1. Pulumi Registry
  2. Alibaba Cloud
  3. API Docs
  4. vpc
  5. TrafficMirrorFilterIngressRule
alicloud logo
Alibaba Cloud v3.34.0, Mar 17 23

alicloud.vpc.TrafficMirrorFilterIngressRule

Provides a VPC Traffic Mirror Filter Ingress Rule resource.

For information about VPC Traffic Mirror Filter Ingress Rule and how to use it, see What is Traffic Mirror Filter Ingress Rule.

NOTE: Available in v1.141.0+.

Example Usage

Basic Usage

using System.Collections.Generic;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var exampleTrafficMirrorFilter = new AliCloud.Vpc.TrafficMirrorFilter("exampleTrafficMirrorFilter", new()
    {
        TrafficMirrorFilterName = "example_value",
    });

    var exampleTrafficMirrorFilterIngressRule = new AliCloud.Vpc.TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule", new()
    {
        TrafficMirrorFilterId = exampleTrafficMirrorFilter.Id,
        Priority = 1,
        RuleAction = "accept",
        Protocol = "UDP",
        DestinationCidrBlock = "10.0.0.0/24",
        SourceCidrBlock = "10.0.0.0/24",
        DestinationPortRange = "1/120",
        SourcePortRange = "1/120",
    });

});

package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpc"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleTrafficMirrorFilter, err := vpc.NewTrafficMirrorFilter(ctx, "exampleTrafficMirrorFilter", &vpc.TrafficMirrorFilterArgs{
			TrafficMirrorFilterName: pulumi.String("example_value"),
		})
		if err != nil {
			return err
		}
		_, err = vpc.NewTrafficMirrorFilterIngressRule(ctx, "exampleTrafficMirrorFilterIngressRule", &vpc.TrafficMirrorFilterIngressRuleArgs{
			TrafficMirrorFilterId: exampleTrafficMirrorFilter.ID(),
			Priority:              pulumi.Int(1),
			RuleAction:            pulumi.String("accept"),
			Protocol:              pulumi.String("UDP"),
			DestinationCidrBlock:  pulumi.String("10.0.0.0/24"),
			SourceCidrBlock:       pulumi.String("10.0.0.0/24"),
			DestinationPortRange:  pulumi.String("1/120"),
			SourcePortRange:       pulumi.String("1/120"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.vpc.TrafficMirrorFilter;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterArgs;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterIngressRule;
import com.pulumi.alicloud.vpc.TrafficMirrorFilterIngressRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleTrafficMirrorFilter = new TrafficMirrorFilter("exampleTrafficMirrorFilter", TrafficMirrorFilterArgs.builder()        
            .trafficMirrorFilterName("example_value")
            .build());

        var exampleTrafficMirrorFilterIngressRule = new TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule", TrafficMirrorFilterIngressRuleArgs.builder()        
            .trafficMirrorFilterId(exampleTrafficMirrorFilter.id())
            .priority("1")
            .ruleAction("accept")
            .protocol("UDP")
            .destinationCidrBlock("10.0.0.0/24")
            .sourceCidrBlock("10.0.0.0/24")
            .destinationPortRange("1/120")
            .sourcePortRange("1/120")
            .build());

    }
}

import pulumi
import pulumi_alicloud as alicloud

example_traffic_mirror_filter = alicloud.vpc.TrafficMirrorFilter("exampleTrafficMirrorFilter", traffic_mirror_filter_name="example_value")
example_traffic_mirror_filter_ingress_rule = alicloud.vpc.TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule",
    traffic_mirror_filter_id=example_traffic_mirror_filter.id,
    priority=1,
    rule_action="accept",
    protocol="UDP",
    destination_cidr_block="10.0.0.0/24",
    source_cidr_block="10.0.0.0/24",
    destination_port_range="1/120",
    source_port_range="1/120")

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const exampleTrafficMirrorFilter = new alicloud.vpc.TrafficMirrorFilter("exampleTrafficMirrorFilter", {trafficMirrorFilterName: "example_value"});
const exampleTrafficMirrorFilterIngressRule = new alicloud.vpc.TrafficMirrorFilterIngressRule("exampleTrafficMirrorFilterIngressRule", {
    trafficMirrorFilterId: exampleTrafficMirrorFilter.id,
    priority: 1,
    ruleAction: "accept",
    protocol: "UDP",
    destinationCidrBlock: "10.0.0.0/24",
    sourceCidrBlock: "10.0.0.0/24",
    destinationPortRange: "1/120",
    sourcePortRange: "1/120",
});

resources:
  exampleTrafficMirrorFilter:
    type: alicloud:vpc:TrafficMirrorFilter
    properties:
      trafficMirrorFilterName: example_value
  exampleTrafficMirrorFilterIngressRule:
    type: alicloud:vpc:TrafficMirrorFilterIngressRule
    properties:
      trafficMirrorFilterId: ${exampleTrafficMirrorFilter.id}
      priority: '1'
      ruleAction: accept
      protocol: UDP
      destinationCidrBlock: 10.0.0.0/24
      sourceCidrBlock: 10.0.0.0/24
      destinationPortRange: 1/120
      sourcePortRange: 1/120

Create TrafficMirrorFilterIngressRule Resource

new TrafficMirrorFilterIngressRule(name: string, args: TrafficMirrorFilterIngressRuleArgs, opts?: CustomResourceOptions);
@overload
def TrafficMirrorFilterIngressRule(resource_name: str,
                                   opts: Optional[ResourceOptions] = None,
                                   destination_cidr_block: Optional[str] = None,
                                   destination_port_range: Optional[str] = None,
                                   dry_run: Optional[bool] = None,
                                   priority: Optional[int] = None,
                                   protocol: Optional[str] = None,
                                   rule_action: Optional[str] = None,
                                   source_cidr_block: Optional[str] = None,
                                   source_port_range: Optional[str] = None,
                                   traffic_mirror_filter_id: Optional[str] = None)
@overload
def TrafficMirrorFilterIngressRule(resource_name: str,
                                   args: TrafficMirrorFilterIngressRuleArgs,
                                   opts: Optional[ResourceOptions] = None)
func NewTrafficMirrorFilterIngressRule(ctx *Context, name string, args TrafficMirrorFilterIngressRuleArgs, opts ...ResourceOption) (*TrafficMirrorFilterIngressRule, error)
public TrafficMirrorFilterIngressRule(string name, TrafficMirrorFilterIngressRuleArgs args, CustomResourceOptions? opts = null)
public TrafficMirrorFilterIngressRule(String name, TrafficMirrorFilterIngressRuleArgs args)
public TrafficMirrorFilterIngressRule(String name, TrafficMirrorFilterIngressRuleArgs args, CustomResourceOptions options)

type: alicloud:vpc:TrafficMirrorFilterIngressRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args TrafficMirrorFilterIngressRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args TrafficMirrorFilterIngressRuleArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args TrafficMirrorFilterIngressRuleArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args TrafficMirrorFilterIngressRuleArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args TrafficMirrorFilterIngressRuleArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

TrafficMirrorFilterIngressRule Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The TrafficMirrorFilterIngressRule resource accepts the following input properties:

DestinationCidrBlock string

The destination CIDR block of the inbound traffic.

Priority int

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

Protocol string

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

RuleAction string

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

SourceCidrBlock string

The source CIDR block of the inbound traffic.

TrafficMirrorFilterId string

The ID of the filter.

DestinationPortRange string

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

DryRun bool

Whether to pre-check this request only. Default to: false

SourcePortRange string

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

DestinationCidrBlock string

The destination CIDR block of the inbound traffic.

Priority int

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

Protocol string

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

RuleAction string

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

SourceCidrBlock string

The source CIDR block of the inbound traffic.

TrafficMirrorFilterId string

The ID of the filter.

DestinationPortRange string

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

DryRun bool

Whether to pre-check this request only. Default to: false

SourcePortRange string

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

destinationCidrBlock String

The destination CIDR block of the inbound traffic.

priority Integer

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol String

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

ruleAction String

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

sourceCidrBlock String

The source CIDR block of the inbound traffic.

trafficMirrorFilterId String

The ID of the filter.

destinationPortRange String

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dryRun Boolean

Whether to pre-check this request only. Default to: false

sourcePortRange String

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

destinationCidrBlock string

The destination CIDR block of the inbound traffic.

priority number

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol string

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

ruleAction string

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

sourceCidrBlock string

The source CIDR block of the inbound traffic.

trafficMirrorFilterId string

The ID of the filter.

destinationPortRange string

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dryRun boolean

Whether to pre-check this request only. Default to: false

sourcePortRange string

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

destination_cidr_block str

The destination CIDR block of the inbound traffic.

priority int

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol str

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

rule_action str

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

source_cidr_block str

The source CIDR block of the inbound traffic.

traffic_mirror_filter_id str

The ID of the filter.

destination_port_range str

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dry_run bool

Whether to pre-check this request only. Default to: false

source_port_range str

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

destinationCidrBlock String

The destination CIDR block of the inbound traffic.

priority Number

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol String

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

ruleAction String

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

sourceCidrBlock String

The source CIDR block of the inbound traffic.

trafficMirrorFilterId String

The ID of the filter.

destinationPortRange String

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dryRun Boolean

Whether to pre-check this request only. Default to: false

sourcePortRange String

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

Outputs

All input properties are implicitly available as output properties. Additionally, the TrafficMirrorFilterIngressRule resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Status string

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

TrafficMirrorFilterIngressRuleId string

The ID of the inbound rule.

Id string

The provider-assigned unique ID for this managed resource.

Status string

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

TrafficMirrorFilterIngressRuleId string

The ID of the inbound rule.

id String

The provider-assigned unique ID for this managed resource.

status String

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

trafficMirrorFilterIngressRuleId String

The ID of the inbound rule.

id string

The provider-assigned unique ID for this managed resource.

status string

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

trafficMirrorFilterIngressRuleId string

The ID of the inbound rule.

id str

The provider-assigned unique ID for this managed resource.

status str

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

traffic_mirror_filter_ingress_rule_id str

The ID of the inbound rule.

id String

The provider-assigned unique ID for this managed resource.

status String

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

trafficMirrorFilterIngressRuleId String

The ID of the inbound rule.

Look up Existing TrafficMirrorFilterIngressRule Resource

Get an existing TrafficMirrorFilterIngressRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: TrafficMirrorFilterIngressRuleState, opts?: CustomResourceOptions): TrafficMirrorFilterIngressRule
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        destination_cidr_block: Optional[str] = None,
        destination_port_range: Optional[str] = None,
        dry_run: Optional[bool] = None,
        priority: Optional[int] = None,
        protocol: Optional[str] = None,
        rule_action: Optional[str] = None,
        source_cidr_block: Optional[str] = None,
        source_port_range: Optional[str] = None,
        status: Optional[str] = None,
        traffic_mirror_filter_id: Optional[str] = None,
        traffic_mirror_filter_ingress_rule_id: Optional[str] = None) -> TrafficMirrorFilterIngressRule
func GetTrafficMirrorFilterIngressRule(ctx *Context, name string, id IDInput, state *TrafficMirrorFilterIngressRuleState, opts ...ResourceOption) (*TrafficMirrorFilterIngressRule, error)
public static TrafficMirrorFilterIngressRule Get(string name, Input<string> id, TrafficMirrorFilterIngressRuleState? state, CustomResourceOptions? opts = null)
public static TrafficMirrorFilterIngressRule get(String name, Output<String> id, TrafficMirrorFilterIngressRuleState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
DestinationCidrBlock string

The destination CIDR block of the inbound traffic.

DestinationPortRange string

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

DryRun bool

Whether to pre-check this request only. Default to: false

Priority int

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

Protocol string

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

RuleAction string

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

SourceCidrBlock string

The source CIDR block of the inbound traffic.

SourcePortRange string

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

Status string

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

TrafficMirrorFilterId string

The ID of the filter.

TrafficMirrorFilterIngressRuleId string

The ID of the inbound rule.

DestinationCidrBlock string

The destination CIDR block of the inbound traffic.

DestinationPortRange string

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

DryRun bool

Whether to pre-check this request only. Default to: false

Priority int

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

Protocol string

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

RuleAction string

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

SourceCidrBlock string

The source CIDR block of the inbound traffic.

SourcePortRange string

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

Status string

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

TrafficMirrorFilterId string

The ID of the filter.

TrafficMirrorFilterIngressRuleId string

The ID of the inbound rule.

destinationCidrBlock String

The destination CIDR block of the inbound traffic.

destinationPortRange String

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dryRun Boolean

Whether to pre-check this request only. Default to: false

priority Integer

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol String

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

ruleAction String

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

sourceCidrBlock String

The source CIDR block of the inbound traffic.

sourcePortRange String

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

status String

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

trafficMirrorFilterId String

The ID of the filter.

trafficMirrorFilterIngressRuleId String

The ID of the inbound rule.

destinationCidrBlock string

The destination CIDR block of the inbound traffic.

destinationPortRange string

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dryRun boolean

Whether to pre-check this request only. Default to: false

priority number

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol string

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

ruleAction string

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

sourceCidrBlock string

The source CIDR block of the inbound traffic.

sourcePortRange string

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

status string

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

trafficMirrorFilterId string

The ID of the filter.

trafficMirrorFilterIngressRuleId string

The ID of the inbound rule.

destination_cidr_block str

The destination CIDR block of the inbound traffic.

destination_port_range str

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dry_run bool

Whether to pre-check this request only. Default to: false

priority int

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol str

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

rule_action str

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

source_cidr_block str

The source CIDR block of the inbound traffic.

source_port_range str

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

status str

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

traffic_mirror_filter_id str

The ID of the filter.

traffic_mirror_filter_ingress_rule_id str

The ID of the inbound rule.

destinationCidrBlock String

The destination CIDR block of the inbound traffic.

destinationPortRange String

The destination CIDR block of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

dryRun Boolean

Whether to pre-check this request only. Default to: false

priority Number

The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10, which indicates that you can configure at most 10 inbound rules for a filter.

protocol String

The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL, ICMP, TCP, UDP.

ruleAction String

The collection policy of the inbound rule. Valid values: accept or drop. accept: collects network traffic. drop: does not collect network traffic.

sourceCidrBlock String

The source CIDR block of the inbound traffic.

sourcePortRange String

The source port range of the inbound traffic. Valid values: 1 to 65535. Separate the first port and last port with a forward slash (/), for example, 1/200 or 80/80. A value of -1/-1 indicates that all ports are available. Therefore, do not set the value to -1/-1. NOTE: When protocol is ICMP, this parameter is invalid.

status String

The state of the inbound rule. Valid values:Creating, Created, Modifying and Deleting.

trafficMirrorFilterId String

The ID of the filter.

trafficMirrorFilterIngressRuleId String

The ID of the inbound rule.

Import

VPC Traffic Mirror Filter Ingress Rule can be imported using the id, e.g.

 $ pulumi import alicloud:vpc/trafficMirrorFilterIngressRule:TrafficMirrorFilterIngressRule example <traffic_mirror_filter_id>:<traffic_mirror_filter_ingress_rule_id>

Package Details

Repository
Alibaba Cloud pulumi/pulumi-alicloud
License
Apache-2.0
Notes

This Pulumi package is based on the alicloud Terraform Provider.