Skip to content

ACLRuleProps

Properties for defining a ACLRule.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-sag-aclrule

Initializer 

import { ACLRuleProps } from '@alicloud/ros-cdk-sag'
const aCLRuleProps: ACLRuleProps = { ... }

Properties

Name Type Description
aclId string | @alicloud/ros-cdk-core.IResolvable Property aclId: Access control ID.
destCidr string | @alicloud/ros-cdk-core.IResolvable Property destCidr: Destination address, CIDR format and IP address range in IPv4 format.
destPortRange string | @alicloud/ros-cdk-core.IResolvable Property destPortRange: The destination port range.
direction string | @alicloud/ros-cdk-core.IResolvable Property direction: The direction of traffic to which the ACL rule applies.
ipProtocol string | @alicloud/ros-cdk-core.IResolvable Property ipProtocol: Protocol, not case sensitive.
policy string | @alicloud/ros-cdk-core.IResolvable Property policy: Access: accept|drop.
sourceCidr string | @alicloud/ros-cdk-core.IResolvable Property sourceCidr: Source address, CIDR format and IP address range in IPv4 format.
sourcePortRange string | @alicloud/ros-cdk-core.IResolvable Property sourcePortRange: The source port range.
description string | @alicloud/ros-cdk-core.IResolvable Property description: Rule description information, ranging from 1 to 512 characters.
dpiGroupIds @alicloud/ros-cdk-core.IResolvable | string | @alicloud/ros-cdk-core.IResolvable[] Property dpiGroupIds: The ID of the application group.
dpiSignatureIds @alicloud/ros-cdk-core.IResolvable | string | @alicloud/ros-cdk-core.IResolvable[] Property dpiSignatureIds: The ID of the application.
name string | @alicloud/ros-cdk-core.IResolvable Property name: The name of the ACL rule.
priority number | @alicloud/ros-cdk-core.IResolvable Property priority: The priority of the ACL rule.
type string | @alicloud/ros-cdk-core.IResolvable Property type: The type of the ACL rule: Valid values: LAN: The ACL rule controls traffic of private IP addresses.

aclIdRequired 

public readonly aclId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property aclId: Access control ID.

destCidrRequired 

public readonly destCidr: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destCidr: Destination address, CIDR format and IP address range in IPv4 format.

destPortRangeRequired 

public readonly destPortRange: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destPortRange: The destination port range.

Valid values: -1 and 1 to 65535. Use the format 1\/200 or 80\/80. A value of -1\/-1 means all ports.

directionRequired 

public readonly direction: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property direction: The direction of traffic to which the ACL rule applies.

Valid values: - in: inbound. Traffic from an external network to the local branch where the SAG instance is deployed. - out: outbound. Traffic from the local branch where the SAG instance is deployed to an external network.

ipProtocolRequired 

public readonly ipProtocol: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property ipProtocol: Protocol, not case sensitive.

policyRequired 

public readonly policy: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property policy: Access: accept|drop.

sourceCidrRequired 

public readonly sourceCidr: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property sourceCidr: Source address, CIDR format and IP address range in IPv4 format.

sourcePortRangeRequired 

public readonly sourcePortRange: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property sourcePortRange: The source port range.

Valid values: -1 and 1 to 65535. Use the format 1\/200 or 80\/80. A value of -1\/-1 means all ports.

descriptionOptional 

public readonly description: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property description: Rule description information, ranging from 1 to 512 characters.

dpiGroupIdsOptional 

public readonly dpiGroupIds: IResolvable | string | IResolvable[];
  • Type: @alicloud/ros-cdk-core.IResolvable | string | @alicloud/ros-cdk-core.IResolvable[]

Property dpiGroupIds: The ID of the application group.

You can enter at most 100 application group IDs at a time. You can call the ListDpiGroups operation to query application group IDs and information about the applications.

dpiSignatureIdsOptional 

public readonly dpiSignatureIds: IResolvable | string | IResolvable[];
  • Type: @alicloud/ros-cdk-core.IResolvable | string | @alicloud/ros-cdk-core.IResolvable[]

Property dpiSignatureIds: The ID of the application.

You can enter at most 100 application IDs at a time. You can call the ListDpiSignatures operation to query application IDs and information about the applications.

nameOptional 

public readonly name: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property name: The name of the ACL rule.

The name must be 2 to 100 characters in length, start with a letter, and can contain digits, periods (.), underscores (_), and hyphens (-).

priorityOptional 

public readonly priority: number | IResolvable;
  • Type: number | @alicloud/ros-cdk-core.IResolvable

Property priority: The priority of the ACL rule.

A smaller value indicates a higher priority. If multiple rules have the same priority, the rule that is first delivered to the Smart Access Gateway device takes precedence. Valid values: 1 to 100. Default value: 1.

typeOptional 

public readonly type: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property type: The type of the ACL rule: Valid values: LAN: The ACL rule controls traffic of private IP addresses.

This is the default value. WAN: The ACL rule controls traffic of public IP addresses.