VpcFirewallControlPolicyProps

Properties for defining a VpcFirewallControlPolicy.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-vpcfirewallcontrolpolicy

Initializer

using AlibabaCloud.SDK.ROS.CDK.Cloudfw;
new VpcFirewallControlPolicyProps {
    object AclAction,
    object ApplicationName,
    object Description,
    object Destination,
    object DestinationType,
    object NewOrder,
    object Proto,
    object Source,
    object SourceType,
    object VpcFirewallId,
    object DestPort = null,
    object DestPortGroup = null,
    object DestPortType = null,
    object Lang = null,
    object RegionId = null
};

Properties

Name	Type	Description
AclAction	object	Property aclAction: The action that Cloud Firewall performs on the traffic.
ApplicationName	object	Property applicationName: The application type that the access control policy supports.
Description	object	Property description: The description of the access control policy.
Destination	object	Property destination: The destination address in the access control policy.
DestinationType	object	Property destinationType: The type of the destination address in the access control policy.
NewOrder	object	Property newOrder: The priority of the access control policy.
Proto	object	Property proto: The type of the security protocol in the access control policy.
Source	object	Property source: The source address in the access control policy.
SourceType	object	Property sourceType: The type of the source address in the access control policy.
VpcFirewallId	object	Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy.
DestPort	object	Property destPort: The destination port in the access control policy.
DestPortGroup	object	Property destPortGroup: The address book of destination ports in the access control policy.
DestPortType	object	Property destPortType: The type of the destination port in the access control policy.
Lang	object	Property lang: The natural language of the request and response.
RegionId	object	Property regionId: Region ID.

---

AclAction^Required

public object AclAction { get; set; }

• Type: object

Property aclAction: The action that Cloud Firewall performs on the traffic.

Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.

---

ApplicationName^Required

public object ApplicationName { get; set; }

• Type: object

Property applicationName: The application type that the access control policy supports.

Valid values: ANY (indicates that all application types are supported) FTP HTTP HTTPS MySQL SMTP SMTPS RDP VNC SSH Redis MQTT MongoDB Memcache SSL

---

Description^Required

public object Description { get; set; }

• Type: object

Property description: The description of the access control policy.

---

Destination^Required

public object Destination { get; set; }

• Type: object

Property destination: The destination address in the access control policy.

Set this parameter in the following way: If the DestinationType parameter is set to net, set the value to a Classless Inter-Domain Routing (CIDR) block. Example: 10.2.3.0/24. If the DestinationType parameter is set to group, set the value to the name of an address book. Example: db_group. If the DestinationType parameter is set to domain, set the value to a domain name. Example: *.aliyuncs.com.

---

DestinationType^Required

public object DestinationType { get; set; }

• Type: object

Property destinationType: The type of the destination address in the access control policy.

Valid values: net: CIDR block group: address book domain: domain name

---

NewOrder^Required

public object NewOrder { get; set; }

• Type: object

Property newOrder: The priority of the access control policy.

The priority value starts from 1. A smaller priority value indicates a higher priority. Note The value of -1 indicates the lowest priority.

---

Proto^Required

public object Proto { get; set; }

• Type: object

Property proto: The type of the security protocol in the access control policy.

---

Source^Required

public object Source { get; set; }

• Type: object

Property source: The source address in the access control policy.

If the SourceType parameter is set to net, set the value to a CIDR block. Example: 10.2.3.0/24. If the SourceType parameter is set to group, set the value to the name of an address book. Example: db_group.

---

SourceType^Required

public object SourceType { get; set; }

• Type: object

Property sourceType: The type of the source address in the access control policy.

Valid values: net: CIDR block group: address book

---

VpcFirewallId^Required

public object VpcFirewallId { get; set; }

• Type: object

Property vpcFirewallId: The ID of the policy group to which you want to add the access control policy.

If the VPC firewall is used to protect CEN, set the value to the ID of the CEN instance that the VPC firewall protects. Example: cen-ervw5jbw1234*. If the VPC firewall is used to protect Express Connect, set the value to the ID of the VPC firewall instance. Example: vfw-a42bbb748c91234***. Note You can call the DescribeVpcFirewallAclGroupList operation to query the ID of the policy group.

---

DestPort^Optional

public object DestPort { get; set; }

• Type: object

Property destPort: The destination port in the access control policy.

Note This parameter must be specified if the DestPortType parameter is set to port.

---

DestPortGroup^Optional

public object DestPortGroup { get; set; }

• Type: object

Property destPortGroup: The address book of destination ports in the access control policy.

Note This parameter must be specified if the DestPortType parameter is set to group.

---

DestPortType^Optional

public object DestPortType { get; set; }

• Type: object

Property destPortType: The type of the destination port in the access control policy.

Valid values: port: port group: address book

---

Lang^Optional

public object Lang { get; set; }

• Type: object

Property lang: The natural language of the request and response.

Valid values: zh: Chinese en: English

---

RegionId^Optional

public object RegionId { get; set; }

• Type: object

Property regionId: Region ID.

Default to cn-hangzhou.

---