Skip to content

ControlPolicyProps

Properties for defining a ControlPolicy.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-controlpolicy

Initializer

using AlibabaCloud.SDK.ROS.CDK.Cloudfw;
new ControlPolicyProps {
    object AclAction,
    object ApplicationName,
    object Description,
    object Destination,
    object DestinationType,
    object Direction,
    object NewOrder,
    object Proto,
    object Source,
    object SourceType,
    object DestPort = null,
    object DestPortGroup = null,
    object DestPortType = null,
    object RegionId = null
};

Properties

Name Type Description
AclAction object Property aclAction: Traffic access control policy set by the cloud of a firewall.
ApplicationName object Property applicationName: Application types supported by the security policy.
Description object Property description: Security access control policy description information.
Destination object Property destination: Security Access Control destination address policy.
DestinationType object Property destinationType: Security Access Control destination address type of policy.
Direction object Property direction: Security access control traffic direction policies.
NewOrder object Property newOrder: Security access control priority policy in force.
Proto object Property proto: The type of security protocol for traffic access in the security access control policy.
Source object Property source: Security access control source address policy.
SourceType object Property sourceType: Security access control source address type of policy.
DestPort object Property destPort: Security access control policy access traffic destination port.
DestPortGroup object Property destPortGroup: Security access control policy access traffic destination port address book name.
DestPortType object Property destPortType: Security access control policy access destination port traffic type.
RegionId object Property regionId: Region ID.

AclActionRequired

public object AclAction { get; set; }
  • Type: object

Property aclAction: Traffic access control policy set by the cloud of a firewall.

accept: Release drop: rejected log: Observation


ApplicationNameRequired

public object ApplicationName { get; set; }
  • Type: object

Property applicationName: Application types supported by the security policy.

The following types of applications are supported: ANY, HTTP, HTTPS, MySQL, SMTP, SMTPS, RDP, VNC, SSH, Redis, MQTT, MongoDB, Memcache, SSL NOTE ANY indicates that the policy is applied to all types of applications.


DescriptionRequired

public object Description { get; set; }
  • Type: object

Property description: Security access control policy description information.


DestinationRequired

public object Destination { get; set; }
  • Type: object

Property destination: Security Access Control destination address policy.

When DestinationType is net, Destination purpose CIDR. For example: 1.2.3.4/24 When DestinationType as a group, Destination for the purpose of the address book name. For example: db_group When DestinationType for the domain, Destination for the purpose of a domain name. For example:. * Aliyuncs.com When DestinationType as location, Destination area for the purpose (see below position encoding specific regions). For example: [ "BJ11", "ZB"]


DestinationTypeRequired

public object DestinationType { get; set; }
  • Type: object

Property destinationType: Security Access Control destination address type of policy.

net: Destination network segment (CIDR) group: destination address book domain: The purpose domain location: The purpose area


DirectionRequired

public object Direction { get; set; }
  • Type: object

Property direction: Security access control traffic direction policies.

in: internal and external traffic access control out: within the flow of external access control


NewOrderRequired

public object NewOrder { get; set; }
  • Type: object

Property newOrder: Security access control priority policy in force.

Priority number increments sequentially from 1, lower the priority number, the higher the priority. Description -1 indicates the lowest priority.


ProtoRequired

public object Proto { get; set; }
  • Type: object

Property proto: The type of security protocol for traffic access in the security access control policy.

Can be set to ANY when you are not sure of the specific protocol type. Allowed values: ANY, TCP, UDP, ICMP


SourceRequired

public object Source { get; set; }
  • Type: object

Property source: Security access control source address policy.

When SourceType for the net, Source is the source CIDR. For example: 1.2.3.0/24 When SourceType as a group, Source name for the source address book. For example: db_group When SourceType as location, Source source region (specific region position encoder see below). For example, [ "BJ11", "ZB"]


SourceTypeRequired

public object SourceType { get; set; }
  • Type: object

Property sourceType: Security access control source address type of policy.

net: Source segment (CIDR) group: source address book location: the source area


DestPortOptional

public object DestPort { get; set; }
  • Type: object

Property destPort: Security access control policy access traffic destination port.

Note When DestPortType to port, set the item.


DestPortGroupOptional

public object DestPortGroup { get; set; }
  • Type: object

Property destPortGroup: Security access control policy access traffic destination port address book name.

Description DestPortType is group, set the item.


DestPortTypeOptional

public object DestPortType { get; set; }
  • Type: object

Property destPortType: Security access control policy access destination port traffic type.

port: Port group: port address book


RegionIdOptional

public object RegionId { get; set; }
  • Type: object

Property regionId: Region ID.

Default to cn-hangzhou.