alicloud.vpc.TrafficMirrorFilterIngressRule
Explore with Pulumi AI
Provides a VPC Traffic Mirror Filter Ingress Rule resource.
For information about VPC Traffic Mirror Filter Ingress Rule and how to use it, see What is Traffic Mirror Filter Ingress Rule.
NOTE: Available in v1.141.0+.
Example Usage
Basic Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var exampleTrafficMirrorFilter = new AliCloud.Vpc.TrafficMirrorFilter("exampleTrafficMirrorFilter", new()
{
TrafficMirrorFilterName = "example_value",
});
var exampleTrafficMirrorFilterIngressRule = new AliCloud.Vpc.TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule", new()
{
TrafficMirrorFilterId = exampleTrafficMirrorFilter.Id,
Priority = 1,
RuleAction = "accept",
Protocol = "UDP",
DestinationCidrBlock = "10.0.0.0/24",
SourceCidrBlock = "10.0.0.0/24",
DestinationPortRange = "1/120",
SourcePortRange = "1/120",
});
});
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpc"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleTrafficMirrorFilter, err := vpc.NewTrafficMirrorFilter(ctx, "exampleTrafficMirrorFilter", &vpc.TrafficMirrorFilterArgs{
TrafficMirrorFilterName: pulumi.String("example_value"),
})
if err != nil {
return err
}
_, err = vpc.NewTrafficMirrorFilterIngressRule(ctx, "exampleTrafficMirrorFilterIngressRule", &vpc.TrafficMirrorFilterIngressRuleArgs{
TrafficMirrorFilterId: exampleTrafficMirrorFilter.ID(),
Priority: pulumi.Int(1),
RuleAction: pulumi.String("accept"),
Protocol: pulumi.String("UDP"),
DestinationCidrBlock: pulumi.String("10.0.0.0/24"),
SourceCidrBlock: pulumi.String("10.0.0.0/24"),
DestinationPortRange: pulumi.String("1/120"),
SourcePortRange: pulumi.String("1/120"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.vpc.TrafficMirrorFilter;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterArgs;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterIngressRule;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterIngressRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleTrafficMirrorFilter = new TrafficMirrorFilter("exampleTrafficMirrorFilter", TrafficMirrorFilterArgs.builder()
.trafficMirrorFilterName("example_value")
.build());
var exampleTrafficMirrorFilterIngressRule = new TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule", TrafficMirrorFilterIngressRuleArgs.builder()
.trafficMirrorFilterId(exampleTrafficMirrorFilter.id())
.priority("1")
.ruleAction("accept")
.protocol("UDP")
.destinationCidrBlock("10.0.0.0/24")
.sourceCidrBlock("10.0.0.0/24")
.destinationPortRange("1/120")
.sourcePortRange("1/120")
.build());
}
}
import pulumi
import pulumi_alicloud as alicloud
example_traffic_mirror_filter = alicloud.vpc.TrafficMirrorFilter("exampleTrafficMirrorFilter", traffic_mirror_filter_name="example_value")
example_traffic_mirror_filter_ingress_rule = alicloud.vpc.TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule",
traffic_mirror_filter_id=example_traffic_mirror_filter.id,
priority=1,
rule_action="accept",
protocol="UDP",
destination_cidr_block="10.0.0.0/24",
source_cidr_block="10.0.0.0/24",
destination_port_range="1/120",
source_port_range="1/120")
import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const exampleTrafficMirrorFilter = new alicloud.vpc.TrafficMirrorFilter("exampleTrafficMirrorFilter", {trafficMirrorFilterName: "example_value"});
const exampleTrafficMirrorFilterIngressRule = new alicloud.vpc.TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule", {
trafficMirrorFilterId: exampleTrafficMirrorFilter.id,
priority: 1,
ruleAction: "accept",
protocol: "UDP",
destinationCidrBlock: "10.0.0.0/24",
sourceCidrBlock: "10.0.0.0/24",
destinationPortRange: "1/120",
sourcePortRange: "1/120",
});
resources:
exampleTrafficMirrorFilter:
type: alicloud:vpc:TrafficMirrorFilter
properties:
trafficMirrorFilterName: example_value
exampleTrafficMirrorFilterIngressRule:
type: alicloud:vpc:TrafficMirrorFilterIngressRule
properties:
trafficMirrorFilterId: ${exampleTrafficMirrorFilter.id}
priority: '1'
ruleAction: accept
protocol: UDP
destinationCidrBlock: 10.0.0.0/24
sourceCidrBlock: 10.0.0.0/24
destinationPortRange: 1/120
sourcePortRange: 1/120
Create TrafficMirrorFilterIngressRule Resource
new TrafficMirrorFilterIngressRule(name: string, args: TrafficMirrorFilterIngressRuleArgs, opts?: CustomResourceOptions);
@overload
def TrafficMirrorFilterIngressRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
destination_cidr_block: Optional[str] = None,
destination_port_range: Optional[str] = None,
dry_run: Optional[bool] = None,
priority: Optional[int] = None,
protocol: Optional[str] = None,
rule_action: Optional[str] = None,
source_cidr_block: Optional[str] = None,
source_port_range: Optional[str] = None,
traffic_mirror_filter_id: Optional[str] = None)
@overload
def TrafficMirrorFilterIngressRule(resource_name: str,
args: TrafficMirrorFilterIngressRuleInitArgs,
opts: Optional[ResourceOptions] = None)
func NewTrafficMirrorFilterIngressRule(ctx *Context, name string, args TrafficMirrorFilterIngressRuleArgs, opts ...ResourceOption) (*TrafficMirrorFilterIngressRule, error)
public TrafficMirrorFilterIngressRule(string name, TrafficMirrorFilterIngressRuleArgs args, CustomResourceOptions? opts = null)
public TrafficMirrorFilterIngressRule(String name, TrafficMirrorFilterIngressRuleArgs args)
public TrafficMirrorFilterIngressRule(String name, TrafficMirrorFilterIngressRuleArgs args, CustomResourceOptions options)
type: alicloud:vpc:TrafficMirrorFilterIngressRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args TrafficMirrorFilterIngressRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args TrafficMirrorFilterIngressRuleInitArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args TrafficMirrorFilterIngressRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args TrafficMirrorFilterIngressRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args TrafficMirrorFilterIngressRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
TrafficMirrorFilterIngressRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The TrafficMirrorFilterIngressRule resource accepts the following input properties:
- Destination
Cidr stringBlock The destination CIDR block of the inbound traffic.
- Priority int
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- Protocol string
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- Rule
Action string The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- Source
Cidr stringBlock The source CIDR block of the inbound traffic.
- Traffic
Mirror stringFilter Id The ID of the filter.
- Destination
Port stringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- Dry
Run bool Whether to pre-check this request only. Default to:
false
- Source
Port stringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- Destination
Cidr stringBlock The destination CIDR block of the inbound traffic.
- Priority int
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- Protocol string
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- Rule
Action string The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- Source
Cidr stringBlock The source CIDR block of the inbound traffic.
- Traffic
Mirror stringFilter Id The ID of the filter.
- Destination
Port stringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- Dry
Run bool Whether to pre-check this request only. Default to:
false
- Source
Port stringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination
Cidr StringBlock The destination CIDR block of the inbound traffic.
- priority Integer
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol String
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule
Action String The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source
Cidr StringBlock The source CIDR block of the inbound traffic.
- traffic
Mirror StringFilter Id The ID of the filter.
- destination
Port StringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry
Run Boolean Whether to pre-check this request only. Default to:
false
- source
Port StringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination
Cidr stringBlock The destination CIDR block of the inbound traffic.
- priority number
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol string
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule
Action string The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source
Cidr stringBlock The source CIDR block of the inbound traffic.
- traffic
Mirror stringFilter Id The ID of the filter.
- destination
Port stringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry
Run boolean Whether to pre-check this request only. Default to:
false
- source
Port stringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination_
cidr_ strblock The destination CIDR block of the inbound traffic.
- priority int
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol str
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule_
action str The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source_
cidr_ strblock The source CIDR block of the inbound traffic.
- traffic_
mirror_ strfilter_ id The ID of the filter.
- destination_
port_ strrange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry_
run bool Whether to pre-check this request only. Default to:
false
- source_
port_ strrange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
- destination
Cidr StringBlock The destination CIDR block of the inbound traffic.
- priority Number
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol String
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule
Action String The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source
Cidr StringBlock The source CIDR block of the inbound traffic.
- traffic
Mirror StringFilter Id The ID of the filter.
- destination
Port StringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry
Run Boolean Whether to pre-check this request only. Default to:
false
- source
Port StringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.
Outputs
All input properties are implicitly available as output properties. Additionally, the TrafficMirrorFilterIngressRule resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Status string
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- Traffic
Mirror stringFilter Ingress Rule Id The ID of the inbound rule.
- Id string
The provider-assigned unique ID for this managed resource.
- Status string
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- Traffic
Mirror stringFilter Ingress Rule Id The ID of the inbound rule.
- id String
The provider-assigned unique ID for this managed resource.
- status String
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic
Mirror StringFilter Ingress Rule Id The ID of the inbound rule.
- id string
The provider-assigned unique ID for this managed resource.
- status string
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic
Mirror stringFilter Ingress Rule Id The ID of the inbound rule.
- id str
The provider-assigned unique ID for this managed resource.
- status str
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic_
mirror_ strfilter_ ingress_ rule_ id The ID of the inbound rule.
- id String
The provider-assigned unique ID for this managed resource.
- status String
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic
Mirror StringFilter Ingress Rule Id The ID of the inbound rule.
Look up Existing TrafficMirrorFilterIngressRule Resource
Get an existing TrafficMirrorFilterIngressRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: TrafficMirrorFilterIngressRuleState, opts?: CustomResourceOptions): TrafficMirrorFilterIngressRule
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
destination_cidr_block: Optional[str] = None,
destination_port_range: Optional[str] = None,
dry_run: Optional[bool] = None,
priority: Optional[int] = None,
protocol: Optional[str] = None,
rule_action: Optional[str] = None,
source_cidr_block: Optional[str] = None,
source_port_range: Optional[str] = None,
status: Optional[str] = None,
traffic_mirror_filter_id: Optional[str] = None,
traffic_mirror_filter_ingress_rule_id: Optional[str] = None) -> TrafficMirrorFilterIngressRule
func GetTrafficMirrorFilterIngressRule(ctx *Context, name string, id IDInput, state *TrafficMirrorFilterIngressRuleState, opts ...ResourceOption) (*TrafficMirrorFilterIngressRule, error)
public static TrafficMirrorFilterIngressRule Get(string name, Input<string> id, TrafficMirrorFilterIngressRuleState? state, CustomResourceOptions? opts = null)
public static TrafficMirrorFilterIngressRule get(String name, Output<String> id, TrafficMirrorFilterIngressRuleState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Destination
Cidr stringBlock The destination CIDR block of the inbound traffic.
- Destination
Port stringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- Dry
Run bool Whether to pre-check this request only. Default to:
false
- Priority int
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- Protocol string
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- Rule
Action string The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- Source
Cidr stringBlock The source CIDR block of the inbound traffic.
- Source
Port stringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- Status string
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- Traffic
Mirror stringFilter Id The ID of the filter.
- Traffic
Mirror stringFilter Ingress Rule Id The ID of the inbound rule.
- Destination
Cidr stringBlock The destination CIDR block of the inbound traffic.
- Destination
Port stringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- Dry
Run bool Whether to pre-check this request only. Default to:
false
- Priority int
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- Protocol string
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- Rule
Action string The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- Source
Cidr stringBlock The source CIDR block of the inbound traffic.
- Source
Port stringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- Status string
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- Traffic
Mirror stringFilter Id The ID of the filter.
- Traffic
Mirror stringFilter Ingress Rule Id The ID of the inbound rule.
- destination
Cidr StringBlock The destination CIDR block of the inbound traffic.
- destination
Port StringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry
Run Boolean Whether to pre-check this request only. Default to:
false
- priority Integer
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol String
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule
Action String The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source
Cidr StringBlock The source CIDR block of the inbound traffic.
- source
Port StringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- status String
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic
Mirror StringFilter Id The ID of the filter.
- traffic
Mirror StringFilter Ingress Rule Id The ID of the inbound rule.
- destination
Cidr stringBlock The destination CIDR block of the inbound traffic.
- destination
Port stringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry
Run boolean Whether to pre-check this request only. Default to:
false
- priority number
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol string
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule
Action string The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source
Cidr stringBlock The source CIDR block of the inbound traffic.
- source
Port stringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- status string
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic
Mirror stringFilter Id The ID of the filter.
- traffic
Mirror stringFilter Ingress Rule Id The ID of the inbound rule.
- destination_
cidr_ strblock The destination CIDR block of the inbound traffic.
- destination_
port_ strrange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry_
run bool Whether to pre-check this request only. Default to:
false
- priority int
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol str
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule_
action str The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source_
cidr_ strblock The source CIDR block of the inbound traffic.
- source_
port_ strrange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- status str
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic_
mirror_ strfilter_ id The ID of the filter.
- traffic_
mirror_ strfilter_ ingress_ rule_ id The ID of the inbound rule.
- destination
Cidr StringBlock The destination CIDR block of the inbound traffic.
- destination
Port StringRange The destination CIDR block of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- dry
Run Boolean Whether to pre-check this request only. Default to:
false
- priority Number
The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is
10
, which indicates that you can configure at most 10 inbound rules for a filter.- protocol String
The transport protocol used by inbound traffic that needs to be mirrored. Valid values:
ALL
,ICMP
,TCP
,UDP
.- rule
Action String The collection policy of the inbound rule. Valid values:
accept
ordrop
.accept
: collects network traffic.drop
: does not collect network traffic.- source
Cidr StringBlock The source CIDR block of the inbound traffic.
- source
Port StringRange The source port range of the inbound traffic. Valid values:
1
to65535
. Separate the first port and last port with a forward slash (/), for example,1/200
or80/80
. A value of-1/-1
indicates that all ports are available. Therefore, do not set the value to-1/-1
. NOTE: Whenprotocol
isICMP
, this parameter is invalid.- status String
The state of the inbound rule. Valid values:
Creating
,Created
,Modifying
andDeleting
.- traffic
Mirror StringFilter Id The ID of the filter.
- traffic
Mirror StringFilter Ingress Rule Id The ID of the inbound rule.
Import
VPC Traffic Mirror Filter Ingress Rule can be imported using the id, e.g.
$ pulumi import alicloud:vpc/trafficMirrorFilterIngressRule:TrafficMirrorFilterIngressRule example <traffic_mirror_filter_id>:<traffic_mirror_filter_ingress_rule_id>
Package Details
- Repository
- Alibaba Cloud pulumi/pulumi-alicloud
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
alicloud
Terraform Provider.