avi.Sslprofile
Explore with Pulumi AI
<!–
Copyright 2021 VMware, Inc.
SPDX-License-Identifier: Mozilla Public License 2.0
–>
layout: “avi”
page_title: “Avi: avi.Sslprofile” sidebar_current: “docs-avi-resource-sslprofile” description: |- Creates and manages Avi SSLProfile.
avi.Sslprofile
The SSLProfile resource allows the creation and management of Avi SSLProfile
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as avi from "@pulumi/avi";
const foo = new avi.Sslprofile("foo", {tenantRef: "/api/tenant/?name=admin"});
import pulumi
import pulumi_avi as avi
foo = avi.Sslprofile("foo", tenant_ref="/api/tenant/?name=admin")
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/avi/v31/avi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := avi.NewSslprofile(ctx, "foo", &avi.SslprofileArgs{
TenantRef: pulumi.String("/api/tenant/?name=admin"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Avi = Pulumi.Avi;
return await Deployment.RunAsync(() =>
{
var foo = new Avi.Sslprofile("foo", new()
{
TenantRef = "/api/tenant/?name=admin",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.avi.Sslprofile;
import com.pulumi.avi.SslprofileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var foo = new Sslprofile("foo", SslprofileArgs.builder()
.tenantRef("/api/tenant/?name=admin")
.build());
}
}
resources:
foo:
type: avi:Sslprofile
properties:
tenantRef: /api/tenant/?name=admin
Create Sslprofile Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Sslprofile(name: string, args: SslprofileArgs, opts?: CustomResourceOptions);
@overload
def Sslprofile(resource_name: str,
args: SslprofileArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Sslprofile(resource_name: str,
opts: Optional[ResourceOptions] = None,
accepted_versions: Optional[Sequence[SslprofileAcceptedVersionArgs]] = None,
is_federated: Optional[str] = None,
name: Optional[str] = None,
ciphersuites: Optional[str] = None,
configpb_attributes: Optional[Sequence[SslprofileConfigpbAttributeArgs]] = None,
description: Optional[str] = None,
dhparam: Optional[str] = None,
ec_named_curve: Optional[str] = None,
enable_early_data: Optional[str] = None,
enable_ssl_session_reuse: Optional[str] = None,
prefer_client_cipher_ordering: Optional[str] = None,
cipher_enums: Optional[Sequence[str]] = None,
markers: Optional[Sequence[SslprofileMarkerArgs]] = None,
accepted_ciphers: Optional[str] = None,
send_close_notify: Optional[str] = None,
signature_algorithm: Optional[str] = None,
ssl_ratings: Optional[Sequence[SslprofileSslRatingArgs]] = None,
ssl_session_timeout: Optional[str] = None,
sslprofile_id: Optional[str] = None,
tags: Optional[Sequence[SslprofileTagArgs]] = None,
tenant_ref: Optional[str] = None,
type: Optional[str] = None,
uuid: Optional[str] = None)
func NewSslprofile(ctx *Context, name string, args SslprofileArgs, opts ...ResourceOption) (*Sslprofile, error)
public Sslprofile(string name, SslprofileArgs args, CustomResourceOptions? opts = null)
public Sslprofile(String name, SslprofileArgs args)
public Sslprofile(String name, SslprofileArgs args, CustomResourceOptions options)
type: avi:Sslprofile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args SslprofileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args SslprofileArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args SslprofileArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args SslprofileArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args SslprofileArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var sslprofileResource = new Avi.Sslprofile("sslprofileResource", new()
{
AcceptedVersions = new[]
{
new Avi.Inputs.SslprofileAcceptedVersionArgs
{
Type = "string",
},
},
IsFederated = "string",
Name = "string",
Ciphersuites = "string",
ConfigpbAttributes = new[]
{
new Avi.Inputs.SslprofileConfigpbAttributeArgs
{
Version = "string",
},
},
Description = "string",
Dhparam = "string",
EcNamedCurve = "string",
EnableEarlyData = "string",
EnableSslSessionReuse = "string",
PreferClientCipherOrdering = "string",
CipherEnums = new[]
{
"string",
},
Markers = new[]
{
new Avi.Inputs.SslprofileMarkerArgs
{
Key = "string",
Values = new[]
{
"string",
},
},
},
AcceptedCiphers = "string",
SendCloseNotify = "string",
SignatureAlgorithm = "string",
SslRatings = new[]
{
new Avi.Inputs.SslprofileSslRatingArgs
{
CompatibilityRating = "string",
PerformanceRating = "string",
SecurityScore = "string",
},
},
SslSessionTimeout = "string",
SslprofileId = "string",
Tags = new[]
{
new Avi.Inputs.SslprofileTagArgs
{
Value = "string",
Type = "string",
},
},
TenantRef = "string",
Type = "string",
Uuid = "string",
});
example, err := avi.NewSslprofile(ctx, "sslprofileResource", &avi.SslprofileArgs{
AcceptedVersions: avi.SslprofileAcceptedVersionArray{
&avi.SslprofileAcceptedVersionArgs{
Type: pulumi.String("string"),
},
},
IsFederated: pulumi.String("string"),
Name: pulumi.String("string"),
Ciphersuites: pulumi.String("string"),
ConfigpbAttributes: avi.SslprofileConfigpbAttributeArray{
&avi.SslprofileConfigpbAttributeArgs{
Version: pulumi.String("string"),
},
},
Description: pulumi.String("string"),
Dhparam: pulumi.String("string"),
EcNamedCurve: pulumi.String("string"),
EnableEarlyData: pulumi.String("string"),
EnableSslSessionReuse: pulumi.String("string"),
PreferClientCipherOrdering: pulumi.String("string"),
CipherEnums: pulumi.StringArray{
pulumi.String("string"),
},
Markers: avi.SslprofileMarkerArray{
&avi.SslprofileMarkerArgs{
Key: pulumi.String("string"),
Values: pulumi.StringArray{
pulumi.String("string"),
},
},
},
AcceptedCiphers: pulumi.String("string"),
SendCloseNotify: pulumi.String("string"),
SignatureAlgorithm: pulumi.String("string"),
SslRatings: avi.SslprofileSslRatingArray{
&avi.SslprofileSslRatingArgs{
CompatibilityRating: pulumi.String("string"),
PerformanceRating: pulumi.String("string"),
SecurityScore: pulumi.String("string"),
},
},
SslSessionTimeout: pulumi.String("string"),
SslprofileId: pulumi.String("string"),
Tags: avi.SslprofileTagArray{
&avi.SslprofileTagArgs{
Value: pulumi.String("string"),
Type: pulumi.String("string"),
},
},
TenantRef: pulumi.String("string"),
Type: pulumi.String("string"),
Uuid: pulumi.String("string"),
})
var sslprofileResource = new Sslprofile("sslprofileResource", SslprofileArgs.builder()
.acceptedVersions(SslprofileAcceptedVersionArgs.builder()
.type("string")
.build())
.isFederated("string")
.name("string")
.ciphersuites("string")
.configpbAttributes(SslprofileConfigpbAttributeArgs.builder()
.version("string")
.build())
.description("string")
.dhparam("string")
.ecNamedCurve("string")
.enableEarlyData("string")
.enableSslSessionReuse("string")
.preferClientCipherOrdering("string")
.cipherEnums("string")
.markers(SslprofileMarkerArgs.builder()
.key("string")
.values("string")
.build())
.acceptedCiphers("string")
.sendCloseNotify("string")
.signatureAlgorithm("string")
.sslRatings(SslprofileSslRatingArgs.builder()
.compatibilityRating("string")
.performanceRating("string")
.securityScore("string")
.build())
.sslSessionTimeout("string")
.sslprofileId("string")
.tags(SslprofileTagArgs.builder()
.value("string")
.type("string")
.build())
.tenantRef("string")
.type("string")
.uuid("string")
.build());
sslprofile_resource = avi.Sslprofile("sslprofileResource",
accepted_versions=[{
"type": "string",
}],
is_federated="string",
name="string",
ciphersuites="string",
configpb_attributes=[{
"version": "string",
}],
description="string",
dhparam="string",
ec_named_curve="string",
enable_early_data="string",
enable_ssl_session_reuse="string",
prefer_client_cipher_ordering="string",
cipher_enums=["string"],
markers=[{
"key": "string",
"values": ["string"],
}],
accepted_ciphers="string",
send_close_notify="string",
signature_algorithm="string",
ssl_ratings=[{
"compatibility_rating": "string",
"performance_rating": "string",
"security_score": "string",
}],
ssl_session_timeout="string",
sslprofile_id="string",
tags=[{
"value": "string",
"type": "string",
}],
tenant_ref="string",
type="string",
uuid="string")
const sslprofileResource = new avi.Sslprofile("sslprofileResource", {
acceptedVersions: [{
type: "string",
}],
isFederated: "string",
name: "string",
ciphersuites: "string",
configpbAttributes: [{
version: "string",
}],
description: "string",
dhparam: "string",
ecNamedCurve: "string",
enableEarlyData: "string",
enableSslSessionReuse: "string",
preferClientCipherOrdering: "string",
cipherEnums: ["string"],
markers: [{
key: "string",
values: ["string"],
}],
acceptedCiphers: "string",
sendCloseNotify: "string",
signatureAlgorithm: "string",
sslRatings: [{
compatibilityRating: "string",
performanceRating: "string",
securityScore: "string",
}],
sslSessionTimeout: "string",
sslprofileId: "string",
tags: [{
value: "string",
type: "string",
}],
tenantRef: "string",
type: "string",
uuid: "string",
});
type: avi:Sslprofile
properties:
acceptedCiphers: string
acceptedVersions:
- type: string
cipherEnums:
- string
ciphersuites: string
configpbAttributes:
- version: string
description: string
dhparam: string
ecNamedCurve: string
enableEarlyData: string
enableSslSessionReuse: string
isFederated: string
markers:
- key: string
values:
- string
name: string
preferClientCipherOrdering: string
sendCloseNotify: string
signatureAlgorithm: string
sslRatings:
- compatibilityRating: string
performanceRating: string
securityScore: string
sslSessionTimeout: string
sslprofileId: string
tags:
- type: string
value: string
tenantRef: string
type: string
uuid: string
Sslprofile Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Sslprofile resource accepts the following input properties:
- Accepted
Versions List<SslprofileAccepted Version> - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Accepted
Ciphers string - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Cipher
Enums List<string> - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- Ciphersuites string
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- Configpb
Attributes List<SslprofileConfigpb Attribute> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Description string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Dhparam string
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ec
Named stringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Enable
Early stringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- Enable
Ssl stringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Is
Federated string - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Markers
List<Sslprofile
Marker> - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Prefer
Client stringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Send
Close stringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Signature
Algorithm string - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Ssl
Ratings List<SslprofileSsl Rating> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ssl
Session stringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Sslprofile
Id string - List<Sslprofile
Tag> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Tenant
Ref string - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Uuid string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Accepted
Versions []SslprofileAccepted Version Args - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Accepted
Ciphers string - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Cipher
Enums []string - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- Ciphersuites string
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- Configpb
Attributes []SslprofileConfigpb Attribute Args - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Description string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Dhparam string
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ec
Named stringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Enable
Early stringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- Enable
Ssl stringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Is
Federated string - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Markers
[]Sslprofile
Marker Args - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Prefer
Client stringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Send
Close stringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Signature
Algorithm string - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Ssl
Ratings []SslprofileSsl Rating Args - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ssl
Session stringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Sslprofile
Id string - []Sslprofile
Tag Args - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Tenant
Ref string - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Uuid string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Versions List<SslprofileAccepted Version> - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Ciphers String - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher
Enums List<String> - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites String
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb
Attributes List<SslprofileConfigpb Attribute> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam String
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec
Named StringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable
Early StringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable
Ssl StringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is
Federated String - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers
List<Sslprofile
Marker> - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer
Client StringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send
Close StringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature
Algorithm String - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl
Ratings List<SslprofileSsl Rating> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl
Session StringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile
Id String - List<Sslprofile
Tag> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref String - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type String
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Versions SslprofileAccepted Version[] - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Ciphers string - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher
Enums string[] - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites string
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb
Attributes SslprofileConfigpb Attribute[] - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam string
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec
Named stringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable
Early stringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable
Ssl stringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is
Federated string - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers
Sslprofile
Marker[] - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer
Client stringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send
Close stringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature
Algorithm string - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl
Ratings SslprofileSsl Rating[] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl
Session stringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile
Id string - Sslprofile
Tag[] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref string - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted_
versions Sequence[SslprofileAccepted Version Args] - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted_
ciphers str - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher_
enums Sequence[str] - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites str
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb_
attributes Sequence[SslprofileConfigpb Attribute Args] - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description str
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam str
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec_
named_ strcurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable_
early_ strdata - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable_
ssl_ strsession_ reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is_
federated str - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers
Sequence[Sslprofile
Marker Args] - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name str
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer_
client_ strcipher_ ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send_
close_ strnotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature_
algorithm str - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl_
ratings Sequence[SslprofileSsl Rating Args] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl_
session_ strtimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile_
id str - Sequence[Sslprofile
Tag Args] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant_
ref str - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type str
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid str
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Versions List<Property Map> - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Ciphers String - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher
Enums List<String> - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites String
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb
Attributes List<Property Map> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam String
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec
Named StringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable
Early StringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable
Ssl StringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is
Federated String - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers List<Property Map>
- List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer
Client StringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send
Close StringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature
Algorithm String - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl
Ratings List<Property Map> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl
Session StringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile
Id String - List<Property Map>
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref String - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type String
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Outputs
All input properties are implicitly available as output properties. Additionally, the Sslprofile resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Sslprofile Resource
Get an existing Sslprofile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: SslprofileState, opts?: CustomResourceOptions): Sslprofile
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
accepted_ciphers: Optional[str] = None,
accepted_versions: Optional[Sequence[SslprofileAcceptedVersionArgs]] = None,
cipher_enums: Optional[Sequence[str]] = None,
ciphersuites: Optional[str] = None,
configpb_attributes: Optional[Sequence[SslprofileConfigpbAttributeArgs]] = None,
description: Optional[str] = None,
dhparam: Optional[str] = None,
ec_named_curve: Optional[str] = None,
enable_early_data: Optional[str] = None,
enable_ssl_session_reuse: Optional[str] = None,
is_federated: Optional[str] = None,
markers: Optional[Sequence[SslprofileMarkerArgs]] = None,
name: Optional[str] = None,
prefer_client_cipher_ordering: Optional[str] = None,
send_close_notify: Optional[str] = None,
signature_algorithm: Optional[str] = None,
ssl_ratings: Optional[Sequence[SslprofileSslRatingArgs]] = None,
ssl_session_timeout: Optional[str] = None,
sslprofile_id: Optional[str] = None,
tags: Optional[Sequence[SslprofileTagArgs]] = None,
tenant_ref: Optional[str] = None,
type: Optional[str] = None,
uuid: Optional[str] = None) -> Sslprofile
func GetSslprofile(ctx *Context, name string, id IDInput, state *SslprofileState, opts ...ResourceOption) (*Sslprofile, error)
public static Sslprofile Get(string name, Input<string> id, SslprofileState? state, CustomResourceOptions? opts = null)
public static Sslprofile get(String name, Output<String> id, SslprofileState state, CustomResourceOptions options)
resources: _: type: avi:Sslprofile get: id: ${id}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Accepted
Ciphers string - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Accepted
Versions List<SslprofileAccepted Version> - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Cipher
Enums List<string> - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- Ciphersuites string
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- Configpb
Attributes List<SslprofileConfigpb Attribute> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Description string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Dhparam string
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ec
Named stringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Enable
Early stringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- Enable
Ssl stringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Is
Federated string - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Markers
List<Sslprofile
Marker> - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Prefer
Client stringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Send
Close stringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Signature
Algorithm string - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Ssl
Ratings List<SslprofileSsl Rating> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ssl
Session stringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Sslprofile
Id string - List<Sslprofile
Tag> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Tenant
Ref string - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Uuid string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Accepted
Ciphers string - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Accepted
Versions []SslprofileAccepted Version Args - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Cipher
Enums []string - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- Ciphersuites string
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- Configpb
Attributes []SslprofileConfigpb Attribute Args - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Description string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Dhparam string
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ec
Named stringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Enable
Early stringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- Enable
Ssl stringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Is
Federated string - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- Markers
[]Sslprofile
Marker Args - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Name string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Prefer
Client stringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Send
Close stringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Signature
Algorithm string - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- Ssl
Ratings []SslprofileSsl Rating Args - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Ssl
Session stringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Sslprofile
Id string - []Sslprofile
Tag Args - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Tenant
Ref string - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Uuid string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Ciphers String - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Versions List<SslprofileAccepted Version> - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher
Enums List<String> - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites String
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb
Attributes List<SslprofileConfigpb Attribute> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam String
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec
Named StringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable
Early StringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable
Ssl StringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is
Federated String - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers
List<Sslprofile
Marker> - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer
Client StringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send
Close StringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature
Algorithm String - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl
Ratings List<SslprofileSsl Rating> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl
Session StringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile
Id String - List<Sslprofile
Tag> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref String - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type String
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Ciphers string - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Versions SslprofileAccepted Version[] - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher
Enums string[] - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites string
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb
Attributes SslprofileConfigpb Attribute[] - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam string
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec
Named stringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable
Early stringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable
Ssl stringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is
Federated string - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers
Sslprofile
Marker[] - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer
Client stringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send
Close stringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature
Algorithm string - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl
Ratings SslprofileSsl Rating[] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl
Session stringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile
Id string - Sslprofile
Tag[] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref string - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid string
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted_
ciphers str - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted_
versions Sequence[SslprofileAccepted Version Args] - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher_
enums Sequence[str] - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites str
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb_
attributes Sequence[SslprofileConfigpb Attribute Args] - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description str
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam str
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec_
named_ strcurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable_
early_ strdata - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable_
ssl_ strsession_ reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is_
federated str - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers
Sequence[Sslprofile
Marker Args] - List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name str
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer_
client_ strcipher_ ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send_
close_ strnotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature_
algorithm str - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl_
ratings Sequence[SslprofileSsl Rating Args] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl_
session_ strtimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile_
id str - Sequence[Sslprofile
Tag Args] - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant_
ref str - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type str
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid str
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Ciphers String - Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- accepted
Versions List<Property Map> - Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- cipher
Enums List<String> - Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
- ciphersuites String
- Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
- configpb
Attributes List<Property Map> - Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- description String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- dhparam String
- Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ec
Named StringCurve - Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- enable
Early StringData - Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
- enable
Ssl StringSession Reuse - Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- is
Federated String - It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
- markers List<Property Map>
- List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- name String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- prefer
Client StringCipher Ordering - Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- send
Close StringNotify - Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- signature
Algorithm String - Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
- ssl
Ratings List<Property Map> - Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- ssl
Session StringTimeout - The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- sslprofile
Id String - List<Property Map>
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- tenant
Ref String - It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type String
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- uuid String
- Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Supporting Types
SslprofileAcceptedVersion, SslprofileAcceptedVersionArgs
- Type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- Type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type String
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type string
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type str
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
- type String
- Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslprofileConfigpbAttribute, SslprofileConfigpbAttributeArgs
- Version string
- Version string
- version String
- version string
- version str
- version String
SslprofileMarker, SslprofileMarkerArgs
SslprofileSslRating, SslprofileSslRatingArgs
- Compatibility
Rating string - Performance
Rating string - Security
Score string
- Compatibility
Rating string - Performance
Rating string - Security
Score string
- compatibility
Rating String - performance
Rating String - security
Score String
- compatibility
Rating string - performance
Rating string - security
Score string
- compatibility
Rating String - performance
Rating String - security
Score String
SslprofileTag, SslprofileTagArgs
Package Details
- Repository
- avi vmware/terraform-provider-avi
- License
- Notes
- This Pulumi package is based on the
avi
Terraform Provider.