ltm¶
This provider is a derived work of the Terraform Provider distributed under MPL 2.0. If you encounter a bug or missing feature, first check the pulumi/pulumi-f5bigip repo; however, if that doesn’t turn up anything, please consult the source terraform-providers/terraform-provider-f5bigip repo.
- class
pulumi_f5bigip.ltm.DataGroup(resource_name, opts=None, name=None, records=None, type=None, __props__=None, __name__=None, __opts__=None)¶ ltm.DataGroupManages internal (in-line) datagroup configurationResource should be named with their “full path”. The full path is the combination of the partition + name of the resource, for example /Common/my-datagroup.
import pulumi import pulumi_f5bigip as f5bigip datagroup = f5bigip.ltm.DataGroup("datagroup", name="/Common/dgx2", records=[ { "data": "pool1", "name": "abc.com", }, { "data": "123", "name": "test", }, ], type="string")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
name (pulumi.Input[str]) – , sets the value of the record’s
nameattribute, must be of type defined intypeattributerecords (pulumi.Input[list]) – a set of
nameanddataattributes, name must be of type specified by thetypeattributed (string,ipandinteger), data is optional and can take any value, multiplerecordsets can be specified as needed.type (pulumi.Input[str]) – datagroup type (applies to the
namefield of the record), supports:string,iporinteger
The records object supports the following:
data(pulumi.Input[str]) - , sets the value of the record’sdataattribute, specifying a value here will create a record in the form ofname := dataname(pulumi.Input[str]) - , sets the value of the record’snameattribute, must be of type defined intypeattribute
name: pulumi.Output[str] = None¶, sets the value of the record’s
nameattribute, must be of type defined intypeattribute
records: pulumi.Output[list] = None¶a set of
nameanddataattributes, name must be of type specified by thetypeattributed (string,ipandinteger), data is optional and can take any value, multiplerecordsets can be specified as needed.data(str) - , sets the value of the record’sdataattribute, specifying a value here will create a record in the form ofname := dataname(str) - , sets the value of the record’snameattribute, must be of type defined intypeattribute
type: pulumi.Output[str] = None¶datagroup type (applies to the
namefield of the record), supports:string,iporinteger
- static
get(resource_name, id, opts=None, name=None, records=None, type=None)¶ Get an existing DataGroup resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
name (pulumi.Input[str]) – , sets the value of the record’s
nameattribute, must be of type defined intypeattributerecords (pulumi.Input[list]) – a set of
nameanddataattributes, name must be of type specified by thetypeattributed (string,ipandinteger), data is optional and can take any value, multiplerecordsets can be specified as needed.type (pulumi.Input[str]) – datagroup type (applies to the
namefield of the record), supports:string,iporinteger
The records object supports the following:
data(pulumi.Input[str]) - , sets the value of the record’sdataattribute, specifying a value here will create a record in the form ofname := dataname(pulumi.Input[str]) - , sets the value of the record’snameattribute, must be of type defined intypeattribute
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.IRule(resource_name, opts=None, irule=None, name=None, __props__=None, __name__=None, __opts__=None)¶ ltm.IRuleCreates iRule on BIG-IP F5 deviceFor resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
irule (pulumi.Input[str]) – Body of the iRule
name (pulumi.Input[str]) – Name of the iRule
irule: pulumi.Output[str] = None¶Body of the iRule
name: pulumi.Output[str] = None¶Name of the iRule
- static
get(resource_name, id, opts=None, irule=None, name=None)¶ Get an existing IRule resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
irule (pulumi.Input[str]) – Body of the iRule
name (pulumi.Input[str]) – Name of the iRule
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.Monitor(resource_name, opts=None, adaptive=None, adaptive_limit=None, compatibility=None, database=None, defaults_from=None, destination=None, filename=None, interval=None, ip_dscp=None, manual_resume=None, mode=None, name=None, parent=None, password=None, receive=None, receive_disable=None, reverse=None, send=None, time_until_up=None, timeout=None, transparent=None, username=None, __props__=None, __name__=None, __opts__=None)¶ Create a Monitor resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] adaptive: ftp adaptive :param pulumi.Input[float] adaptive_limit: Integer value :param pulumi.Input[str] compatibility: Specifies, when enabled, that the SSL options setting (in OpenSSL) is set to ALL. Accepts ‘enabled’ or ‘disabled’ values, the default value is ‘enabled’. :param pulumi.Input[str] database: Specifies the database in which the user is created :param pulumi.Input[str] defaults_from: Existing monitor to inherit from. Must be one of /Common/http, /Common/https, /Common/icmp or /Common/gateway-icmp. :param pulumi.Input[str] destination: Specify an alias address for monitoring :param pulumi.Input[str] filename: Specifies the full path and file name of the file that the system attempts to download. The health check is successful if the system can download the file. :param pulumi.Input[float] interval: Check interval in seconds :param pulumi.Input[str] mode: Specifies the data transfer process (DTP) mode. The default value is passive. The options are passive (Specifies that the monitor sends a data transfer request to the FTP server. When the FTP server receives the request, the FTP server then initiates and establishes the data connection.) and active (Specifies that the monitor initiates and establishes the data connection with the FTP server.). :param pulumi.Input[str] name: Name of the monitor :param pulumi.Input[str] parent: Existing LTM monitor to inherit from :param pulumi.Input[str] password: Specifies the password if the monitored target requires authentication :param pulumi.Input[str] receive: Expected response string :param pulumi.Input[str] receive_disable: Expected response string. :param pulumi.Input[str] send: Request string to send :param pulumi.Input[float] time_until_up: Time in seconds :param pulumi.Input[float] timeout: Timeout in seconds :param pulumi.Input[str] username: Specifies the user name if the monitored target requires authentication
adaptive: pulumi.Output[str] = None¶ftp adaptive
adaptive_limit: pulumi.Output[float] = None¶Integer value
compatibility: pulumi.Output[str] = None¶Specifies, when enabled, that the SSL options setting (in OpenSSL) is set to ALL. Accepts ‘enabled’ or ‘disabled’ values, the default value is ‘enabled’.
database: pulumi.Output[str] = None¶Specifies the database in which the user is created
defaults_from: pulumi.Output[str] = None¶Existing monitor to inherit from. Must be one of /Common/http, /Common/https, /Common/icmp or /Common/gateway-icmp.
destination: pulumi.Output[str] = None¶Specify an alias address for monitoring
filename: pulumi.Output[str] = None¶Specifies the full path and file name of the file that the system attempts to download. The health check is successful if the system can download the file.
interval: pulumi.Output[float] = None¶Check interval in seconds
mode: pulumi.Output[str] = None¶Specifies the data transfer process (DTP) mode. The default value is passive. The options are passive (Specifies that the monitor sends a data transfer request to the FTP server. When the FTP server receives the request, the FTP server then initiates and establishes the data connection.) and active (Specifies that the monitor initiates and establishes the data connection with the FTP server.).
name: pulumi.Output[str] = None¶Name of the monitor
parent: pulumi.Output[str] = None¶Existing LTM monitor to inherit from
password: pulumi.Output[str] = None¶Specifies the password if the monitored target requires authentication
receive: pulumi.Output[str] = None¶Expected response string
receive_disable: pulumi.Output[str] = None¶Expected response string.
send: pulumi.Output[str] = None¶Request string to send
time_until_up: pulumi.Output[float] = None¶Time in seconds
timeout: pulumi.Output[float] = None¶Timeout in seconds
username: pulumi.Output[str] = None¶Specifies the user name if the monitored target requires authentication
- static
get(resource_name, id, opts=None, adaptive=None, adaptive_limit=None, compatibility=None, database=None, defaults_from=None, destination=None, filename=None, interval=None, ip_dscp=None, manual_resume=None, mode=None, name=None, parent=None, password=None, receive=None, receive_disable=None, reverse=None, send=None, time_until_up=None, timeout=None, transparent=None, username=None)¶ Get an existing Monitor resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
adaptive (pulumi.Input[str]) – ftp adaptive
adaptive_limit (pulumi.Input[float]) – Integer value
compatibility (pulumi.Input[str]) – Specifies, when enabled, that the SSL options setting (in OpenSSL) is set to ALL. Accepts ‘enabled’ or ‘disabled’ values, the default value is ‘enabled’.
database (pulumi.Input[str]) – Specifies the database in which the user is created
defaults_from (pulumi.Input[str]) – Existing monitor to inherit from. Must be one of /Common/http, /Common/https, /Common/icmp or /Common/gateway-icmp.
destination (pulumi.Input[str]) – Specify an alias address for monitoring
filename (pulumi.Input[str]) – Specifies the full path and file name of the file that the system attempts to download. The health check is successful if the system can download the file.
interval (pulumi.Input[float]) – Check interval in seconds
mode (pulumi.Input[str]) – Specifies the data transfer process (DTP) mode. The default value is passive. The options are passive (Specifies that the monitor sends a data transfer request to the FTP server. When the FTP server receives the request, the FTP server then initiates and establishes the data connection.) and active (Specifies that the monitor initiates and establishes the data connection with the FTP server.).
name (pulumi.Input[str]) – Name of the monitor
parent (pulumi.Input[str]) – Existing LTM monitor to inherit from
password (pulumi.Input[str]) – Specifies the password if the monitored target requires authentication
receive (pulumi.Input[str]) – Expected response string
receive_disable (pulumi.Input[str]) – Expected response string.
send (pulumi.Input[str]) – Request string to send
time_until_up (pulumi.Input[float]) – Time in seconds
timeout (pulumi.Input[float]) – Timeout in seconds
username (pulumi.Input[str]) – Specifies the user name if the monitored target requires authentication
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.Node(resource_name, opts=None, address=None, connection_limit=None, description=None, dynamic_ratio=None, fqdn=None, monitor=None, name=None, rate_limit=None, ratio=None, state=None, __props__=None, __name__=None, __opts__=None)¶ Create a Node resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] address: IP or hostname of the node :param pulumi.Input[float] connection_limit: Specifies the maximum number of connections allowed for the node or node address. :param pulumi.Input[str] description: User-defined description give ltm_node :param pulumi.Input[float] dynamic_ratio: Specifies the fixed ratio value used for a node during ratio load balancing. :param pulumi.Input[str] monitor: specifies the name of the monitor or monitor rule that you want to associate with the node. :param pulumi.Input[str] name: Name of the node :param pulumi.Input[str] rate_limit: Specifies the maximum number of connections per second allowed for a node or node address. The default value is ‘disabled’. :param pulumi.Input[float] ratio: Sets the ratio number for the node. :param pulumi.Input[str] state: Default is “user-up” you can set to “user-down” if you want to disable
The fqdn object supports the following:
addressFamily(pulumi.Input[str]) - Specifies the node’s address family. The default is ‘unspecified’, or IP-agnostic. This needs to be specified inside the fqdn (fully qualified domain name).autopopulate(pulumi.Input[str])downinterval(pulumi.Input[float])interval(pulumi.Input[str]) - Specifies the amount of time before sending the next DNS query. Default is 3600. This needs to be specified inside the fqdn (fully qualified domain name).name(pulumi.Input[str]) - Name of the node
address: pulumi.Output[str] = None¶IP or hostname of the node
connection_limit: pulumi.Output[float] = None¶Specifies the maximum number of connections allowed for the node or node address.
description: pulumi.Output[str] = None¶User-defined description give ltm_node
dynamic_ratio: pulumi.Output[float] = None¶Specifies the fixed ratio value used for a node during ratio load balancing.
monitor: pulumi.Output[str] = None¶specifies the name of the monitor or monitor rule that you want to associate with the node.
name: pulumi.Output[str] = None¶Name of the node
rate_limit: pulumi.Output[str] = None¶Specifies the maximum number of connections per second allowed for a node or node address. The default value is ‘disabled’.
ratio: pulumi.Output[float] = None¶Sets the ratio number for the node.
state: pulumi.Output[str] = None¶Default is “user-up” you can set to “user-down” if you want to disable
- static
get(resource_name, id, opts=None, address=None, connection_limit=None, description=None, dynamic_ratio=None, fqdn=None, monitor=None, name=None, rate_limit=None, ratio=None, state=None)¶ Get an existing Node resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
address (pulumi.Input[str]) – IP or hostname of the node
connection_limit (pulumi.Input[float]) – Specifies the maximum number of connections allowed for the node or node address.
description (pulumi.Input[str]) – User-defined description give ltm_node
dynamic_ratio (pulumi.Input[float]) – Specifies the fixed ratio value used for a node during ratio load balancing.
monitor (pulumi.Input[str]) – specifies the name of the monitor or monitor rule that you want to associate with the node.
name (pulumi.Input[str]) – Name of the node
rate_limit (pulumi.Input[str]) – Specifies the maximum number of connections per second allowed for a node or node address. The default value is ‘disabled’.
ratio (pulumi.Input[float]) – Sets the ratio number for the node.
state (pulumi.Input[str]) – Default is “user-up” you can set to “user-down” if you want to disable
The fqdn object supports the following:
addressFamily(pulumi.Input[str]) - Specifies the node’s address family. The default is ‘unspecified’, or IP-agnostic. This needs to be specified inside the fqdn (fully qualified domain name).autopopulate(pulumi.Input[str])downinterval(pulumi.Input[float])interval(pulumi.Input[str]) - Specifies the amount of time before sending the next DNS query. Default is 3600. This needs to be specified inside the fqdn (fully qualified domain name).name(pulumi.Input[str]) - Name of the node
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.PersistenceProfileCookie(resource_name, opts=None, always_send=None, app_service=None, cookie_encryption=None, cookie_encryption_passphrase=None, cookie_name=None, defaults_from=None, expiration=None, hash_length=None, hash_offset=None, httponly=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None, __props__=None, __name__=None, __opts__=None)¶ Create a PersistenceProfileCookie resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] always*send: To enable * disable always sending cookies :param pulumi.Input[str] cookie_encryption: To required, preferred, or disabled policy for cookie encryption :param pulumi.Input[str] cookie_encryption_passphrase: Passphrase for encrypted cookies :param pulumi.Input[str] cookie_name: Name of the cookie to track persistence :param pulumi.Input[str] defaults_from: Inherit defaults from parent profile :param pulumi.Input[str] expiration: Expiration TTL for cookie specified in D:H:M:S or in seconds :param pulumi.Input[float] hash_length: Length of hash to apply to cookie :param pulumi.Input[float] hash*offset: Number of characters to skip in the cookie for the hash :param pulumi.Input[str] httponly: To enable * disable sending only over http :param pulumi.Input[str] match_across*pools: To enable * disable match across pools with given persistence record :param pulumi.Input[str] match_across*services: To enable * disable match across services with given persistence record :param pulumi.Input[str] match_across*virtuals: To enable * disable match across virtual servers with given persistence record :param pulumi.Input[str] mirror: To enable _ disable :param pulumi.Input[str] name: Name of the persistence profile :param pulumi.Input[str] override_conn*limit: To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection
limits remain hard limits and are not overridden.
- Parameters
timeout (pulumi.Input[float]) – Timeout for persistence of the session
always_send: pulumi.Output[str] = None¶To enable _ disable always sending cookies
To required, preferred, or disabled policy for cookie encryption
Passphrase for encrypted cookies
Name of the cookie to track persistence
defaults_from: pulumi.Output[str] = None¶Inherit defaults from parent profile
expiration: pulumi.Output[str] = None¶Expiration TTL for cookie specified in D:H:M:S or in seconds
hash_length: pulumi.Output[float] = None¶Length of hash to apply to cookie
hash_offset: pulumi.Output[float] = None¶Number of characters to skip in the cookie for the hash
httponly: pulumi.Output[str] = None¶To enable _ disable sending only over http
match_across_pools: pulumi.Output[str] = None¶To enable _ disable match across pools with given persistence record
match_across_services: pulumi.Output[str] = None¶To enable _ disable match across services with given persistence record
match_across_virtuals: pulumi.Output[str] = None¶To enable _ disable match across virtual servers with given persistence record
mirror: pulumi.Output[str] = None¶To enable _ disable
name: pulumi.Output[str] = None¶Name of the persistence profile
override_conn_limit: pulumi.Output[str] = None¶To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout: pulumi.Output[float] = None¶Timeout for persistence of the session
- static
get(resource_name, id, opts=None, always_send=None, app_service=None, cookie_encryption=None, cookie_encryption_passphrase=None, cookie_name=None, defaults_from=None, expiration=None, hash_length=None, hash_offset=None, httponly=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None)¶ Get an existing PersistenceProfileCookie resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
always*send (pulumi.Input[str]) –
To enable * disable always sending cookies
cookie_encryption (pulumi.Input[str]) – To required, preferred, or disabled policy for cookie encryption
cookie_encryption_passphrase (pulumi.Input[str]) – Passphrase for encrypted cookies
cookie_name (pulumi.Input[str]) – Name of the cookie to track persistence
defaults_from (pulumi.Input[str]) – Inherit defaults from parent profile
expiration (pulumi.Input[str]) – Expiration TTL for cookie specified in D:H:M:S or in seconds
hash_length (pulumi.Input[float]) – Length of hash to apply to cookie
hash*offset (pulumi.Input[float]) –
Number of characters to skip in the cookie for the hash
httponly (pulumi.Input[str]) – To enable * disable sending only over http
match_across*pools (pulumi.Input[str]) –
To enable * disable match across pools with given persistence record
match_across*services (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
match_across*virtuals (pulumi.Input[str]) –
To enable * disable match across virtual servers with given persistence record
mirror (pulumi.Input[str]) – To enable _ disable
name (pulumi.Input[str]) – Name of the persistence profile
override_conn*limit (pulumi.Input[str]) –
To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout (pulumi.Input[float]) – Timeout for persistence of the session
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.PersistenceProfileDstAddr(resource_name, opts=None, app_service=None, defaults_from=None, hash_algorithm=None, mask=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None, __props__=None, __name__=None, __opts__=None)¶ Create a PersistenceProfileDstAddr resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] defaults_from: Inherit defaults from parent profile :param pulumi.Input[str] hash_algorithm: Specify the hash algorithm :param pulumi.Input[str] mask: Identify a range of source IP addresses to manage together as a single source address affinity persistent connection
when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
- Parameters
match_across*pools (pulumi.Input[str]) –
To enable * disable match across pools with given persistence record
match_across*services (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
match_across*virtuals (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
mirror (pulumi.Input[str]) – To enable _ disable
name (pulumi.Input[str]) – Name of the persistence profile
override_conn*limit (pulumi.Input[str]) –
To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout (pulumi.Input[float]) – Timeout for persistence of the session
defaults_from: pulumi.Output[str] = None¶Inherit defaults from parent profile
hash_algorithm: pulumi.Output[str] = None¶Specify the hash algorithm
mask: pulumi.Output[str] = None¶Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
match_across_pools: pulumi.Output[str] = None¶To enable _ disable match across pools with given persistence record
match_across_services: pulumi.Output[str] = None¶To enable _ disable match across services with given persistence record
match_across_virtuals: pulumi.Output[str] = None¶To enable _ disable match across services with given persistence record
mirror: pulumi.Output[str] = None¶To enable _ disable
name: pulumi.Output[str] = None¶Name of the persistence profile
override_conn_limit: pulumi.Output[str] = None¶To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout: pulumi.Output[float] = None¶Timeout for persistence of the session
- static
get(resource_name, id, opts=None, app_service=None, defaults_from=None, hash_algorithm=None, mask=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None)¶ Get an existing PersistenceProfileDstAddr resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
defaults_from (pulumi.Input[str]) – Inherit defaults from parent profile
hash_algorithm (pulumi.Input[str]) – Specify the hash algorithm
mask (pulumi.Input[str]) – Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
match_across*pools (pulumi.Input[str]) –
To enable * disable match across pools with given persistence record
match_across*services (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
match_across*virtuals (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
mirror (pulumi.Input[str]) – To enable _ disable
name (pulumi.Input[str]) – Name of the persistence profile
override_conn*limit (pulumi.Input[str]) –
To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout (pulumi.Input[float]) – Timeout for persistence of the session
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.PersistenceProfileSrcAddr(resource_name, opts=None, app_service=None, defaults_from=None, hash_algorithm=None, map_proxies=None, mask=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None, __props__=None, __name__=None, __opts__=None)¶ Create a PersistenceProfileSrcAddr resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] defaults_from: Inherit defaults from parent profile :param pulumi.Input[str] hash_algorithm: Specify the hash algorithm :param pulumi.Input[str] map*proxies: To enable * disable directs all to the same single pool member :param pulumi.Input[str] mask: Identify a range of source IP addresses to manage together as a single source address affinity persistent connection
when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
- Parameters
match_across*pools (pulumi.Input[str]) –
To enable * disable match across pools with given persistence record
match_across*services (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
match_across*virtuals (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
mirror (pulumi.Input[str]) – To enable _ disable
name (pulumi.Input[str]) – Name of the persistence profile
override_conn*limit (pulumi.Input[str]) –
To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout (pulumi.Input[float]) – Timeout for persistence of the session
defaults_from: pulumi.Output[str] = None¶Inherit defaults from parent profile
hash_algorithm: pulumi.Output[str] = None¶Specify the hash algorithm
map_proxies: pulumi.Output[str] = None¶To enable _ disable directs all to the same single pool member
mask: pulumi.Output[str] = None¶Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
match_across_pools: pulumi.Output[str] = None¶To enable _ disable match across pools with given persistence record
match_across_services: pulumi.Output[str] = None¶To enable _ disable match across services with given persistence record
match_across_virtuals: pulumi.Output[str] = None¶To enable _ disable match across services with given persistence record
mirror: pulumi.Output[str] = None¶To enable _ disable
name: pulumi.Output[str] = None¶Name of the persistence profile
override_conn_limit: pulumi.Output[str] = None¶To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout: pulumi.Output[float] = None¶Timeout for persistence of the session
- static
get(resource_name, id, opts=None, app_service=None, defaults_from=None, hash_algorithm=None, map_proxies=None, mask=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None)¶ Get an existing PersistenceProfileSrcAddr resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
defaults_from (pulumi.Input[str]) – Inherit defaults from parent profile
hash_algorithm (pulumi.Input[str]) – Specify the hash algorithm
map*proxies (pulumi.Input[str]) –
To enable * disable directs all to the same single pool member
mask (pulumi.Input[str]) – Identify a range of source IP addresses to manage together as a single source address affinity persistent connection when connecting to the pool. Must be a valid IPv4 or IPv6 mask.
match_across*pools (pulumi.Input[str]) –
To enable * disable match across pools with given persistence record
match_across*services (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
match_across*virtuals (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
mirror (pulumi.Input[str]) – To enable _ disable
name (pulumi.Input[str]) – Name of the persistence profile
override_conn*limit (pulumi.Input[str]) –
To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout (pulumi.Input[float]) – Timeout for persistence of the session
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.PersistenceProfileSsl(resource_name, opts=None, app_service=None, defaults_from=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None, __props__=None, __name__=None, __opts__=None)¶ Create a PersistenceProfileSsl resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] defaults_from: Inherit defaults from parent profile :param pulumi.Input[str] match_across*pools: To enable * disable match across pools with given persistence record :param pulumi.Input[str] match_across*services: To enable * disable match across services with given persistence record :param pulumi.Input[str] match_across*virtuals: To enable * disable match across services with given persistence record :param pulumi.Input[str] mirror: To enable _ disable :param pulumi.Input[str] name: Name of the persistence profile :param pulumi.Input[str] override_conn*limit: To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection
limits remain hard limits and are not overridden.
- Parameters
timeout (pulumi.Input[float]) – Timeout for persistence of the session
defaults_from: pulumi.Output[str] = None¶Inherit defaults from parent profile
match_across_pools: pulumi.Output[str] = None¶To enable _ disable match across pools with given persistence record
match_across_services: pulumi.Output[str] = None¶To enable _ disable match across services with given persistence record
match_across_virtuals: pulumi.Output[str] = None¶To enable _ disable match across services with given persistence record
mirror: pulumi.Output[str] = None¶To enable _ disable
name: pulumi.Output[str] = None¶Name of the persistence profile
override_conn_limit: pulumi.Output[str] = None¶To enable _ disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout: pulumi.Output[float] = None¶Timeout for persistence of the session
- static
get(resource_name, id, opts=None, app_service=None, defaults_from=None, match_across_pools=None, match_across_services=None, match_across_virtuals=None, mirror=None, name=None, override_conn_limit=None, timeout=None)¶ Get an existing PersistenceProfileSsl resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
defaults_from (pulumi.Input[str]) – Inherit defaults from parent profile
match_across*pools (pulumi.Input[str]) –
To enable * disable match across pools with given persistence record
match_across*services (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
match_across*virtuals (pulumi.Input[str]) –
To enable * disable match across services with given persistence record
mirror (pulumi.Input[str]) – To enable _ disable
name (pulumi.Input[str]) – Name of the persistence profile
override_conn*limit (pulumi.Input[str]) –
To enable * disable that pool member connection limits are overridden for persisted clients. Per-virtual connection limits remain hard limits and are not overridden.
timeout (pulumi.Input[float]) – Timeout for persistence of the session
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.Policy(resource_name, opts=None, controls=None, name=None, published_copy=None, requires=None, rules=None, strategy=None, __props__=None, __name__=None, __opts__=None)¶ ltm.PolicyConfigures Virtual ServerFor resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip test_policy = f5bigip.ltm.Policy("test-policy", name="my_policy", strategy="first-match", requires=["http"], published_copy="Drafts/my_policy", controls=["forwarding"], rule=[{ "name": "rule6", "action": [{ "tmName": "20", "forward": True, "pool": "/Common/mypool", }], }])
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
controls (pulumi.Input[list]) – Specifies the controls
name (pulumi.Input[str]) – Name of the Policy
published_copy (pulumi.Input[str]) – If you want to publish the policy else it will be deployed in Drafts mode.
requires (pulumi.Input[list]) – Specifies the protocol
rules (pulumi.Input[list]) – Rules can be applied using the policy
strategy (pulumi.Input[str]) – Specifies the match strategy
The rules object supports the following:
actions(pulumi.Input[list])app_service(pulumi.Input[str])application(pulumi.Input[str])asm(pulumi.Input[bool])avr(pulumi.Input[bool])cache(pulumi.Input[bool])carp(pulumi.Input[bool])category(pulumi.Input[str])classify(pulumi.Input[bool])clonePool(pulumi.Input[str])code(pulumi.Input[float])compress(pulumi.Input[bool])content(pulumi.Input[str])cookieHash(pulumi.Input[bool])cookieInsert(pulumi.Input[bool])cookiePassive(pulumi.Input[bool])cookieRewrite(pulumi.Input[bool])decompress(pulumi.Input[bool])defer(pulumi.Input[bool])destinationAddress(pulumi.Input[bool])disable(pulumi.Input[bool])domain(pulumi.Input[str])enable(pulumi.Input[bool])expiry(pulumi.Input[str])expirySecs(pulumi.Input[float])expression(pulumi.Input[str])extension(pulumi.Input[str])facility(pulumi.Input[str])forward(pulumi.Input[bool]) - This action will affect forwarding.fromProfile(pulumi.Input[str])hash(pulumi.Input[bool])host(pulumi.Input[str])http(pulumi.Input[bool])httpBasicAuth(pulumi.Input[bool])httpCookie(pulumi.Input[bool])httpHeader(pulumi.Input[bool])httpHost(pulumi.Input[bool])httpReferer(pulumi.Input[bool])httpReply(pulumi.Input[bool])httpSetCookie(pulumi.Input[bool])httpUri(pulumi.Input[bool])ifile(pulumi.Input[str])insert(pulumi.Input[bool])internalVirtual(pulumi.Input[str])ipAddress(pulumi.Input[str])key(pulumi.Input[str])l7dos(pulumi.Input[bool])length(pulumi.Input[float])location(pulumi.Input[str])log(pulumi.Input[bool])ltmPolicy(pulumi.Input[bool])member(pulumi.Input[str])message(pulumi.Input[str])netmask(pulumi.Input[str])nexthop(pulumi.Input[str])node(pulumi.Input[str])offset(pulumi.Input[float])path(pulumi.Input[str])pem(pulumi.Input[bool])persist(pulumi.Input[bool])pin(pulumi.Input[bool])policy(pulumi.Input[str])pool(pulumi.Input[str]) - This action will direct the stream to this pool.port(pulumi.Input[float])priority(pulumi.Input[str])profile(pulumi.Input[str])protocol(pulumi.Input[str])queryString(pulumi.Input[str])rateclass(pulumi.Input[str])redirect(pulumi.Input[bool])remove(pulumi.Input[bool])replace(pulumi.Input[bool])request(pulumi.Input[bool])requestAdapt(pulumi.Input[bool])reset(pulumi.Input[bool])response(pulumi.Input[bool])responseAdapt(pulumi.Input[bool])scheme(pulumi.Input[str])script(pulumi.Input[str])select(pulumi.Input[bool])serverSsl(pulumi.Input[bool])setVariable(pulumi.Input[bool])snat(pulumi.Input[str])snatpool(pulumi.Input[str])sourceAddress(pulumi.Input[bool])sslClientHello(pulumi.Input[bool])sslServerHandshake(pulumi.Input[bool])sslServerHello(pulumi.Input[bool])sslSessionId(pulumi.Input[bool])status(pulumi.Input[float])tcl(pulumi.Input[bool])tcpNagle(pulumi.Input[bool])text(pulumi.Input[str])timeout(pulumi.Input[float])tmName(pulumi.Input[str]) - If Rule is used then you need to provide the tm_name it can be any valueuie(pulumi.Input[bool])universal(pulumi.Input[bool])value(pulumi.Input[str])virtual(pulumi.Input[str])vlan(pulumi.Input[str])vlanId(pulumi.Input[float])wam(pulumi.Input[bool])write(pulumi.Input[bool])
conditions(pulumi.Input[list])address(pulumi.Input[bool])all(pulumi.Input[bool])app_service(pulumi.Input[str])browserType(pulumi.Input[bool])browserVersion(pulumi.Input[bool])caseInsensitive(pulumi.Input[bool])caseSensitive(pulumi.Input[bool])cipher(pulumi.Input[bool])cipherBits(pulumi.Input[bool])clientSsl(pulumi.Input[bool])code(pulumi.Input[bool])commonName(pulumi.Input[bool])contains(pulumi.Input[bool])continent(pulumi.Input[bool])countryCode(pulumi.Input[bool])countryName(pulumi.Input[bool])cpuUsage(pulumi.Input[bool])deviceMake(pulumi.Input[bool])deviceModel(pulumi.Input[bool])domain(pulumi.Input[bool])endsWith(pulumi.Input[bool])equals(pulumi.Input[bool])expiry(pulumi.Input[bool])extension(pulumi.Input[bool])external(pulumi.Input[bool])geoip(pulumi.Input[bool])greater(pulumi.Input[bool])greaterOrEqual(pulumi.Input[bool])host(pulumi.Input[bool])httpBasicAuth(pulumi.Input[bool])httpCookie(pulumi.Input[bool])httpHeader(pulumi.Input[bool])httpHost(pulumi.Input[bool])httpMethod(pulumi.Input[bool])httpReferer(pulumi.Input[bool])httpSetCookie(pulumi.Input[bool])httpStatus(pulumi.Input[bool])httpUri(pulumi.Input[bool])httpUserAgent(pulumi.Input[bool])httpVersion(pulumi.Input[bool])index(pulumi.Input[float])internal(pulumi.Input[bool])isp(pulumi.Input[bool])last15secs(pulumi.Input[bool])last1min(pulumi.Input[bool])last5mins(pulumi.Input[bool])less(pulumi.Input[bool])lessOrEqual(pulumi.Input[bool])local(pulumi.Input[bool])major(pulumi.Input[bool])matches(pulumi.Input[bool])minor(pulumi.Input[bool])missing(pulumi.Input[bool])mss(pulumi.Input[bool])not(pulumi.Input[bool])org(pulumi.Input[bool])password(pulumi.Input[bool])path(pulumi.Input[bool])pathSegment(pulumi.Input[bool])port(pulumi.Input[bool])present(pulumi.Input[bool])protocol(pulumi.Input[bool])queryParameter(pulumi.Input[bool])queryString(pulumi.Input[bool])regionCode(pulumi.Input[bool])regionName(pulumi.Input[bool])remote(pulumi.Input[bool])request(pulumi.Input[bool])response(pulumi.Input[bool])routeDomain(pulumi.Input[bool])rtt(pulumi.Input[bool])scheme(pulumi.Input[bool])server_name(pulumi.Input[bool])sslCert(pulumi.Input[bool])sslClientHello(pulumi.Input[bool])sslExtension(pulumi.Input[bool])sslServerHandshake(pulumi.Input[bool])sslServerHello(pulumi.Input[bool])startsWith(pulumi.Input[bool])tcp(pulumi.Input[bool])text(pulumi.Input[bool])tmName(pulumi.Input[str]) - If Rule is used then you need to provide the tm_name it can be any valueunnamedQueryParameter(pulumi.Input[bool])userAgentToken(pulumi.Input[bool])username(pulumi.Input[bool])value(pulumi.Input[bool])values(pulumi.Input[list])version(pulumi.Input[bool])vlan(pulumi.Input[bool])vlanId(pulumi.Input[bool])
name(pulumi.Input[str]) - Name of the Policy
controls: pulumi.Output[list] = None¶Specifies the controls
name: pulumi.Output[str] = None¶Name of the Policy
published_copy: pulumi.Output[str] = None¶If you want to publish the policy else it will be deployed in Drafts mode.
requires: pulumi.Output[list] = None¶Specifies the protocol
rules: pulumi.Output[list] = None¶Rules can be applied using the policy
actions(list)app_service(str)application(str)asm(bool)avr(bool)cache(bool)carp(bool)category(str)classify(bool)clonePool(str)code(float)compress(bool)content(str)cookieHash(bool)cookieInsert(bool)cookiePassive(bool)cookieRewrite(bool)decompress(bool)defer(bool)destinationAddress(bool)disable(bool)domain(str)enable(bool)expiry(str)expirySecs(float)expression(str)extension(str)facility(str)forward(bool) - This action will affect forwarding.fromProfile(str)hash(bool)host(str)http(bool)httpBasicAuth(bool)httpCookie(bool)httpHeader(bool)httpHost(bool)httpReferer(bool)httpReply(bool)httpSetCookie(bool)httpUri(bool)ifile(str)insert(bool)internalVirtual(str)ipAddress(str)key(str)l7dos(bool)length(float)location(str)log(bool)ltmPolicy(bool)member(str)message(str)netmask(str)nexthop(str)node(str)offset(float)path(str)pem(bool)persist(bool)pin(bool)policy(str)pool(str) - This action will direct the stream to this pool.port(float)priority(str)profile(str)protocol(str)queryString(str)rateclass(str)redirect(bool)remove(bool)replace(bool)request(bool)requestAdapt(bool)reset(bool)response(bool)responseAdapt(bool)scheme(str)script(str)select(bool)serverSsl(bool)setVariable(bool)snat(str)snatpool(str)sourceAddress(bool)sslClientHello(bool)sslServerHandshake(bool)sslServerHello(bool)sslSessionId(bool)status(float)tcl(bool)tcpNagle(bool)text(str)timeout(float)tmName(str) - If Rule is used then you need to provide the tm_name it can be any valueuie(bool)universal(bool)value(str)virtual(str)vlan(str)vlanId(float)wam(bool)write(bool)
conditions(list)address(bool)all(bool)app_service(str)browserType(bool)browserVersion(bool)caseInsensitive(bool)caseSensitive(bool)cipher(bool)cipherBits(bool)clientSsl(bool)code(bool)commonName(bool)contains(bool)continent(bool)countryCode(bool)countryName(bool)cpuUsage(bool)deviceMake(bool)deviceModel(bool)domain(bool)endsWith(bool)equals(bool)expiry(bool)extension(bool)external(bool)geoip(bool)greater(bool)greaterOrEqual(bool)host(bool)httpBasicAuth(bool)httpCookie(bool)httpHeader(bool)httpHost(bool)httpMethod(bool)httpReferer(bool)httpSetCookie(bool)httpStatus(bool)httpUri(bool)httpUserAgent(bool)httpVersion(bool)index(float)internal(bool)isp(bool)last15secs(bool)last1min(bool)last5mins(bool)less(bool)lessOrEqual(bool)local(bool)major(bool)matches(bool)minor(bool)missing(bool)mss(bool)not(bool)org(bool)password(bool)path(bool)pathSegment(bool)port(bool)present(bool)protocol(bool)queryParameter(bool)queryString(bool)regionCode(bool)regionName(bool)remote(bool)request(bool)response(bool)routeDomain(bool)rtt(bool)scheme(bool)server_name(bool)sslCert(bool)sslClientHello(bool)sslExtension(bool)sslServerHandshake(bool)sslServerHello(bool)startsWith(bool)tcp(bool)text(bool)tmName(str) - If Rule is used then you need to provide the tm_name it can be any valueunnamedQueryParameter(bool)userAgentToken(bool)username(bool)value(bool)values(list)version(bool)vlan(bool)vlanId(bool)
name(str) - Name of the Policy
strategy: pulumi.Output[str] = None¶Specifies the match strategy
- static
get(resource_name, id, opts=None, controls=None, name=None, published_copy=None, requires=None, rules=None, strategy=None)¶ Get an existing Policy resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
controls (pulumi.Input[list]) – Specifies the controls
name (pulumi.Input[str]) – Name of the Policy
published_copy (pulumi.Input[str]) – If you want to publish the policy else it will be deployed in Drafts mode.
requires (pulumi.Input[list]) – Specifies the protocol
rules (pulumi.Input[list]) – Rules can be applied using the policy
strategy (pulumi.Input[str]) – Specifies the match strategy
The rules object supports the following:
actions(pulumi.Input[list])app_service(pulumi.Input[str])application(pulumi.Input[str])asm(pulumi.Input[bool])avr(pulumi.Input[bool])cache(pulumi.Input[bool])carp(pulumi.Input[bool])category(pulumi.Input[str])classify(pulumi.Input[bool])clonePool(pulumi.Input[str])code(pulumi.Input[float])compress(pulumi.Input[bool])content(pulumi.Input[str])cookieHash(pulumi.Input[bool])cookieInsert(pulumi.Input[bool])cookiePassive(pulumi.Input[bool])cookieRewrite(pulumi.Input[bool])decompress(pulumi.Input[bool])defer(pulumi.Input[bool])destinationAddress(pulumi.Input[bool])disable(pulumi.Input[bool])domain(pulumi.Input[str])enable(pulumi.Input[bool])expiry(pulumi.Input[str])expirySecs(pulumi.Input[float])expression(pulumi.Input[str])extension(pulumi.Input[str])facility(pulumi.Input[str])forward(pulumi.Input[bool]) - This action will affect forwarding.fromProfile(pulumi.Input[str])hash(pulumi.Input[bool])host(pulumi.Input[str])http(pulumi.Input[bool])httpBasicAuth(pulumi.Input[bool])httpCookie(pulumi.Input[bool])httpHeader(pulumi.Input[bool])httpHost(pulumi.Input[bool])httpReferer(pulumi.Input[bool])httpReply(pulumi.Input[bool])httpSetCookie(pulumi.Input[bool])httpUri(pulumi.Input[bool])ifile(pulumi.Input[str])insert(pulumi.Input[bool])internalVirtual(pulumi.Input[str])ipAddress(pulumi.Input[str])key(pulumi.Input[str])l7dos(pulumi.Input[bool])length(pulumi.Input[float])location(pulumi.Input[str])log(pulumi.Input[bool])ltmPolicy(pulumi.Input[bool])member(pulumi.Input[str])message(pulumi.Input[str])netmask(pulumi.Input[str])nexthop(pulumi.Input[str])node(pulumi.Input[str])offset(pulumi.Input[float])path(pulumi.Input[str])pem(pulumi.Input[bool])persist(pulumi.Input[bool])pin(pulumi.Input[bool])policy(pulumi.Input[str])pool(pulumi.Input[str]) - This action will direct the stream to this pool.port(pulumi.Input[float])priority(pulumi.Input[str])profile(pulumi.Input[str])protocol(pulumi.Input[str])queryString(pulumi.Input[str])rateclass(pulumi.Input[str])redirect(pulumi.Input[bool])remove(pulumi.Input[bool])replace(pulumi.Input[bool])request(pulumi.Input[bool])requestAdapt(pulumi.Input[bool])reset(pulumi.Input[bool])response(pulumi.Input[bool])responseAdapt(pulumi.Input[bool])scheme(pulumi.Input[str])script(pulumi.Input[str])select(pulumi.Input[bool])serverSsl(pulumi.Input[bool])setVariable(pulumi.Input[bool])snat(pulumi.Input[str])snatpool(pulumi.Input[str])sourceAddress(pulumi.Input[bool])sslClientHello(pulumi.Input[bool])sslServerHandshake(pulumi.Input[bool])sslServerHello(pulumi.Input[bool])sslSessionId(pulumi.Input[bool])status(pulumi.Input[float])tcl(pulumi.Input[bool])tcpNagle(pulumi.Input[bool])text(pulumi.Input[str])timeout(pulumi.Input[float])tmName(pulumi.Input[str]) - If Rule is used then you need to provide the tm_name it can be any valueuie(pulumi.Input[bool])universal(pulumi.Input[bool])value(pulumi.Input[str])virtual(pulumi.Input[str])vlan(pulumi.Input[str])vlanId(pulumi.Input[float])wam(pulumi.Input[bool])write(pulumi.Input[bool])
conditions(pulumi.Input[list])address(pulumi.Input[bool])all(pulumi.Input[bool])app_service(pulumi.Input[str])browserType(pulumi.Input[bool])browserVersion(pulumi.Input[bool])caseInsensitive(pulumi.Input[bool])caseSensitive(pulumi.Input[bool])cipher(pulumi.Input[bool])cipherBits(pulumi.Input[bool])clientSsl(pulumi.Input[bool])code(pulumi.Input[bool])commonName(pulumi.Input[bool])contains(pulumi.Input[bool])continent(pulumi.Input[bool])countryCode(pulumi.Input[bool])countryName(pulumi.Input[bool])cpuUsage(pulumi.Input[bool])deviceMake(pulumi.Input[bool])deviceModel(pulumi.Input[bool])domain(pulumi.Input[bool])endsWith(pulumi.Input[bool])equals(pulumi.Input[bool])expiry(pulumi.Input[bool])extension(pulumi.Input[bool])external(pulumi.Input[bool])geoip(pulumi.Input[bool])greater(pulumi.Input[bool])greaterOrEqual(pulumi.Input[bool])host(pulumi.Input[bool])httpBasicAuth(pulumi.Input[bool])httpCookie(pulumi.Input[bool])httpHeader(pulumi.Input[bool])httpHost(pulumi.Input[bool])httpMethod(pulumi.Input[bool])httpReferer(pulumi.Input[bool])httpSetCookie(pulumi.Input[bool])httpStatus(pulumi.Input[bool])httpUri(pulumi.Input[bool])httpUserAgent(pulumi.Input[bool])httpVersion(pulumi.Input[bool])index(pulumi.Input[float])internal(pulumi.Input[bool])isp(pulumi.Input[bool])last15secs(pulumi.Input[bool])last1min(pulumi.Input[bool])last5mins(pulumi.Input[bool])less(pulumi.Input[bool])lessOrEqual(pulumi.Input[bool])local(pulumi.Input[bool])major(pulumi.Input[bool])matches(pulumi.Input[bool])minor(pulumi.Input[bool])missing(pulumi.Input[bool])mss(pulumi.Input[bool])not(pulumi.Input[bool])org(pulumi.Input[bool])password(pulumi.Input[bool])path(pulumi.Input[bool])pathSegment(pulumi.Input[bool])port(pulumi.Input[bool])present(pulumi.Input[bool])protocol(pulumi.Input[bool])queryParameter(pulumi.Input[bool])queryString(pulumi.Input[bool])regionCode(pulumi.Input[bool])regionName(pulumi.Input[bool])remote(pulumi.Input[bool])request(pulumi.Input[bool])response(pulumi.Input[bool])routeDomain(pulumi.Input[bool])rtt(pulumi.Input[bool])scheme(pulumi.Input[bool])server_name(pulumi.Input[bool])sslCert(pulumi.Input[bool])sslClientHello(pulumi.Input[bool])sslExtension(pulumi.Input[bool])sslServerHandshake(pulumi.Input[bool])sslServerHello(pulumi.Input[bool])startsWith(pulumi.Input[bool])tcp(pulumi.Input[bool])text(pulumi.Input[bool])tmName(pulumi.Input[str]) - If Rule is used then you need to provide the tm_name it can be any valueunnamedQueryParameter(pulumi.Input[bool])userAgentToken(pulumi.Input[bool])username(pulumi.Input[bool])value(pulumi.Input[bool])values(pulumi.Input[list])version(pulumi.Input[bool])vlan(pulumi.Input[bool])vlanId(pulumi.Input[bool])
name(pulumi.Input[str]) - Name of the Policy
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.Pool(resource_name, opts=None, allow_nat=None, allow_snat=None, description=None, load_balancing_mode=None, monitors=None, name=None, reselect_tries=None, service_down_action=None, slow_ramp_time=None, __props__=None, __name__=None, __opts__=None)¶ Create a Pool resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] allow_nat: Allow NAT :param pulumi.Input[str] allow_snat: Allow SNAT :param pulumi.Input[str] description: Userdefined value to describe the pool :param pulumi.Input[str] load_balancing_mode: Possible values: round-robin, … :param pulumi.Input[list] monitors: List of monitor names to associate with the pool :param pulumi.Input[str] name: Name of the pool :param pulumi.Input[float] reselect_tries: Number of times the system tries to select a new pool member after a failure. :param pulumi.Input[str] service_down_action: Possible values: none, reset, reselect, drop :param pulumi.Input[float] slow_ramp_time: Slow ramp time for pool members
allow_nat: pulumi.Output[str] = None¶Allow NAT
allow_snat: pulumi.Output[str] = None¶Allow SNAT
description: pulumi.Output[str] = None¶Userdefined value to describe the pool
load_balancing_mode: pulumi.Output[str] = None¶Possible values: round-robin, …
monitors: pulumi.Output[list] = None¶List of monitor names to associate with the pool
name: pulumi.Output[str] = None¶Name of the pool
reselect_tries: pulumi.Output[float] = None¶Number of times the system tries to select a new pool member after a failure.
service_down_action: pulumi.Output[str] = None¶Possible values: none, reset, reselect, drop
slow_ramp_time: pulumi.Output[float] = None¶Slow ramp time for pool members
- static
get(resource_name, id, opts=None, allow_nat=None, allow_snat=None, description=None, load_balancing_mode=None, monitors=None, name=None, reselect_tries=None, service_down_action=None, slow_ramp_time=None)¶ Get an existing Pool resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
allow_nat (pulumi.Input[str]) – Allow NAT
allow_snat (pulumi.Input[str]) – Allow SNAT
description (pulumi.Input[str]) – Userdefined value to describe the pool
load_balancing_mode (pulumi.Input[str]) – Possible values: round-robin, …
monitors (pulumi.Input[list]) – List of monitor names to associate with the pool
name (pulumi.Input[str]) – Name of the pool
reselect_tries (pulumi.Input[float]) – Number of times the system tries to select a new pool member after a failure.
service_down_action (pulumi.Input[str]) – Possible values: none, reset, reselect, drop
slow_ramp_time (pulumi.Input[float]) – Slow ramp time for pool members
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.PoolAttachment(resource_name, opts=None, node=None, pool=None, __props__=None, __name__=None, __opts__=None)¶ Create a PoolAttachment resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[str] node: Node to add to the pool in /Partition/NodeName:Port format (e.g. /Common/Node01:80) :param pulumi.Input[str] pool: Name of the pool in /Partition/Name format
node: pulumi.Output[str] = None¶Node to add to the pool in /Partition/NodeName:Port format (e.g. /Common/Node01:80)
pool: pulumi.Output[str] = None¶Name of the pool in /Partition/Name format
- static
get(resource_name, id, opts=None, node=None, pool=None)¶ Get an existing PoolAttachment resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
node (pulumi.Input[str]) – Node to add to the pool in /Partition/NodeName:Port format (e.g. /Common/Node01:80)
pool (pulumi.Input[str]) – Name of the pool in /Partition/Name format
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileClientSsl(resource_name, opts=None, alert_timeout=None, allow_non_ssl=None, authenticate=None, authenticate_depth=None, ca_file=None, cache_size=None, cache_timeout=None, cert=None, cert_extension_includes=None, cert_key_chains=None, cert_life_span=None, cert_lookup_by_ipaddr_port=None, chain=None, ciphers=None, client_cert_ca=None, crl_file=None, defaults_from=None, forward_proxy_bypass_default_action=None, full_path=None, generation=None, generic_alert=None, handshake_timeout=None, inherit_cert_keychain=None, key=None, mod_ssl_methods=None, mode=None, name=None, partition=None, passphrase=None, peer_cert_mode=None, proxy_ca_cert=None, proxy_ca_key=None, proxy_ca_passphrase=None, proxy_ssl=None, proxy_ssl_passthrough=None, renegotiate_period=None, renegotiate_size=None, renegotiation=None, retain_certificate=None, secure_renegotiation=None, server_name=None, session_mirroring=None, session_ticket=None, sni_default=None, sni_require=None, ssl_forward_proxy=None, ssl_forward_proxy_bypass=None, ssl_sign_hash=None, strict_resume=None, tm_options=None, unclean_shutdown=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileClientSslManages client SSL profiles on a BIG-IPimport pulumi import pulumi_f5bigip as f5bigip test__client_ssl = f5bigip.ltm.ProfileClientSsl("test-ClientSsl", authenticate="always", ciphers="DEFAULT", defaults_from="/Common/clientssl", name="/Common/test-ClientSsl", partition="Common")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
alert_timeout (pulumi.Input[str]) – Alert time out
allow_non_ssl (pulumi.Input[str]) – Enables or disables acceptance of non-SSL connections, When creating a new profile, the setting is provided by the parent profile
authenticate (pulumi.Input[str]) – Specifies the frequency of client authentication for an SSL session.When
once,specifies that the system authenticates the client once for an SSL session. Whenalways, specifies that the system authenticates the client once for an SSL session and also upon reuse of that session.authenticate_depth (pulumi.Input[float]) – Specifies the maximum number of certificates to be traversed in a client certificate chain
ca_file (pulumi.Input[str]) – Client certificate file path. Default None.
cache_size (pulumi.Input[float]) – Cache size (sessions).
cache_timeout (pulumi.Input[float]) – Cache time out
cert (pulumi.Input[str]) – Specifies a cert name for use.
cert_extension_includes (pulumi.Input[list]) – Cert extension includes for ssl forward proxy
cert_life_span (pulumi.Input[float]) – Life span of the certificate in days for ssl forward proxy
cert_lookup_by_ipaddr_port (pulumi.Input[str]) – Cert lookup by ip address and port enabled / disabled
chain (pulumi.Input[str]) – Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optional
ciphers (pulumi.Input[str]) – Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
client_cert_ca (pulumi.Input[str]) – client certificate name
crl_file (pulumi.Input[str]) – Certificate revocation file name
defaults_from (pulumi.Input[str]) – The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is the
clientsslparent on theCommonpartition.forward_proxy_bypass_default_action (pulumi.Input[str]) – Forward proxy bypass default action. (enabled / disabled)
full_path (pulumi.Input[str]) – full path of the profile
generation (pulumi.Input[float]) – generation
generic_alert (pulumi.Input[str]) – Generic alerts enabled / disabled.
handshake_timeout (pulumi.Input[str]) – Handshake time out (seconds)
inherit_cert_keychain (pulumi.Input[str]) – Inherit cert key chain
key (pulumi.Input[str]) – Contains a key name
mod_ssl_methods (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
mode (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
name (pulumi.Input[str]) – Specifies the name of the profile. (type
string)partition (pulumi.Input[str]) – Device partition to manage resources on.
passphrase (pulumi.Input[str]) – Client Certificate Constrained Delegation CA passphrase
peer_cert_mode (pulumi.Input[str]) – Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ca_cert (pulumi.Input[str]) – Proxy CA Cert
proxy_ca_key (pulumi.Input[str]) – Proxy CA Key
proxy_ca_passphrase (pulumi.Input[str]) – Proxy CA Passphrase
proxy_ssl (pulumi.Input[str]) – Proxy SSL enabled / disabled. Default is disabled.
proxy_ssl_passthrough (pulumi.Input[str]) – Proxy SSL passthrough enabled / disabled. Default is disabled.
renegotiate_period (pulumi.Input[str]) – Renogotiate Period (seconds)
renegotiate_size (pulumi.Input[str]) – Renogotiate Size
renegotiation (pulumi.Input[str]) – Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate (pulumi.Input[str]) – When
true, client certificate is retained in SSL session.secure_renegotiation (pulumi.Input[str]) – Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When
requestis set the system request secure renegotation of SSL connections.requireis a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. Therequire-strictsetting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure serversserver_name (pulumi.Input[str]) – Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk
*character.session_mirroring (pulumi.Input[str]) – Session Mirroring (enabled / disabled)
session_ticket (pulumi.Input[str]) – Session Ticket (enabled / disabled)
sni_default (pulumi.Input[str]) – Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require (pulumi.Input[str]) – Requires that the network peers also provide SNI support, this setting only takes effect when
sni_defaultis set totrue.When creating a new profile, the setting is provided by the parent profilessl_forward_proxy (pulumi.Input[str]) – SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass (pulumi.Input[str]) – SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash (pulumi.Input[str]) – SSL sign hash (any, sha1, sha256, sha384)
strict_resume (pulumi.Input[str]) – Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
unclean_shutdown (pulumi.Input[str]) – Unclean Shutdown (enabled / disabled)
The cert_key_chains object supports the following:
cert(pulumi.Input[str]) - Specifies a cert name for use.chain(pulumi.Input[str]) - Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optionalkey(pulumi.Input[str]) - Contains a key namename(pulumi.Input[str]) - Specifies the name of the profile. (typestring)passphrase(pulumi.Input[str])
alert_timeout: pulumi.Output[str] = None¶Alert time out
allow_non_ssl: pulumi.Output[str] = None¶Enables or disables acceptance of non-SSL connections, When creating a new profile, the setting is provided by the parent profile
authenticate: pulumi.Output[str] = None¶Specifies the frequency of client authentication for an SSL session.When
once,specifies that the system authenticates the client once for an SSL session. Whenalways, specifies that the system authenticates the client once for an SSL session and also upon reuse of that session.
authenticate_depth: pulumi.Output[float] = None¶Specifies the maximum number of certificates to be traversed in a client certificate chain
ca_file: pulumi.Output[str] = None¶Client certificate file path. Default None.
cache_size: pulumi.Output[float] = None¶Cache size (sessions).
cache_timeout: pulumi.Output[float] = None¶Cache time out
cert: pulumi.Output[str] = None¶Specifies a cert name for use.
cert_extension_includes: pulumi.Output[list] = None¶Cert extension includes for ssl forward proxy
cert_life_span: pulumi.Output[float] = None¶Life span of the certificate in days for ssl forward proxy
cert_lookup_by_ipaddr_port: pulumi.Output[str] = None¶Cert lookup by ip address and port enabled / disabled
chain: pulumi.Output[str] = None¶Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optional
ciphers: pulumi.Output[str] = None¶Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
client_cert_ca: pulumi.Output[str] = None¶client certificate name
crl_file: pulumi.Output[str] = None¶Certificate revocation file name
defaults_from: pulumi.Output[str] = None¶The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is the
clientsslparent on theCommonpartition.
forward_proxy_bypass_default_action: pulumi.Output[str] = None¶Forward proxy bypass default action. (enabled / disabled)
full_path: pulumi.Output[str] = None¶full path of the profile
generation: pulumi.Output[float] = None¶generation
generic_alert: pulumi.Output[str] = None¶Generic alerts enabled / disabled.
handshake_timeout: pulumi.Output[str] = None¶Handshake time out (seconds)
inherit_cert_keychain: pulumi.Output[str] = None¶Inherit cert key chain
key: pulumi.Output[str] = None¶Contains a key name
mod_ssl_methods: pulumi.Output[str] = None¶ModSSL Methods enabled / disabled. Default is disabled.
mode: pulumi.Output[str] = None¶ModSSL Methods enabled / disabled. Default is disabled.
name: pulumi.Output[str] = None¶Specifies the name of the profile. (type
string)
partition: pulumi.Output[str] = None¶Device partition to manage resources on.
passphrase: pulumi.Output[str] = None¶Client Certificate Constrained Delegation CA passphrase
peer_cert_mode: pulumi.Output[str] = None¶Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ca_cert: pulumi.Output[str] = None¶Proxy CA Cert
proxy_ca_key: pulumi.Output[str] = None¶Proxy CA Key
proxy_ca_passphrase: pulumi.Output[str] = None¶Proxy CA Passphrase
proxy_ssl: pulumi.Output[str] = None¶Proxy SSL enabled / disabled. Default is disabled.
proxy_ssl_passthrough: pulumi.Output[str] = None¶Proxy SSL passthrough enabled / disabled. Default is disabled.
renegotiate_period: pulumi.Output[str] = None¶Renogotiate Period (seconds)
renegotiate_size: pulumi.Output[str] = None¶Renogotiate Size
renegotiation: pulumi.Output[str] = None¶Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate: pulumi.Output[str] = None¶When
true, client certificate is retained in SSL session.
secure_renegotiation: pulumi.Output[str] = None¶Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When
requestis set the system request secure renegotation of SSL connections.requireis a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. Therequire-strictsetting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
server_name: pulumi.Output[str] = None¶Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk
*character.
session_mirroring: pulumi.Output[str] = None¶Session Mirroring (enabled / disabled)
session_ticket: pulumi.Output[str] = None¶Session Ticket (enabled / disabled)
sni_default: pulumi.Output[str] = None¶Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require: pulumi.Output[str] = None¶Requires that the network peers also provide SNI support, this setting only takes effect when
sni_defaultis set totrue.When creating a new profile, the setting is provided by the parent profile
ssl_forward_proxy: pulumi.Output[str] = None¶SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass: pulumi.Output[str] = None¶SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash: pulumi.Output[str] = None¶SSL sign hash (any, sha1, sha256, sha384)
strict_resume: pulumi.Output[str] = None¶Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
unclean_shutdown: pulumi.Output[str] = None¶Unclean Shutdown (enabled / disabled)
- static
get(resource_name, id, opts=None, alert_timeout=None, allow_non_ssl=None, authenticate=None, authenticate_depth=None, ca_file=None, cache_size=None, cache_timeout=None, cert=None, cert_extension_includes=None, cert_key_chains=None, cert_life_span=None, cert_lookup_by_ipaddr_port=None, chain=None, ciphers=None, client_cert_ca=None, crl_file=None, defaults_from=None, forward_proxy_bypass_default_action=None, full_path=None, generation=None, generic_alert=None, handshake_timeout=None, inherit_cert_keychain=None, key=None, mod_ssl_methods=None, mode=None, name=None, partition=None, passphrase=None, peer_cert_mode=None, proxy_ca_cert=None, proxy_ca_key=None, proxy_ca_passphrase=None, proxy_ssl=None, proxy_ssl_passthrough=None, renegotiate_period=None, renegotiate_size=None, renegotiation=None, retain_certificate=None, secure_renegotiation=None, server_name=None, session_mirroring=None, session_ticket=None, sni_default=None, sni_require=None, ssl_forward_proxy=None, ssl_forward_proxy_bypass=None, ssl_sign_hash=None, strict_resume=None, tm_options=None, unclean_shutdown=None)¶ Get an existing ProfileClientSsl resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
alert_timeout (pulumi.Input[str]) – Alert time out
allow_non_ssl (pulumi.Input[str]) – Enables or disables acceptance of non-SSL connections, When creating a new profile, the setting is provided by the parent profile
authenticate (pulumi.Input[str]) – Specifies the frequency of client authentication for an SSL session.When
once,specifies that the system authenticates the client once for an SSL session. Whenalways, specifies that the system authenticates the client once for an SSL session and also upon reuse of that session.authenticate_depth (pulumi.Input[float]) – Specifies the maximum number of certificates to be traversed in a client certificate chain
ca_file (pulumi.Input[str]) – Client certificate file path. Default None.
cache_size (pulumi.Input[float]) – Cache size (sessions).
cache_timeout (pulumi.Input[float]) – Cache time out
cert (pulumi.Input[str]) – Specifies a cert name for use.
cert_extension_includes (pulumi.Input[list]) – Cert extension includes for ssl forward proxy
cert_life_span (pulumi.Input[float]) – Life span of the certificate in days for ssl forward proxy
cert_lookup_by_ipaddr_port (pulumi.Input[str]) – Cert lookup by ip address and port enabled / disabled
chain (pulumi.Input[str]) – Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optional
ciphers (pulumi.Input[str]) – Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
client_cert_ca (pulumi.Input[str]) – client certificate name
crl_file (pulumi.Input[str]) – Certificate revocation file name
defaults_from (pulumi.Input[str]) – The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is the
clientsslparent on theCommonpartition.forward_proxy_bypass_default_action (pulumi.Input[str]) – Forward proxy bypass default action. (enabled / disabled)
full_path (pulumi.Input[str]) – full path of the profile
generation (pulumi.Input[float]) – generation
generic_alert (pulumi.Input[str]) – Generic alerts enabled / disabled.
handshake_timeout (pulumi.Input[str]) – Handshake time out (seconds)
inherit_cert_keychain (pulumi.Input[str]) – Inherit cert key chain
key (pulumi.Input[str]) – Contains a key name
mod_ssl_methods (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
mode (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
name (pulumi.Input[str]) – Specifies the name of the profile. (type
string)partition (pulumi.Input[str]) – Device partition to manage resources on.
passphrase (pulumi.Input[str]) – Client Certificate Constrained Delegation CA passphrase
peer_cert_mode (pulumi.Input[str]) – Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ca_cert (pulumi.Input[str]) – Proxy CA Cert
proxy_ca_key (pulumi.Input[str]) – Proxy CA Key
proxy_ca_passphrase (pulumi.Input[str]) – Proxy CA Passphrase
proxy_ssl (pulumi.Input[str]) – Proxy SSL enabled / disabled. Default is disabled.
proxy_ssl_passthrough (pulumi.Input[str]) – Proxy SSL passthrough enabled / disabled. Default is disabled.
renegotiate_period (pulumi.Input[str]) – Renogotiate Period (seconds)
renegotiate_size (pulumi.Input[str]) – Renogotiate Size
renegotiation (pulumi.Input[str]) – Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate (pulumi.Input[str]) – When
true, client certificate is retained in SSL session.secure_renegotiation (pulumi.Input[str]) – Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When
requestis set the system request secure renegotation of SSL connections.requireis a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. Therequire-strictsetting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure serversserver_name (pulumi.Input[str]) – Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk
*character.session_mirroring (pulumi.Input[str]) – Session Mirroring (enabled / disabled)
session_ticket (pulumi.Input[str]) – Session Ticket (enabled / disabled)
sni_default (pulumi.Input[str]) – Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require (pulumi.Input[str]) – Requires that the network peers also provide SNI support, this setting only takes effect when
sni_defaultis set totrue.When creating a new profile, the setting is provided by the parent profilessl_forward_proxy (pulumi.Input[str]) – SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass (pulumi.Input[str]) – SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash (pulumi.Input[str]) – SSL sign hash (any, sha1, sha256, sha384)
strict_resume (pulumi.Input[str]) – Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
unclean_shutdown (pulumi.Input[str]) – Unclean Shutdown (enabled / disabled)
The cert_key_chains object supports the following:
cert(pulumi.Input[str]) - Specifies a cert name for use.chain(pulumi.Input[str]) - Contains a certificate chain that is relevant to the certificate and key mentioned earlier.This key is optionalkey(pulumi.Input[str]) - Contains a key namename(pulumi.Input[str]) - Specifies the name of the profile. (typestring)passphrase(pulumi.Input[str])
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileFastHttp(resource_name, opts=None, connpool_maxreuse=None, connpool_maxsize=None, connpool_minsize=None, connpool_replenish=None, connpool_step=None, connpoolidle_timeoutoverride=None, defaults_from=None, forcehttp10response=None, idle_timeout=None, maxheader_size=None, name=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileFastHttpConfigures a custom profile_fasthttp for use by health checks.For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip sjfasthttpprofile = f5bigip.ltm.ProfileFastHttp("sjfasthttpprofile", connpool_maxreuse=2, connpool_maxsize=2048, connpool_minsize=0, connpool_replenish="enabled", connpool_step=4, connpoolidle_timeoutoverride=0, defaults_from="/Common/fasthttp", forcehttp10response="disabled", idle_timeout=300, maxheader_size=32768, name="sjfasthttpprofile")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
connpool_maxreuse (pulumi.Input[float]) – Specifies the maximum number of times that the system can re-use a current connection. The default value is 0 (zero).
connpool_maxsize (pulumi.Input[float]) – Specifies the maximum number of connections to a load balancing pool. A setting of 0 specifies that a pool can accept an unlimited number of connections. The default value is 2048.
connpool_minsize (pulumi.Input[float]) – Specifies the minimum number of connections to a load balancing pool. A setting of 0 specifies that there is no minimum. The default value is 10.
connpool_replenish (pulumi.Input[str]) – The default value is enabled. When this option is enabled, the system replenishes the number of connections to a load balancing pool to the number of connections that existed when the server closed the connection to the pool. When disabled, the system replenishes the connection that was closed by the server, only when there are fewer connections to the pool than the number of connections set in the connpool-min-size connections option. Also see the connpool-min-size option..
connpool_step (pulumi.Input[float]) – Specifies the increment in which the system makes additional connections available, when all available connections are in use. The default value is 4.
connpoolidle_timeoutoverride (pulumi.Input[float]) – Specifies the number of seconds after which a server-side connection in a OneConnect pool is eligible for deletion, when the connection has no traffic.The value of this option overrides the idle-timeout value that you specify. The default value is 0 (zero) seconds, which disables the override setting.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
forcehttp10response (pulumi.Input[str]) – Specifies whether to rewrite the HTTP version in the status line of the server to HTTP 1.0 to discourage the client from pipelining or chunking data. The default value is disabled.
idle_timeout (pulumi.Input[float]) – Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
maxheader_size (pulumi.Input[float]) – Specifies the maximum amount of HTTP header data that the system buffers before making a load balancing decision. The default setting is 32768.
name (pulumi.Input[str]) – Name of the profile_fasthttp
connpool_maxreuse: pulumi.Output[float] = None¶Specifies the maximum number of times that the system can re-use a current connection. The default value is 0 (zero).
connpool_maxsize: pulumi.Output[float] = None¶Specifies the maximum number of connections to a load balancing pool. A setting of 0 specifies that a pool can accept an unlimited number of connections. The default value is 2048.
connpool_minsize: pulumi.Output[float] = None¶Specifies the minimum number of connections to a load balancing pool. A setting of 0 specifies that there is no minimum. The default value is 10.
connpool_replenish: pulumi.Output[str] = None¶The default value is enabled. When this option is enabled, the system replenishes the number of connections to a load balancing pool to the number of connections that existed when the server closed the connection to the pool. When disabled, the system replenishes the connection that was closed by the server, only when there are fewer connections to the pool than the number of connections set in the connpool-min-size connections option. Also see the connpool-min-size option..
connpool_step: pulumi.Output[float] = None¶Specifies the increment in which the system makes additional connections available, when all available connections are in use. The default value is 4.
connpoolidle_timeoutoverride: pulumi.Output[float] = None¶Specifies the number of seconds after which a server-side connection in a OneConnect pool is eligible for deletion, when the connection has no traffic.The value of this option overrides the idle-timeout value that you specify. The default value is 0 (zero) seconds, which disables the override setting.
defaults_from: pulumi.Output[str] = None¶Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
forcehttp10response: pulumi.Output[str] = None¶Specifies whether to rewrite the HTTP version in the status line of the server to HTTP 1.0 to discourage the client from pipelining or chunking data. The default value is disabled.
idle_timeout: pulumi.Output[float] = None¶Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
maxheader_size: pulumi.Output[float] = None¶Specifies the maximum amount of HTTP header data that the system buffers before making a load balancing decision. The default setting is 32768.
name: pulumi.Output[str] = None¶Name of the profile_fasthttp
- static
get(resource_name, id, opts=None, connpool_maxreuse=None, connpool_maxsize=None, connpool_minsize=None, connpool_replenish=None, connpool_step=None, connpoolidle_timeoutoverride=None, defaults_from=None, forcehttp10response=None, idle_timeout=None, maxheader_size=None, name=None)¶ Get an existing ProfileFastHttp resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
connpool_maxreuse (pulumi.Input[float]) – Specifies the maximum number of times that the system can re-use a current connection. The default value is 0 (zero).
connpool_maxsize (pulumi.Input[float]) – Specifies the maximum number of connections to a load balancing pool. A setting of 0 specifies that a pool can accept an unlimited number of connections. The default value is 2048.
connpool_minsize (pulumi.Input[float]) – Specifies the minimum number of connections to a load balancing pool. A setting of 0 specifies that there is no minimum. The default value is 10.
connpool_replenish (pulumi.Input[str]) – The default value is enabled. When this option is enabled, the system replenishes the number of connections to a load balancing pool to the number of connections that existed when the server closed the connection to the pool. When disabled, the system replenishes the connection that was closed by the server, only when there are fewer connections to the pool than the number of connections set in the connpool-min-size connections option. Also see the connpool-min-size option..
connpool_step (pulumi.Input[float]) – Specifies the increment in which the system makes additional connections available, when all available connections are in use. The default value is 4.
connpoolidle_timeoutoverride (pulumi.Input[float]) – Specifies the number of seconds after which a server-side connection in a OneConnect pool is eligible for deletion, when the connection has no traffic.The value of this option overrides the idle-timeout value that you specify. The default value is 0 (zero) seconds, which disables the override setting.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
forcehttp10response (pulumi.Input[str]) – Specifies whether to rewrite the HTTP version in the status line of the server to HTTP 1.0 to discourage the client from pipelining or chunking data. The default value is disabled.
idle_timeout (pulumi.Input[float]) – Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
maxheader_size (pulumi.Input[float]) – Specifies the maximum amount of HTTP header data that the system buffers before making a load balancing decision. The default setting is 32768.
name (pulumi.Input[str]) – Name of the profile_fasthttp
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileFastL4(resource_name, opts=None, client_timeout=None, defaults_from=None, explicitflow_migration=None, hardware_syncookie=None, idle_timeout=None, iptos_toclient=None, iptos_toserver=None, keepalive_interval=None, name=None, partition=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileFastL4Configures a custom profile_fastl4 for use by health checks.For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip profile_fastl4 = f5bigip.ltm.ProfileFastL4("profileFastl4", client_timeout=40, defaults_from="/Common/fastL4", explicitflow_migration="enabled", hardware_syncookie="enabled", idle_timeout="200", iptos_toclient="pass-through", iptos_toserver="pass-through", keepalive_interval="disabled", name="/Common/sjfastl4profile", partition="Common")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
client_timeout (pulumi.Input[float]) – Specifies late binding client timeout in seconds. This setting specifies the number of seconds allowed for a client to transmit enough data to select a server when late binding is enabled. If it expires timeout-recovery mode will dictate what action to take.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
explicitflow_migration (pulumi.Input[str]) – Enables or disables late binding explicit flow migration that allows iRules to control when flows move from software to hardware. Explicit flow migration is disabled by default hence BIG-IP automatically migrates flows from software to hardware.
hardware_syncookie (pulumi.Input[str]) – Enables or disables hardware SYN cookie support when PVA10 is present on the system. Note that when you set the hardware syncookie option to enabled, you may also want to set the following bigdb database variables using the “/sys modify db” command, based on your requirements: pva.SynCookies.Full.ConnectionThreshold (default: 500000), pva.SynCookies.Assist.ConnectionThreshold (default: 500000) pva.SynCookies.ClientWindow (default: 0). The default value is disabled.
idle_timeout (pulumi.Input[str]) – Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
iptos_toclient (pulumi.Input[str]) – Specifies an IP ToS number for the client side. This option specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to clients. The default value is 65535 (pass-through), which indicates, do not modify.
iptos_toserver (pulumi.Input[str]) – Specifies an IP ToS number for the server side. This setting specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to servers. The default value is 65535 (pass-through), which indicates, do not modify.
keepalive_interval (pulumi.Input[str]) – Specifies the keep alive probe interval, in seconds. The default value is disabled (0 seconds).
name (pulumi.Input[str]) – Name of the profile_fastl4
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
client_timeout: pulumi.Output[float] = None¶Specifies late binding client timeout in seconds. This setting specifies the number of seconds allowed for a client to transmit enough data to select a server when late binding is enabled. If it expires timeout-recovery mode will dictate what action to take.
defaults_from: pulumi.Output[str] = None¶Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
explicitflow_migration: pulumi.Output[str] = None¶Enables or disables late binding explicit flow migration that allows iRules to control when flows move from software to hardware. Explicit flow migration is disabled by default hence BIG-IP automatically migrates flows from software to hardware.
Enables or disables hardware SYN cookie support when PVA10 is present on the system. Note that when you set the hardware syncookie option to enabled, you may also want to set the following bigdb database variables using the “/sys modify db” command, based on your requirements: pva.SynCookies.Full.ConnectionThreshold (default: 500000), pva.SynCookies.Assist.ConnectionThreshold (default: 500000) pva.SynCookies.ClientWindow (default: 0). The default value is disabled.
idle_timeout: pulumi.Output[str] = None¶Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
iptos_toclient: pulumi.Output[str] = None¶Specifies an IP ToS number for the client side. This option specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to clients. The default value is 65535 (pass-through), which indicates, do not modify.
iptos_toserver: pulumi.Output[str] = None¶Specifies an IP ToS number for the server side. This setting specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to servers. The default value is 65535 (pass-through), which indicates, do not modify.
keepalive_interval: pulumi.Output[str] = None¶Specifies the keep alive probe interval, in seconds. The default value is disabled (0 seconds).
name: pulumi.Output[str] = None¶Name of the profile_fastl4
partition: pulumi.Output[str] = None¶Displays the administrative partition within which this profile resides
- static
get(resource_name, id, opts=None, client_timeout=None, defaults_from=None, explicitflow_migration=None, hardware_syncookie=None, idle_timeout=None, iptos_toclient=None, iptos_toserver=None, keepalive_interval=None, name=None, partition=None)¶ Get an existing ProfileFastL4 resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
client_timeout (pulumi.Input[float]) – Specifies late binding client timeout in seconds. This setting specifies the number of seconds allowed for a client to transmit enough data to select a server when late binding is enabled. If it expires timeout-recovery mode will dictate what action to take.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
explicitflow_migration (pulumi.Input[str]) – Enables or disables late binding explicit flow migration that allows iRules to control when flows move from software to hardware. Explicit flow migration is disabled by default hence BIG-IP automatically migrates flows from software to hardware.
hardware_syncookie (pulumi.Input[str]) – Enables or disables hardware SYN cookie support when PVA10 is present on the system. Note that when you set the hardware syncookie option to enabled, you may also want to set the following bigdb database variables using the “/sys modify db” command, based on your requirements: pva.SynCookies.Full.ConnectionThreshold (default: 500000), pva.SynCookies.Assist.ConnectionThreshold (default: 500000) pva.SynCookies.ClientWindow (default: 0). The default value is disabled.
idle_timeout (pulumi.Input[str]) – Specifies an idle timeout in seconds. This setting specifies the number of seconds that a connection is idle before the connection is eligible for deletion.When you specify an idle timeout for the Fast L4 profile, the value must be greater than the bigdb database variable Pva.Scrub time in msec for it to work properly.The default value is 300 seconds.
iptos_toclient (pulumi.Input[str]) – Specifies an IP ToS number for the client side. This option specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to clients. The default value is 65535 (pass-through), which indicates, do not modify.
iptos_toserver (pulumi.Input[str]) – Specifies an IP ToS number for the server side. This setting specifies the Type of Service level that the traffic management system assigns to IP packets when sending them to servers. The default value is 65535 (pass-through), which indicates, do not modify.
keepalive_interval (pulumi.Input[str]) – Specifies the keep alive probe interval, in seconds. The default value is disabled (0 seconds).
name (pulumi.Input[str]) – Name of the profile_fastl4
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileHttp(resource_name, opts=None, accept_xff=None, app_service=None, basic_auth_realm=None, defaults_from=None, description=None, encrypt_cookie_secret=None, encrypt_cookies=None, fallback_host=None, fallback_status_codes=None, head_erase=None, head_insert=None, insert_xforwarded_for=None, lws_separator=None, name=None, oneconnect_transformations=None, proxy_type=None, redirect_rewrite=None, request_chunking=None, response_chunking=None, response_headers_permitteds=None, server_agent_name=None, tm_partition=None, via_host_name=None, via_request=None, via_response=None, xff_alternative_names=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileHttpConfigures a custom profile_http for use by health checks.For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip sanjose_http = f5bigip.ltm.ProfileHttp("sanjose-http", defaults_from="/Common/http", description="some http", fallback_host="titanic", fallback_status_codes=[ "400", "500", "300", ], name="/Common/sanjose-http")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
accept_xff (pulumi.Input[str]) – Enables or disables trusting the client IP address, and statistics from the client IP address, based on the request’s XFF (X-forwarded-for) headers, if they exist.
app_service (pulumi.Input[str]) – The application service to which the object belongs.
basic_auth_realm (pulumi.Input[str]) – Specifies a quoted string for the basic authentication realm. The system sends this string to a client whenever authorization fails. The default value is none
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
description (pulumi.Input[str]) – User defibned description
encrypt_cookie_secret (pulumi.Input[str]) – Specifies a passphrase for the cookie encryption
encrypt_cookies (pulumi.Input[list]) – Encrypts specified cookies that the BIG-IP system sends to a client system
fallback_host (pulumi.Input[str]) – Specifies an HTTP fallback host. HTTP redirection allows you to redirect HTTP traffic to another protocol identifier, host name, port number
fallback_status_codes (pulumi.Input[list]) – Specifies one or more three-digit status codes that can be returned by an HTTP server.
head_erase (pulumi.Input[str]) – Specifies the header string that you want to erase from an HTTP request. You can also specify none
head_insert (pulumi.Input[str]) – Specifies a quoted header string that you want to insert into an HTTP request
insert_xforwarded_for (pulumi.Input[str]) – When using connection pooling, which allows clients to make use of other client requests’ server-side connections, you can insert the X-Forwarded-For header and specify a client IP address
lws_separator (pulumi.Input[str]) – Specifies a quoted header string that you want to insert into an HTTP request. You can also specify none.
name (pulumi.Input[str]) – Name of the profile_http
oneconnect_transformations (pulumi.Input[str]) – Enables the system to perform HTTP header transformations for the purpose of keeping server-side connections open. This feature requires configuration of a OneConnect profile
proxy_type (pulumi.Input[str]) – Specifies the type of HTTP proxy.
redirect_rewrite (pulumi.Input[str]) – Specifies which of the application HTTP redirects the system rewrites to HTTPS.
request_chunking (pulumi.Input[str]) – Specifies how to handle chunked and unchunked requests.
response_chunking (pulumi.Input[str]) – Specifies how to handle chunked and unchunked responses.
response_headers_permitteds (pulumi.Input[list]) – Specifies headers that the BIG-IP system allows in an HTTP response.
server_agent_name (pulumi.Input[str]) – Specifies the value of the Server header in responses that the BIG-IP itself generates. The default is BigIP. If no string is specified, then no Server header will be added to such responses
tm_partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides.
via_host_name (pulumi.Input[str]) – Specifies the hostname to include into Via header
via_request (pulumi.Input[str]) – Specifies whether to append, remove, or preserve a Via header in an HTTP request
via_response (pulumi.Input[str]) – Specifies whether to append, remove, or preserve a Via header in an HTTP request
xff_alternative_names (pulumi.Input[list]) – Specifies alternative XFF headers instead of the default X-forwarded-for header
accept_xff: pulumi.Output[str] = None¶Enables or disables trusting the client IP address, and statistics from the client IP address, based on the request’s XFF (X-forwarded-for) headers, if they exist.
app_service: pulumi.Output[str] = None¶The application service to which the object belongs.
basic_auth_realm: pulumi.Output[str] = None¶Specifies a quoted string for the basic authentication realm. The system sends this string to a client whenever authorization fails. The default value is none
defaults_from: pulumi.Output[str] = None¶Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
description: pulumi.Output[str] = None¶User defibned description
Specifies a passphrase for the cookie encryption
Encrypts specified cookies that the BIG-IP system sends to a client system
fallback_host: pulumi.Output[str] = None¶Specifies an HTTP fallback host. HTTP redirection allows you to redirect HTTP traffic to another protocol identifier, host name, port number
fallback_status_codes: pulumi.Output[list] = None¶Specifies one or more three-digit status codes that can be returned by an HTTP server.
head_erase: pulumi.Output[str] = None¶Specifies the header string that you want to erase from an HTTP request. You can also specify none
head_insert: pulumi.Output[str] = None¶Specifies a quoted header string that you want to insert into an HTTP request
insert_xforwarded_for: pulumi.Output[str] = None¶When using connection pooling, which allows clients to make use of other client requests’ server-side connections, you can insert the X-Forwarded-For header and specify a client IP address
lws_separator: pulumi.Output[str] = None¶Specifies a quoted header string that you want to insert into an HTTP request. You can also specify none.
name: pulumi.Output[str] = None¶Name of the profile_http
oneconnect_transformations: pulumi.Output[str] = None¶Enables the system to perform HTTP header transformations for the purpose of keeping server-side connections open. This feature requires configuration of a OneConnect profile
proxy_type: pulumi.Output[str] = None¶Specifies the type of HTTP proxy.
redirect_rewrite: pulumi.Output[str] = None¶Specifies which of the application HTTP redirects the system rewrites to HTTPS.
request_chunking: pulumi.Output[str] = None¶Specifies how to handle chunked and unchunked requests.
response_chunking: pulumi.Output[str] = None¶Specifies how to handle chunked and unchunked responses.
response_headers_permitteds: pulumi.Output[list] = None¶Specifies headers that the BIG-IP system allows in an HTTP response.
server_agent_name: pulumi.Output[str] = None¶Specifies the value of the Server header in responses that the BIG-IP itself generates. The default is BigIP. If no string is specified, then no Server header will be added to such responses
tm_partition: pulumi.Output[str] = None¶Displays the administrative partition within which this profile resides.
via_host_name: pulumi.Output[str] = None¶Specifies the hostname to include into Via header
via_request: pulumi.Output[str] = None¶Specifies whether to append, remove, or preserve a Via header in an HTTP request
via_response: pulumi.Output[str] = None¶Specifies whether to append, remove, or preserve a Via header in an HTTP request
xff_alternative_names: pulumi.Output[list] = None¶Specifies alternative XFF headers instead of the default X-forwarded-for header
- static
get(resource_name, id, opts=None, accept_xff=None, app_service=None, basic_auth_realm=None, defaults_from=None, description=None, encrypt_cookie_secret=None, encrypt_cookies=None, fallback_host=None, fallback_status_codes=None, head_erase=None, head_insert=None, insert_xforwarded_for=None, lws_separator=None, name=None, oneconnect_transformations=None, proxy_type=None, redirect_rewrite=None, request_chunking=None, response_chunking=None, response_headers_permitteds=None, server_agent_name=None, tm_partition=None, via_host_name=None, via_request=None, via_response=None, xff_alternative_names=None)¶ Get an existing ProfileHttp resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
accept_xff (pulumi.Input[str]) – Enables or disables trusting the client IP address, and statistics from the client IP address, based on the request’s XFF (X-forwarded-for) headers, if they exist.
app_service (pulumi.Input[str]) – The application service to which the object belongs.
basic_auth_realm (pulumi.Input[str]) – Specifies a quoted string for the basic authentication realm. The system sends this string to a client whenever authorization fails. The default value is none
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
description (pulumi.Input[str]) – User defibned description
encrypt_cookie_secret (pulumi.Input[str]) – Specifies a passphrase for the cookie encryption
encrypt_cookies (pulumi.Input[list]) – Encrypts specified cookies that the BIG-IP system sends to a client system
fallback_host (pulumi.Input[str]) – Specifies an HTTP fallback host. HTTP redirection allows you to redirect HTTP traffic to another protocol identifier, host name, port number
fallback_status_codes (pulumi.Input[list]) – Specifies one or more three-digit status codes that can be returned by an HTTP server.
head_erase (pulumi.Input[str]) – Specifies the header string that you want to erase from an HTTP request. You can also specify none
head_insert (pulumi.Input[str]) – Specifies a quoted header string that you want to insert into an HTTP request
insert_xforwarded_for (pulumi.Input[str]) – When using connection pooling, which allows clients to make use of other client requests’ server-side connections, you can insert the X-Forwarded-For header and specify a client IP address
lws_separator (pulumi.Input[str]) – Specifies a quoted header string that you want to insert into an HTTP request. You can also specify none.
name (pulumi.Input[str]) – Name of the profile_http
oneconnect_transformations (pulumi.Input[str]) – Enables the system to perform HTTP header transformations for the purpose of keeping server-side connections open. This feature requires configuration of a OneConnect profile
proxy_type (pulumi.Input[str]) – Specifies the type of HTTP proxy.
redirect_rewrite (pulumi.Input[str]) – Specifies which of the application HTTP redirects the system rewrites to HTTPS.
request_chunking (pulumi.Input[str]) – Specifies how to handle chunked and unchunked requests.
response_chunking (pulumi.Input[str]) – Specifies how to handle chunked and unchunked responses.
response_headers_permitteds (pulumi.Input[list]) – Specifies headers that the BIG-IP system allows in an HTTP response.
server_agent_name (pulumi.Input[str]) – Specifies the value of the Server header in responses that the BIG-IP itself generates. The default is BigIP. If no string is specified, then no Server header will be added to such responses
tm_partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides.
via_host_name (pulumi.Input[str]) – Specifies the hostname to include into Via header
via_request (pulumi.Input[str]) – Specifies whether to append, remove, or preserve a Via header in an HTTP request
via_response (pulumi.Input[str]) – Specifies whether to append, remove, or preserve a Via header in an HTTP request
xff_alternative_names (pulumi.Input[list]) – Specifies alternative XFF headers instead of the default X-forwarded-for header
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileHttp2(resource_name, opts=None, activation_modes=None, concurrent_streams_per_connection=None, connection_idle_timeout=None, defaults_from=None, header_table_size=None, name=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileHttp2Configures a custom profile_http2 for use by health checks.For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip nyhttp2 = f5bigip.ltm.ProfileHttp2("nyhttp2", activation_modes=[ "alpn", "npn", ], concurrent_streams_per_connection=10, connection_idle_timeout=30, defaults_from="/Common/http2", name="/Common/NewYork_http2")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
activation_modes (pulumi.Input[list]) – Specifies what will cause an incoming connection to be handled as a HTTP/2 connection. The default values npn and alpn specify that the TLS next-protocol-negotiation and application-layer-protocol-negotiation extensions will be used.
concurrent_streams_per_connection (pulumi.Input[float]) – Specifies how many concurrent requests are allowed to be outstanding on a single HTTP/2 connection.
connection_idle_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is idle before the connection is eligible for deletion..
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
header_table_size (pulumi.Input[float]) – Use the parent Http2 profile
name (pulumi.Input[str]) – Name of the profile_http2
activation_modes: pulumi.Output[list] = None¶Specifies what will cause an incoming connection to be handled as a HTTP/2 connection. The default values npn and alpn specify that the TLS next-protocol-negotiation and application-layer-protocol-negotiation extensions will be used.
concurrent_streams_per_connection: pulumi.Output[float] = None¶Specifies how many concurrent requests are allowed to be outstanding on a single HTTP/2 connection.
connection_idle_timeout: pulumi.Output[float] = None¶Specifies the number of seconds that a connection is idle before the connection is eligible for deletion..
defaults_from: pulumi.Output[str] = None¶Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
header_table_size: pulumi.Output[float] = None¶Use the parent Http2 profile
name: pulumi.Output[str] = None¶Name of the profile_http2
- static
get(resource_name, id, opts=None, activation_modes=None, concurrent_streams_per_connection=None, connection_idle_timeout=None, defaults_from=None, header_table_size=None, name=None)¶ Get an existing ProfileHttp2 resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
activation_modes (pulumi.Input[list]) – Specifies what will cause an incoming connection to be handled as a HTTP/2 connection. The default values npn and alpn specify that the TLS next-protocol-negotiation and application-layer-protocol-negotiation extensions will be used.
concurrent_streams_per_connection (pulumi.Input[float]) – Specifies how many concurrent requests are allowed to be outstanding on a single HTTP/2 connection.
connection_idle_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is idle before the connection is eligible for deletion..
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
header_table_size (pulumi.Input[float]) – Use the parent Http2 profile
name (pulumi.Input[str]) – Name of the profile_http2
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileHttpCompress(resource_name, opts=None, content_type_excludes=None, content_type_includes=None, defaults_from=None, name=None, uri_excludes=None, uri_includes=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileHttpCompressVirtual server HTTP compression profile configurationFor resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip sjhttpcompression = f5bigip.ltm.ProfileHttpCompress("sjhttpcompression", content_type_excludes=["nicecontentexclude.com"], content_type_includes=["nicecontent.com"], defaults_from="/Common/httpcompression", name="/Common/sjhttpcompression2", uri_excludes=[ "www.abc.f5.com", "www.abc2.f5.com", ], uri_includes=["www.xyzbc.cisco.com"])
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
content_type_excludes (pulumi.Input[list]) – Excludes a specified list of content types from compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
content_type_includes (pulumi.Input[list]) – Specifies a list of content types for compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
name (pulumi.Input[str]) – Name of the profile_httpcompress
uri_excludes (pulumi.Input[list]) – Disables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you do not want to compress.
uri_includes (pulumi.Input[list]) – Enables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you want to compress.
content_type_excludes: pulumi.Output[list] = None¶Excludes a specified list of content types from compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
content_type_includes: pulumi.Output[list] = None¶Specifies a list of content types for compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
defaults_from: pulumi.Output[str] = None¶Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
name: pulumi.Output[str] = None¶Name of the profile_httpcompress
uri_excludes: pulumi.Output[list] = None¶Disables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you do not want to compress.
uri_includes: pulumi.Output[list] = None¶Enables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you want to compress.
- static
get(resource_name, id, opts=None, content_type_excludes=None, content_type_includes=None, defaults_from=None, name=None, uri_excludes=None, uri_includes=None)¶ Get an existing ProfileHttpCompress resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
content_type_excludes (pulumi.Input[list]) – Excludes a specified list of content types from compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
content_type_includes (pulumi.Input[list]) – Specifies a list of content types for compression of HTTP Content-Type responses. Use a string list to specify a list of content types you want to compress.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
name (pulumi.Input[str]) – Name of the profile_httpcompress
uri_excludes (pulumi.Input[list]) – Disables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you do not want to compress.
uri_includes (pulumi.Input[list]) – Enables compression on a specified list of HTTP Request-URI responses. Use a regular expression to specify a list of URIs you want to compress.
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileOneConnect(resource_name, opts=None, defaults_from=None, idle_timeout_override=None, max_age=None, max_reuse=None, max_size=None, name=None, partition=None, share_pools=None, source_mask=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileOneConnectConfigures a custom profile_oneconnect for use by health checks.For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip oneconnect_sanjose = f5bigip.ltm.ProfileOneConnect("oneconnect-sanjose", defaults_from="/Common/oneconnect", idle_timeout_override="disabled", max_age=3600, max_reuse=1000, max_size=1000, name="sanjose", partition="Common", share_pools="disabled", source_mask="255.255.255.255")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
idle_timeout_override (pulumi.Input[str]) – Specifies the number of seconds that a connection is idle before the connection flow is eligible for deletion. Possible values are disabled, indefinite, or a numeric value that you specify. The default value is disabled.
max_age (pulumi.Input[float]) – Specifies the maximum age in number of seconds allowed for a connection in the connection reuse pool. For any connection with an age higher than this value, the system removes that connection from the reuse pool. The default value is 86400.
max_reuse (pulumi.Input[float]) – Specifies the maximum number of times that a server-side connection can be reused. The default value is 1000.
max_size (pulumi.Input[float]) – Specifies the maximum number of connections that the system holds in the connection reuse pool. If the pool is already full, then the server-side connection closes after the response is completed. The default value is 10000.
name (pulumi.Input[str]) – Name of the profile_oneconnect
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
share_pools (pulumi.Input[str]) – Specify if you want to share the pool, default value is “disabled”
source_mask (pulumi.Input[str]) – Specifies a source IP mask. The default value is 0.0.0.0. The system applies the value of this option to the source address to determine its eligibility for reuse. A mask of 0.0.0.0 causes the system to share reused connections across all clients. A host mask (all 1’s in binary), causes the system to share only those reused connections originating from the same client IP address.
defaults_from: pulumi.Output[str] = None¶Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
idle_timeout_override: pulumi.Output[str] = None¶Specifies the number of seconds that a connection is idle before the connection flow is eligible for deletion. Possible values are disabled, indefinite, or a numeric value that you specify. The default value is disabled.
max_age: pulumi.Output[float] = None¶Specifies the maximum age in number of seconds allowed for a connection in the connection reuse pool. For any connection with an age higher than this value, the system removes that connection from the reuse pool. The default value is 86400.
max_reuse: pulumi.Output[float] = None¶Specifies the maximum number of times that a server-side connection can be reused. The default value is 1000.
max_size: pulumi.Output[float] = None¶Specifies the maximum number of connections that the system holds in the connection reuse pool. If the pool is already full, then the server-side connection closes after the response is completed. The default value is 10000.
name: pulumi.Output[str] = None¶Name of the profile_oneconnect
partition: pulumi.Output[str] = None¶Displays the administrative partition within which this profile resides
Specify if you want to share the pool, default value is “disabled”
source_mask: pulumi.Output[str] = None¶Specifies a source IP mask. The default value is 0.0.0.0. The system applies the value of this option to the source address to determine its eligibility for reuse. A mask of 0.0.0.0 causes the system to share reused connections across all clients. A host mask (all 1’s in binary), causes the system to share only those reused connections originating from the same client IP address.
- static
get(resource_name, id, opts=None, defaults_from=None, idle_timeout_override=None, max_age=None, max_reuse=None, max_size=None, name=None, partition=None, share_pools=None, source_mask=None)¶ Get an existing ProfileOneConnect resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
idle_timeout_override (pulumi.Input[str]) – Specifies the number of seconds that a connection is idle before the connection flow is eligible for deletion. Possible values are disabled, indefinite, or a numeric value that you specify. The default value is disabled.
max_age (pulumi.Input[float]) – Specifies the maximum age in number of seconds allowed for a connection in the connection reuse pool. For any connection with an age higher than this value, the system removes that connection from the reuse pool. The default value is 86400.
max_reuse (pulumi.Input[float]) – Specifies the maximum number of times that a server-side connection can be reused. The default value is 1000.
max_size (pulumi.Input[float]) – Specifies the maximum number of connections that the system holds in the connection reuse pool. If the pool is already full, then the server-side connection closes after the response is completed. The default value is 10000.
name (pulumi.Input[str]) – Name of the profile_oneconnect
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
share_pools (pulumi.Input[str]) – Specify if you want to share the pool, default value is “disabled”
source_mask (pulumi.Input[str]) – Specifies a source IP mask. The default value is 0.0.0.0. The system applies the value of this option to the source address to determine its eligibility for reuse. A mask of 0.0.0.0 causes the system to share reused connections across all clients. A host mask (all 1’s in binary), causes the system to share only those reused connections originating from the same client IP address.
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileServerSsl(resource_name, opts=None, alert_timeout=None, authenticate=None, authenticate_depth=None, ca_file=None, cache_size=None, cache_timeout=None, cert=None, chain=None, ciphers=None, defaults_from=None, expire_cert_response_control=None, full_path=None, generation=None, generic_alert=None, handshake_timeout=None, key=None, mod_ssl_methods=None, mode=None, name=None, partition=None, passphrase=None, peer_cert_mode=None, proxy_ssl=None, renegotiate_period=None, renegotiate_size=None, renegotiation=None, retain_certificate=None, secure_renegotiation=None, server_name=None, session_mirroring=None, session_ticket=None, sni_default=None, sni_require=None, ssl_forward_proxy=None, ssl_forward_proxy_bypass=None, ssl_sign_hash=None, strict_resume=None, tm_options=None, unclean_shutdown=None, untrusted_cert_response_control=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileServerSslManages server SSL profiles on a BIG-IPimport pulumi import pulumi_f5bigip as f5bigip test__server_ssl = f5bigip.ltm.ProfileServerSsl("test-ServerSsl", authenticate="always", ciphers="DEFAULT", defaults_from="/Common/serverssl", name="/Common/test-ServerSsl", partition="Common")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
alert_timeout (pulumi.Input[str]) – Alert time out
authenticate (pulumi.Input[str]) – Server authentication once / always (default is once).
authenticate_depth (pulumi.Input[float]) – Client certificate chain traversal depth. Default 9.
ca_file (pulumi.Input[str]) – Client certificate file path. Default None.
cache_size (pulumi.Input[float]) – Cache size (sessions).
cache_timeout (pulumi.Input[float]) – Cache time out
cert (pulumi.Input[str]) – Specifies the name of the certificate that the system uses for server-side SSL processing.
chain (pulumi.Input[str]) – Specifies the certificates-key chain to associate with the SSL profile
ciphers (pulumi.Input[str]) – Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
defaults_from (pulumi.Input[str]) – The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is
/Common/serverssl.expire_cert_response_control (pulumi.Input[str]) – Response if the cert is expired (drop / ignore).
full_path (pulumi.Input[str]) – full path of the profile
generation (pulumi.Input[float]) – generation
generic_alert (pulumi.Input[str]) – Generic alerts enabled / disabled.
handshake_timeout (pulumi.Input[str]) – Handshake time out (seconds)
key (pulumi.Input[str]) – Specifies the file name of the SSL key.
mod_ssl_methods (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
mode (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
name (pulumi.Input[str]) – Specifies the name of the profile. (type
string)partition (pulumi.Input[str]) – Device partition to manage resources on.
passphrase (pulumi.Input[str]) – Client Certificate Constrained Delegation CA passphrase
peer_cert_mode (pulumi.Input[str]) – Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ssl (pulumi.Input[str]) – Proxy SSL enabled / disabled. Default is disabled.
renegotiate_period (pulumi.Input[str]) – Renogotiate Period (seconds)
renegotiate_size (pulumi.Input[str]) – Renogotiate Size
renegotiation (pulumi.Input[str]) – Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate (pulumi.Input[str]) – When
true, client certificate is retained in SSL session.secure_renegotiation (pulumi.Input[str]) – Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When
requestis set the system request secure renegotation of SSL connections.requireis a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. Therequire-strictsetting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure serversserver_name (pulumi.Input[str]) – Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk
*character.session_mirroring (pulumi.Input[str]) – Session Mirroring (enabled / disabled)
session_ticket (pulumi.Input[str]) – Session Ticket (enabled / disabled)
sni_default (pulumi.Input[str]) – Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require (pulumi.Input[str]) – Requires that the network peers also provide SNI support, this setting only takes effect when
sni_defaultis set totrue.When creating a new profile, the setting is provided by the parent profilessl_forward_proxy (pulumi.Input[str]) – SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass (pulumi.Input[str]) – SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash (pulumi.Input[str]) – SSL sign hash (any, sha1, sha256, sha384)
strict_resume (pulumi.Input[str]) – Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
unclean_shutdown (pulumi.Input[str]) – Unclean Shutdown (enabled / disabled)
untrusted_cert_response_control (pulumi.Input[str]) – Unclean Shutdown (drop / ignore)
alert_timeout: pulumi.Output[str] = None¶Alert time out
authenticate: pulumi.Output[str] = None¶Server authentication once / always (default is once).
authenticate_depth: pulumi.Output[float] = None¶Client certificate chain traversal depth. Default 9.
ca_file: pulumi.Output[str] = None¶Client certificate file path. Default None.
cache_size: pulumi.Output[float] = None¶Cache size (sessions).
cache_timeout: pulumi.Output[float] = None¶Cache time out
cert: pulumi.Output[str] = None¶Specifies the name of the certificate that the system uses for server-side SSL processing.
chain: pulumi.Output[str] = None¶Specifies the certificates-key chain to associate with the SSL profile
ciphers: pulumi.Output[str] = None¶Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
defaults_from: pulumi.Output[str] = None¶The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is
/Common/serverssl.
expire_cert_response_control: pulumi.Output[str] = None¶Response if the cert is expired (drop / ignore).
full_path: pulumi.Output[str] = None¶full path of the profile
generation: pulumi.Output[float] = None¶generation
generic_alert: pulumi.Output[str] = None¶Generic alerts enabled / disabled.
handshake_timeout: pulumi.Output[str] = None¶Handshake time out (seconds)
key: pulumi.Output[str] = None¶Specifies the file name of the SSL key.
mod_ssl_methods: pulumi.Output[str] = None¶ModSSL Methods enabled / disabled. Default is disabled.
mode: pulumi.Output[str] = None¶ModSSL Methods enabled / disabled. Default is disabled.
name: pulumi.Output[str] = None¶Specifies the name of the profile. (type
string)
partition: pulumi.Output[str] = None¶Device partition to manage resources on.
passphrase: pulumi.Output[str] = None¶Client Certificate Constrained Delegation CA passphrase
peer_cert_mode: pulumi.Output[str] = None¶Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ssl: pulumi.Output[str] = None¶Proxy SSL enabled / disabled. Default is disabled.
renegotiate_period: pulumi.Output[str] = None¶Renogotiate Period (seconds)
renegotiate_size: pulumi.Output[str] = None¶Renogotiate Size
renegotiation: pulumi.Output[str] = None¶Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate: pulumi.Output[str] = None¶When
true, client certificate is retained in SSL session.
secure_renegotiation: pulumi.Output[str] = None¶Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When
requestis set the system request secure renegotation of SSL connections.requireis a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. Therequire-strictsetting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure servers
server_name: pulumi.Output[str] = None¶Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk
*character.
session_mirroring: pulumi.Output[str] = None¶Session Mirroring (enabled / disabled)
session_ticket: pulumi.Output[str] = None¶Session Ticket (enabled / disabled)
sni_default: pulumi.Output[str] = None¶Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require: pulumi.Output[str] = None¶Requires that the network peers also provide SNI support, this setting only takes effect when
sni_defaultis set totrue.When creating a new profile, the setting is provided by the parent profile
ssl_forward_proxy: pulumi.Output[str] = None¶SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass: pulumi.Output[str] = None¶SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash: pulumi.Output[str] = None¶SSL sign hash (any, sha1, sha256, sha384)
strict_resume: pulumi.Output[str] = None¶Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
unclean_shutdown: pulumi.Output[str] = None¶Unclean Shutdown (enabled / disabled)
untrusted_cert_response_control: pulumi.Output[str] = None¶Unclean Shutdown (drop / ignore)
- static
get(resource_name, id, opts=None, alert_timeout=None, authenticate=None, authenticate_depth=None, ca_file=None, cache_size=None, cache_timeout=None, cert=None, chain=None, ciphers=None, defaults_from=None, expire_cert_response_control=None, full_path=None, generation=None, generic_alert=None, handshake_timeout=None, key=None, mod_ssl_methods=None, mode=None, name=None, partition=None, passphrase=None, peer_cert_mode=None, proxy_ssl=None, renegotiate_period=None, renegotiate_size=None, renegotiation=None, retain_certificate=None, secure_renegotiation=None, server_name=None, session_mirroring=None, session_ticket=None, sni_default=None, sni_require=None, ssl_forward_proxy=None, ssl_forward_proxy_bypass=None, ssl_sign_hash=None, strict_resume=None, tm_options=None, unclean_shutdown=None, untrusted_cert_response_control=None)¶ Get an existing ProfileServerSsl resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
alert_timeout (pulumi.Input[str]) – Alert time out
authenticate (pulumi.Input[str]) – Server authentication once / always (default is once).
authenticate_depth (pulumi.Input[float]) – Client certificate chain traversal depth. Default 9.
ca_file (pulumi.Input[str]) – Client certificate file path. Default None.
cache_size (pulumi.Input[float]) – Cache size (sessions).
cache_timeout (pulumi.Input[float]) – Cache time out
cert (pulumi.Input[str]) – Specifies the name of the certificate that the system uses for server-side SSL processing.
chain (pulumi.Input[str]) – Specifies the certificates-key chain to associate with the SSL profile
ciphers (pulumi.Input[str]) – Specifies the list of ciphers that the system supports. When creating a new profile, the default cipher list is provided by the parent profile.
defaults_from (pulumi.Input[str]) – The parent template of this monitor template. Once this value has been set, it cannot be changed. By default, this value is
/Common/serverssl.expire_cert_response_control (pulumi.Input[str]) – Response if the cert is expired (drop / ignore).
full_path (pulumi.Input[str]) – full path of the profile
generation (pulumi.Input[float]) – generation
generic_alert (pulumi.Input[str]) – Generic alerts enabled / disabled.
handshake_timeout (pulumi.Input[str]) – Handshake time out (seconds)
key (pulumi.Input[str]) – Specifies the file name of the SSL key.
mod_ssl_methods (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
mode (pulumi.Input[str]) – ModSSL Methods enabled / disabled. Default is disabled.
name (pulumi.Input[str]) – Specifies the name of the profile. (type
string)partition (pulumi.Input[str]) – Device partition to manage resources on.
passphrase (pulumi.Input[str]) – Client Certificate Constrained Delegation CA passphrase
peer_cert_mode (pulumi.Input[str]) – Specifies the way the system handles client certificates.When ignore, specifies that the system ignores certificates from client systems.When require, specifies that the system requires a client to present a valid certificate.When request, specifies that the system requests a valid certificate from a client but always authenticate the client.
proxy_ssl (pulumi.Input[str]) – Proxy SSL enabled / disabled. Default is disabled.
renegotiate_period (pulumi.Input[str]) – Renogotiate Period (seconds)
renegotiate_size (pulumi.Input[str]) – Renogotiate Size
renegotiation (pulumi.Input[str]) – Enables or disables SSL renegotiation.When creating a new profile, the setting is provided by the parent profile
retain_certificate (pulumi.Input[str]) – When
true, client certificate is retained in SSL session.secure_renegotiation (pulumi.Input[str]) – Specifies the method of secure renegotiations for SSL connections. When creating a new profile, the setting is provided by the parent profile. When
requestis set the system request secure renegotation of SSL connections.requireis a default setting and when set the system permits initial SSL handshakes from clients but terminates renegotiations from unpatched clients. Therequire-strictsetting the system requires strict renegotiation of SSL connections. In this mode the system refuses connections to insecure servers, and terminates existing SSL connections to insecure serversserver_name (pulumi.Input[str]) – Specifies the fully qualified DNS hostname of the server used in Server Name Indication communications. When creating a new profile, the setting is provided by the parent profile.The server name can also be a wildcard string containing the asterisk
*character.session_mirroring (pulumi.Input[str]) – Session Mirroring (enabled / disabled)
session_ticket (pulumi.Input[str]) – Session Ticket (enabled / disabled)
sni_default (pulumi.Input[str]) – Indicates that the system uses this profile as the default SSL profile when there is no match to the server name, or when the client provides no SNI extension support.When creating a new profile, the setting is provided by the parent profile. There can be only one SSL profile with this setting enabled.
sni_require (pulumi.Input[str]) – Requires that the network peers also provide SNI support, this setting only takes effect when
sni_defaultis set totrue.When creating a new profile, the setting is provided by the parent profilessl_forward_proxy (pulumi.Input[str]) – SSL forward Proxy (enabled / disabled)
ssl_forward_proxy_bypass (pulumi.Input[str]) – SSL forward Proxy Bypass (enabled / disabled)
ssl_sign_hash (pulumi.Input[str]) – SSL sign hash (any, sha1, sha256, sha384)
strict_resume (pulumi.Input[str]) – Enables or disables the resumption of SSL sessions after an unclean shutdown.When creating a new profile, the setting is provided by the parent profile.
unclean_shutdown (pulumi.Input[str]) – Unclean Shutdown (enabled / disabled)
untrusted_cert_response_control (pulumi.Input[str]) – Unclean Shutdown (drop / ignore)
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.ProfileTcp(resource_name, opts=None, close_wait_timeout=None, defaults_from=None, deferred_accept=None, fast_open=None, finwait2timeout=None, finwait_timeout=None, idle_timeout=None, keepalive_interval=None, name=None, partition=None, __props__=None, __name__=None, __opts__=None)¶ ltm.ProfileTcpConfigures a custom profile_tcp for use by health checks.For resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip sanjose_tcp_lan_profile = f5bigip.ltm.ProfileTcp("sanjose-tcp-lan-profile", close_wait_timeout=5, deferred_accept="enabled", fast_open="enabled", finwait2timeout=5, finwait_timeout=300, idle_timeout=200, keepalive_interval=1700, name="sanjose-tcp-lan-profile")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
close_wait_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection remains in a LAST-ACK state before quitting. A value of 0 represents a term of forever (or until the maxrtx of the FIN state). The default value is 5 seconds.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
deferred_accept (pulumi.Input[str]) – Specifies, when enabled, that the system defers allocation of the connection chain context until the client response is received. This option is useful for dealing with 3-way handshake DOS attacks. The default value is disabled.
fast_open (pulumi.Input[str]) – When enabled, permits TCP Fast Open, allowing properly equipped TCP clients to send data with the SYN packet.
finwait2timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is in the FIN-WAIT-2 state before quitting. The default value is 300 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state).
finwait_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is in the FIN-WAIT-1 or closing state before quitting. The default value is 5 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state). You can also specify immediate or indefinite.
idle_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is idle before the connection is eligible for deletion. The default value is 300 seconds.
keepalive_interval (pulumi.Input[float]) – Specifies the keep alive probe interval, in seconds. The default value is 1800 seconds.
name (pulumi.Input[str]) – Name of the profile_tcp
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
close_wait_timeout: pulumi.Output[float] = None¶Specifies the number of seconds that a connection remains in a LAST-ACK state before quitting. A value of 0 represents a term of forever (or until the maxrtx of the FIN state). The default value is 5 seconds.
defaults_from: pulumi.Output[str] = None¶Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
deferred_accept: pulumi.Output[str] = None¶Specifies, when enabled, that the system defers allocation of the connection chain context until the client response is received. This option is useful for dealing with 3-way handshake DOS attacks. The default value is disabled.
fast_open: pulumi.Output[str] = None¶When enabled, permits TCP Fast Open, allowing properly equipped TCP clients to send data with the SYN packet.
finwait2timeout: pulumi.Output[float] = None¶Specifies the number of seconds that a connection is in the FIN-WAIT-2 state before quitting. The default value is 300 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state).
finwait_timeout: pulumi.Output[float] = None¶Specifies the number of seconds that a connection is in the FIN-WAIT-1 or closing state before quitting. The default value is 5 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state). You can also specify immediate or indefinite.
idle_timeout: pulumi.Output[float] = None¶Specifies the number of seconds that a connection is idle before the connection is eligible for deletion. The default value is 300 seconds.
keepalive_interval: pulumi.Output[float] = None¶Specifies the keep alive probe interval, in seconds. The default value is 1800 seconds.
name: pulumi.Output[str] = None¶Name of the profile_tcp
partition: pulumi.Output[str] = None¶Displays the administrative partition within which this profile resides
- static
get(resource_name, id, opts=None, close_wait_timeout=None, defaults_from=None, deferred_accept=None, fast_open=None, finwait2timeout=None, finwait_timeout=None, idle_timeout=None, keepalive_interval=None, name=None, partition=None)¶ Get an existing ProfileTcp resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
close_wait_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection remains in a LAST-ACK state before quitting. A value of 0 represents a term of forever (or until the maxrtx of the FIN state). The default value is 5 seconds.
defaults_from (pulumi.Input[str]) – Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings and values from the parent profile specified.
deferred_accept (pulumi.Input[str]) – Specifies, when enabled, that the system defers allocation of the connection chain context until the client response is received. This option is useful for dealing with 3-way handshake DOS attacks. The default value is disabled.
fast_open (pulumi.Input[str]) – When enabled, permits TCP Fast Open, allowing properly equipped TCP clients to send data with the SYN packet.
finwait2timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is in the FIN-WAIT-2 state before quitting. The default value is 300 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state).
finwait_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is in the FIN-WAIT-1 or closing state before quitting. The default value is 5 seconds. A value of 0 (zero) represents a term of forever (or until the maxrtx of the FIN state). You can also specify immediate or indefinite.
idle_timeout (pulumi.Input[float]) – Specifies the number of seconds that a connection is idle before the connection is eligible for deletion. The default value is 300 seconds.
keepalive_interval (pulumi.Input[float]) – Specifies the keep alive probe interval, in seconds. The default value is 1800 seconds.
name (pulumi.Input[str]) – Name of the profile_tcp
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.Snat(resource_name, opts=None, autolasthop=None, full_path=None, mirror=None, name=None, origins=None, partition=None, snatpool=None, sourceport=None, translation=None, vlans=None, vlansdisabled=None, __props__=None, __name__=None, __opts__=None)¶ ltm.SnatManages a snat configurationFor resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip test_snat = f5bigip.ltm.Snat("test-snat", autolasthop="default", full_path="/Common/test-snat", mirror="disabled", name="TEST_SNAT_NAME", origins=[ { "name": "2.2.2.2", }, { "name": "3.3.3.3", }, ], partition="Common", translation="/Common/136.1.1.1", vlansdisabled=True)
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
autolasthop (pulumi.Input[str]) – -(Optional) Specifies whether to automatically map last hop for pools or not. The default is to use next level’s default.
full_path (pulumi.Input[str]) – Fullpath
mirror (pulumi.Input[str]) – Enables or disables mirroring of SNAT connections.
name (pulumi.Input[str]) – Name of the snat
origins (pulumi.Input[list]) – IP or hostname of the snat
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
snatpool (pulumi.Input[str]) – Specifies the name of a SNAT pool. You can only use this option when automap and translation are not used.
sourceport (pulumi.Input[str]) – Specifies whether the system preserves the source port of the connection. The default is preserve. Use of the preserve-strict setting should be restricted to UDP only under very special circumstances such as nPath or transparent (that is, no translation of any other L3/L4 field), where there is a 1:1 relationship between virtual IP addresses and node addresses, or when clustered multi-processing (CMP) is disabled. The change setting is useful for obfuscating internal network addresses.
translation (pulumi.Input[str]) – Specifies the name of a translated IP address. Note that translated addresses are outside the traffic management system. You can only use this option when automap and snatpool are not used.
vlans (pulumi.Input[list]) – Specifies the name of the VLAN to which you want to assign the SNAT. The default is vlans-enabled.
vlansdisabled (pulumi.Input[bool]) – Disables the SNAT on all VLANs.
The origins object supports the following:
app_service(pulumi.Input[str])name(pulumi.Input[str]) - Name of the snat
autolasthop: pulumi.Output[str] = None¶-(Optional) Specifies whether to automatically map last hop for pools or not. The default is to use next level’s default.
full_path: pulumi.Output[str] = None¶Fullpath
mirror: pulumi.Output[str] = None¶Enables or disables mirroring of SNAT connections.
name: pulumi.Output[str] = None¶Name of the snat
origins: pulumi.Output[list] = None¶IP or hostname of the snat
app_service(str)name(str) - Name of the snat
partition: pulumi.Output[str] = None¶Displays the administrative partition within which this profile resides
snatpool: pulumi.Output[str] = None¶Specifies the name of a SNAT pool. You can only use this option when automap and translation are not used.
sourceport: pulumi.Output[str] = None¶Specifies whether the system preserves the source port of the connection. The default is preserve. Use of the preserve-strict setting should be restricted to UDP only under very special circumstances such as nPath or transparent (that is, no translation of any other L3/L4 field), where there is a 1:1 relationship between virtual IP addresses and node addresses, or when clustered multi-processing (CMP) is disabled. The change setting is useful for obfuscating internal network addresses.
translation: pulumi.Output[str] = None¶Specifies the name of a translated IP address. Note that translated addresses are outside the traffic management system. You can only use this option when automap and snatpool are not used.
vlans: pulumi.Output[list] = None¶Specifies the name of the VLAN to which you want to assign the SNAT. The default is vlans-enabled.
vlansdisabled: pulumi.Output[bool] = None¶Disables the SNAT on all VLANs.
- static
get(resource_name, id, opts=None, autolasthop=None, full_path=None, mirror=None, name=None, origins=None, partition=None, snatpool=None, sourceport=None, translation=None, vlans=None, vlansdisabled=None)¶ Get an existing Snat resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
autolasthop (pulumi.Input[str]) – -(Optional) Specifies whether to automatically map last hop for pools or not. The default is to use next level’s default.
full_path (pulumi.Input[str]) – Fullpath
mirror (pulumi.Input[str]) – Enables or disables mirroring of SNAT connections.
name (pulumi.Input[str]) – Name of the snat
origins (pulumi.Input[list]) – IP or hostname of the snat
partition (pulumi.Input[str]) – Displays the administrative partition within which this profile resides
snatpool (pulumi.Input[str]) – Specifies the name of a SNAT pool. You can only use this option when automap and translation are not used.
sourceport (pulumi.Input[str]) – Specifies whether the system preserves the source port of the connection. The default is preserve. Use of the preserve-strict setting should be restricted to UDP only under very special circumstances such as nPath or transparent (that is, no translation of any other L3/L4 field), where there is a 1:1 relationship between virtual IP addresses and node addresses, or when clustered multi-processing (CMP) is disabled. The change setting is useful for obfuscating internal network addresses.
translation (pulumi.Input[str]) – Specifies the name of a translated IP address. Note that translated addresses are outside the traffic management system. You can only use this option when automap and snatpool are not used.
vlans (pulumi.Input[list]) – Specifies the name of the VLAN to which you want to assign the SNAT. The default is vlans-enabled.
vlansdisabled (pulumi.Input[bool]) – Disables the SNAT on all VLANs.
The origins object supports the following:
app_service(pulumi.Input[str])name(pulumi.Input[str]) - Name of the snat
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.SnatPool(resource_name, opts=None, members=None, name=None, __props__=None, __name__=None, __opts__=None)¶ ltm.SnatPoolCollections of SNAT translation addressesResource should be named with their “full path”. The full path is the combination of the partition + name of the resource, for example /Common/my-snatpool.
import pulumi import pulumi_f5bigip as f5bigip snatpool_sanjose = f5bigip.ltm.SnatPool("snatpoolSanjose", members=[ "191.1.1.1", "194.2.2.2", ], name="/Common/snatpool_sanjose")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
members (pulumi.Input[list]) – Specifies a translation address to add to or delete from a SNAT pool (at least one address is required)
name (pulumi.Input[str]) – Name of the snatpool
members: pulumi.Output[list] = None¶Specifies a translation address to add to or delete from a SNAT pool (at least one address is required)
name: pulumi.Output[str] = None¶Name of the snatpool
- static
get(resource_name, id, opts=None, members=None, name=None)¶ Get an existing SnatPool resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
members (pulumi.Input[list]) – Specifies a translation address to add to or delete from a SNAT pool (at least one address is required)
name (pulumi.Input[str]) – Name of the snatpool
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.VirtualAddress(resource_name, opts=None, advertize_route=None, arp=None, auto_delete=None, conn_limit=None, enabled=None, icmp_echo=None, name=None, traffic_group=None, __props__=None, __name__=None, __opts__=None)¶ ltm.VirtualAddressConfigures Virtual ServerFor resources should be named with their “full path”. The full path is the combination of the partition + name of the resource. For example /Common/my-pool.
import pulumi import pulumi_f5bigip as f5bigip vs_va = f5bigip.ltm.VirtualAddress("vsVa", advertize_route=True, name="/Common/vs_va")
- Parameters
resource_name (str) – The name of the resource.
opts (pulumi.ResourceOptions) – Options for the resource.
advertize_route (pulumi.Input[bool]) – Enabled dynamic routing of the address
arp (pulumi.Input[bool]) – Enable or disable ARP for the virtual address
auto_delete (pulumi.Input[bool]) – Automatically delete the virtual address with the virtual server
conn_limit (pulumi.Input[float]) – Max number of connections for virtual address
enabled (pulumi.Input[bool]) – Enable or disable the virtual address
icmp_echo (pulumi.Input[bool]) – Enable/Disable ICMP response to the virtual address
name (pulumi.Input[str]) – Name of the virtual address
traffic_group (pulumi.Input[str]) – Specify the partition and traffic group
advertize_route: pulumi.Output[bool] = None¶Enabled dynamic routing of the address
arp: pulumi.Output[bool] = None¶Enable or disable ARP for the virtual address
auto_delete: pulumi.Output[bool] = None¶Automatically delete the virtual address with the virtual server
conn_limit: pulumi.Output[float] = None¶Max number of connections for virtual address
enabled: pulumi.Output[bool] = None¶Enable or disable the virtual address
icmp_echo: pulumi.Output[bool] = None¶Enable/Disable ICMP response to the virtual address
name: pulumi.Output[str] = None¶Name of the virtual address
traffic_group: pulumi.Output[str] = None¶Specify the partition and traffic group
- static
get(resource_name, id, opts=None, advertize_route=None, arp=None, auto_delete=None, conn_limit=None, enabled=None, icmp_echo=None, name=None, traffic_group=None)¶ Get an existing VirtualAddress resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
advertize_route (pulumi.Input[bool]) – Enabled dynamic routing of the address
arp (pulumi.Input[bool]) – Enable or disable ARP for the virtual address
auto_delete (pulumi.Input[bool]) – Automatically delete the virtual address with the virtual server
conn_limit (pulumi.Input[float]) – Max number of connections for virtual address
enabled (pulumi.Input[bool]) – Enable or disable the virtual address
icmp_echo (pulumi.Input[bool]) – Enable/Disable ICMP response to the virtual address
name (pulumi.Input[str]) – Name of the virtual address
traffic_group (pulumi.Input[str]) – Specify the partition and traffic group
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
- class
pulumi_f5bigip.ltm.VirtualServer(resource_name, opts=None, client_profiles=None, default_persistence_profile=None, description=None, destination=None, fallback_persistence_profile=None, ip_protocol=None, irules=None, mask=None, name=None, persistence_profiles=None, policies=None, pool=None, port=None, profiles=None, server_profiles=None, snatpool=None, source=None, source_address_translation=None, state=None, translate_address=None, translate_port=None, vlans=None, vlans_enabled=None, __props__=None, __name__=None, __opts__=None)¶ Create a VirtualServer resource with the given unique name, props, and options. :param str resource_name: The name of the resource. :param pulumi.ResourceOptions opts: Options for the resource. :param pulumi.Input[list] client_profiles: List of client context profiles associated on the virtual server. Not mutually exclusive with profiles and server_profiles :param pulumi.Input[str] description: Description of Virtual server :param pulumi.Input[str] destination: Destination IP :param pulumi.Input[str] fallback_persistence_profile: Specifies a fallback persistence profile for the Virtual Server to use when the default persistence profile is not available. :param pulumi.Input[str] ip_protocol: Specify the IP protocol to use with the the virtual server (all, tcp, or udp are valid) :param pulumi.Input[list] irules: The iRules list you want run on this virtual server. iRules help automate the intercepting, processing, and routing of application traffic. :param pulumi.Input[str] mask: Mask can either be in CIDR notation or decimal, i.e.: 24 or 255.255.255.0. A CIDR mask of 0 is the same as 0.0.0.0 :param pulumi.Input[str] name: Name of the virtual server :param pulumi.Input[list] persistence_profiles: List of persistence profiles associated with the Virtual Server. :param pulumi.Input[str] pool: Default pool name :param pulumi.Input[float] port: Listen port for the virtual server :param pulumi.Input[list] profiles: List of profiles associated both client and server contexts on the virtual server. This includes protocol, ssl, http, etc. :param pulumi.Input[list] server_profiles: List of server context profiles associated on the virtual server. Not mutually exclusive with profiles and client_profiles :param pulumi.Input[str] snatpool: Specifies the name of an existing SNAT pool that you want the virtual server to use to implement selective and intelligent SNATs. DEPRECATED - see Virtual Server Property Groups source-address-translation :param pulumi.Input[str] source: Specifies an IP address or network from which the virtual server will accept traffic. :param pulumi.Input[str] source_address_translation: Can be either omitted for none or the values automap or snat :param pulumi.Input[str] state: Specifies whether the virtual server and its resources are available for load balancing. The default is Enabled :param pulumi.Input[str] translate_address: Enables or disables address translation for the virtual server. Turn address translation off for a virtual server if you want to use the virtual server to load balance connections to any address. This option is useful when the system is load balancing devices that have the same IP address. :param pulumi.Input[str] translate_port: Enables or disables port translation. Turn port translation off for a virtual server if you want to use the virtual server to load balance connections to any service :param pulumi.Input[list] vlans: The virtual server is enabled/disabled on this set of VLANs. See vlans-disabled and vlans-enabled. :param pulumi.Input[bool] vlans_enabled: Enables the virtual server on the VLANs specified by the VLANs option.
client_profiles: pulumi.Output[list] = None¶List of client context profiles associated on the virtual server. Not mutually exclusive with profiles and server_profiles
description: pulumi.Output[str] = None¶Description of Virtual server
destination: pulumi.Output[str] = None¶Destination IP
fallback_persistence_profile: pulumi.Output[str] = None¶Specifies a fallback persistence profile for the Virtual Server to use when the default persistence profile is not available.
ip_protocol: pulumi.Output[str] = None¶Specify the IP protocol to use with the the virtual server (all, tcp, or udp are valid)
irules: pulumi.Output[list] = None¶The iRules list you want run on this virtual server. iRules help automate the intercepting, processing, and routing of application traffic.
mask: pulumi.Output[str] = None¶Mask can either be in CIDR notation or decimal, i.e.: 24 or 255.255.255.0. A CIDR mask of 0 is the same as 0.0.0.0
name: pulumi.Output[str] = None¶Name of the virtual server
persistence_profiles: pulumi.Output[list] = None¶List of persistence profiles associated with the Virtual Server.
pool: pulumi.Output[str] = None¶Default pool name
port: pulumi.Output[float] = None¶Listen port for the virtual server
profiles: pulumi.Output[list] = None¶List of profiles associated both client and server contexts on the virtual server. This includes protocol, ssl, http, etc.
server_profiles: pulumi.Output[list] = None¶List of server context profiles associated on the virtual server. Not mutually exclusive with profiles and client_profiles
snatpool: pulumi.Output[str] = None¶Specifies the name of an existing SNAT pool that you want the virtual server to use to implement selective and intelligent SNATs. DEPRECATED - see Virtual Server Property Groups source-address-translation
source: pulumi.Output[str] = None¶Specifies an IP address or network from which the virtual server will accept traffic.
source_address_translation: pulumi.Output[str] = None¶Can be either omitted for none or the values automap or snat
state: pulumi.Output[str] = None¶Specifies whether the virtual server and its resources are available for load balancing. The default is Enabled
translate_address: pulumi.Output[str] = None¶Enables or disables address translation for the virtual server. Turn address translation off for a virtual server if you want to use the virtual server to load balance connections to any address. This option is useful when the system is load balancing devices that have the same IP address.
translate_port: pulumi.Output[str] = None¶Enables or disables port translation. Turn port translation off for a virtual server if you want to use the virtual server to load balance connections to any service
vlans: pulumi.Output[list] = None¶The virtual server is enabled/disabled on this set of VLANs. See vlans-disabled and vlans-enabled.
vlans_enabled: pulumi.Output[bool] = None¶Enables the virtual server on the VLANs specified by the VLANs option.
- static
get(resource_name, id, opts=None, client_profiles=None, default_persistence_profile=None, description=None, destination=None, fallback_persistence_profile=None, ip_protocol=None, irules=None, mask=None, name=None, persistence_profiles=None, policies=None, pool=None, port=None, profiles=None, server_profiles=None, snatpool=None, source=None, source_address_translation=None, state=None, translate_address=None, translate_port=None, vlans=None, vlans_enabled=None)¶ Get an existing VirtualServer resource’s state with the given name, id, and optional extra properties used to qualify the lookup.
- Parameters
resource_name (str) – The unique name of the resulting resource.
id (str) – The unique provider ID of the resource to lookup.
opts (pulumi.ResourceOptions) – Options for the resource.
client_profiles (pulumi.Input[list]) – List of client context profiles associated on the virtual server. Not mutually exclusive with profiles and server_profiles
description (pulumi.Input[str]) – Description of Virtual server
destination (pulumi.Input[str]) – Destination IP
fallback_persistence_profile (pulumi.Input[str]) – Specifies a fallback persistence profile for the Virtual Server to use when the default persistence profile is not available.
ip_protocol (pulumi.Input[str]) – Specify the IP protocol to use with the the virtual server (all, tcp, or udp are valid)
irules (pulumi.Input[list]) – The iRules list you want run on this virtual server. iRules help automate the intercepting, processing, and routing of application traffic.
mask (pulumi.Input[str]) – Mask can either be in CIDR notation or decimal, i.e.: 24 or 255.255.255.0. A CIDR mask of 0 is the same as 0.0.0.0
name (pulumi.Input[str]) – Name of the virtual server
persistence_profiles (pulumi.Input[list]) – List of persistence profiles associated with the Virtual Server.
pool (pulumi.Input[str]) – Default pool name
port (pulumi.Input[float]) – Listen port for the virtual server
profiles (pulumi.Input[list]) – List of profiles associated both client and server contexts on the virtual server. This includes protocol, ssl, http, etc.
server_profiles (pulumi.Input[list]) – List of server context profiles associated on the virtual server. Not mutually exclusive with profiles and client_profiles
snatpool (pulumi.Input[str]) – Specifies the name of an existing SNAT pool that you want the virtual server to use to implement selective and intelligent SNATs. DEPRECATED - see Virtual Server Property Groups source-address-translation
source (pulumi.Input[str]) – Specifies an IP address or network from which the virtual server will accept traffic.
source_address_translation (pulumi.Input[str]) – Can be either omitted for none or the values automap or snat
state (pulumi.Input[str]) – Specifies whether the virtual server and its resources are available for load balancing. The default is Enabled
translate_address (pulumi.Input[str]) – Enables or disables address translation for the virtual server. Turn address translation off for a virtual server if you want to use the virtual server to load balance connections to any address. This option is useful when the system is load balancing devices that have the same IP address.
translate_port (pulumi.Input[str]) – Enables or disables port translation. Turn port translation off for a virtual server if you want to use the virtual server to load balance connections to any service
vlans (pulumi.Input[list]) – The virtual server is enabled/disabled on this set of VLANs. See vlans-disabled and vlans-enabled.
vlans_enabled (pulumi.Input[bool]) – Enables the virtual server on the VLANs specified by the VLANs option.
translate_output_property(prop)¶Provides subclasses of Resource an opportunity to translate names of output properties into a format of their choosing before writing those properties to the resource object.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str
translate_input_property(prop)¶Provides subclasses of Resource an opportunity to translate names of input properties into a format of their choosing before sending those properties to the Pulumi engine.
- Parameters
prop (str) – A property name.
- Returns
A potentially transformed property name.
- Return type
str