Skip to content

VpcFirewallCenProps

Properties for defining a VpcFirewallCen.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-vpcfirewallcen

Initializer 

import { VpcFirewallCenProps } from '@alicloud/ros-cdk-cloudfw'
const vpcFirewallCenProps: VpcFirewallCenProps = { ... }

Properties

Name Type Description
cenId string | @alicloud/ros-cdk-core.IResolvable Property cenId: The ID of the CEN instance.
firewallSwitch string | @alicloud/ros-cdk-core.IResolvable Property firewallSwitch: Specifies whether to enable the VPC firewall.
firewallVpcZoneId string | @alicloud/ros-cdk-core.IResolvable Property firewallVpcZoneId: The ID of the zone to which the vSwitch belongs.
networkInstanceId string | @alicloud/ros-cdk-core.IResolvable Property networkInstanceId: The ID of the VPC for which you want to create the VPC firewall.
vpcFirewallName string | @alicloud/ros-cdk-core.IResolvable Property vpcFirewallName: The instance name of the VPC firewall.
vpcRegion string | @alicloud/ros-cdk-core.IResolvable Property vpcRegion: The ID of the region to which the VPC belongs.
firewallVpcCidrBlock string | @alicloud/ros-cdk-core.IResolvable Property firewallVpcCidrBlock: The CIDR block of the VPC that is automatically created for the VPC firewall.
firewallVSwitchCidrBlock string | @alicloud/ros-cdk-core.IResolvable Property firewallVSwitchCidrBlock: The CIDR block of the vSwitch that is automatically created for the VPC firewall.You must specify a CIDR block for the Cloud_Firewall_VSWITCH VPC that is automatically created for the VPC firewall for traffic redirection. The CIDR block does not conflict with your network plan. The subnet mask of the CIDR block must be less than or equal to 29 bits in length. The CIDR block of the vSwitch must be within the network segment of the VPC.If you do not specify a value, the CIDR block 10.219.219.216\/29 is automatically allocated.
memberUid string | @alicloud/ros-cdk-core.IResolvable Property memberUid: The UID of the member that is managed by your Alibaba Cloud account.
vSwitchId string | @alicloud/ros-cdk-core.IResolvable Property vSwitchId: The ID of the vSwitch that is used to associate with the elastic network interface (ENI) required by the VPC firewall.

cenIdRequired 

public readonly cenId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property cenId: The ID of the CEN instance.

firewallSwitchRequired 

public readonly firewallSwitch: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property firewallSwitch: Specifies whether to enable the VPC firewall.

Valid values: open: After you create the VPC firewall, the VPC firewall is automatically enabled. This is the default value. close: After you create the VPC firewall, the VPC firewall is disabled. You can call the ModifyVpcFirewallCenSwitchStatus operation to manually enable the VPC firewall.

firewallVpcZoneIdRequired 

public readonly firewallVpcZoneId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property firewallVpcZoneId: The ID of the zone to which the vSwitch belongs.

If your service is latency-sensitive, you can specify the same zone for the vSwitch of the firewall and the vSwitch of your business VPC to minimize latency.If you do not specify a value, a zone is automatically assigned for the vSwitch.

networkInstanceIdRequired 

public readonly networkInstanceId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property networkInstanceId: The ID of the VPC for which you want to create the VPC firewall.

vpcFirewallNameRequired 

public readonly vpcFirewallName: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property vpcFirewallName: The instance name of the VPC firewall.

vpcRegionRequired 

public readonly vpcRegion: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property vpcRegion: The ID of the region to which the VPC belongs.

firewallVpcCidrBlockOptional 

public readonly firewallVpcCidrBlock: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property firewallVpcCidrBlock: The CIDR block of the VPC that is automatically created for the VPC firewall.

You must specify a CIDR block for the Cloud_Firewall_VPC VPC that is automatically created for the VPC firewall for traffic redirection. The subnet mask of the CIDR block must be less than or equal to 28 bits in length.If you do not specify a value, the CIDR block 10.0.0.0\/8 is automatically allocated.

firewallVSwitchCidrBlockOptional 

public readonly firewallVSwitchCidrBlock: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property firewallVSwitchCidrBlock: The CIDR block of the vSwitch that is automatically created for the VPC firewall.You must specify a CIDR block for the Cloud_Firewall_VSWITCH VPC that is automatically created for the VPC firewall for traffic redirection. The CIDR block does not conflict with your network plan. The subnet mask of the CIDR block must be less than or equal to 29 bits in length. The CIDR block of the vSwitch must be within the network segment of the VPC.If you do not specify a value, the CIDR block 10.219.219.216\/29 is automatically allocated.

memberUidOptional 

public readonly memberUid: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property memberUid: The UID of the member that is managed by your Alibaba Cloud account.

vSwitchIdOptional 

public readonly vSwitchId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property vSwitchId: The ID of the vSwitch that is used to associate with the elastic network interface (ENI) required by the VPC firewall.