Skip to content

NatFirewallControlPolicyProps

Properties for defining a NatFirewallControlPolicy.

See https://www.alibabacloud.com/help/ros/developer-reference/aliyun-cloudfw-natfirewallcontrolpolicy

Initializer 

import { NatFirewallControlPolicyProps } from '@alicloud/ros-cdk-cloudfw'
const natFirewallControlPolicyProps: NatFirewallControlPolicyProps = { ... }

Properties

Name Type Description
aclAction string | @alicloud/ros-cdk-core.IResolvable Property aclAction: The action that Cloud Firewall performs on the traffic.Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.
applicationNameList @alicloud/ros-cdk-core.IResolvable | string | @alicloud/ros-cdk-core.IResolvable[] Property applicationNameList: The application types supported by the access control policy.
description string | @alicloud/ros-cdk-core.IResolvable Property description: The description of the access control policy.
destination string | @alicloud/ros-cdk-core.IResolvable Property destination: The destination address in the access control policy.
destinationType string | @alicloud/ros-cdk-core.IResolvable Property destinationType: The type of the destination address in the access control policy.
direction string | @alicloud/ros-cdk-core.IResolvable Property direction: The direction of the traffic to which the access control policy applies.
natGatewayId string | @alicloud/ros-cdk-core.IResolvable Property natGatewayId: The ID of the NAT gateway.
newOrder number | @alicloud/ros-cdk-core.IResolvable Property newOrder: The priority of the access control policy.
proto string | @alicloud/ros-cdk-core.IResolvable Property proto: The protocol type in the access control policy.Valid values: ANY: all types of protocols TCP UDP ICMP.
source string | @alicloud/ros-cdk-core.IResolvable Property source: The source address in the access control policy.Valid values: If SourceType is set to net, the value of Source is a CIDR block.Example: 10.2.4.0\/24 If SourceType is set to group, the value of this parameter must be an address book name.Example: db_group.
sourceType string | @alicloud/ros-cdk-core.IResolvable Property sourceType: The type of the source address in the access control policy.Valid values: net: source CIDR block group: source address book.
destPort number | @alicloud/ros-cdk-core.IResolvable Property destPort: The destination port in the access control policy.
destPortGroup string | @alicloud/ros-cdk-core.IResolvable Property destPortGroup: The name of the destination port address book in the access control policy.
destPortType string | @alicloud/ros-cdk-core.IResolvable Property destPortType: The type of the destination port in the access control policy.
domainResolveType number | @alicloud/ros-cdk-core.IResolvable Property domainResolveType: The domain name resolution method of the access control policy.
endTime string | @alicloud/ros-cdk-core.IResolvable Property endTime: The time when the access control policy stops taking effect.
ipVersion number | @alicloud/ros-cdk-core.IResolvable Property ipVersion: The IP version supported by the access control policy.
release boolean | @alicloud/ros-cdk-core.IResolvable Property release: Specifies whether to enable the access control policy.
repeatDays any[] | @alicloud/ros-cdk-core.IResolvable Property repeatDays: The days of a week or of a month on which the access control policy takes effect.
repeatEndTime string | @alicloud/ros-cdk-core.IResolvable Property repeatEndTime: The point in time when the recurrence ends.
repeatStartTime string | @alicloud/ros-cdk-core.IResolvable Property repeatStartTime: The point in time when the recurrence starts.
repeatType string | @alicloud/ros-cdk-core.IResolvable Property repeatType: The recurrence type for the access control policy to take effect.
startTime string | @alicloud/ros-cdk-core.IResolvable Property startTime: The time when the access control policy starts to take effect.

aclActionRequired 

public readonly aclAction: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property aclAction: The action that Cloud Firewall performs on the traffic.Valid values: accept: allows the traffic. drop: denies the traffic. log: monitors the traffic.

applicationNameListRequired 

public readonly applicationNameList: IResolvable | string | IResolvable[];
  • Type: @alicloud/ros-cdk-core.IResolvable | string | @alicloud/ros-cdk-core.IResolvable[]

Property applicationNameList: The application types supported by the access control policy.

descriptionRequired 

public readonly description: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property description: The description of the access control policy.

destinationRequired 

public readonly destination: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destination: The destination address in the access control policy.

Valid values: If DestinationType is set to net, the value of this parameter is a CIDR block. Example: 1.2.XX.XX\/24 If DestinationType is set to group, the value of this parameter is an address book. Example: db_group If DestinationType is set to domain, the value of this parameter is a domain name. Example: *.aliyuncs.com DestinationType is set to location, the value of this parameter is a location. Example: ["BJ11", "ZB"]

destinationTypeRequired 

public readonly destinationType: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destinationType: The type of the destination address in the access control policy.

Valid values: net: CIDR block group: address book domain: domain name

directionRequired 

public readonly direction: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property direction: The direction of the traffic to which the access control policy applies.

Valid values: out: outbound traffic

natGatewayIdRequired 

public readonly natGatewayId: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property natGatewayId: The ID of the NAT gateway.

newOrderRequired 

public readonly newOrder: number | IResolvable;
  • Type: number | @alicloud/ros-cdk-core.IResolvable

Property newOrder: The priority of the access control policy.

The priority value starts from 1. A small priority value indicates a high priority.

protoRequired 

public readonly proto: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property proto: The protocol type in the access control policy.Valid values: ANY: all types of protocols TCP UDP ICMP.

sourceRequired 

public readonly source: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property source: The source address in the access control policy.Valid values: If SourceType is set to net, the value of Source is a CIDR block.Example: 10.2.4.0\/24 If SourceType is set to group, the value of this parameter must be an address book name.Example: db_group.

sourceTypeRequired 

public readonly sourceType: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property sourceType: The type of the source address in the access control policy.Valid values: net: source CIDR block group: source address book.

destPortOptional 

public readonly destPort: number | IResolvable;
  • Type: number | @alicloud/ros-cdk-core.IResolvable

Property destPort: The destination port in the access control policy.

Valid values: If Proto is set to ICMP, DestPort is automatically left empty. If Proto is set to TCP, UDP, or ANY and DestPortType is set to group, DestPort is empty. If Proto is set to TCP, UDP, or ANY and DestPortType is set to port, the value of DestPort is the destination port number.

destPortGroupOptional 

public readonly destPortGroup: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destPortGroup: The name of the destination port address book in the access control policy.

destPortTypeOptional 

public readonly destPortType: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property destPortType: The type of the destination port in the access control policy.

Valid values: net: source CIDR block group: source address book

domainResolveTypeOptional 

public readonly domainResolveType: number | IResolvable;
  • Type: number | @alicloud/ros-cdk-core.IResolvable

Property domainResolveType: The domain name resolution method of the access control policy.

Valid values: 0: fully qualified domain name (FQDN)-based resolution 1: Domain Name System (DNS)-based dynamic resolution 2: FQDN and DNS-based dynamic resolution

endTimeOptional 

public readonly endTime: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property endTime: The time when the access control policy stops taking effect.

The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the value of StartTime.

ipVersionOptional 

public readonly ipVersion: number | IResolvable;
  • Type: number | @alicloud/ros-cdk-core.IResolvable

Property ipVersion: The IP version supported by the access control policy.

Valid values: 4: IPv4 (default)

releaseOptional 

public readonly release: boolean | IResolvable;
  • Type: boolean | @alicloud/ros-cdk-core.IResolvable

Property release: Specifies whether to enable the access control policy.

By default, an access control policy is enabled after it is created. Valid values: true false

repeatDaysOptional 

public readonly repeatDays: any[] | IResolvable;
  • Type: any[] | @alicloud/ros-cdk-core.IResolvable

Property repeatDays: The days of a week or of a month on which the access control policy takes effect.

If RepeatType is set to Permanent, None, or Daily, RepeatDays is left empty. Example: []. If RepeatType is set to Weekly, RepeatDays must be specified. Example: [0, 6]. If RepeatType is set to Monthly, RepeatDays must be specified. Example: [1, 31].

repeatEndTimeOptional 

public readonly repeatEndTime: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property repeatEndTime: The point in time when the recurrence ends.

Example: 23:30. The value must be on the hour or on the half hour, and at least 30 minutes later than the value of RepeatStartTime.

repeatStartTimeOptional 

public readonly repeatStartTime: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property repeatStartTime: The point in time when the recurrence starts.

Example: 08:00. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the value of RepeatEndTime.

repeatTypeOptional 

public readonly repeatType: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property repeatType: The recurrence type for the access control policy to take effect.

Valid values: Permanent (default): The policy always takes effect. None: The policy takes effect for only once. Daily: The policy takes effect on a daily basis. Weekly: The policy takes effect on a weekly basis. Monthly: The policy takes effect on a monthly basis.

startTimeOptional 

public readonly startTime: string | IResolvable;
  • Type: string | @alicloud/ros-cdk-core.IResolvable

Property startTime: The time when the access control policy starts to take effect.

The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the value of EndTime.