NatFirewallControlPolicyProps

Properties for defining a NatFirewallControlPolicy.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-natfirewallcontrolpolicy

Initializer

import "github.com/alibabacloud-go/ros-cdk/alicloudroscdkcloudfw"
&alicloudroscdkcloudfw.NatFirewallControlPolicyProps {
    AclAction: interface{},
    ApplicationNameList: interface{},
    Description: interface{},
    Destination: interface{},
    DestinationType: interface{},
    Direction: interface{},
    NatGatewayId: interface{},
    NewOrder: interface{},
    Proto: interface{},
    Source: interface{},
    SourceType: interface{},
    DestPort: interface{},
    DestPortGroup: interface{},
    DestPortType: interface{},
    DomainResolveType: interface{},
    EndTime: interface{},
    IpVersion: interface{},
    Release: interface{},
    RepeatDays: interface{},
    RepeatEndTime: interface{},
    RepeatStartTime: interface{},
    RepeatType: interface{},
    StartTime: interface{},
}

Properties

Name	Type	Description
AclAction	interface{}	Property aclAction: The action that Cloud Firewall performs on the traffic.Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.
ApplicationNameList	interface{}	Property applicationNameList: The application types supported by the access control policy.
Description	interface{}	Property description: The description of the access control policy.
Destination	interface{}	Property destination: The destination address in the access control policy.
DestinationType	interface{}	Property destinationType: The type of the destination address in the access control policy.
Direction	interface{}	Property direction: The direction of the traffic to which the access control policy applies.
NatGatewayId	interface{}	Property natGatewayId: The ID of the NAT gateway.
NewOrder	interface{}	Property newOrder: The priority of the access control policy.
Proto	interface{}	Property proto: The protocol type in the access control policy.Valid values: ANY: all types of protocols TCP UDP ICMP.
Source	interface{}	Property source: The source address in the access control policy.Valid values: If SourceType is set to net, the value of Source is a CIDR block.Example: 10.2.4.0\/24 If SourceType is set to group, the value of this parameter must be an address book name.Example: db_group.
SourceType	interface{}	Property sourceType: The type of the source address in the access control policy.Valid values: net: source CIDR block group: source address book.
DestPort	interface{}	Property destPort: The destination port in the access control policy.
DestPortGroup	interface{}	Property destPortGroup: The name of the destination port address book in the access control policy.
DestPortType	interface{}	Property destPortType: The type of the destination port in the access control policy.
DomainResolveType	interface{}	Property domainResolveType: The domain name resolution method of the access control policy.
EndTime	interface{}	Property endTime: The time when the access control policy stops taking effect.
IpVersion	interface{}	Property ipVersion: The IP version supported by the access control policy.
Release	interface{}	Property release: Specifies whether to enable the access control policy.
RepeatDays	interface{}	Property repeatDays: The days of a week or of a month on which the access control policy takes effect.
RepeatEndTime	interface{}	Property repeatEndTime: The point in time when the recurrence ends.
RepeatStartTime	interface{}	Property repeatStartTime: The point in time when the recurrence starts.
RepeatType	interface{}	Property repeatType: The recurrence type for the access control policy to take effect.
StartTime	interface{}	Property startTime: The time when the access control policy starts to take effect.

---

AclAction^Required

AclAction interface{}

• Type: interface{}

Property aclAction: The action that Cloud Firewall performs on the traffic.Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.

---

ApplicationNameList^Required

ApplicationNameList interface{}

• Type: interface{}

Property applicationNameList: The application types supported by the access control policy.

---

Description^Required

Description interface{}

• Type: interface{}

Property description: The description of the access control policy.

---

Destination^Required

Destination interface{}

• Type: interface{}

Property destination: The destination address in the access control policy.

Valid values: If DestinationType is set to net, the value of this parameter is a CIDR block. Example: 1.2.XX.XX/24 If DestinationType is set to group, the value of this parameter is an address book. Example: db_group If DestinationType is set to domain, the value of this parameter is a domain name. Example: *.aliyuncs.com DestinationType is set to location, the value of this parameter is a location. Example: ["BJ11", "ZB"]

---

DestinationType^Required

DestinationType interface{}

• Type: interface{}

Property destinationType: The type of the destination address in the access control policy.

Valid values: net: CIDR block group: address book domain: domain name

---

Direction^Required

Direction interface{}

• Type: interface{}

Property direction: The direction of the traffic to which the access control policy applies.

Valid values: out: outbound traffic

---

NatGatewayId^Required

NatGatewayId interface{}

• Type: interface{}

Property natGatewayId: The ID of the NAT gateway.

---

NewOrder^Required

NewOrder interface{}

• Type: interface{}

Property newOrder: The priority of the access control policy.

The priority value starts from 1. A small priority value indicates a high priority.

---

Proto^Required

Proto interface{}

• Type: interface{}

Property proto: The protocol type in the access control policy.Valid values: ANY: all types of protocols TCP UDP ICMP.

---

Source^Required

Source interface{}

• Type: interface{}

Property source: The source address in the access control policy.Valid values: If SourceType is set to net, the value of Source is a CIDR block.Example: 10.2.4.0\/24 If SourceType is set to group, the value of this parameter must be an address book name.Example: db_group.

---

SourceType^Required

SourceType interface{}

• Type: interface{}

Property sourceType: The type of the source address in the access control policy.Valid values: net: source CIDR block group: source address book.

---

DestPort^Optional

DestPort interface{}

• Type: interface{}

Property destPort: The destination port in the access control policy.

Valid values: If Proto is set to ICMP, DestPort is automatically left empty. If Proto is set to TCP, UDP, or ANY and DestPortType is set to group, DestPort is empty. If Proto is set to TCP, UDP, or ANY and DestPortType is set to port, the value of DestPort is the destination port number.

---

DestPortGroup^Optional

DestPortGroup interface{}

• Type: interface{}

Property destPortGroup: The name of the destination port address book in the access control policy.

---

DestPortType^Optional

DestPortType interface{}

• Type: interface{}

Property destPortType: The type of the destination port in the access control policy.

Valid values: net: source CIDR block group: source address book

---

DomainResolveType^Optional

DomainResolveType interface{}

• Type: interface{}

Property domainResolveType: The domain name resolution method of the access control policy.

Valid values: 0: fully qualified domain name (FQDN)-based resolution 1: Domain Name System (DNS)-based dynamic resolution 2: FQDN and DNS-based dynamic resolution

---

EndTime^Optional

EndTime interface{}

• Type: interface{}

Property endTime: The time when the access control policy stops taking effect.

The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the value of StartTime.

---

IpVersion^Optional

IpVersion interface{}

• Type: interface{}

Property ipVersion: The IP version supported by the access control policy.

Valid values: 4: IPv4 (default)

---

Release^Optional

Release interface{}

• Type: interface{}

Property release: Specifies whether to enable the access control policy.

By default, an access control policy is enabled after it is created. Valid values: true false

---

RepeatDays^Optional

RepeatDays interface{}

• Type: interface{}

Property repeatDays: The days of a week or of a month on which the access control policy takes effect.

If RepeatType is set to Permanent, None, or Daily, RepeatDays is left empty. Example: []. If RepeatType is set to Weekly, RepeatDays must be specified. Example: [0, 6]. If RepeatType is set to Monthly, RepeatDays must be specified. Example: [1, 31].

---

RepeatEndTime^Optional

RepeatEndTime interface{}

• Type: interface{}

Property repeatEndTime: The point in time when the recurrence ends.

Example: 23:30. The value must be on the hour or on the half hour, and at least 30 minutes later than the value of RepeatStartTime.

---

RepeatStartTime^Optional

RepeatStartTime interface{}

• Type: interface{}

Property repeatStartTime: The point in time when the recurrence starts.

Example: 08:00. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the value of RepeatEndTime.

---

RepeatType^Optional

RepeatType interface{}

• Type: interface{}

Property repeatType: The recurrence type for the access control policy to take effect.

Valid values: Permanent (default): The policy always takes effect. None: The policy takes effect for only once. Daily: The policy takes effect on a daily basis. Weekly: The policy takes effect on a weekly basis. Monthly: The policy takes effect on a monthly basis.

---

StartTime^Optional

StartTime interface{}

• Type: interface{}

Property startTime: The time when the access control policy starts to take effect.

The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the value of EndTime.

---