash=None, strict_resume=None, tm_options=None, unclean_shutdown=None, untrusted_cert_response_control=None, __props__=None);

func NewProfileServerSsl(ctx *Context, name string, args ProfileServerSslArgs, opts ...ResourceOption) (*ProfileServerSsl, error)

public ProfileServerSsl(string name, ProfileServerSslArgs args, CustomResourceOptions? opts = null)

name string: The unique name of the resource.
args ProfileServerSslArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
opts ResourceOptions: A bag of options that control this resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ProfileServerSslArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ProfileServerSslArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

ProfileServerSsl Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Programming Model docs.

Inputs

The ProfileServerSsl resource accepts the following input properties:

Name string: Specifies the name of the profile. (type string)
AlertTimeout string: Alert time out
Authenticate string: Server authentication once / always (default is once).
AuthenticateDepth int: Client certificate chain traversal depth. Default 9.
CaFile string: Client certificate file path. Default None.
CacheSize int: Cache size (sessions).
CacheTimeout int: Cache time out
Cert string: Specifies the name of the certificate that the system uses for server-side SSL processing.
Chain string: Specifies the certificates-key chain to associate with the SSL profile
Ciphers string: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
DefaultsFrom string: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
ExpireCertResponseControl string: Response if the cert is expired (drop / ignore).
FullPath string: full path of the profile
Generation int: generation
GenericAlert string: Generic alerts enabled / disabled.
HandshakeTimeout string: Handshake time out (seconds)
Key string: Specifies the file name of the SSL key.
ModSslMethods string: ModSSL Methods enabled / disabled. Default is disabled.
Mode string: ModSSL Methods enabled / disabled. Default is disabled.
Partition string: Device partition to manage resources on.
Passphrase string: Client Certificate Constrained Delegation CA passphrase
PeerCertMode string: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
ProxySsl string: Proxy SSL enabled / disabled. Default is disabled.
RenegotiatePeriod string: Renogotiate Period (seconds)
RenegotiateSize string: Renogotiate Size
Renegotiation string: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
RetainCertificate string: When true, client certificate is retained in SSL session.
SecureRenegotiation string: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
ServerName string: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
SessionMirroring string: Session Mirroring (enabled / disabled)
SessionTicket string: Session Ticket (enabled / disabled)
SniDefault string: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
SniRequire string: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
SslForwardProxy string: SSL forward Proxy (enabled / disabled)
SslForwardProxyBypass string: SSL forward Proxy Bypass (enabled / disabled)
SslSignHash string: SSL sign hash (any, sha1, sha256, sha384)
StrictResume string: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
TmOptions List<string>
UncleanShutdown string: Unclean Shutdown (enabled / disabled)
UntrustedCertResponseControl string: Unclean Shutdown (drop / ignore)

Name string: Specifies the name of the profile. (type string)
AlertTimeout string: Alert time out
Authenticate string: Server authentication once / always (default is once).
AuthenticateDepth int: Client certificate chain traversal depth. Default 9.
CaFile string: Client certificate file path. Default None.
CacheSize int: Cache size (sessions).
CacheTimeout int: Cache time out
Cert string: Specifies the name of the certificate that the system uses for server-side SSL processing.
Chain string: Specifies the certificates-key chain to associate with the SSL profile
Ciphers string: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
DefaultsFrom string: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
ExpireCertResponseControl string: Response if the cert is expired (drop / ignore).
FullPath string: full path of the profile
Generation int: generation
GenericAlert string: Generic alerts enabled / disabled.
HandshakeTimeout string: Handshake time out (seconds)
Key string: Specifies the file name of the SSL key.
ModSslMethods string: ModSSL Methods enabled / disabled. Default is disabled.
Mode string: ModSSL Methods enabled / disabled. Default is disabled.
Partition string: Device partition to manage resources on.
Passphrase string: Client Certificate Constrained Delegation CA passphrase
PeerCertMode string: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
ProxySsl string: Proxy SSL enabled / disabled. Default is disabled.
RenegotiatePeriod string: Renogotiate Period (seconds)
RenegotiateSize string: Renogotiate Size
Renegotiation string: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
RetainCertificate string: When true, client certificate is retained in SSL session.
SecureRenegotiation string: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
ServerName string: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
SessionMirroring string: Session Mirroring (enabled / disabled)
SessionTicket string: Session Ticket (enabled / disabled)
SniDefault string: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
SniRequire string: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
SslForwardProxy string: SSL forward Proxy (enabled / disabled)
SslForwardProxyBypass string: SSL forward Proxy Bypass (enabled / disabled)
SslSignHash string: SSL sign hash (any, sha1, sha256, sha384)
StrictResume string: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
TmOptions []string
UncleanShutdown string: Unclean Shutdown (enabled / disabled)
UntrustedCertResponseControl string: Unclean Shutdown (drop / ignore)

name string: Specifies the name of the profile. (type string)
alertTimeout string: Alert time out
authenticate string: Server authentication once / always (default is once).
authenticateDepth number: Client certificate chain traversal depth. Default 9.
caFile string: Client certificate file path. Default None.
cacheSize number: Cache size (sessions).
cacheTimeout number: Cache time out
cert string: Specifies the name of the certificate that the system uses for server-side SSL processing.
chain string: Specifies the certificates-key chain to associate with the SSL profile
ciphers string: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
defaultsFrom string: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
expireCertResponseControl string: Response if the cert is expired (drop / ignore).
fullPath string: full path of the profile
generation number: generation
genericAlert string: Generic alerts enabled / disabled.
handshakeTimeout string: Handshake time out (seconds)
key string: Specifies the file name of the SSL key.
modSslMethods string: ModSSL Methods enabled / disabled. Default is disabled.
mode string: ModSSL Methods enabled / disabled. Default is disabled.
partition string: Device partition to manage resources on.
passphrase string: Client Certificate Constrained Delegation CA passphrase
peerCertMode string: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxySsl string: Proxy SSL enabled / disabled. Default is disabled.
renegotiatePeriod string: Renogotiate Period (seconds)
renegotiateSize string: Renogotiate Size
renegotiation string: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retainCertificate string: When true, client certificate is retained in SSL session.
secureRenegotiation string: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
serverName string: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
sessionMirroring string: Session Mirroring (enabled / disabled)
sessionTicket string: Session Ticket (enabled / disabled)
sniDefault string: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sniRequire string: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
sslForwardProxy string: SSL forward Proxy (enabled / disabled)
sslForwardProxyBypass string: SSL forward Proxy Bypass (enabled / disabled)
sslSignHash string: SSL sign hash (any, sha1, sha256, sha384)
strictResume string: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
tmOptions string[]
uncleanShutdown string: Unclean Shutdown (enabled / disabled)
untrustedCertResponseControl string: Unclean Shutdown (drop / ignore)

name str: Specifies the name of the profile. (type string)
alert_timeout str: Alert time out
authenticate str: Server authentication once / always (default is once).
authenticate_depth float: Client certificate chain traversal depth. Default 9.
ca_file str: Client certificate file path. Default None.
cache_size float: Cache size (sessions).
cache_timeout float: Cache time out
cert str: Specifies the name of the certificate that the system uses for server-side SSL processing.
chain str: Specifies the certificates-key chain to associate with the SSL profile
ciphers str: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
defaults_from str: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
expire_cert_response_control str: Response if the cert is expired (drop / ignore).
full_path str: full path of the profile
generation float: generation
generic_alert str: Generic alerts enabled / disabled.
handshake_timeout str: Handshake time out (seconds)
key str: Specifies the file name of the SSL key.
mod_ssl_methods str: ModSSL Methods enabled / disabled. Default is disabled.
mode str: ModSSL Methods enabled / disabled. Default is disabled.
partition str: Device partition to manage resources on.
passphrase str: Client Certificate Constrained Delegation CA passphrase
peer_cert_mode str: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ssl str: Proxy SSL enabled / disabled. Default is disabled.
renegotiate_period str: Renogotiate Period (seconds)
renegotiate_size str: Renogotiate Size
renegotiation str: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate str: When true, client certificate is retained in SSL session.
secure_renegotiation str: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
server_name str: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
session_mirroring str: Session Mirroring (enabled / disabled)
session_ticket str: Session Ticket (enabled / disabled)
sni_default str: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require str: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
ssl_forward_proxy str: SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass str: SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash str: SSL sign hash (any, sha1, sha256, sha384)
strict_resume str: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
tm_options List[str]
unclean_shutdown str: Unclean Shutdown (enabled / disabled)
untrusted_cert_response_control str: Unclean Shutdown (drop / ignore)

Outputs

All input properties are implicitly available as output properties. Additionally, the ProfileServerSsl resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

Look up an Existing ProfileServerSsl Resource

Get an existing ProfileServerSsl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ProfileServerSslState, opts?: CustomResourceOptions): ProfileServerSsl

static get(resource_name, id, opts=None, alert_timeout=None, authenticate=None, authenticate_depth=None, ca_file=None, cache_size=None, cache_timeout=None, cert=None, chain=None, ciphers=None, defaults_from=None, expire_cert_response_control=None, full_path=None, generation=None, generic_alert=None, handshake_timeout=None, key=None, mod_ssl_methods=None, mode=None, name=None, partition=None, passphrase=None, peer_cert_mode=None, proxy_ssl=None, renegotiate_period=None, renegotiate_size=None, renegotiation=None, retain_certificate=None, secure_renegotiation=None, server_name=None, session_mirroring=None, session_ticket=None, sni_default=None, sni_require=None, ssl_forward_proxy=None, ssl_forward_proxy_bypass=None, ssl_sign_hash=None, strict_resume=None, tm_options=None, unclean_shutdown=None, untrusted_cert_response_control=None, __props__=None);

func GetProfileServerSsl(ctx *Context, name string, id IDInput, state *ProfileServerSslState, opts ...ResourceOption) (*ProfileServerSsl, error)

public static ProfileServerSsl Get(string name, Input<string> id, ProfileServerSslState? state, CustomResourceOptions? opts = null)

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AlertTimeout string: Alert time out
Authenticate string: Server authentication once / always (default is once).
AuthenticateDepth int: Client certificate chain traversal depth. Default 9.
CaFile string: Client certificate file path. Default None.
CacheSize int: Cache size (sessions).
CacheTimeout int: Cache time out
Cert string: Specifies the name of the certificate that the system uses for server-side SSL processing.
Chain string: Specifies the certificates-key chain to associate with the SSL profile
Ciphers string: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
DefaultsFrom string: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
ExpireCertResponseControl string: Response if the cert is expired (drop / ignore).
FullPath string: full path of the profile
Generation int: generation
GenericAlert string: Generic alerts enabled / disabled.
HandshakeTimeout string: Handshake time out (seconds)
Key string: Specifies the file name of the SSL key.
ModSslMethods string: ModSSL Methods enabled / disabled. Default is disabled.
Mode string: ModSSL Methods enabled / disabled. Default is disabled.
Name string: Specifies the name of the profile. (type string)
Partition string: Device partition to manage resources on.
Passphrase string: Client Certificate Constrained Delegation CA passphrase
PeerCertMode string: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
ProxySsl string: Proxy SSL enabled / disabled. Default is disabled.
RenegotiatePeriod string: Renogotiate Period (seconds)
RenegotiateSize string: Renogotiate Size
Renegotiation string: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
RetainCertificate string: When true, client certificate is retained in SSL session.
SecureRenegotiation string: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
ServerName string: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
SessionMirroring string: Session Mirroring (enabled / disabled)
SessionTicket string: Session Ticket (enabled / disabled)
SniDefault string: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
SniRequire string: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
SslForwardProxy string: SSL forward Proxy (enabled / disabled)
SslForwardProxyBypass string: SSL forward Proxy Bypass (enabled / disabled)
SslSignHash string: SSL sign hash (any, sha1, sha256, sha384)
StrictResume string: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
TmOptions List<string>
UncleanShutdown string: Unclean Shutdown (enabled / disabled)
UntrustedCertResponseControl string: Unclean Shutdown (drop / ignore)

AlertTimeout string: Alert time out
Authenticate string: Server authentication once / always (default is once).
AuthenticateDepth int: Client certificate chain traversal depth. Default 9.
CaFile string: Client certificate file path. Default None.
CacheSize int: Cache size (sessions).
CacheTimeout int: Cache time out
Cert string: Specifies the name of the certificate that the system uses for server-side SSL processing.
Chain string: Specifies the certificates-key chain to associate with the SSL profile
Ciphers string: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
DefaultsFrom string: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
ExpireCertResponseControl string: Response if the cert is expired (drop / ignore).
FullPath string: full path of the profile
Generation int: generation
GenericAlert string: Generic alerts enabled / disabled.
HandshakeTimeout string: Handshake time out (seconds)
Key string: Specifies the file name of the SSL key.
ModSslMethods string: ModSSL Methods enabled / disabled. Default is disabled.
Mode string: ModSSL Methods enabled / disabled. Default is disabled.
Name string: Specifies the name of the profile. (type string)
Partition string: Device partition to manage resources on.
Passphrase string: Client Certificate Constrained Delegation CA passphrase
PeerCertMode string: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
ProxySsl string: Proxy SSL enabled / disabled. Default is disabled.
RenegotiatePeriod string: Renogotiate Period (seconds)
RenegotiateSize string: Renogotiate Size
Renegotiation string: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
RetainCertificate string: When true, client certificate is retained in SSL session.
SecureRenegotiation string: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
ServerName string: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
SessionMirroring string: Session Mirroring (enabled / disabled)
SessionTicket string: Session Ticket (enabled / disabled)
SniDefault string: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
SniRequire string: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
SslForwardProxy string: SSL forward Proxy (enabled / disabled)
SslForwardProxyBypass string: SSL forward Proxy Bypass (enabled / disabled)
SslSignHash string: SSL sign hash (any, sha1, sha256, sha384)
StrictResume string: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
TmOptions []string
UncleanShutdown string: Unclean Shutdown (enabled / disabled)
UntrustedCertResponseControl string: Unclean Shutdown (drop / ignore)

alertTimeout string: Alert time out
authenticate string: Server authentication once / always (default is once).
authenticateDepth number: Client certificate chain traversal depth. Default 9.
caFile string: Client certificate file path. Default None.
cacheSize number: Cache size (sessions).
cacheTimeout number: Cache time out
cert string: Specifies the name of the certificate that the system uses for server-side SSL processing.
chain string: Specifies the certificates-key chain to associate with the SSL profile
ciphers string: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
defaultsFrom string: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
expireCertResponseControl string: Response if the cert is expired (drop / ignore).
fullPath string: full path of the profile
generation number: generation
genericAlert string: Generic alerts enabled / disabled.
handshakeTimeout string: Handshake time out (seconds)
key string: Specifies the file name of the SSL key.
modSslMethods string: ModSSL Methods enabled / disabled. Default is disabled.
mode string: ModSSL Methods enabled / disabled. Default is disabled.
name string: Specifies the name of the profile. (type string)
partition string: Device partition to manage resources on.
passphrase string: Client Certificate Constrained Delegation CA passphrase
peerCertMode string: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxySsl string: Proxy SSL enabled / disabled. Default is disabled.
renegotiatePeriod string: Renogotiate Period (seconds)
renegotiateSize string: Renogotiate Size
renegotiation string: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retainCertificate string: When true, client certificate is retained in SSL session.
secureRenegotiation string: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
serverName string: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
sessionMirroring string: Session Mirroring (enabled / disabled)
sessionTicket string: Session Ticket (enabled / disabled)
sniDefault string: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sniRequire string: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
sslForwardProxy string: SSL forward Proxy (enabled / disabled)
sslForwardProxyBypass string: SSL forward Proxy Bypass (enabled / disabled)
sslSignHash string: SSL sign hash (any, sha1, sha256, sha384)
strictResume string: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
tmOptions string[]
uncleanShutdown string: Unclean Shutdown (enabled / disabled)
untrustedCertResponseControl string: Unclean Shutdown (drop / ignore)

alert_timeout str: Alert time out
authenticate str: Server authentication once / always (default is once).
authenticate_depth float: Client certificate chain traversal depth. Default 9.
ca_file str: Client certificate file path. Default None.
cache_size float: Cache size (sessions).
cache_timeout float: Cache time out
cert str: Specifies the name of the certificate that the system uses for server-side SSL processing.
chain str: Specifies the certificates-key chain to associate with the SSL profile
ciphers str: Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
defaults_from str: The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
expire_cert_response_control str: Response if the cert is expired (drop / ignore).
full_path str: full path of the profile
generation float: generation
generic_alert str: Generic alerts enabled / disabled.
handshake_timeout str: Handshake time out (seconds)
key str: Specifies the file name of the SSL key.
mod_ssl_methods str: ModSSL Methods enabled / disabled. Default is disabled.
mode str: ModSSL Methods enabled / disabled. Default is disabled.
name str: Specifies the name of the profile. (type string)
partition str: Device partition to manage resources on.
passphrase str: Client Certificate Constrained Delegation CA passphrase
peer_cert_mode str: Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ssl str: Proxy SSL enabled / disabled. Default is disabled.
renegotiate_period str: Renogotiate Period (seconds)
renegotiate_size str: Renogotiate Size
renegotiation str: Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate str: When true, client certificate is retained in SSL session.
secure_renegotiation str: Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When request is set the system request secure renegotation of SSL connections. require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
server_name str: Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
session_mirroring str: Session Mirroring (enabled / disabled)
session_ticket str: Session Ticket (enabled / disabled)
sni_default str: Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require str: Requires that the network peers also provide SNI support, this setting only takes effect when sni_default is set to true.When creating a new profile, the setting is provided by the parent profile
ssl_forward_proxy str: SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass str: SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash str: SSL sign hash (any, sha1, sha256, sha384)
strict_resume str: Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
tm_options List[str]
unclean_shutdown str: Unclean Shutdown (enabled / disabled)
untrusted_cert_response_control str: Unclean Shutdown (drop / ignore)

Package Details

Repository: https://github.com/pulumi/pulumi-f5bigip
License: Apache-2.0
Notes: This Pulumi package is based on the bigip Terraform Provider.

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud