Module ltm
This provider is a derived work of the Terraform Provider distributed under MPL 2.0. If you encounter a bug or missing feature, first check the
pulumi/pulumi-f5bigiprepo; however, if that doesn’t turn up anything, please consult the sourceterraform-providers/terraform-provider-f5bigiprepo.
Resources
- DataGroup
- IRule
- Monitor
- Node
- PersistenceProfileCookie
- PersistenceProfileDstAddr
- PersistenceProfileSrcAddr
- PersistenceProfileSsl
- Policy
- Pool
- PoolAttachment
- ProfileClientSsl
- ProfileFastHttp
- ProfileFastL4
- ProfileHttp
- ProfileHttp2
- ProfileHttpCompress
- ProfileOneConnect
- ProfileServerSsl
- ProfileTcp
- Snat
- SnatPool
- VirtualAddress
- VirtualServer
Others
- DataGroupArgs
- DataGroupState
- IRuleArgs
- IRuleState
- MonitorArgs
- MonitorState
- NodeArgs
- NodeState
- PersistenceProfileCookieArgs
- PersistenceProfileCookieState
- PersistenceProfileDstAddrArgs
- PersistenceProfileDstAddrState
- PersistenceProfileSrcAddrArgs
- PersistenceProfileSrcAddrState
- PersistenceProfileSslArgs
- PersistenceProfileSslState
- PolicyArgs
- PolicyState
- PoolArgs
- PoolAttachmentArgs
- PoolAttachmentState
- PoolState
- ProfileClientSslArgs
- ProfileClientSslState
- ProfileFastHttpArgs
- ProfileFastHttpState
- ProfileFastL4Args
- ProfileFastL4State
- ProfileHttp2Args
- ProfileHttp2State
- ProfileHttpArgs
- ProfileHttpCompressArgs
- ProfileHttpCompressState
- ProfileHttpState
- ProfileOneConnectArgs
- ProfileOneConnectState
- ProfileServerSslArgs
- ProfileServerSslState
- ProfileTcpArgs
- ProfileTcpState
- SnatArgs
- SnatPoolArgs
- SnatPoolState
- SnatState
- VirtualAddressArgs
- VirtualAddressState
- VirtualServerArgs
- VirtualServerState
Resources
Resource DataGroup
class DataGroup extends CustomResourcef5bigip.ltm.DataGroup Manages internal (in-line) datagroup configuration
Resource should be named with their “full path”. The full path is the combination of the partition + name of the resource, for example /Common/my-datagroup.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const datagroup = new f5bigip.ltm.DataGroup("datagroup", {
name: "/Common/dgx2",
records: [
{
data: "pool1",
name: "abc.com",
},
{
data: "123",
name: "test",
},
],
type: "string",
});constructor
new DataGroup(name: string, args: DataGroupArgs, opts?: pulumi.CustomResourceOptions)Create a DataGroup resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: DataGroupState, opts?: pulumi.CustomResourceOptions): DataGroupGet an existing DataGroup resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is DataGroupReturns true if the given object is an instance of DataGroup. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property name
public name: pulumi.Output<string>;, sets the value of the record’s name attribute, must be of type defined in type attribute
property records
public records: pulumi.Output<DataGroupRecord[] | undefined>;a set of name and data attributes, name must be of type specified by the type attributed (string, ip and integer), data is optional and can take any value, multiple record sets can be specified as needed.
property type
public type: pulumi.Output<string>;datagroup type (applies to the name field of the record), supports: string, ip or integer
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource IRule
class IRule extends CustomResourcef5bigip.ltm.IRule Creates iRule on BIG-IP F5 device
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
constructor
new IRule(name: string, args: IRuleArgs, opts?: pulumi.CustomResourceOptions)Create a IRule resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: IRuleState, opts?: pulumi.CustomResourceOptions): IRuleGet an existing IRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is IRuleReturns true if the given object is an instance of IRule. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property irule
public irule: pulumi.Output<string>;Body of the iRule
property name
public name: pulumi.Output<string>;Name of the iRule
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource Monitor
class Monitor extends CustomResourceconstructor
new Monitor(name: string, args: MonitorArgs, opts?: pulumi.CustomResourceOptions)Create a Monitor resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: MonitorState, opts?: pulumi.CustomResourceOptions): MonitorGet an existing Monitor resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is MonitorReturns true if the given object is an instance of Monitor. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property adaptive
public adaptive: pulumi.Output<string>;ftp adaptive
property adaptiveLimit
public adaptiveLimit: pulumi.Output<number>;Integer value
property compatibility
public compatibility: pulumi.Output<string>;Specifies, when enabled, that the SSL options setting (in OpenSSL) is set to ALL. Accepts ‘enabled’ or ‘disabled’ values, the default value is ‘enabled’.
property database
public database: pulumi.Output<string | undefined>;Specifies the database in which the user is created
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;Existing monitor to inherit from. Must be one of /Common/http, /Common/https, /Common/icmp or /Common/gateway-icmp.
property destination
public destination: pulumi.Output<string>;Specify an alias address for monitoring
property filename
public filename: pulumi.Output<string | undefined>;Specifies the full path and file name of the file that the system attempts to download. The health check is successful if the system can download the file.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property interval
public interval: pulumi.Output<number>;Check interval in seconds
property ipDscp
public ipDscp: pulumi.Output<number>;property manualResume
public manualResume: pulumi.Output<string>;property mode
public mode: pulumi.Output<string>;Specifies the data transfer process (DTP) mode. The default value is passive. The options are passive (Specifies that the monitor sends a data transfer request to the FTP server. When the FTP server receives the request, the FTP server then initiates and establishes the data connection.) and active (Specifies that the monitor initiates and establishes the data connection with the FTP server.).
property name
public name: pulumi.Output<string>;Name of the monitor
property parent
public parent: pulumi.Output<string>;Existing LTM monitor to inherit from
property password
public password: pulumi.Output<string | undefined>;Specifies the password if the monitored target requires authentication
property receive
public receive: pulumi.Output<string | undefined>;Expected response string
property receiveDisable
public receiveDisable: pulumi.Output<string | undefined>;Expected response string.
property reverse
public reverse: pulumi.Output<string>;property send
public send: pulumi.Output<string | undefined>;Request string to send
property timeUntilUp
public timeUntilUp: pulumi.Output<number>;Time in seconds
property timeout
public timeout: pulumi.Output<number>;Timeout in seconds
property transparent
public transparent: pulumi.Output<string>;property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
property username
public username: pulumi.Output<string | undefined>;Specifies the user name if the monitored target requires authentication
Resource Node
class Node extends CustomResourceconstructor
new Node(name: string, args: NodeArgs, opts?: pulumi.CustomResourceOptions)Create a Node resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: NodeState, opts?: pulumi.CustomResourceOptions): NodeGet an existing Node resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is NodeReturns true if the given object is an instance of Node. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property address
public address: pulumi.Output<string>;IP or hostname of the node
property connectionLimit
public connectionLimit: pulumi.Output<number>;Specifies the maximum number of connections allowed for the node or node address.
property description
public description: pulumi.Output<string | undefined>;User-defined description give ltm_node
property dynamicRatio
public dynamicRatio: pulumi.Output<number>;Specifies the fixed ratio value used for a node during ratio load balancing.
property fqdn
public fqdn: pulumi.Output<NodeFqdn | undefined>;property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property monitor
public monitor: pulumi.Output<string | undefined>;specifies the name of the monitor or monitor rule that you want to associate with the node.
property name
public name: pulumi.Output<string>;Name of the node
property rateLimit
public rateLimit: pulumi.Output<string>;Specifies the maximum number of connections per second allowed for a node or node address. The default value is ‘disabled’.
property ratio
public ratio: pulumi.Output<number>;Sets the ratio number for the node.
property state
public state: pulumi.Output<string | undefined>;Default is “user-up” you can set to “user-down” if you want to disable
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource PersistenceProfileCookie
class PersistenceProfileCookie extends CustomResourceconstructor
new PersistenceProfileCookie(name: string, args: PersistenceProfileCookieArgs, opts?: pulumi.CustomResourceOptions)Create a PersistenceProfileCookie resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PersistenceProfileCookieState, opts?: pulumi.CustomResourceOptions): PersistenceProfileCookieGet an existing PersistenceProfileCookie resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is PersistenceProfileCookieReturns true if the given object is an instance of PersistenceProfileCookie. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property alwaysSend
public alwaysSend: pulumi.Output<string | undefined>;To enable _ disable always sending cookies
property appService
public appService: pulumi.Output<string | undefined>;property cookieEncryption
public cookieEncryption: pulumi.Output<string | undefined>;To required, preferred, or disabled policy for cookie encryption
property cookieEncryptionPassphrase
public cookieEncryptionPassphrase: pulumi.Output<string | undefined>;Passphrase for encrypted cookies
property cookieName
public cookieName: pulumi.Output<string | undefined>;Name of the cookie to track persistence
property defaultsFrom
public defaultsFrom: pulumi.Output<string>;Inherit defaults from parent profile
property expiration
public expiration: pulumi.Output<string | undefined>;Expiration TTL for cookie specified in D:H:M:S or in seconds
property hashLength
public hashLength: pulumi.Output<number | undefined>;Length of hash to apply to cookie
property hashOffset
public hashOffset: pulumi.Output<number | undefined>;Number of characters to skip in the cookie for the hash
property httponly
public httponly: pulumi.Output<string | undefined>;To enable _ disable sending only over http
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property matchAcrossPools
public matchAcrossPools: pulumi.Output<string | undefined>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
public matchAcrossServices: pulumi.Output<string | undefined>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
public matchAcrossVirtuals: pulumi.Output<string | undefined>;To enable _ disable match across virtual servers with given persistence record
property mirror
public mirror: pulumi.Output<string | undefined>;To enable _ disable
property name
public name: pulumi.Output<string>;Name of the persistence profile
property overrideConnLimit
public overrideConnLimit: pulumi.Output<string | undefined>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
public timeout: pulumi.Output<number | undefined>;Timeout for persistence of the session
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource PersistenceProfileDstAddr
class PersistenceProfileDstAddr extends CustomResourceconstructor
new PersistenceProfileDstAddr(name: string, args: PersistenceProfileDstAddrArgs, opts?: pulumi.CustomResourceOptions)Create a PersistenceProfileDstAddr resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PersistenceProfileDstAddrState, opts?: pulumi.CustomResourceOptions): PersistenceProfileDstAddrGet an existing PersistenceProfileDstAddr resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is PersistenceProfileDstAddrReturns true if the given object is an instance of PersistenceProfileDstAddr. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property appService
public appService: pulumi.Output<string | undefined>;property defaultsFrom
public defaultsFrom: pulumi.Output<string>;Inherit defaults from parent profile
property hashAlgorithm
public hashAlgorithm: pulumi.Output<string | undefined>;Specify the hash algorithm
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property mask
public mask: pulumi.Output<string | undefined>;Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
property matchAcrossPools
public matchAcrossPools: pulumi.Output<string | undefined>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
public matchAcrossServices: pulumi.Output<string | undefined>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
public matchAcrossVirtuals: pulumi.Output<string | undefined>;To enable _ disable match across services with given persistence record
property mirror
public mirror: pulumi.Output<string | undefined>;To enable _ disable
property name
public name: pulumi.Output<string>;Name of the persistence profile
property overrideConnLimit
public overrideConnLimit: pulumi.Output<string | undefined>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
public timeout: pulumi.Output<number | undefined>;Timeout for persistence of the session
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource PersistenceProfileSrcAddr
class PersistenceProfileSrcAddr extends CustomResourceconstructor
new PersistenceProfileSrcAddr(name: string, args: PersistenceProfileSrcAddrArgs, opts?: pulumi.CustomResourceOptions)Create a PersistenceProfileSrcAddr resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PersistenceProfileSrcAddrState, opts?: pulumi.CustomResourceOptions): PersistenceProfileSrcAddrGet an existing PersistenceProfileSrcAddr resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is PersistenceProfileSrcAddrReturns true if the given object is an instance of PersistenceProfileSrcAddr. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property appService
public appService: pulumi.Output<string | undefined>;property defaultsFrom
public defaultsFrom: pulumi.Output<string>;Inherit defaults from parent profile
property hashAlgorithm
public hashAlgorithm: pulumi.Output<string | undefined>;Specify the hash algorithm
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property mapProxies
public mapProxies: pulumi.Output<string | undefined>;To enable _ disable directs all to the same single pool member
property mask
public mask: pulumi.Output<string | undefined>;Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
property matchAcrossPools
public matchAcrossPools: pulumi.Output<string | undefined>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
public matchAcrossServices: pulumi.Output<string | undefined>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
public matchAcrossVirtuals: pulumi.Output<string | undefined>;To enable _ disable match across services with given persistence record
property mirror
public mirror: pulumi.Output<string | undefined>;To enable _ disable
property name
public name: pulumi.Output<string>;Name of the persistence profile
property overrideConnLimit
public overrideConnLimit: pulumi.Output<string | undefined>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
public timeout: pulumi.Output<number | undefined>;Timeout for persistence of the session
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource PersistenceProfileSsl
class PersistenceProfileSsl extends CustomResourceconstructor
new PersistenceProfileSsl(name: string, args: PersistenceProfileSslArgs, opts?: pulumi.CustomResourceOptions)Create a PersistenceProfileSsl resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PersistenceProfileSslState, opts?: pulumi.CustomResourceOptions): PersistenceProfileSslGet an existing PersistenceProfileSsl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is PersistenceProfileSslReturns true if the given object is an instance of PersistenceProfileSsl. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property appService
public appService: pulumi.Output<string | undefined>;property defaultsFrom
public defaultsFrom: pulumi.Output<string>;Inherit defaults from parent profile
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property matchAcrossPools
public matchAcrossPools: pulumi.Output<string | undefined>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
public matchAcrossServices: pulumi.Output<string | undefined>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
public matchAcrossVirtuals: pulumi.Output<string | undefined>;To enable _ disable match across services with given persistence record
property mirror
public mirror: pulumi.Output<string | undefined>;To enable _ disable
property name
public name: pulumi.Output<string>;Name of the persistence profile
property overrideConnLimit
public overrideConnLimit: pulumi.Output<string | undefined>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
public timeout: pulumi.Output<number | undefined>;Timeout for persistence of the session
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource Policy
class Policy extends CustomResourcef5bigip.ltm.Policy Configures Virtual Server
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const testPolicy = new f5bigip.ltm.Policy("test-policy", {
name: "myPolicy",
strategy: "first-match",
requires: ["http"],
publishedCopy: "Drafts/my_policy",
controls: ["forwarding"],
rule: [{
name: "rule6",
action: [{
tmName: "20",
forward: true,
pool: "/Common/mypool",
}],
}],
});constructor
new Policy(name: string, args: PolicyArgs, opts?: pulumi.CustomResourceOptions)Create a Policy resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PolicyState, opts?: pulumi.CustomResourceOptions): PolicyGet an existing Policy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is PolicyReturns true if the given object is an instance of Policy. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property controls
public controls: pulumi.Output<string[] | undefined>;Specifies the controls
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property name
public name: pulumi.Output<string>;Name of the Policy
property publishedCopy
public publishedCopy: pulumi.Output<string | undefined>;If you want to publish the policy else it will be deployed in Drafts mode.
property requires
public requires: pulumi.Output<string[] | undefined>;Specifies the protocol
property rules
public rules: pulumi.Output<PolicyRule[] | undefined>;Rules can be applied using the policy
property strategy
public strategy: pulumi.Output<string | undefined>;Specifies the match strategy
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource Pool
class Pool extends CustomResourceconstructor
new Pool(name: string, args: PoolArgs, opts?: pulumi.CustomResourceOptions)Create a Pool resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PoolState, opts?: pulumi.CustomResourceOptions): PoolGet an existing Pool resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is PoolReturns true if the given object is an instance of Pool. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property allowNat
public allowNat: pulumi.Output<string>;Allow NAT
property allowSnat
public allowSnat: pulumi.Output<string>;Allow SNAT
property description
public description: pulumi.Output<string | undefined>;Userdefined value to describe the pool
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property loadBalancingMode
public loadBalancingMode: pulumi.Output<string>;Possible values: round-robin, …
property monitors
public monitors: pulumi.Output<string[]>;List of monitor names to associate with the pool
property name
public name: pulumi.Output<string>;Name of the pool
property reselectTries
public reselectTries: pulumi.Output<number>;Number of times the system tries to select a new pool member after a failure.
property serviceDownAction
public serviceDownAction: pulumi.Output<string>;Possible values: none, reset, reselect, drop
property slowRampTime
public slowRampTime: pulumi.Output<number>;Slow ramp time for pool members
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource PoolAttachment
class PoolAttachment extends CustomResourceconstructor
new PoolAttachment(name: string, args: PoolAttachmentArgs, opts?: pulumi.CustomResourceOptions)Create a PoolAttachment resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: PoolAttachmentState, opts?: pulumi.CustomResourceOptions): PoolAttachmentGet an existing PoolAttachment resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is PoolAttachmentReturns true if the given object is an instance of PoolAttachment. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property node
public node: pulumi.Output<string>;Node to add to the pool in /Partition/NodeName:Port format (e.g. /Common/Node01:80)
property pool
public pool: pulumi.Output<string>;Name of the pool in /Partition/Name format
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileClientSsl
class ProfileClientSsl extends CustomResourcef5bigip.ltm.ProfileClientSsl Manages client SSL profiles on a BIG-IP
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const test_ClientSsl = new f5bigip.ltm.ProfileClientSsl("test-ClientSsl", {
authenticate: "always",
ciphers: "DEFAULT",
defaultsFrom: "/Common/clientssl",
name: "/Common/test-ClientSsl",
partition: "Common",
});constructor
new ProfileClientSsl(name: string, args: ProfileClientSslArgs, opts?: pulumi.CustomResourceOptions)Create a ProfileClientSsl resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileClientSslState, opts?: pulumi.CustomResourceOptions): ProfileClientSslGet an existing ProfileClientSsl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileClientSslReturns true if the given object is an instance of ProfileClientSsl. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property alertTimeout
public alertTimeout: pulumi.Output<string>;Alert time out
property allowNonSsl
public allowNonSsl: pulumi.Output<string>;Enables or disables acceptance of non-SSL connections, When creating a new profile, the setting is provided by the parent profile
property authenticate
public authenticate: pulumi.Output<string>;Specifies the frequency of client authentication for an SSL session.When once,specifies that the system authenticates the client once for an SSL session.
When always, specifies that the system authenticates the client once for an SSL session and also upon reuse of that session.
property authenticateDepth
public authenticateDepth: pulumi.Output<number>;Specifies the maximum number of certificates to be traversed in a client certificate chain
property caFile
public caFile: pulumi.Output<string>;Client certificate file path. Default None.
property cacheSize
public cacheSize: pulumi.Output<number>;Cache size (sessions).
property cacheTimeout
public cacheTimeout: pulumi.Output<number>;Cache time out
property cert
public cert: pulumi.Output<string>;Specifies a cert name for use.
property certExtensionIncludes
public certExtensionIncludes: pulumi.Output<string[]>;Cert extension includes for ssl forward proxy
property certKeyChains
public certKeyChains: pulumi.Output<ProfileClientSslCertKeyChain[]>;property certLifeSpan
public certLifeSpan: pulumi.Output<number>;Life span of the certificate in days for ssl forward proxy
property certLookupByIpaddrPort
public certLookupByIpaddrPort: pulumi.Output<string>;Cert lookup by ip address and port enabled / disabled
property chain
public chain: pulumi.Output<string>;Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optional
property ciphers
public ciphers: pulumi.Output<string>;Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
property clientCertCa
public clientCertCa: pulumi.Output<string>;client certificate name
property crlFile
public crlFile: pulumi.Output<string>;Certificate revocation file name
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is the clientssl parent on the Common partition.
property forwardProxyBypassDefaultAction
public forwardProxyBypassDefaultAction: pulumi.Output<string>;Forward proxy bypass default action. (enabled / disabled)
property fullPath
public fullPath: pulumi.Output<string>;full path of the profile
property generation
public generation: pulumi.Output<number>;generation
property genericAlert
public genericAlert: pulumi.Output<string>;Generic alerts enabled / disabled.
property handshakeTimeout
public handshakeTimeout: pulumi.Output<string>;Handshake time out (seconds)
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property inheritCertKeychain
public inheritCertKeychain: pulumi.Output<string>;Inherit cert key chain
property key
public key: pulumi.Output<string>;Contains a key name
property modSslMethods
public modSslMethods: pulumi.Output<string>;ModSSL Methods enabled / disabled. Default is disabled.
property mode
public mode: pulumi.Output<string>;ModSSL Methods enabled / disabled. Default is disabled.
property name
public name: pulumi.Output<string>;Specifies the name of the profile. (type string)
property partition
public partition: pulumi.Output<string>;Device partition to manage resources on.
property passphrase
public passphrase: pulumi.Output<string>;Client Certificate Constrained Delegation CA passphrase
property peerCertMode
public peerCertMode: pulumi.Output<string>;Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
property proxyCaCert
public proxyCaCert: pulumi.Output<string>;Proxy CA Cert
property proxyCaKey
public proxyCaKey: pulumi.Output<string>;Proxy CA Key
property proxyCaPassphrase
public proxyCaPassphrase: pulumi.Output<string>;Proxy CA Passphrase
property proxySsl
public proxySsl: pulumi.Output<string>;Proxy SSL enabled / disabled. Default is disabled.
property proxySslPassthrough
public proxySslPassthrough: pulumi.Output<string>;Proxy SSL passthrough enabled / disabled. Default is disabled.
property renegotiatePeriod
public renegotiatePeriod: pulumi.Output<string>;Renogotiate Period (seconds)
property renegotiateSize
public renegotiateSize: pulumi.Output<string>;Renogotiate Size
property renegotiation
public renegotiation: pulumi.Output<string>;Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
property retainCertificate
public retainCertificate: pulumi.Output<string>;When true, client certificate is retained in SSL session.
property secureRenegotiation
public secureRenegotiation: pulumi.Output<string>;Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile.
When request is set the system request secure renegotation of SSL connections.
require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients.
The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
property serverName
public serverName: pulumi.Output<string>;Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
property sessionMirroring
public sessionMirroring: pulumi.Output<string>;Session Mirroring (enabled / disabled)
property sessionTicket
public sessionTicket: pulumi.Output<string>;Session Ticket (enabled / disabled)
property sniDefault
public sniDefault: pulumi.Output<string>;Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
property sniRequire
public sniRequire: pulumi.Output<string>;Requires that the network peers also provide SNI support, this setting only takes effect when sniDefault is set to true.When creating a new profile, the setting is provided by the parent profile
property sslForwardProxy
public sslForwardProxy: pulumi.Output<string>;SSL forward Proxy (enabled / disabled)
property sslForwardProxyBypass
public sslForwardProxyBypass: pulumi.Output<string>;SSL forward Proxy Bypass (enabled / disabled)
property sslSignHash
public sslSignHash: pulumi.Output<string>;SSL sign hash (any, sha1, sha256, sha384)
property strictResume
public strictResume: pulumi.Output<string>;Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
property tmOptions
public tmOptions: pulumi.Output<string[]>;property uncleanShutdown
public uncleanShutdown: pulumi.Output<string>;Unclean Shutdown (enabled / disabled)
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileFastHttp
class ProfileFastHttp extends CustomResourcef5bigip.ltm.ProfileFastHttp Configures a custom profileFasthttp for use by health checks.
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const sjfasthttpprofile = new f5bigip.ltm.ProfileFastHttp("sjfasthttpprofile", {
connpoolMaxreuse: 2,
connpoolMaxsize: 2048,
connpoolMinsize: 0,
connpoolReplenish: "enabled",
connpoolStep: 4,
connpoolidleTimeoutoverride: 0,
defaultsFrom: "/Common/fasthttp",
forcehttp10response: "disabled",
idleTimeout: 300,
maxheaderSize: 32768,
name: "sjfasthttpprofile",
});constructor
new ProfileFastHttp(name: string, args: ProfileFastHttpArgs, opts?: pulumi.CustomResourceOptions)Create a ProfileFastHttp resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileFastHttpState, opts?: pulumi.CustomResourceOptions): ProfileFastHttpGet an existing ProfileFastHttp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileFastHttpReturns true if the given object is an instance of ProfileFastHttp. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property connpoolMaxreuse
public connpoolMaxreuse: pulumi.Output<number | undefined>;Specifies the maximum number of times that the system can re-use a current connection. The default value is 0 (zero).
property connpoolMaxsize
public connpoolMaxsize: pulumi.Output<number | undefined>;Specifies the maximum number of connections to a load balancing pool. A setting of 0 specifies that a pool can accept an unlimited number of connections. The default value is 2048.
property connpoolMinsize
public connpoolMinsize: pulumi.Output<number | undefined>;Specifies the minimum number of connections to a load balancing pool. A setting of 0 specifies that there is no minimum. The default value is 10.
property connpoolReplenish
public connpoolReplenish: pulumi.Output<string | undefined>;The default value is enabled. When this option is enabled, the system replenishes the number of connections to a load balancing pool to the number of connections that existed when the server closed the connection to the pool. When disabled, the system replenishes the connection that was closed by the server, only when there are fewer connections to the pool than the number of connections set in the connpool-min-size connections option. Also see the connpool-min-size option..
property connpoolStep
public connpoolStep: pulumi.Output<number | undefined>;Specifies the increment in which the system makes additional connections available, when all available connections are in use. The default value is 4.
property connpoolidleTimeoutoverride
public connpoolidleTimeoutoverride: pulumi.Output<number | undefined>;Specifies the number of seconds after which a server-side connection in a OneConnect pool is eligible for deletion, when the connection has no traffic.The value of this option overrides the idle-timeout value that you specify. The default value is 0 (zero) seconds, which disables the override setting.
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property forcehttp10response
public forcehttp10response: pulumi.Output<string | undefined>;Specifies whether to rewrite the HTTP version in the status line of the server to HTTP 1.0 to discourage the client from pipelining or chunking data. The default value is disabled.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property idleTimeout
public idleTimeout: pulumi.Output<number | undefined>;Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
property maxheaderSize
public maxheaderSize: pulumi.Output<number | undefined>;Specifies the maximum amount of HTTP header data that the system buffers before making a load balancing decision. The default setting is 32768.
property name
public name: pulumi.Output<string>;Name of the profile_fasthttp
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileFastL4
class ProfileFastL4 extends CustomResourcef5bigip.ltm.ProfileFastL4 Configures a custom profileFastl4 for use by health checks.
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const profileFastl4 = new f5bigip.ltm.ProfileFastL4("profileFastl4", {
clientTimeout: 40,
defaultsFrom: "/Common/fastL4",
explicitflowMigration: "enabled",
hardwareSyncookie: "enabled",
idleTimeout: "200",
iptosToclient: "pass-through",
iptosToserver: "pass-through",
keepaliveInterval: "disabled", //This cannot take enabled
name: "/Common/sjfastl4profile",
partition: "Common",
});constructor
new ProfileFastL4(name: string, args: ProfileFastL4Args, opts?: pulumi.CustomResourceOptions)Create a ProfileFastL4 resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileFastL4State, opts?: pulumi.CustomResourceOptions): ProfileFastL4Get an existing ProfileFastL4 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileFastL4Returns true if the given object is an instance of ProfileFastL4. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property clientTimeout
public clientTimeout: pulumi.Output<number | undefined>;Specifies late binding client timeout in seconds. This setting specifies the number of seconds allowed for a client to transmit enough data to select a server when late binding is enabled. If it expires timeout-recovery mode will dictate what action to take.
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property explicitflowMigration
public explicitflowMigration: pulumi.Output<string | undefined>;Enables or disables late binding explicit flow migration that allows iRules to control when flows move from software to hardware. Explicit flow migration is disabled by default hence BIG-IP automatically migrates flows from software to hardware.
property hardwareSyncookie
public hardwareSyncookie: pulumi.Output<string | undefined>;Enables or disables hardware SYN cookie support when PVA10 is present on the system. Note that when you set the hardware syncookie option to enabled, you may also want to set the following bigdb database variables using the “/sys modify db” command, based on your requirements: pva.SynCookies.Full.ConnectionThreshold (default: 500000), pva.SynCookies.Assist.ConnectionThreshold (default: 500000) pva.SynCookies.ClientWindow (default: 0). The default value is disabled.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property idleTimeout
public idleTimeout: pulumi.Output<string | undefined>;Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
property iptosToclient
public iptosToclient: pulumi.Output<string | undefined>;Specifies an IP ToS number for the client side. This option specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to clients. The default value is 65535 (pass-through), which indicates, do not modify.
property iptosToserver
public iptosToserver: pulumi.Output<string | undefined>;Specifies an IP ToS number for the server side. This setting specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to servers. The default value is 65535 (pass-through), which indicates, do not modify.
property keepaliveInterval
public keepaliveInterval: pulumi.Output<string | undefined>;Specifies the keep alive probe interval, in seconds. The default value is disabled (0 seconds).
property name
public name: pulumi.Output<string>;Name of the profile_fastl4
property partition
public partition: pulumi.Output<string | undefined>;Displays the administrative partition within which this profile resides
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileHttp
class ProfileHttp extends CustomResourcef5bigip.ltm.ProfileHttp Configures a custom profileHttp for use by health checks.
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const sanjoseHttp = new f5bigip.ltm.ProfileHttp("sanjose-http", {
defaultsFrom: "/Common/http",
description: "some http",
fallbackHost: "titanic",
fallbackStatusCodes: [
"400",
"500",
"300",
],
name: "/Common/sanjose-http",
});constructor
new ProfileHttp(name: string, args: ProfileHttpArgs, opts?: pulumi.CustomResourceOptions)Create a ProfileHttp resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileHttpState, opts?: pulumi.CustomResourceOptions): ProfileHttpGet an existing ProfileHttp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileHttpReturns true if the given object is an instance of ProfileHttp. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property acceptXff
public acceptXff: pulumi.Output<string | undefined>;Enables or disables trusting the client IP address, and statistics from the client IP address, based on the request’s XFF (X-forwarded-for) headers, if they exist.
property appService
public appService: pulumi.Output<string | undefined>;The application service to which the object belongs.
property basicAuthRealm
public basicAuthRealm: pulumi.Output<string | undefined>;Specifies a quoted string for the basic authentication realm. The system sends this string to a client whenever authorization fails. The default value is none
property defaultsFrom
public defaultsFrom: pulumi.Output<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property description
public description: pulumi.Output<string | undefined>;User defibned description
property encryptCookieSecret
public encryptCookieSecret: pulumi.Output<string | undefined>;Specifies a passphrase for the cookie encryption
property encryptCookies
public encryptCookies: pulumi.Output<string[] | undefined>;Encrypts specified cookies that the BIG-IP system sends to a client system
property fallbackHost
public fallbackHost: pulumi.Output<string | undefined>;Specifies an HTTP fallback host. HTTP redirection allows you to redirect HTTP traffic to another protocol identifier, host name, port number
property fallbackStatusCodes
public fallbackStatusCodes: pulumi.Output<string[] | undefined>;Specifies one or more three-digit status codes that can be returned by an HTTP server.
property headErase
public headErase: pulumi.Output<string | undefined>;Specifies the header string that you want to erase from an HTTP request. You can also specify none
property headInsert
public headInsert: pulumi.Output<string | undefined>;Specifies a quoted header string that you want to insert into an HTTP request
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property insertXforwardedFor
public insertXforwardedFor: pulumi.Output<string | undefined>;When using connection pooling, which allows clients to make use of other client requests’ server-side connections, you can insert the X-Forwarded-For header and specify a client IP address
property lwsSeparator
public lwsSeparator: pulumi.Output<string | undefined>;Specifies a quoted header string that you want to insert into an HTTP request. You can also specify none.
property name
public name: pulumi.Output<string>;Name of the profile_http
property oneconnectTransformations
public oneconnectTransformations: pulumi.Output<string | undefined>;Enables the system to perform HTTP header transformations for the purpose of keeping server-side connections open. This feature requires configuration of a OneConnect profile
property proxyType
public proxyType: pulumi.Output<string | undefined>;Specifies the type of HTTP proxy.
property redirectRewrite
public redirectRewrite: pulumi.Output<string | undefined>;Specifies which of the application HTTP redirects the system rewrites to HTTPS.
property requestChunking
public requestChunking: pulumi.Output<string | undefined>;Specifies how to handle chunked and unchunked requests.
property responseChunking
public responseChunking: pulumi.Output<string | undefined>;Specifies how to handle chunked and unchunked responses.
property responseHeadersPermitteds
public responseHeadersPermitteds: pulumi.Output<string[] | undefined>;Specifies headers that the BIG-IP system allows in an HTTP response.
property serverAgentName
public serverAgentName: pulumi.Output<string | undefined>;Specifies the value of the Server header in responses that the BIG-IP itself generates. The default is BigIP. If no string is specified, then no Server header will be added to such responses
property tmPartition
public tmPartition: pulumi.Output<string | undefined>;Displays the administrative partition within which this profile resides.
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
property viaHostName
public viaHostName: pulumi.Output<string | undefined>;Specifies the hostname to include into Via header
property viaRequest
public viaRequest: pulumi.Output<string | undefined>;Specifies whether to append, remove, or preserve a Via header in an HTTP request
property viaResponse
public viaResponse: pulumi.Output<string | undefined>;Specifies whether to append, remove, or preserve a Via header in an HTTP request
property xffAlternativeNames
public xffAlternativeNames: pulumi.Output<string[] | undefined>;Specifies alternative XFF headers instead of the default X-forwarded-for header
Resource ProfileHttp2
class ProfileHttp2 extends CustomResourcef5bigip.ltm.ProfileHttp2 Configures a custom profileHttp2 for use by health checks.
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const nyhttp2 = new f5bigip.ltm.ProfileHttp2("nyhttp2", {
activationModes: [
"alpn",
"npn",
],
concurrentStreamsPerConnection: 10,
connectionIdleTimeout: 30,
defaultsFrom: "/Common/http2",
name: "/Common/NewYork_http2",
});constructor
new ProfileHttp2(name: string, args: ProfileHttp2Args, opts?: pulumi.CustomResourceOptions)Create a ProfileHttp2 resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileHttp2State, opts?: pulumi.CustomResourceOptions): ProfileHttp2Get an existing ProfileHttp2 resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileHttp2Returns true if the given object is an instance of ProfileHttp2. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property activationModes
public activationModes: pulumi.Output<string[] | undefined>;Specifies what will cause an incoming connection to be handled as a HTTP/2 connection. The default values npn and alpn specify that the TLS next-protocol-negotiation and application-layer-protocol-negotiation extensions will be used.
property concurrentStreamsPerConnection
public concurrentStreamsPerConnection: pulumi.Output<number | undefined>;Specifies how many concurrent requests are allowed to be outstanding on a single HTTP/2 connection.
property connectionIdleTimeout
public connectionIdleTimeout: pulumi.Output<number | undefined>;Specifies the number of seconds that a connection is idle before the connection is eligible for deletion..
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property headerTableSize
public headerTableSize: pulumi.Output<number | undefined>;Use the parent Http2 profile
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property name
public name: pulumi.Output<string>;Name of the profile_http2
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileHttpCompress
class ProfileHttpCompress extends CustomResourcef5bigip.ltm.ProfileHttpCompress Virtual server HTTP compression profile configuration
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const sjhttpcompression = new f5bigip.ltm.ProfileHttpCompress("sjhttpcompression", {
contentTypeExcludes: ["nicecontentexclude.com"],
contentTypeIncludes: ["nicecontent.com"],
defaultsFrom: "/Common/httpcompression",
name: "/Common/sjhttpcompression2",
uriExcludes: [
"www.abc.f5.com",
"www.abc2.f5.com",
],
uriIncludes: ["www.xyzbc.cisco.com"],
});constructor
new ProfileHttpCompress(name: string, args: ProfileHttpCompressArgs, opts?: pulumi.CustomResourceOptions)Create a ProfileHttpCompress resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileHttpCompressState, opts?: pulumi.CustomResourceOptions): ProfileHttpCompressGet an existing ProfileHttpCompress resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileHttpCompressReturns true if the given object is an instance of ProfileHttpCompress. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property contentTypeExcludes
public contentTypeExcludes: pulumi.Output<string[] | undefined>;Excludes a specified list of content types from compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
property contentTypeIncludes
public contentTypeIncludes: pulumi.Output<string[] | undefined>;Specifies a list of content types for compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property name
public name: pulumi.Output<string>;Name of the profile_httpcompress
property uriExcludes
public uriExcludes: pulumi.Output<string[] | undefined>;Disables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you do not want to compress.
property uriIncludes
public uriIncludes: pulumi.Output<string[] | undefined>;Enables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you want to compress.
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileOneConnect
class ProfileOneConnect extends CustomResourcef5bigip.ltm.ProfileOneConnect Configures a custom profileOneconnect for use by health checks.
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const oneconnectSanjose = new f5bigip.ltm.ProfileOneConnect("oneconnect-sanjose", {
defaultsFrom: "/Common/oneconnect",
idleTimeoutOverride: "disabled",
maxAge: 3600,
maxReuse: 1000,
maxSize: 1000,
name: "sanjose",
partition: "Common",
sharePools: "disabled",
sourceMask: "255.255.255.255",
});constructor
new ProfileOneConnect(name: string, args: ProfileOneConnectArgs, opts?: pulumi.CustomResourceOptions)Create a ProfileOneConnect resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileOneConnectState, opts?: pulumi.CustomResourceOptions): ProfileOneConnectGet an existing ProfileOneConnect resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileOneConnectReturns true if the given object is an instance of ProfileOneConnect. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property idleTimeoutOverride
public idleTimeoutOverride: pulumi.Output<string | undefined>;Specifies the number of seconds that a connection is idle before the connection flow is eligible for deletion. Possible values are disabled, indefinite, or a numeric value that you specify. The default value is disabled.
property maxAge
public maxAge: pulumi.Output<number | undefined>;Specifies the maximum age in number of seconds allowed for a connection in the connection reuse pool. For any connection with an age higher than this value, the system removes that connection from the reuse pool. The default value is 86400.
property maxReuse
public maxReuse: pulumi.Output<number | undefined>;Specifies the maximum number of times that a server-side connection can be reused. The default value is 1000.
property maxSize
public maxSize: pulumi.Output<number | undefined>;Specifies the maximum number of connections that the system holds in the connection reuse pool. If the pool is already full, then the server-side connection closes after the response is completed. The default value is 10000.
property name
public name: pulumi.Output<string>;Name of the profile_oneconnect
property partition
public partition: pulumi.Output<string | undefined>;Displays the administrative partition within which this profile resides
property sharePools
public sharePools: pulumi.Output<string | undefined>;Specify if you want to share the pool, default value is “disabled”
property sourceMask
public sourceMask: pulumi.Output<string | undefined>;Specifies a source IP mask. The default value is 0.0.0.0. The system applies the value of this option to the source address to determine its eligibility for reuse. A mask of 0.0.0.0 causes the system to share reused connections across all clients. A host mask (all 1’s in binary), causes the system to share only those reused connections originating from the same client IP address.
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileServerSsl
class ProfileServerSsl extends CustomResourcef5bigip.ltm.ProfileServerSsl Manages server SSL profiles on a BIG-IP
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const test_ServerSsl = new f5bigip.ltm.ProfileServerSsl("test-ServerSsl", {
authenticate: "always",
ciphers: "DEFAULT",
defaultsFrom: "/Common/serverssl",
name: "/Common/test-ServerSsl",
partition: "Common",
});constructor
new ProfileServerSsl(name: string, args: ProfileServerSslArgs, opts?: pulumi.CustomResourceOptions)Create a ProfileServerSsl resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileServerSslState, opts?: pulumi.CustomResourceOptions): ProfileServerSslGet an existing ProfileServerSsl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileServerSslReturns true if the given object is an instance of ProfileServerSsl. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property alertTimeout
public alertTimeout: pulumi.Output<string>;Alert time out
property authenticate
public authenticate: pulumi.Output<string>;Server authentication once / always (default is once).
property authenticateDepth
public authenticateDepth: pulumi.Output<number>;Client certificate chain traversal depth. Default 9.
property caFile
public caFile: pulumi.Output<string>;Client certificate file path. Default None.
property cacheSize
public cacheSize: pulumi.Output<number>;Cache size (sessions).
property cacheTimeout
public cacheTimeout: pulumi.Output<number>;Cache time out
property cert
public cert: pulumi.Output<string>;Specifies the name of the certificate that the system uses for server-side SSL processing.
property chain
public chain: pulumi.Output<string>;Specifies the certificates-key chain to associate with the SSL profile
property ciphers
public ciphers: pulumi.Output<string>;Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
property expireCertResponseControl
public expireCertResponseControl: pulumi.Output<string>;Response if the cert is expired (drop / ignore).
property fullPath
public fullPath: pulumi.Output<string>;full path of the profile
property generation
public generation: pulumi.Output<number>;generation
property genericAlert
public genericAlert: pulumi.Output<string>;Generic alerts enabled / disabled.
property handshakeTimeout
public handshakeTimeout: pulumi.Output<string>;Handshake time out (seconds)
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property key
public key: pulumi.Output<string>;Specifies the file name of the SSL key.
property modSslMethods
public modSslMethods: pulumi.Output<string>;ModSSL Methods enabled / disabled. Default is disabled.
property mode
public mode: pulumi.Output<string>;ModSSL Methods enabled / disabled. Default is disabled.
property name
public name: pulumi.Output<string>;Specifies the name of the profile. (type string)
property partition
public partition: pulumi.Output<string>;Device partition to manage resources on.
property passphrase
public passphrase: pulumi.Output<string>;Client Certificate Constrained Delegation CA passphrase
property peerCertMode
public peerCertMode: pulumi.Output<string>;Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
property proxySsl
public proxySsl: pulumi.Output<string>;Proxy SSL enabled / disabled. Default is disabled.
property renegotiatePeriod
public renegotiatePeriod: pulumi.Output<string>;Renogotiate Period (seconds)
property renegotiateSize
public renegotiateSize: pulumi.Output<string>;Renogotiate Size
property renegotiation
public renegotiation: pulumi.Output<string>;Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
property retainCertificate
public retainCertificate: pulumi.Output<string>;When true, client certificate is retained in SSL session.
property secureRenegotiation
public secureRenegotiation: pulumi.Output<string>;Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile.
When request is set the system request secure renegotation of SSL connections.
require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients.
The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
property serverName
public serverName: pulumi.Output<string>;Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
property sessionMirroring
public sessionMirroring: pulumi.Output<string>;Session Mirroring (enabled / disabled)
property sessionTicket
public sessionTicket: pulumi.Output<string>;Session Ticket (enabled / disabled)
property sniDefault
public sniDefault: pulumi.Output<string>;Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
property sniRequire
public sniRequire: pulumi.Output<string>;Requires that the network peers also provide SNI support, this setting only takes effect when sniDefault is set to true.When creating a new profile, the setting is provided by the parent profile
property sslForwardProxy
public sslForwardProxy: pulumi.Output<string>;SSL forward Proxy (enabled / disabled)
property sslForwardProxyBypass
public sslForwardProxyBypass: pulumi.Output<string>;SSL forward Proxy Bypass (enabled / disabled)
property sslSignHash
public sslSignHash: pulumi.Output<string>;SSL sign hash (any, sha1, sha256, sha384)
property strictResume
public strictResume: pulumi.Output<string>;Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
property tmOptions
public tmOptions: pulumi.Output<string[]>;property uncleanShutdown
public uncleanShutdown: pulumi.Output<string>;Unclean Shutdown (enabled / disabled)
property untrustedCertResponseControl
public untrustedCertResponseControl: pulumi.Output<string>;Unclean Shutdown (drop / ignore)
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource ProfileTcp
class ProfileTcp extends CustomResourcef5bigip.ltm.ProfileTcp Configures a custom profileTcp for use by health checks.
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const sanjoseTcpLanProfile = new f5bigip.ltm.ProfileTcp("sanjose-tcp-lan-profile", {
closeWaitTimeout: 5,
deferredAccept: "enabled",
fastOpen: "enabled",
finwait2timeout: 5,
finwaitTimeout: 300,
idleTimeout: 200,
keepaliveInterval: 1700,
name: "sanjose-tcp-lan-profile",
});constructor
new ProfileTcp(name: string, args: ProfileTcpArgs, opts?: pulumi.CustomResourceOptions)Create a ProfileTcp resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ProfileTcpState, opts?: pulumi.CustomResourceOptions): ProfileTcpGet an existing ProfileTcp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is ProfileTcpReturns true if the given object is an instance of ProfileTcp. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property closeWaitTimeout
public closeWaitTimeout: pulumi.Output<number | undefined>;Specifies the number of seconds that a connection remains in a LAST-ACK state before quitting. A value of 0 represents a term of forever (or until the maxrtx of the FIN state). The default value is 5 seconds.
property defaultsFrom
public defaultsFrom: pulumi.Output<string | undefined>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property deferredAccept
public deferredAccept: pulumi.Output<string | undefined>;Specifies, when enabled, that the system defers allocation of the connection chain context until the client response is received. This option is useful for dealing with 3-way handshake DOS attacks. The default value is disabled.
property fastOpen
public fastOpen: pulumi.Output<string | undefined>;When enabled, permits TCP Fast Open, allowing properly equipped TCP clients to send data with the SYN packet.
property finwait2timeout
public finwait2timeout: pulumi.Output<number | undefined>;Specifies the number of seconds that a connection is in the FIN-WAIT-2 state before quitting. The default value is 300 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state).
property finwaitTimeout
public finwaitTimeout: pulumi.Output<number | undefined>;Specifies the number of seconds that a connection is in the FIN-WAIT-1 or closing state before quitting. The default value is 5 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state). You can also specify immediate or indefinite.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property idleTimeout
public idleTimeout: pulumi.Output<number | undefined>;Specifies the number of seconds that a connection is idle before the connection is eligible for deletion. The default value is 300 seconds.
property keepaliveInterval
public keepaliveInterval: pulumi.Output<number | undefined>;Specifies the keep alive probe interval, in seconds. The default value is 1800 seconds.
property name
public name: pulumi.Output<string>;Name of the profile_tcp
property partition
public partition: pulumi.Output<string | undefined>;Displays the administrative partition within which this profile resides
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource Snat
class Snat extends CustomResourcef5bigip.ltm.Snat Manages a snat configuration
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const testSnat = new f5bigip.ltm.Snat("test-snat", {
autolasthop: "default",
fullPath: "/Common/test-snat",
mirror: "disabled",
name: "TEST_SNAT_NAME",
origins: [
{
name: "2.2.2.2",
},
{
name: "3.3.3.3",
},
],
partition: "Common",
translation: "/Common/136.1.1.1",
vlansdisabled: true,
});constructor
new Snat(name: string, args: SnatArgs, opts?: pulumi.CustomResourceOptions)Create a Snat resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SnatState, opts?: pulumi.CustomResourceOptions): SnatGet an existing Snat resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is SnatReturns true if the given object is an instance of Snat. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property autolasthop
public autolasthop: pulumi.Output<string | undefined>;-(Optional) Specifies whether to automatically map last hop for pools or not. The default is to use next level’s default.
property fullPath
public fullPath: pulumi.Output<string | undefined>;Fullpath
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property mirror
public mirror: pulumi.Output<string | undefined>;Enables or disables mirroring of SNAT connections.
property name
public name: pulumi.Output<string>;Name of the snat
property origins
public origins: pulumi.Output<SnatOrigin[]>;IP or hostname of the snat
property partition
public partition: pulumi.Output<string | undefined>;Displays the administrative partition within which this profile resides
property snatpool
public snatpool: pulumi.Output<string | undefined>;Specifies the name of a SNAT pool. You can only use this option when automap and translation are not used.
property sourceport
public sourceport: pulumi.Output<string | undefined>;Specifies whether the system preserves the source port of the connection. The default is preserve. Use of the preserve-strict setting should be restricted to UDP only under very special circumstances such as nPath or transparent (that is, no translation of any other L3/L4 field), where there is a 1:1 relationship between virtual IP addresses and node addresses, or when clustered multi-processing (CMP) is disabled. The change setting is useful for obfuscating internal network addresses.
property translation
public translation: pulumi.Output<string | undefined>;Specifies the name of a translated IP address. Note that translated addresses are outside the traffic management system. You can only use this option when automap and snatpool are not used.
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
property vlans
public vlans: pulumi.Output<string[] | undefined>;Specifies the name of the VLAN to which you want to assign the SNAT. The default is vlans-enabled.
property vlansdisabled
public vlansdisabled: pulumi.Output<boolean | undefined>;Disables the SNAT on all VLANs.
Resource SnatPool
class SnatPool extends CustomResourcef5bigip.ltm.SnatPool Collections of SNAT translation addresses
Resource should be named with their “full path”. The full path is the combination of the partition + name of the resource, for example /Common/my-snatpool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const snatpoolSanjose = new f5bigip.ltm.SnatPool("snatpoolSanjose", {
members: [
"191.1.1.1",
"194.2.2.2",
],
name: "/Common/snatpool_sanjose",
});constructor
new SnatPool(name: string, args: SnatPoolArgs, opts?: pulumi.CustomResourceOptions)Create a SnatPool resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SnatPoolState, opts?: pulumi.CustomResourceOptions): SnatPoolGet an existing SnatPool resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is SnatPoolReturns true if the given object is an instance of SnatPool. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property members
public members: pulumi.Output<string[]>;Specifies a translation address to add to or delete from a SNAT pool (at least one address is required)
property name
public name: pulumi.Output<string>;Name of the snatpool
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource VirtualAddress
class VirtualAddress extends CustomResourcef5bigip.ltm.VirtualAddress Configures Virtual Server
For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as f5bigip from "@pulumi/f5bigip";
const vsVa = new f5bigip.ltm.VirtualAddress("vsVa", {
advertizeRoute: true,
name: "/Common/vs_va",
});constructor
new VirtualAddress(name: string, args: VirtualAddressArgs, opts?: pulumi.CustomResourceOptions)Create a VirtualAddress resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: VirtualAddressState, opts?: pulumi.CustomResourceOptions): VirtualAddressGet an existing VirtualAddress resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is VirtualAddressReturns true if the given object is an instance of VirtualAddress. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property advertizeRoute
public advertizeRoute: pulumi.Output<boolean | undefined>;Enabled dynamic routing of the address
property arp
public arp: pulumi.Output<boolean | undefined>;Enable or disable ARP for the virtual address
property autoDelete
public autoDelete: pulumi.Output<boolean | undefined>;Automatically delete the virtual address with the virtual server
property connLimit
public connLimit: pulumi.Output<number | undefined>;Max number of connections for virtual address
property enabled
public enabled: pulumi.Output<boolean | undefined>;Enable or disable the virtual address
property icmpEcho
public icmpEcho: pulumi.Output<boolean | undefined>;Enable/Disable ICMP response to the virtual address
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property name
public name: pulumi.Output<string>;Name of the virtual address
property trafficGroup
public trafficGroup: pulumi.Output<string | undefined>;Specify the partition and traffic group
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
Resource VirtualServer
class VirtualServer extends CustomResourceconstructor
new VirtualServer(name: string, args: VirtualServerArgs, opts?: pulumi.CustomResourceOptions)Create a VirtualServer resource with the given unique name, arguments, and options.
nameThe unique name of the resource.argsThe arguments to use to populate this resource's properties.optsA bag of options that control this resource's behavior.
method get
public static get(name: string, id: pulumi.Input<pulumi.ID>, state?: VirtualServerState, opts?: pulumi.CustomResourceOptions): VirtualServerGet an existing VirtualServer resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
method getProvider
getProvider(moduleMember: string): ProviderResource | undefinedmethod isInstance
public static isInstance(obj: any): obj is VirtualServerReturns true if the given object is an instance of VirtualServer. This is designed to work even when multiple copies of the Pulumi SDK have been loaded into the same process.
property clientProfiles
public clientProfiles: pulumi.Output<string[]>;List of client context profiles associated on the virtual server. Not mutually exclusive with profiles and server_profiles
property defaultPersistenceProfile
public defaultPersistenceProfile: pulumi.Output<string | undefined>;property description
public description: pulumi.Output<string | undefined>;Description of Virtual server
property destination
public destination: pulumi.Output<string>;Destination IP
property fallbackPersistenceProfile
public fallbackPersistenceProfile: pulumi.Output<string>;Specifies a fallback persistence profile for the Virtual Server to use when the default persistence profile is not available.
property id
id: Output<ID>;id is the provider-assigned unique ID for this managed resource. It is set during deployments and may be missing (undefined) during planning phases.
property ipProtocol
public ipProtocol: pulumi.Output<string>;Specify the IP protocol to use with the the virtual server (all, tcp, or udp are valid)
property irules
public irules: pulumi.Output<string[] | undefined>;The iRules list you want run on this virtual server. iRules help automate the intercepting, processing, and routing of application traffic.
property mask
public mask: pulumi.Output<string | undefined>;Mask can either be in CIDR notation or decimal, i.e.: 24 or 255.255.255.0. A CIDR mask of 0 is the same as 0.0.0.0
property name
public name: pulumi.Output<string>;Name of the virtual server
property persistenceProfiles
public persistenceProfiles: pulumi.Output<string[]>;List of persistence profiles associated with the Virtual Server.
property policies
public policies: pulumi.Output<string[] | undefined>;property pool
public pool: pulumi.Output<string | undefined>;Default pool name
property port
public port: pulumi.Output<number>;Listen port for the virtual server
property profiles
public profiles: pulumi.Output<string[]>;List of profiles associated both client and server contexts on the virtual server. This includes protocol, ssl, http, etc.
property serverProfiles
public serverProfiles: pulumi.Output<string[]>;List of server context profiles associated on the virtual server. Not mutually exclusive with profiles and client_profiles
property snatpool
public snatpool: pulumi.Output<string>;Specifies the name of an existing SNAT pool that you want the virtual server to use to implement selective and intelligent SNATs. DEPRECATED - see Virtual Server Property Groups source-address-translation
property source
public source: pulumi.Output<string | undefined>;Specifies an IP address or network from which the virtual server will accept traffic.
property sourceAddressTranslation
public sourceAddressTranslation: pulumi.Output<string>;Can be either omitted for none or the values automap or snat
property state
public state: pulumi.Output<string | undefined>;Specifies whether the virtual server and its resources are available for load balancing. The default is Enabled
property translateAddress
public translateAddress: pulumi.Output<string>;Enables or disables address translation for the virtual server. Turn address translation off for a virtual server if you want to use the virtual server to load balance connections to any address. This option is useful when the system is load balancing devices that have the same IP address.
property translatePort
public translatePort: pulumi.Output<string>;Enables or disables port translation. Turn port translation off for a virtual server if you want to use the virtual server to load balance connections to any service
property urn
urn: Output<URN>;urn is the stable logical URN used to distinctly address a resource, both before and after deployments.
property vlans
public vlans: pulumi.Output<string[] | undefined>;The virtual server is enabled/disabled on this set of VLANs. See vlans-disabled and vlans-enabled.
property vlansEnabled
public vlansEnabled: pulumi.Output<boolean>;Enables the virtual server on the VLANs specified by the VLANs option.
Others
interface DataGroupArgs
interface DataGroupArgsThe set of arguments for constructing a DataGroup resource.
property name
name: pulumi.Input<string>;, sets the value of the record’s name attribute, must be of type defined in type attribute
property records
records?: pulumi.Input<pulumi.Input<DataGroupRecord>[]>;a set of name and data attributes, name must be of type specified by the type attributed (string, ip and integer), data is optional and can take any value, multiple record sets can be specified as needed.
property type
type: pulumi.Input<string>;datagroup type (applies to the name field of the record), supports: string, ip or integer
interface DataGroupState
interface DataGroupStateInput properties used for looking up and filtering DataGroup resources.
property name
name?: pulumi.Input<string>;, sets the value of the record’s name attribute, must be of type defined in type attribute
property records
records?: pulumi.Input<pulumi.Input<DataGroupRecord>[]>;a set of name and data attributes, name must be of type specified by the type attributed (string, ip and integer), data is optional and can take any value, multiple record sets can be specified as needed.
property type
type?: pulumi.Input<string>;datagroup type (applies to the name field of the record), supports: string, ip or integer
interface IRuleArgs
interface IRuleArgsThe set of arguments for constructing a IRule resource.
property irule
irule: pulumi.Input<string>;Body of the iRule
property name
name: pulumi.Input<string>;Name of the iRule
interface IRuleState
interface IRuleStateInput properties used for looking up and filtering IRule resources.
property irule
irule?: pulumi.Input<string>;Body of the iRule
property name
name?: pulumi.Input<string>;Name of the iRule
interface MonitorArgs
interface MonitorArgsThe set of arguments for constructing a Monitor resource.
property adaptive
adaptive?: pulumi.Input<string>;ftp adaptive
property adaptiveLimit
adaptiveLimit?: pulumi.Input<number>;Integer value
property compatibility
compatibility?: pulumi.Input<string>;Specifies, when enabled, that the SSL options setting (in OpenSSL) is set to ALL. Accepts ‘enabled’ or ‘disabled’ values, the default value is ‘enabled’.
property database
database?: pulumi.Input<string>;Specifies the database in which the user is created
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Existing monitor to inherit from. Must be one of /Common/http, /Common/https, /Common/icmp or /Common/gateway-icmp.
property destination
destination?: pulumi.Input<string>;Specify an alias address for monitoring
property filename
filename?: pulumi.Input<string>;Specifies the full path and file name of the file that the system attempts to download. The health check is successful if the system can download the file.
property interval
interval?: pulumi.Input<number>;Check interval in seconds
property ipDscp
ipDscp?: pulumi.Input<number>;property manualResume
manualResume?: pulumi.Input<string>;property mode
mode?: pulumi.Input<string>;Specifies the data transfer process (DTP) mode. The default value is passive. The options are passive (Specifies that the monitor sends a data transfer request to the FTP server. When the FTP server receives the request, the FTP server then initiates and establishes the data connection.) and active (Specifies that the monitor initiates and establishes the data connection with the FTP server.).
property name
name: pulumi.Input<string>;Name of the monitor
property parent
parent: pulumi.Input<string>;Existing LTM monitor to inherit from
property password
password?: pulumi.Input<string>;Specifies the password if the monitored target requires authentication
property receive
receive?: pulumi.Input<string>;Expected response string
property receiveDisable
receiveDisable?: pulumi.Input<string>;Expected response string.
property reverse
reverse?: pulumi.Input<string>;property send
send?: pulumi.Input<string>;Request string to send
property timeUntilUp
timeUntilUp?: pulumi.Input<number>;Time in seconds
property timeout
timeout?: pulumi.Input<number>;Timeout in seconds
property transparent
transparent?: pulumi.Input<string>;property username
username?: pulumi.Input<string>;Specifies the user name if the monitored target requires authentication
interface MonitorState
interface MonitorStateInput properties used for looking up and filtering Monitor resources.
property adaptive
adaptive?: pulumi.Input<string>;ftp adaptive
property adaptiveLimit
adaptiveLimit?: pulumi.Input<number>;Integer value
property compatibility
compatibility?: pulumi.Input<string>;Specifies, when enabled, that the SSL options setting (in OpenSSL) is set to ALL. Accepts ‘enabled’ or ‘disabled’ values, the default value is ‘enabled’.
property database
database?: pulumi.Input<string>;Specifies the database in which the user is created
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Existing monitor to inherit from. Must be one of /Common/http, /Common/https, /Common/icmp or /Common/gateway-icmp.
property destination
destination?: pulumi.Input<string>;Specify an alias address for monitoring
property filename
filename?: pulumi.Input<string>;Specifies the full path and file name of the file that the system attempts to download. The health check is successful if the system can download the file.
property interval
interval?: pulumi.Input<number>;Check interval in seconds
property ipDscp
ipDscp?: pulumi.Input<number>;property manualResume
manualResume?: pulumi.Input<string>;property mode
mode?: pulumi.Input<string>;Specifies the data transfer process (DTP) mode. The default value is passive. The options are passive (Specifies that the monitor sends a data transfer request to the FTP server. When the FTP server receives the request, the FTP server then initiates and establishes the data connection.) and active (Specifies that the monitor initiates and establishes the data connection with the FTP server.).
property name
name?: pulumi.Input<string>;Name of the monitor
property parent
parent?: pulumi.Input<string>;Existing LTM monitor to inherit from
property password
password?: pulumi.Input<string>;Specifies the password if the monitored target requires authentication
property receive
receive?: pulumi.Input<string>;Expected response string
property receiveDisable
receiveDisable?: pulumi.Input<string>;Expected response string.
property reverse
reverse?: pulumi.Input<string>;property send
send?: pulumi.Input<string>;Request string to send
property timeUntilUp
timeUntilUp?: pulumi.Input<number>;Time in seconds
property timeout
timeout?: pulumi.Input<number>;Timeout in seconds
property transparent
transparent?: pulumi.Input<string>;property username
username?: pulumi.Input<string>;Specifies the user name if the monitored target requires authentication
interface NodeArgs
interface NodeArgsThe set of arguments for constructing a Node resource.
property address
address: pulumi.Input<string>;IP or hostname of the node
property connectionLimit
connectionLimit?: pulumi.Input<number>;Specifies the maximum number of connections allowed for the node or node address.
property description
description?: pulumi.Input<string>;User-defined description give ltm_node
property dynamicRatio
dynamicRatio?: pulumi.Input<number>;Specifies the fixed ratio value used for a node during ratio load balancing.
property fqdn
fqdn?: pulumi.Input<NodeFqdn>;property monitor
monitor?: pulumi.Input<string>;specifies the name of the monitor or monitor rule that you want to associate with the node.
property name
name: pulumi.Input<string>;Name of the node
property rateLimit
rateLimit?: pulumi.Input<string>;Specifies the maximum number of connections per second allowed for a node or node address. The default value is ‘disabled’.
property ratio
ratio?: pulumi.Input<number>;Sets the ratio number for the node.
property state
state?: pulumi.Input<string>;Default is “user-up” you can set to “user-down” if you want to disable
interface NodeState
interface NodeStateInput properties used for looking up and filtering Node resources.
property address
address?: pulumi.Input<string>;IP or hostname of the node
property connectionLimit
connectionLimit?: pulumi.Input<number>;Specifies the maximum number of connections allowed for the node or node address.
property description
description?: pulumi.Input<string>;User-defined description give ltm_node
property dynamicRatio
dynamicRatio?: pulumi.Input<number>;Specifies the fixed ratio value used for a node during ratio load balancing.
property fqdn
fqdn?: pulumi.Input<NodeFqdn>;property monitor
monitor?: pulumi.Input<string>;specifies the name of the monitor or monitor rule that you want to associate with the node.
property name
name?: pulumi.Input<string>;Name of the node
property rateLimit
rateLimit?: pulumi.Input<string>;Specifies the maximum number of connections per second allowed for a node or node address. The default value is ‘disabled’.
property ratio
ratio?: pulumi.Input<number>;Sets the ratio number for the node.
property state
state?: pulumi.Input<string>;Default is “user-up” you can set to “user-down” if you want to disable
interface PersistenceProfileCookieArgs
interface PersistenceProfileCookieArgsThe set of arguments for constructing a PersistenceProfileCookie resource.
property alwaysSend
alwaysSend?: pulumi.Input<string>;To enable _ disable always sending cookies
property appService
appService?: pulumi.Input<string>;property cookieEncryption
cookieEncryption?: pulumi.Input<string>;To required, preferred, or disabled policy for cookie encryption
property cookieEncryptionPassphrase
cookieEncryptionPassphrase?: pulumi.Input<string>;Passphrase for encrypted cookies
property cookieName
cookieName?: pulumi.Input<string>;Name of the cookie to track persistence
property defaultsFrom
defaultsFrom: pulumi.Input<string>;Inherit defaults from parent profile
property expiration
expiration?: pulumi.Input<string>;Expiration TTL for cookie specified in D:H:M:S or in seconds
property hashLength
hashLength?: pulumi.Input<number>;Length of hash to apply to cookie
property hashOffset
hashOffset?: pulumi.Input<number>;Number of characters to skip in the cookie for the hash
property httponly
httponly?: pulumi.Input<string>;To enable _ disable sending only over http
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across virtual servers with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PersistenceProfileCookieState
interface PersistenceProfileCookieStateInput properties used for looking up and filtering PersistenceProfileCookie resources.
property alwaysSend
alwaysSend?: pulumi.Input<string>;To enable _ disable always sending cookies
property appService
appService?: pulumi.Input<string>;property cookieEncryption
cookieEncryption?: pulumi.Input<string>;To required, preferred, or disabled policy for cookie encryption
property cookieEncryptionPassphrase
cookieEncryptionPassphrase?: pulumi.Input<string>;Passphrase for encrypted cookies
property cookieName
cookieName?: pulumi.Input<string>;Name of the cookie to track persistence
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Inherit defaults from parent profile
property expiration
expiration?: pulumi.Input<string>;Expiration TTL for cookie specified in D:H:M:S or in seconds
property hashLength
hashLength?: pulumi.Input<number>;Length of hash to apply to cookie
property hashOffset
hashOffset?: pulumi.Input<number>;Number of characters to skip in the cookie for the hash
property httponly
httponly?: pulumi.Input<string>;To enable _ disable sending only over http
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across virtual servers with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name?: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PersistenceProfileDstAddrArgs
interface PersistenceProfileDstAddrArgsThe set of arguments for constructing a PersistenceProfileDstAddr resource.
property appService
appService?: pulumi.Input<string>;property defaultsFrom
defaultsFrom: pulumi.Input<string>;Inherit defaults from parent profile
property hashAlgorithm
hashAlgorithm?: pulumi.Input<string>;Specify the hash algorithm
property mask
mask?: pulumi.Input<string>;Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PersistenceProfileDstAddrState
interface PersistenceProfileDstAddrStateInput properties used for looking up and filtering PersistenceProfileDstAddr resources.
property appService
appService?: pulumi.Input<string>;property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Inherit defaults from parent profile
property hashAlgorithm
hashAlgorithm?: pulumi.Input<string>;Specify the hash algorithm
property mask
mask?: pulumi.Input<string>;Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name?: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PersistenceProfileSrcAddrArgs
interface PersistenceProfileSrcAddrArgsThe set of arguments for constructing a PersistenceProfileSrcAddr resource.
property appService
appService?: pulumi.Input<string>;property defaultsFrom
defaultsFrom: pulumi.Input<string>;Inherit defaults from parent profile
property hashAlgorithm
hashAlgorithm?: pulumi.Input<string>;Specify the hash algorithm
property mapProxies
mapProxies?: pulumi.Input<string>;To enable _ disable directs all to the same single pool member
property mask
mask?: pulumi.Input<string>;Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PersistenceProfileSrcAddrState
interface PersistenceProfileSrcAddrStateInput properties used for looking up and filtering PersistenceProfileSrcAddr resources.
property appService
appService?: pulumi.Input<string>;property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Inherit defaults from parent profile
property hashAlgorithm
hashAlgorithm?: pulumi.Input<string>;Specify the hash algorithm
property mapProxies
mapProxies?: pulumi.Input<string>;To enable _ disable directs all to the same single pool member
property mask
mask?: pulumi.Input<string>;Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name?: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PersistenceProfileSslArgs
interface PersistenceProfileSslArgsThe set of arguments for constructing a PersistenceProfileSsl resource.
property appService
appService?: pulumi.Input<string>;property defaultsFrom
defaultsFrom: pulumi.Input<string>;Inherit defaults from parent profile
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PersistenceProfileSslState
interface PersistenceProfileSslStateInput properties used for looking up and filtering PersistenceProfileSsl resources.
property appService
appService?: pulumi.Input<string>;property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Inherit defaults from parent profile
property matchAcrossPools
matchAcrossPools?: pulumi.Input<string>;To enable _ disable match across pools with given persistence record
property matchAcrossServices
matchAcrossServices?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property matchAcrossVirtuals
matchAcrossVirtuals?: pulumi.Input<string>;To enable _ disable match across services with given persistence record
property mirror
mirror?: pulumi.Input<string>;To enable _ disable
property name
name?: pulumi.Input<string>;Name of the persistence profile
property overrideConnLimit
overrideConnLimit?: pulumi.Input<string>;To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
property timeout
timeout?: pulumi.Input<number>;Timeout for persistence of the session
interface PolicyArgs
interface PolicyArgsThe set of arguments for constructing a Policy resource.
property controls
controls?: pulumi.Input<pulumi.Input<string>[]>;Specifies the controls
property name
name: pulumi.Input<string>;Name of the Policy
property publishedCopy
publishedCopy?: pulumi.Input<string>;If you want to publish the policy else it will be deployed in Drafts mode.
property requires
requires?: pulumi.Input<pulumi.Input<string>[]>;Specifies the protocol
property rules
rules?: pulumi.Input<pulumi.Input<PolicyRule>[]>;Rules can be applied using the policy
property strategy
strategy?: pulumi.Input<string>;Specifies the match strategy
interface PolicyState
interface PolicyStateInput properties used for looking up and filtering Policy resources.
property controls
controls?: pulumi.Input<pulumi.Input<string>[]>;Specifies the controls
property name
name?: pulumi.Input<string>;Name of the Policy
property publishedCopy
publishedCopy?: pulumi.Input<string>;If you want to publish the policy else it will be deployed in Drafts mode.
property requires
requires?: pulumi.Input<pulumi.Input<string>[]>;Specifies the protocol
property rules
rules?: pulumi.Input<pulumi.Input<PolicyRule>[]>;Rules can be applied using the policy
property strategy
strategy?: pulumi.Input<string>;Specifies the match strategy
interface PoolArgs
interface PoolArgsThe set of arguments for constructing a Pool resource.
property allowNat
allowNat?: pulumi.Input<string>;Allow NAT
property allowSnat
allowSnat?: pulumi.Input<string>;Allow SNAT
property description
description?: pulumi.Input<string>;Userdefined value to describe the pool
property loadBalancingMode
loadBalancingMode?: pulumi.Input<string>;Possible values: round-robin, …
property monitors
monitors?: pulumi.Input<pulumi.Input<string>[]>;List of monitor names to associate with the pool
property name
name: pulumi.Input<string>;Name of the pool
property reselectTries
reselectTries?: pulumi.Input<number>;Number of times the system tries to select a new pool member after a failure.
property serviceDownAction
serviceDownAction?: pulumi.Input<string>;Possible values: none, reset, reselect, drop
property slowRampTime
slowRampTime?: pulumi.Input<number>;Slow ramp time for pool members
interface PoolAttachmentArgs
interface PoolAttachmentArgsThe set of arguments for constructing a PoolAttachment resource.
property node
node: pulumi.Input<string>;Node to add to the pool in /Partition/NodeName:Port format (e.g. /Common/Node01:80)
property pool
pool: pulumi.Input<string>;Name of the pool in /Partition/Name format
interface PoolAttachmentState
interface PoolAttachmentStateInput properties used for looking up and filtering PoolAttachment resources.
property node
node?: pulumi.Input<string>;Node to add to the pool in /Partition/NodeName:Port format (e.g. /Common/Node01:80)
property pool
pool?: pulumi.Input<string>;Name of the pool in /Partition/Name format
interface PoolState
interface PoolStateInput properties used for looking up and filtering Pool resources.
property allowNat
allowNat?: pulumi.Input<string>;Allow NAT
property allowSnat
allowSnat?: pulumi.Input<string>;Allow SNAT
property description
description?: pulumi.Input<string>;Userdefined value to describe the pool
property loadBalancingMode
loadBalancingMode?: pulumi.Input<string>;Possible values: round-robin, …
property monitors
monitors?: pulumi.Input<pulumi.Input<string>[]>;List of monitor names to associate with the pool
property name
name?: pulumi.Input<string>;Name of the pool
property reselectTries
reselectTries?: pulumi.Input<number>;Number of times the system tries to select a new pool member after a failure.
property serviceDownAction
serviceDownAction?: pulumi.Input<string>;Possible values: none, reset, reselect, drop
property slowRampTime
slowRampTime?: pulumi.Input<number>;Slow ramp time for pool members
interface ProfileClientSslArgs
interface ProfileClientSslArgsThe set of arguments for constructing a ProfileClientSsl resource.
property alertTimeout
alertTimeout?: pulumi.Input<string>;Alert time out
property allowNonSsl
allowNonSsl?: pulumi.Input<string>;Enables or disables acceptance of non-SSL connections, When creating a new profile, the setting is provided by the parent profile
property authenticate
authenticate?: pulumi.Input<string>;Specifies the frequency of client authentication for an SSL session.When once,specifies that the system authenticates the client once for an SSL session.
When always, specifies that the system authenticates the client once for an SSL session and also upon reuse of that session.
property authenticateDepth
authenticateDepth?: pulumi.Input<number>;Specifies the maximum number of certificates to be traversed in a client certificate chain
property caFile
caFile?: pulumi.Input<string>;Client certificate file path. Default None.
property cacheSize
cacheSize?: pulumi.Input<number>;Cache size (sessions).
property cacheTimeout
cacheTimeout?: pulumi.Input<number>;Cache time out
property cert
cert?: pulumi.Input<string>;Specifies a cert name for use.
property certExtensionIncludes
certExtensionIncludes?: pulumi.Input<pulumi.Input<string>[]>;Cert extension includes for ssl forward proxy
property certKeyChains
certKeyChains?: pulumi.Input<pulumi.Input<ProfileClientSslCertKeyChain>[]>;property certLifeSpan
certLifeSpan?: pulumi.Input<number>;Life span of the certificate in days for ssl forward proxy
property certLookupByIpaddrPort
certLookupByIpaddrPort?: pulumi.Input<string>;Cert lookup by ip address and port enabled / disabled
property chain
chain?: pulumi.Input<string>;Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optional
property ciphers
ciphers?: pulumi.Input<string>;Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
property clientCertCa
clientCertCa?: pulumi.Input<string>;client certificate name
property crlFile
crlFile?: pulumi.Input<string>;Certificate revocation file name
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is the clientssl parent on the Common partition.
property forwardProxyBypassDefaultAction
forwardProxyBypassDefaultAction?: pulumi.Input<string>;Forward proxy bypass default action. (enabled / disabled)
property fullPath
fullPath?: pulumi.Input<string>;full path of the profile
property generation
generation?: pulumi.Input<number>;generation
property genericAlert
genericAlert?: pulumi.Input<string>;Generic alerts enabled / disabled.
property handshakeTimeout
handshakeTimeout?: pulumi.Input<string>;Handshake time out (seconds)
property inheritCertKeychain
inheritCertKeychain?: pulumi.Input<string>;Inherit cert key chain
property key
key?: pulumi.Input<string>;Contains a key name
property modSslMethods
modSslMethods?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property mode
mode?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property name
name: pulumi.Input<string>;Specifies the name of the profile. (type string)
property partition
partition?: pulumi.Input<string>;Device partition to manage resources on.
property passphrase
passphrase?: pulumi.Input<string>;Client Certificate Constrained Delegation CA passphrase
property peerCertMode
peerCertMode?: pulumi.Input<string>;Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
property proxyCaCert
proxyCaCert?: pulumi.Input<string>;Proxy CA Cert
property proxyCaKey
proxyCaKey?: pulumi.Input<string>;Proxy CA Key
property proxyCaPassphrase
proxyCaPassphrase?: pulumi.Input<string>;Proxy CA Passphrase
property proxySsl
proxySsl?: pulumi.Input<string>;Proxy SSL enabled / disabled. Default is disabled.
property proxySslPassthrough
proxySslPassthrough?: pulumi.Input<string>;Proxy SSL passthrough enabled / disabled. Default is disabled.
property renegotiatePeriod
renegotiatePeriod?: pulumi.Input<string>;Renogotiate Period (seconds)
property renegotiateSize
renegotiateSize?: pulumi.Input<string>;Renogotiate Size
property renegotiation
renegotiation?: pulumi.Input<string>;Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
property retainCertificate
retainCertificate?: pulumi.Input<string>;When true, client certificate is retained in SSL session.
property secureRenegotiation
secureRenegotiation?: pulumi.Input<string>;Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile.
When request is set the system request secure renegotation of SSL connections.
require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients.
The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
property serverName
serverName?: pulumi.Input<string>;Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
property sessionMirroring
sessionMirroring?: pulumi.Input<string>;Session Mirroring (enabled / disabled)
property sessionTicket
sessionTicket?: pulumi.Input<string>;Session Ticket (enabled / disabled)
property sniDefault
sniDefault?: pulumi.Input<string>;Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
property sniRequire
sniRequire?: pulumi.Input<string>;Requires that the network peers also provide SNI support, this setting only takes effect when sniDefault is set to true.When creating a new profile, the setting is provided by the parent profile
property sslForwardProxy
sslForwardProxy?: pulumi.Input<string>;SSL forward Proxy (enabled / disabled)
property sslForwardProxyBypass
sslForwardProxyBypass?: pulumi.Input<string>;SSL forward Proxy Bypass (enabled / disabled)
property sslSignHash
sslSignHash?: pulumi.Input<string>;SSL sign hash (any, sha1, sha256, sha384)
property strictResume
strictResume?: pulumi.Input<string>;Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
property tmOptions
tmOptions?: pulumi.Input<pulumi.Input<string>[]>;property uncleanShutdown
uncleanShutdown?: pulumi.Input<string>;Unclean Shutdown (enabled / disabled)
interface ProfileClientSslState
interface ProfileClientSslStateInput properties used for looking up and filtering ProfileClientSsl resources.
property alertTimeout
alertTimeout?: pulumi.Input<string>;Alert time out
property allowNonSsl
allowNonSsl?: pulumi.Input<string>;Enables or disables acceptance of non-SSL connections, When creating a new profile, the setting is provided by the parent profile
property authenticate
authenticate?: pulumi.Input<string>;Specifies the frequency of client authentication for an SSL session.When once,specifies that the system authenticates the client once for an SSL session.
When always, specifies that the system authenticates the client once for an SSL session and also upon reuse of that session.
property authenticateDepth
authenticateDepth?: pulumi.Input<number>;Specifies the maximum number of certificates to be traversed in a client certificate chain
property caFile
caFile?: pulumi.Input<string>;Client certificate file path. Default None.
property cacheSize
cacheSize?: pulumi.Input<number>;Cache size (sessions).
property cacheTimeout
cacheTimeout?: pulumi.Input<number>;Cache time out
property cert
cert?: pulumi.Input<string>;Specifies a cert name for use.
property certExtensionIncludes
certExtensionIncludes?: pulumi.Input<pulumi.Input<string>[]>;Cert extension includes for ssl forward proxy
property certKeyChains
certKeyChains?: pulumi.Input<pulumi.Input<ProfileClientSslCertKeyChain>[]>;property certLifeSpan
certLifeSpan?: pulumi.Input<number>;Life span of the certificate in days for ssl forward proxy
property certLookupByIpaddrPort
certLookupByIpaddrPort?: pulumi.Input<string>;Cert lookup by ip address and port enabled / disabled
property chain
chain?: pulumi.Input<string>;Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optional
property ciphers
ciphers?: pulumi.Input<string>;Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
property clientCertCa
clientCertCa?: pulumi.Input<string>;client certificate name
property crlFile
crlFile?: pulumi.Input<string>;Certificate revocation file name
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is the clientssl parent on the Common partition.
property forwardProxyBypassDefaultAction
forwardProxyBypassDefaultAction?: pulumi.Input<string>;Forward proxy bypass default action. (enabled / disabled)
property fullPath
fullPath?: pulumi.Input<string>;full path of the profile
property generation
generation?: pulumi.Input<number>;generation
property genericAlert
genericAlert?: pulumi.Input<string>;Generic alerts enabled / disabled.
property handshakeTimeout
handshakeTimeout?: pulumi.Input<string>;Handshake time out (seconds)
property inheritCertKeychain
inheritCertKeychain?: pulumi.Input<string>;Inherit cert key chain
property key
key?: pulumi.Input<string>;Contains a key name
property modSslMethods
modSslMethods?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property mode
mode?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property name
name?: pulumi.Input<string>;Specifies the name of the profile. (type string)
property partition
partition?: pulumi.Input<string>;Device partition to manage resources on.
property passphrase
passphrase?: pulumi.Input<string>;Client Certificate Constrained Delegation CA passphrase
property peerCertMode
peerCertMode?: pulumi.Input<string>;Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
property proxyCaCert
proxyCaCert?: pulumi.Input<string>;Proxy CA Cert
property proxyCaKey
proxyCaKey?: pulumi.Input<string>;Proxy CA Key
property proxyCaPassphrase
proxyCaPassphrase?: pulumi.Input<string>;Proxy CA Passphrase
property proxySsl
proxySsl?: pulumi.Input<string>;Proxy SSL enabled / disabled. Default is disabled.
property proxySslPassthrough
proxySslPassthrough?: pulumi.Input<string>;Proxy SSL passthrough enabled / disabled. Default is disabled.
property renegotiatePeriod
renegotiatePeriod?: pulumi.Input<string>;Renogotiate Period (seconds)
property renegotiateSize
renegotiateSize?: pulumi.Input<string>;Renogotiate Size
property renegotiation
renegotiation?: pulumi.Input<string>;Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
property retainCertificate
retainCertificate?: pulumi.Input<string>;When true, client certificate is retained in SSL session.
property secureRenegotiation
secureRenegotiation?: pulumi.Input<string>;Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile.
When request is set the system request secure renegotation of SSL connections.
require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients.
The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
property serverName
serverName?: pulumi.Input<string>;Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
property sessionMirroring
sessionMirroring?: pulumi.Input<string>;Session Mirroring (enabled / disabled)
property sessionTicket
sessionTicket?: pulumi.Input<string>;Session Ticket (enabled / disabled)
property sniDefault
sniDefault?: pulumi.Input<string>;Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
property sniRequire
sniRequire?: pulumi.Input<string>;Requires that the network peers also provide SNI support, this setting only takes effect when sniDefault is set to true.When creating a new profile, the setting is provided by the parent profile
property sslForwardProxy
sslForwardProxy?: pulumi.Input<string>;SSL forward Proxy (enabled / disabled)
property sslForwardProxyBypass
sslForwardProxyBypass?: pulumi.Input<string>;SSL forward Proxy Bypass (enabled / disabled)
property sslSignHash
sslSignHash?: pulumi.Input<string>;SSL sign hash (any, sha1, sha256, sha384)
property strictResume
strictResume?: pulumi.Input<string>;Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
property tmOptions
tmOptions?: pulumi.Input<pulumi.Input<string>[]>;property uncleanShutdown
uncleanShutdown?: pulumi.Input<string>;Unclean Shutdown (enabled / disabled)
interface ProfileFastHttpArgs
interface ProfileFastHttpArgsThe set of arguments for constructing a ProfileFastHttp resource.
property connpoolMaxreuse
connpoolMaxreuse?: pulumi.Input<number>;Specifies the maximum number of times that the system can re-use a current connection. The default value is 0 (zero).
property connpoolMaxsize
connpoolMaxsize?: pulumi.Input<number>;Specifies the maximum number of connections to a load balancing pool. A setting of 0 specifies that a pool can accept an unlimited number of connections. The default value is 2048.
property connpoolMinsize
connpoolMinsize?: pulumi.Input<number>;Specifies the minimum number of connections to a load balancing pool. A setting of 0 specifies that there is no minimum. The default value is 10.
property connpoolReplenish
connpoolReplenish?: pulumi.Input<string>;The default value is enabled. When this option is enabled, the system replenishes the number of connections to a load balancing pool to the number of connections that existed when the server closed the connection to the pool. When disabled, the system replenishes the connection that was closed by the server, only when there are fewer connections to the pool than the number of connections set in the connpool-min-size connections option. Also see the connpool-min-size option..
property connpoolStep
connpoolStep?: pulumi.Input<number>;Specifies the increment in which the system makes additional connections available, when all available connections are in use. The default value is 4.
property connpoolidleTimeoutoverride
connpoolidleTimeoutoverride?: pulumi.Input<number>;Specifies the number of seconds after which a server-side connection in a OneConnect pool is eligible for deletion, when the connection has no traffic.The value of this option overrides the idle-timeout value that you specify. The default value is 0 (zero) seconds, which disables the override setting.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property forcehttp10response
forcehttp10response?: pulumi.Input<string>;Specifies whether to rewrite the HTTP version in the status line of the server to HTTP 1.0 to discourage the client from pipelining or chunking data. The default value is disabled.
property idleTimeout
idleTimeout?: pulumi.Input<number>;Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
property maxheaderSize
maxheaderSize?: pulumi.Input<number>;Specifies the maximum amount of HTTP header data that the system buffers before making a load balancing decision. The default setting is 32768.
property name
name: pulumi.Input<string>;Name of the profile_fasthttp
interface ProfileFastHttpState
interface ProfileFastHttpStateInput properties used for looking up and filtering ProfileFastHttp resources.
property connpoolMaxreuse
connpoolMaxreuse?: pulumi.Input<number>;Specifies the maximum number of times that the system can re-use a current connection. The default value is 0 (zero).
property connpoolMaxsize
connpoolMaxsize?: pulumi.Input<number>;Specifies the maximum number of connections to a load balancing pool. A setting of 0 specifies that a pool can accept an unlimited number of connections. The default value is 2048.
property connpoolMinsize
connpoolMinsize?: pulumi.Input<number>;Specifies the minimum number of connections to a load balancing pool. A setting of 0 specifies that there is no minimum. The default value is 10.
property connpoolReplenish
connpoolReplenish?: pulumi.Input<string>;The default value is enabled. When this option is enabled, the system replenishes the number of connections to a load balancing pool to the number of connections that existed when the server closed the connection to the pool. When disabled, the system replenishes the connection that was closed by the server, only when there are fewer connections to the pool than the number of connections set in the connpool-min-size connections option. Also see the connpool-min-size option..
property connpoolStep
connpoolStep?: pulumi.Input<number>;Specifies the increment in which the system makes additional connections available, when all available connections are in use. The default value is 4.
property connpoolidleTimeoutoverride
connpoolidleTimeoutoverride?: pulumi.Input<number>;Specifies the number of seconds after which a server-side connection in a OneConnect pool is eligible for deletion, when the connection has no traffic.The value of this option overrides the idle-timeout value that you specify. The default value is 0 (zero) seconds, which disables the override setting.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property forcehttp10response
forcehttp10response?: pulumi.Input<string>;Specifies whether to rewrite the HTTP version in the status line of the server to HTTP 1.0 to discourage the client from pipelining or chunking data. The default value is disabled.
property idleTimeout
idleTimeout?: pulumi.Input<number>;Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
property maxheaderSize
maxheaderSize?: pulumi.Input<number>;Specifies the maximum amount of HTTP header data that the system buffers before making a load balancing decision. The default setting is 32768.
property name
name?: pulumi.Input<string>;Name of the profile_fasthttp
interface ProfileFastL4Args
interface ProfileFastL4ArgsThe set of arguments for constructing a ProfileFastL4 resource.
property clientTimeout
clientTimeout?: pulumi.Input<number>;Specifies late binding client timeout in seconds. This setting specifies the number of seconds allowed for a client to transmit enough data to select a server when late binding is enabled. If it expires timeout-recovery mode will dictate what action to take.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property explicitflowMigration
explicitflowMigration?: pulumi.Input<string>;Enables or disables late binding explicit flow migration that allows iRules to control when flows move from software to hardware. Explicit flow migration is disabled by default hence BIG-IP automatically migrates flows from software to hardware.
property hardwareSyncookie
hardwareSyncookie?: pulumi.Input<string>;Enables or disables hardware SYN cookie support when PVA10 is present on the system. Note that when you set the hardware syncookie option to enabled, you may also want to set the following bigdb database variables using the “/sys modify db” command, based on your requirements: pva.SynCookies.Full.ConnectionThreshold (default: 500000), pva.SynCookies.Assist.ConnectionThreshold (default: 500000) pva.SynCookies.ClientWindow (default: 0). The default value is disabled.
property idleTimeout
idleTimeout?: pulumi.Input<string>;Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
property iptosToclient
iptosToclient?: pulumi.Input<string>;Specifies an IP ToS number for the client side. This option specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to clients. The default value is 65535 (pass-through), which indicates, do not modify.
property iptosToserver
iptosToserver?: pulumi.Input<string>;Specifies an IP ToS number for the server side. This setting specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to servers. The default value is 65535 (pass-through), which indicates, do not modify.
property keepaliveInterval
keepaliveInterval?: pulumi.Input<string>;Specifies the keep alive probe interval, in seconds. The default value is disabled (0 seconds).
property name
name: pulumi.Input<string>;Name of the profile_fastl4
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
interface ProfileFastL4State
interface ProfileFastL4StateInput properties used for looking up and filtering ProfileFastL4 resources.
property clientTimeout
clientTimeout?: pulumi.Input<number>;Specifies late binding client timeout in seconds. This setting specifies the number of seconds allowed for a client to transmit enough data to select a server when late binding is enabled. If it expires timeout-recovery mode will dictate what action to take.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property explicitflowMigration
explicitflowMigration?: pulumi.Input<string>;Enables or disables late binding explicit flow migration that allows iRules to control when flows move from software to hardware. Explicit flow migration is disabled by default hence BIG-IP automatically migrates flows from software to hardware.
property hardwareSyncookie
hardwareSyncookie?: pulumi.Input<string>;Enables or disables hardware SYN cookie support when PVA10 is present on the system. Note that when you set the hardware syncookie option to enabled, you may also want to set the following bigdb database variables using the “/sys modify db” command, based on your requirements: pva.SynCookies.Full.ConnectionThreshold (default: 500000), pva.SynCookies.Assist.ConnectionThreshold (default: 500000) pva.SynCookies.ClientWindow (default: 0). The default value is disabled.
property idleTimeout
idleTimeout?: pulumi.Input<string>;Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
property iptosToclient
iptosToclient?: pulumi.Input<string>;Specifies an IP ToS number for the client side. This option specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to clients. The default value is 65535 (pass-through), which indicates, do not modify.
property iptosToserver
iptosToserver?: pulumi.Input<string>;Specifies an IP ToS number for the server side. This setting specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to servers. The default value is 65535 (pass-through), which indicates, do not modify.
property keepaliveInterval
keepaliveInterval?: pulumi.Input<string>;Specifies the keep alive probe interval, in seconds. The default value is disabled (0 seconds).
property name
name?: pulumi.Input<string>;Name of the profile_fastl4
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
interface ProfileHttp2Args
interface ProfileHttp2ArgsThe set of arguments for constructing a ProfileHttp2 resource.
property activationModes
activationModes?: pulumi.Input<pulumi.Input<string>[]>;Specifies what will cause an incoming connection to be handled as a HTTP/2 connection. The default values npn and alpn specify that the TLS next-protocol-negotiation and application-layer-protocol-negotiation extensions will be used.
property concurrentStreamsPerConnection
concurrentStreamsPerConnection?: pulumi.Input<number>;Specifies how many concurrent requests are allowed to be outstanding on a single HTTP/2 connection.
property connectionIdleTimeout
connectionIdleTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is idle before the connection is eligible for deletion..
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property headerTableSize
headerTableSize?: pulumi.Input<number>;Use the parent Http2 profile
property name
name: pulumi.Input<string>;Name of the profile_http2
interface ProfileHttp2State
interface ProfileHttp2StateInput properties used for looking up and filtering ProfileHttp2 resources.
property activationModes
activationModes?: pulumi.Input<pulumi.Input<string>[]>;Specifies what will cause an incoming connection to be handled as a HTTP/2 connection. The default values npn and alpn specify that the TLS next-protocol-negotiation and application-layer-protocol-negotiation extensions will be used.
property concurrentStreamsPerConnection
concurrentStreamsPerConnection?: pulumi.Input<number>;Specifies how many concurrent requests are allowed to be outstanding on a single HTTP/2 connection.
property connectionIdleTimeout
connectionIdleTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is idle before the connection is eligible for deletion..
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property headerTableSize
headerTableSize?: pulumi.Input<number>;Use the parent Http2 profile
property name
name?: pulumi.Input<string>;Name of the profile_http2
interface ProfileHttpArgs
interface ProfileHttpArgsThe set of arguments for constructing a ProfileHttp resource.
property acceptXff
acceptXff?: pulumi.Input<string>;Enables or disables trusting the client IP address, and statistics from the client IP address, based on the request’s XFF (X-forwarded-for) headers, if they exist.
property appService
appService?: pulumi.Input<string>;The application service to which the object belongs.
property basicAuthRealm
basicAuthRealm?: pulumi.Input<string>;Specifies a quoted string for the basic authentication realm. The system sends this string to a client whenever authorization fails. The default value is none
property defaultsFrom
defaultsFrom: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property description
description?: pulumi.Input<string>;User defibned description
property encryptCookieSecret
encryptCookieSecret?: pulumi.Input<string>;Specifies a passphrase for the cookie encryption
property encryptCookies
encryptCookies?: pulumi.Input<pulumi.Input<string>[]>;Encrypts specified cookies that the BIG-IP system sends to a client system
property fallbackHost
fallbackHost?: pulumi.Input<string>;Specifies an HTTP fallback host. HTTP redirection allows you to redirect HTTP traffic to another protocol identifier, host name, port number
property fallbackStatusCodes
fallbackStatusCodes?: pulumi.Input<pulumi.Input<string>[]>;Specifies one or more three-digit status codes that can be returned by an HTTP server.
property headErase
headErase?: pulumi.Input<string>;Specifies the header string that you want to erase from an HTTP request. You can also specify none
property headInsert
headInsert?: pulumi.Input<string>;Specifies a quoted header string that you want to insert into an HTTP request
property insertXforwardedFor
insertXforwardedFor?: pulumi.Input<string>;When using connection pooling, which allows clients to make use of other client requests’ server-side connections, you can insert the X-Forwarded-For header and specify a client IP address
property lwsSeparator
lwsSeparator?: pulumi.Input<string>;Specifies a quoted header string that you want to insert into an HTTP request. You can also specify none.
property name
name: pulumi.Input<string>;Name of the profile_http
property oneconnectTransformations
oneconnectTransformations?: pulumi.Input<string>;Enables the system to perform HTTP header transformations for the purpose of keeping server-side connections open. This feature requires configuration of a OneConnect profile
property proxyType
proxyType?: pulumi.Input<string>;Specifies the type of HTTP proxy.
property redirectRewrite
redirectRewrite?: pulumi.Input<string>;Specifies which of the application HTTP redirects the system rewrites to HTTPS.
property requestChunking
requestChunking?: pulumi.Input<string>;Specifies how to handle chunked and unchunked requests.
property responseChunking
responseChunking?: pulumi.Input<string>;Specifies how to handle chunked and unchunked responses.
property responseHeadersPermitteds
responseHeadersPermitteds?: pulumi.Input<pulumi.Input<string>[]>;Specifies headers that the BIG-IP system allows in an HTTP response.
property serverAgentName
serverAgentName?: pulumi.Input<string>;Specifies the value of the Server header in responses that the BIG-IP itself generates. The default is BigIP. If no string is specified, then no Server header will be added to such responses
property tmPartition
tmPartition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides.
property viaHostName
viaHostName?: pulumi.Input<string>;Specifies the hostname to include into Via header
property viaRequest
viaRequest?: pulumi.Input<string>;Specifies whether to append, remove, or preserve a Via header in an HTTP request
property viaResponse
viaResponse?: pulumi.Input<string>;Specifies whether to append, remove, or preserve a Via header in an HTTP request
property xffAlternativeNames
xffAlternativeNames?: pulumi.Input<pulumi.Input<string>[]>;Specifies alternative XFF headers instead of the default X-forwarded-for header
interface ProfileHttpCompressArgs
interface ProfileHttpCompressArgsThe set of arguments for constructing a ProfileHttpCompress resource.
property contentTypeExcludes
contentTypeExcludes?: pulumi.Input<pulumi.Input<string>[]>;Excludes a specified list of content types from compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
property contentTypeIncludes
contentTypeIncludes?: pulumi.Input<pulumi.Input<string>[]>;Specifies a list of content types for compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property name
name: pulumi.Input<string>;Name of the profile_httpcompress
property uriExcludes
uriExcludes?: pulumi.Input<pulumi.Input<string>[]>;Disables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you do not want to compress.
property uriIncludes
uriIncludes?: pulumi.Input<pulumi.Input<string>[]>;Enables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you want to compress.
interface ProfileHttpCompressState
interface ProfileHttpCompressStateInput properties used for looking up and filtering ProfileHttpCompress resources.
property contentTypeExcludes
contentTypeExcludes?: pulumi.Input<pulumi.Input<string>[]>;Excludes a specified list of content types from compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
property contentTypeIncludes
contentTypeIncludes?: pulumi.Input<pulumi.Input<string>[]>;Specifies a list of content types for compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property name
name?: pulumi.Input<string>;Name of the profile_httpcompress
property uriExcludes
uriExcludes?: pulumi.Input<pulumi.Input<string>[]>;Disables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you do not want to compress.
property uriIncludes
uriIncludes?: pulumi.Input<pulumi.Input<string>[]>;Enables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you want to compress.
interface ProfileHttpState
interface ProfileHttpStateInput properties used for looking up and filtering ProfileHttp resources.
property acceptXff
acceptXff?: pulumi.Input<string>;Enables or disables trusting the client IP address, and statistics from the client IP address, based on the request’s XFF (X-forwarded-for) headers, if they exist.
property appService
appService?: pulumi.Input<string>;The application service to which the object belongs.
property basicAuthRealm
basicAuthRealm?: pulumi.Input<string>;Specifies a quoted string for the basic authentication realm. The system sends this string to a client whenever authorization fails. The default value is none
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property description
description?: pulumi.Input<string>;User defibned description
property encryptCookieSecret
encryptCookieSecret?: pulumi.Input<string>;Specifies a passphrase for the cookie encryption
property encryptCookies
encryptCookies?: pulumi.Input<pulumi.Input<string>[]>;Encrypts specified cookies that the BIG-IP system sends to a client system
property fallbackHost
fallbackHost?: pulumi.Input<string>;Specifies an HTTP fallback host. HTTP redirection allows you to redirect HTTP traffic to another protocol identifier, host name, port number
property fallbackStatusCodes
fallbackStatusCodes?: pulumi.Input<pulumi.Input<string>[]>;Specifies one or more three-digit status codes that can be returned by an HTTP server.
property headErase
headErase?: pulumi.Input<string>;Specifies the header string that you want to erase from an HTTP request. You can also specify none
property headInsert
headInsert?: pulumi.Input<string>;Specifies a quoted header string that you want to insert into an HTTP request
property insertXforwardedFor
insertXforwardedFor?: pulumi.Input<string>;When using connection pooling, which allows clients to make use of other client requests’ server-side connections, you can insert the X-Forwarded-For header and specify a client IP address
property lwsSeparator
lwsSeparator?: pulumi.Input<string>;Specifies a quoted header string that you want to insert into an HTTP request. You can also specify none.
property name
name?: pulumi.Input<string>;Name of the profile_http
property oneconnectTransformations
oneconnectTransformations?: pulumi.Input<string>;Enables the system to perform HTTP header transformations for the purpose of keeping server-side connections open. This feature requires configuration of a OneConnect profile
property proxyType
proxyType?: pulumi.Input<string>;Specifies the type of HTTP proxy.
property redirectRewrite
redirectRewrite?: pulumi.Input<string>;Specifies which of the application HTTP redirects the system rewrites to HTTPS.
property requestChunking
requestChunking?: pulumi.Input<string>;Specifies how to handle chunked and unchunked requests.
property responseChunking
responseChunking?: pulumi.Input<string>;Specifies how to handle chunked and unchunked responses.
property responseHeadersPermitteds
responseHeadersPermitteds?: pulumi.Input<pulumi.Input<string>[]>;Specifies headers that the BIG-IP system allows in an HTTP response.
property serverAgentName
serverAgentName?: pulumi.Input<string>;Specifies the value of the Server header in responses that the BIG-IP itself generates. The default is BigIP. If no string is specified, then no Server header will be added to such responses
property tmPartition
tmPartition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides.
property viaHostName
viaHostName?: pulumi.Input<string>;Specifies the hostname to include into Via header
property viaRequest
viaRequest?: pulumi.Input<string>;Specifies whether to append, remove, or preserve a Via header in an HTTP request
property viaResponse
viaResponse?: pulumi.Input<string>;Specifies whether to append, remove, or preserve a Via header in an HTTP request
property xffAlternativeNames
xffAlternativeNames?: pulumi.Input<pulumi.Input<string>[]>;Specifies alternative XFF headers instead of the default X-forwarded-for header
interface ProfileOneConnectArgs
interface ProfileOneConnectArgsThe set of arguments for constructing a ProfileOneConnect resource.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property idleTimeoutOverride
idleTimeoutOverride?: pulumi.Input<string>;Specifies the number of seconds that a connection is idle before the connection flow is eligible for deletion. Possible values are disabled, indefinite, or a numeric value that you specify. The default value is disabled.
property maxAge
maxAge?: pulumi.Input<number>;Specifies the maximum age in number of seconds allowed for a connection in the connection reuse pool. For any connection with an age higher than this value, the system removes that connection from the reuse pool. The default value is 86400.
property maxReuse
maxReuse?: pulumi.Input<number>;Specifies the maximum number of times that a server-side connection can be reused. The default value is 1000.
property maxSize
maxSize?: pulumi.Input<number>;Specifies the maximum number of connections that the system holds in the connection reuse pool. If the pool is already full, then the server-side connection closes after the response is completed. The default value is 10000.
property name
name: pulumi.Input<string>;Name of the profile_oneconnect
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
property sharePools
sharePools?: pulumi.Input<string>;Specify if you want to share the pool, default value is “disabled”
property sourceMask
sourceMask?: pulumi.Input<string>;Specifies a source IP mask. The default value is 0.0.0.0. The system applies the value of this option to the source address to determine its eligibility for reuse. A mask of 0.0.0.0 causes the system to share reused connections across all clients. A host mask (all 1’s in binary), causes the system to share only those reused connections originating from the same client IP address.
interface ProfileOneConnectState
interface ProfileOneConnectStateInput properties used for looking up and filtering ProfileOneConnect resources.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property idleTimeoutOverride
idleTimeoutOverride?: pulumi.Input<string>;Specifies the number of seconds that a connection is idle before the connection flow is eligible for deletion. Possible values are disabled, indefinite, or a numeric value that you specify. The default value is disabled.
property maxAge
maxAge?: pulumi.Input<number>;Specifies the maximum age in number of seconds allowed for a connection in the connection reuse pool. For any connection with an age higher than this value, the system removes that connection from the reuse pool. The default value is 86400.
property maxReuse
maxReuse?: pulumi.Input<number>;Specifies the maximum number of times that a server-side connection can be reused. The default value is 1000.
property maxSize
maxSize?: pulumi.Input<number>;Specifies the maximum number of connections that the system holds in the connection reuse pool. If the pool is already full, then the server-side connection closes after the response is completed. The default value is 10000.
property name
name?: pulumi.Input<string>;Name of the profile_oneconnect
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
property sharePools
sharePools?: pulumi.Input<string>;Specify if you want to share the pool, default value is “disabled”
property sourceMask
sourceMask?: pulumi.Input<string>;Specifies a source IP mask. The default value is 0.0.0.0. The system applies the value of this option to the source address to determine its eligibility for reuse. A mask of 0.0.0.0 causes the system to share reused connections across all clients. A host mask (all 1’s in binary), causes the system to share only those reused connections originating from the same client IP address.
interface ProfileServerSslArgs
interface ProfileServerSslArgsThe set of arguments for constructing a ProfileServerSsl resource.
property alertTimeout
alertTimeout?: pulumi.Input<string>;Alert time out
property authenticate
authenticate?: pulumi.Input<string>;Server authentication once / always (default is once).
property authenticateDepth
authenticateDepth?: pulumi.Input<number>;Client certificate chain traversal depth. Default 9.
property caFile
caFile?: pulumi.Input<string>;Client certificate file path. Default None.
property cacheSize
cacheSize?: pulumi.Input<number>;Cache size (sessions).
property cacheTimeout
cacheTimeout?: pulumi.Input<number>;Cache time out
property cert
cert?: pulumi.Input<string>;Specifies the name of the certificate that the system uses for server-side SSL processing.
property chain
chain?: pulumi.Input<string>;Specifies the certificates-key chain to associate with the SSL profile
property ciphers
ciphers?: pulumi.Input<string>;Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
property expireCertResponseControl
expireCertResponseControl?: pulumi.Input<string>;Response if the cert is expired (drop / ignore).
property fullPath
fullPath?: pulumi.Input<string>;full path of the profile
property generation
generation?: pulumi.Input<number>;generation
property genericAlert
genericAlert?: pulumi.Input<string>;Generic alerts enabled / disabled.
property handshakeTimeout
handshakeTimeout?: pulumi.Input<string>;Handshake time out (seconds)
property key
key?: pulumi.Input<string>;Specifies the file name of the SSL key.
property modSslMethods
modSslMethods?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property mode
mode?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property name
name: pulumi.Input<string>;Specifies the name of the profile. (type string)
property partition
partition?: pulumi.Input<string>;Device partition to manage resources on.
property passphrase
passphrase?: pulumi.Input<string>;Client Certificate Constrained Delegation CA passphrase
property peerCertMode
peerCertMode?: pulumi.Input<string>;Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
property proxySsl
proxySsl?: pulumi.Input<string>;Proxy SSL enabled / disabled. Default is disabled.
property renegotiatePeriod
renegotiatePeriod?: pulumi.Input<string>;Renogotiate Period (seconds)
property renegotiateSize
renegotiateSize?: pulumi.Input<string>;Renogotiate Size
property renegotiation
renegotiation?: pulumi.Input<string>;Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
property retainCertificate
retainCertificate?: pulumi.Input<string>;When true, client certificate is retained in SSL session.
property secureRenegotiation
secureRenegotiation?: pulumi.Input<string>;Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile.
When request is set the system request secure renegotation of SSL connections.
require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients.
The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
property serverName
serverName?: pulumi.Input<string>;Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
property sessionMirroring
sessionMirroring?: pulumi.Input<string>;Session Mirroring (enabled / disabled)
property sessionTicket
sessionTicket?: pulumi.Input<string>;Session Ticket (enabled / disabled)
property sniDefault
sniDefault?: pulumi.Input<string>;Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
property sniRequire
sniRequire?: pulumi.Input<string>;Requires that the network peers also provide SNI support, this setting only takes effect when sniDefault is set to true.When creating a new profile, the setting is provided by the parent profile
property sslForwardProxy
sslForwardProxy?: pulumi.Input<string>;SSL forward Proxy (enabled / disabled)
property sslForwardProxyBypass
sslForwardProxyBypass?: pulumi.Input<string>;SSL forward Proxy Bypass (enabled / disabled)
property sslSignHash
sslSignHash?: pulumi.Input<string>;SSL sign hash (any, sha1, sha256, sha384)
property strictResume
strictResume?: pulumi.Input<string>;Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
property tmOptions
tmOptions?: pulumi.Input<pulumi.Input<string>[]>;property uncleanShutdown
uncleanShutdown?: pulumi.Input<string>;Unclean Shutdown (enabled / disabled)
property untrustedCertResponseControl
untrustedCertResponseControl?: pulumi.Input<string>;Unclean Shutdown (drop / ignore)
interface ProfileServerSslState
interface ProfileServerSslStateInput properties used for looking up and filtering ProfileServerSsl resources.
property alertTimeout
alertTimeout?: pulumi.Input<string>;Alert time out
property authenticate
authenticate?: pulumi.Input<string>;Server authentication once / always (default is once).
property authenticateDepth
authenticateDepth?: pulumi.Input<number>;Client certificate chain traversal depth. Default 9.
property caFile
caFile?: pulumi.Input<string>;Client certificate file path. Default None.
property cacheSize
cacheSize?: pulumi.Input<number>;Cache size (sessions).
property cacheTimeout
cacheTimeout?: pulumi.Input<number>;Cache time out
property cert
cert?: pulumi.Input<string>;Specifies the name of the certificate that the system uses for server-side SSL processing.
property chain
chain?: pulumi.Input<string>;Specifies the certificates-key chain to associate with the SSL profile
property ciphers
ciphers?: pulumi.Input<string>;Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is /Common/serverssl.
property expireCertResponseControl
expireCertResponseControl?: pulumi.Input<string>;Response if the cert is expired (drop / ignore).
property fullPath
fullPath?: pulumi.Input<string>;full path of the profile
property generation
generation?: pulumi.Input<number>;generation
property genericAlert
genericAlert?: pulumi.Input<string>;Generic alerts enabled / disabled.
property handshakeTimeout
handshakeTimeout?: pulumi.Input<string>;Handshake time out (seconds)
property key
key?: pulumi.Input<string>;Specifies the file name of the SSL key.
property modSslMethods
modSslMethods?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property mode
mode?: pulumi.Input<string>;ModSSL Methods enabled / disabled. Default is disabled.
property name
name?: pulumi.Input<string>;Specifies the name of the profile. (type string)
property partition
partition?: pulumi.Input<string>;Device partition to manage resources on.
property passphrase
passphrase?: pulumi.Input<string>;Client Certificate Constrained Delegation CA passphrase
property peerCertMode
peerCertMode?: pulumi.Input<string>;Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
property proxySsl
proxySsl?: pulumi.Input<string>;Proxy SSL enabled / disabled. Default is disabled.
property renegotiatePeriod
renegotiatePeriod?: pulumi.Input<string>;Renogotiate Period (seconds)
property renegotiateSize
renegotiateSize?: pulumi.Input<string>;Renogotiate Size
property renegotiation
renegotiation?: pulumi.Input<string>;Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
property retainCertificate
retainCertificate?: pulumi.Input<string>;When true, client certificate is retained in SSL session.
property secureRenegotiation
secureRenegotiation?: pulumi.Input<string>;Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile.
When request is set the system request secure renegotation of SSL connections.
require is a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients.
The require-strict setting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
property serverName
serverName?: pulumi.Input<string>;Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk * character.
property sessionMirroring
sessionMirroring?: pulumi.Input<string>;Session Mirroring (enabled / disabled)
property sessionTicket
sessionTicket?: pulumi.Input<string>;Session Ticket (enabled / disabled)
property sniDefault
sniDefault?: pulumi.Input<string>;Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
property sniRequire
sniRequire?: pulumi.Input<string>;Requires that the network peers also provide SNI support, this setting only takes effect when sniDefault is set to true.When creating a new profile, the setting is provided by the parent profile
property sslForwardProxy
sslForwardProxy?: pulumi.Input<string>;SSL forward Proxy (enabled / disabled)
property sslForwardProxyBypass
sslForwardProxyBypass?: pulumi.Input<string>;SSL forward Proxy Bypass (enabled / disabled)
property sslSignHash
sslSignHash?: pulumi.Input<string>;SSL sign hash (any, sha1, sha256, sha384)
property strictResume
strictResume?: pulumi.Input<string>;Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
property tmOptions
tmOptions?: pulumi.Input<pulumi.Input<string>[]>;property uncleanShutdown
uncleanShutdown?: pulumi.Input<string>;Unclean Shutdown (enabled / disabled)
property untrustedCertResponseControl
untrustedCertResponseControl?: pulumi.Input<string>;Unclean Shutdown (drop / ignore)
interface ProfileTcpArgs
interface ProfileTcpArgsThe set of arguments for constructing a ProfileTcp resource.
property closeWaitTimeout
closeWaitTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection remains in a LAST-ACK state before quitting. A value of 0 represents a term of forever (or until the maxrtx of the FIN state). The default value is 5 seconds.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property deferredAccept
deferredAccept?: pulumi.Input<string>;Specifies, when enabled, that the system defers allocation of the connection chain context until the client response is received. This option is useful for dealing with 3-way handshake DOS attacks. The default value is disabled.
property fastOpen
fastOpen?: pulumi.Input<string>;When enabled, permits TCP Fast Open, allowing properly equipped TCP clients to send data with the SYN packet.
property finwait2timeout
finwait2timeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is in the FIN-WAIT-2 state before quitting. The default value is 300 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state).
property finwaitTimeout
finwaitTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is in the FIN-WAIT-1 or closing state before quitting. The default value is 5 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state). You can also specify immediate or indefinite.
property idleTimeout
idleTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is idle before the connection is eligible for deletion. The default value is 300 seconds.
property keepaliveInterval
keepaliveInterval?: pulumi.Input<number>;Specifies the keep alive probe interval, in seconds. The default value is 1800 seconds.
property name
name: pulumi.Input<string>;Name of the profile_tcp
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
interface ProfileTcpState
interface ProfileTcpStateInput properties used for looking up and filtering ProfileTcp resources.
property closeWaitTimeout
closeWaitTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection remains in a LAST-ACK state before quitting. A value of 0 represents a term of forever (or until the maxrtx of the FIN state). The default value is 5 seconds.
property defaultsFrom
defaultsFrom?: pulumi.Input<string>;Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
property deferredAccept
deferredAccept?: pulumi.Input<string>;Specifies, when enabled, that the system defers allocation of the connection chain context until the client response is received. This option is useful for dealing with 3-way handshake DOS attacks. The default value is disabled.
property fastOpen
fastOpen?: pulumi.Input<string>;When enabled, permits TCP Fast Open, allowing properly equipped TCP clients to send data with the SYN packet.
property finwait2timeout
finwait2timeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is in the FIN-WAIT-2 state before quitting. The default value is 300 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state).
property finwaitTimeout
finwaitTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is in the FIN-WAIT-1 or closing state before quitting. The default value is 5 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state). You can also specify immediate or indefinite.
property idleTimeout
idleTimeout?: pulumi.Input<number>;Specifies the number of seconds that a connection is idle before the connection is eligible for deletion. The default value is 300 seconds.
property keepaliveInterval
keepaliveInterval?: pulumi.Input<number>;Specifies the keep alive probe interval, in seconds. The default value is 1800 seconds.
property name
name?: pulumi.Input<string>;Name of the profile_tcp
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
interface SnatArgs
interface SnatArgsThe set of arguments for constructing a Snat resource.
property autolasthop
autolasthop?: pulumi.Input<string>;-(Optional) Specifies whether to automatically map last hop for pools or not. The default is to use next level’s default.
property fullPath
fullPath?: pulumi.Input<string>;Fullpath
property mirror
mirror?: pulumi.Input<string>;Enables or disables mirroring of SNAT connections.
property name
name: pulumi.Input<string>;Name of the snat
property origins
origins: pulumi.Input<pulumi.Input<SnatOrigin>[]>;IP or hostname of the snat
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
property snatpool
snatpool?: pulumi.Input<string>;Specifies the name of a SNAT pool. You can only use this option when automap and translation are not used.
property sourceport
sourceport?: pulumi.Input<string>;Specifies whether the system preserves the source port of the connection. The default is preserve. Use of the preserve-strict setting should be restricted to UDP only under very special circumstances such as nPath or transparent (that is, no translation of any other L3/L4 field), where there is a 1:1 relationship between virtual IP addresses and node addresses, or when clustered multi-processing (CMP) is disabled. The change setting is useful for obfuscating internal network addresses.
property translation
translation?: pulumi.Input<string>;Specifies the name of a translated IP address. Note that translated addresses are outside the traffic management system. You can only use this option when automap and snatpool are not used.
property vlans
vlans?: pulumi.Input<pulumi.Input<string>[]>;Specifies the name of the VLAN to which you want to assign the SNAT. The default is vlans-enabled.
property vlansdisabled
vlansdisabled?: pulumi.Input<boolean>;Disables the SNAT on all VLANs.
interface SnatPoolArgs
interface SnatPoolArgsThe set of arguments for constructing a SnatPool resource.
property members
members: pulumi.Input<pulumi.Input<string>[]>;Specifies a translation address to add to or delete from a SNAT pool (at least one address is required)
property name
name: pulumi.Input<string>;Name of the snatpool
interface SnatPoolState
interface SnatPoolStateInput properties used for looking up and filtering SnatPool resources.
property members
members?: pulumi.Input<pulumi.Input<string>[]>;Specifies a translation address to add to or delete from a SNAT pool (at least one address is required)
property name
name?: pulumi.Input<string>;Name of the snatpool
interface SnatState
interface SnatStateInput properties used for looking up and filtering Snat resources.
property autolasthop
autolasthop?: pulumi.Input<string>;-(Optional) Specifies whether to automatically map last hop for pools or not. The default is to use next level’s default.
property fullPath
fullPath?: pulumi.Input<string>;Fullpath
property mirror
mirror?: pulumi.Input<string>;Enables or disables mirroring of SNAT connections.
property name
name?: pulumi.Input<string>;Name of the snat
property origins
origins?: pulumi.Input<pulumi.Input<SnatOrigin>[]>;IP or hostname of the snat
property partition
partition?: pulumi.Input<string>;Displays the administrative partition within which this profile resides
property snatpool
snatpool?: pulumi.Input<string>;Specifies the name of a SNAT pool. You can only use this option when automap and translation are not used.
property sourceport
sourceport?: pulumi.Input<string>;Specifies whether the system preserves the source port of the connection. The default is preserve. Use of the preserve-strict setting should be restricted to UDP only under very special circumstances such as nPath or transparent (that is, no translation of any other L3/L4 field), where there is a 1:1 relationship between virtual IP addresses and node addresses, or when clustered multi-processing (CMP) is disabled. The change setting is useful for obfuscating internal network addresses.
property translation
translation?: pulumi.Input<string>;Specifies the name of a translated IP address. Note that translated addresses are outside the traffic management system. You can only use this option when automap and snatpool are not used.
property vlans
vlans?: pulumi.Input<pulumi.Input<string>[]>;Specifies the name of the VLAN to which you want to assign the SNAT. The default is vlans-enabled.
property vlansdisabled
vlansdisabled?: pulumi.Input<boolean>;Disables the SNAT on all VLANs.
interface VirtualAddressArgs
interface VirtualAddressArgsThe set of arguments for constructing a VirtualAddress resource.
property advertizeRoute
advertizeRoute?: pulumi.Input<boolean>;Enabled dynamic routing of the address
property arp
arp?: pulumi.Input<boolean>;Enable or disable ARP for the virtual address
property autoDelete
autoDelete?: pulumi.Input<boolean>;Automatically delete the virtual address with the virtual server
property connLimit
connLimit?: pulumi.Input<number>;Max number of connections for virtual address
property enabled
enabled?: pulumi.Input<boolean>;Enable or disable the virtual address
property icmpEcho
icmpEcho?: pulumi.Input<boolean>;Enable/Disable ICMP response to the virtual address
property name
name: pulumi.Input<string>;Name of the virtual address
property trafficGroup
trafficGroup?: pulumi.Input<string>;Specify the partition and traffic group
interface VirtualAddressState
interface VirtualAddressStateInput properties used for looking up and filtering VirtualAddress resources.
property advertizeRoute
advertizeRoute?: pulumi.Input<boolean>;Enabled dynamic routing of the address
property arp
arp?: pulumi.Input<boolean>;Enable or disable ARP for the virtual address
property autoDelete
autoDelete?: pulumi.Input<boolean>;Automatically delete the virtual address with the virtual server
property connLimit
connLimit?: pulumi.Input<number>;Max number of connections for virtual address
property enabled
enabled?: pulumi.Input<boolean>;Enable or disable the virtual address
property icmpEcho
icmpEcho?: pulumi.Input<boolean>;Enable/Disable ICMP response to the virtual address
property name
name?: pulumi.Input<string>;Name of the virtual address
property trafficGroup
trafficGroup?: pulumi.Input<string>;Specify the partition and traffic group
interface VirtualServerArgs
interface VirtualServerArgsThe set of arguments for constructing a VirtualServer resource.
property clientProfiles
clientProfiles?: pulumi.Input<pulumi.Input<string>[]>;List of client context profiles associated on the virtual server. Not mutually exclusive with profiles and server_profiles
property defaultPersistenceProfile
defaultPersistenceProfile?: pulumi.Input<string>;property description
description?: pulumi.Input<string>;Description of Virtual server
property destination
destination: pulumi.Input<string>;Destination IP
property fallbackPersistenceProfile
fallbackPersistenceProfile?: pulumi.Input<string>;Specifies a fallback persistence profile for the Virtual Server to use when the default persistence profile is not available.
property ipProtocol
ipProtocol?: pulumi.Input<string>;Specify the IP protocol to use with the the virtual server (all, tcp, or udp are valid)
property irules
irules?: pulumi.Input<pulumi.Input<string>[]>;The iRules list you want run on this virtual server. iRules help automate the intercepting, processing, and routing of application traffic.
property mask
mask?: pulumi.Input<string>;Mask can either be in CIDR notation or decimal, i.e.: 24 or 255.255.255.0. A CIDR mask of 0 is the same as 0.0.0.0
property name
name: pulumi.Input<string>;Name of the virtual server
property persistenceProfiles
persistenceProfiles?: pulumi.Input<pulumi.Input<string>[]>;List of persistence profiles associated with the Virtual Server.
property policies
policies?: pulumi.Input<pulumi.Input<string>[]>;property pool
pool?: pulumi.Input<string>;Default pool name
property port
port: pulumi.Input<number>;Listen port for the virtual server
property profiles
profiles?: pulumi.Input<pulumi.Input<string>[]>;List of profiles associated both client and server contexts on the virtual server. This includes protocol, ssl, http, etc.
property serverProfiles
serverProfiles?: pulumi.Input<pulumi.Input<string>[]>;List of server context profiles associated on the virtual server. Not mutually exclusive with profiles and client_profiles
property snatpool
snatpool?: pulumi.Input<string>;Specifies the name of an existing SNAT pool that you want the virtual server to use to implement selective and intelligent SNATs. DEPRECATED - see Virtual Server Property Groups source-address-translation
property source
source?: pulumi.Input<string>;Specifies an IP address or network from which the virtual server will accept traffic.
property sourceAddressTranslation
sourceAddressTranslation?: pulumi.Input<string>;Can be either omitted for none or the values automap or snat
property state
state?: pulumi.Input<string>;Specifies whether the virtual server and its resources are available for load balancing. The default is Enabled
property translateAddress
translateAddress?: pulumi.Input<string>;Enables or disables address translation for the virtual server. Turn address translation off for a virtual server if you want to use the virtual server to load balance connections to any address. This option is useful when the system is load balancing devices that have the same IP address.
property translatePort
translatePort?: pulumi.Input<string>;Enables or disables port translation. Turn port translation off for a virtual server if you want to use the virtual server to load balance connections to any service
property vlans
vlans?: pulumi.Input<pulumi.Input<string>[]>;The virtual server is enabled/disabled on this set of VLANs. See vlans-disabled and vlans-enabled.
property vlansEnabled
vlansEnabled?: pulumi.Input<boolean>;Enables the virtual server on the VLANs specified by the VLANs option.
interface VirtualServerState
interface VirtualServerStateInput properties used for looking up and filtering VirtualServer resources.
property clientProfiles
clientProfiles?: pulumi.Input<pulumi.Input<string>[]>;List of client context profiles associated on the virtual server. Not mutually exclusive with profiles and server_profiles
property defaultPersistenceProfile
defaultPersistenceProfile?: pulumi.Input<string>;property description
description?: pulumi.Input<string>;Description of Virtual server
property destination
destination?: pulumi.Input<string>;Destination IP
property fallbackPersistenceProfile
fallbackPersistenceProfile?: pulumi.Input<string>;Specifies a fallback persistence profile for the Virtual Server to use when the default persistence profile is not available.
property ipProtocol
ipProtocol?: pulumi.Input<string>;Specify the IP protocol to use with the the virtual server (all, tcp, or udp are valid)
property irules
irules?: pulumi.Input<pulumi.Input<string>[]>;The iRules list you want run on this virtual server. iRules help automate the intercepting, processing, and routing of application traffic.
property mask
mask?: pulumi.Input<string>;Mask can either be in CIDR notation or decimal, i.e.: 24 or 255.255.255.0. A CIDR mask of 0 is the same as 0.0.0.0
property name
name?: pulumi.Input<string>;Name of the virtual server
property persistenceProfiles
persistenceProfiles?: pulumi.Input<pulumi.Input<string>[]>;List of persistence profiles associated with the Virtual Server.
property policies
policies?: pulumi.Input<pulumi.Input<string>[]>;property pool
pool?: pulumi.Input<string>;Default pool name
property port
port?: pulumi.Input<number>;Listen port for the virtual server
property profiles
profiles?: pulumi.Input<pulumi.Input<string>[]>;List of profiles associated both client and server contexts on the virtual server. This includes protocol, ssl, http, etc.
property serverProfiles
serverProfiles?: pulumi.Input<pulumi.Input<string>[]>;List of server context profiles associated on the virtual server. Not mutually exclusive with profiles and client_profiles
property snatpool
snatpool?: pulumi.Input<string>;Specifies the name of an existing SNAT pool that you want the virtual server to use to implement selective and intelligent SNATs. DEPRECATED - see Virtual Server Property Groups source-address-translation
property source
source?: pulumi.Input<string>;Specifies an IP address or network from which the virtual server will accept traffic.
property sourceAddressTranslation
sourceAddressTranslation?: pulumi.Input<string>;Can be either omitted for none or the values automap or snat
property state
state?: pulumi.Input<string>;Specifies whether the virtual server and its resources are available for load balancing. The default is Enabled
property translateAddress
translateAddress?: pulumi.Input<string>;Enables or disables address translation for the virtual server. Turn address translation off for a virtual server if you want to use the virtual server to load balance connections to any address. This option is useful when the system is load balancing devices that have the same IP address.
property translatePort
translatePort?: pulumi.Input<string>;Enables or disables port translation. Turn port translation off for a virtual server if you want to use the virtual server to load balance connections to any service
property vlans
vlans?: pulumi.Input<pulumi.Input<string>[]>;The virtual server is enabled/disabled on this set of VLANs. See vlans-disabled and vlans-enabled.
property vlansEnabled
vlansEnabled?: pulumi.Input<boolean>;Enables the virtual server on the VLANs specified by the VLANs option.