tencentcloud.WafSaasDomain
Explore with Pulumi AI
Provides a resource to create a waf saas_domain
Example Usage
If upstream_type is 0
Create a basic waf saas domain
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.WafSaasDomain("example", {
domain: "tf.example.com",
instanceId: "waf_2kxtlbky01b3wceb",
ports: [{
port: "80",
protocol: "http",
upstreamPort: "80",
upstreamProtocol: "http",
}],
srcLists: ["1.1.1.1"],
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.WafSaasDomain("example",
domain="tf.example.com",
instance_id="waf_2kxtlbky01b3wceb",
ports=[{
"port": "80",
"protocol": "http",
"upstream_port": "80",
"upstream_protocol": "http",
}],
src_lists=["1.1.1.1"])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewWafSaasDomain(ctx, "example", &tencentcloud.WafSaasDomainArgs{
Domain: pulumi.String("tf.example.com"),
InstanceId: pulumi.String("waf_2kxtlbky01b3wceb"),
Ports: tencentcloud.WafSaasDomainPortArray{
&tencentcloud.WafSaasDomainPortArgs{
Port: pulumi.String("80"),
Protocol: pulumi.String("http"),
UpstreamPort: pulumi.String("80"),
UpstreamProtocol: pulumi.String("http"),
},
},
SrcLists: pulumi.StringArray{
pulumi.String("1.1.1.1"),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.WafSaasDomain("example", new()
{
Domain = "tf.example.com",
InstanceId = "waf_2kxtlbky01b3wceb",
Ports = new[]
{
new Tencentcloud.Inputs.WafSaasDomainPortArgs
{
Port = "80",
Protocol = "http",
UpstreamPort = "80",
UpstreamProtocol = "http",
},
},
SrcLists = new[]
{
"1.1.1.1",
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.WafSaasDomain;
import com.pulumi.tencentcloud.WafSaasDomainArgs;
import com.pulumi.tencentcloud.inputs.WafSaasDomainPortArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new WafSaasDomain("example", WafSaasDomainArgs.builder()
.domain("tf.example.com")
.instanceId("waf_2kxtlbky01b3wceb")
.ports(WafSaasDomainPortArgs.builder()
.port("80")
.protocol("http")
.upstreamPort("80")
.upstreamProtocol("http")
.build())
.srcLists("1.1.1.1")
.build());
}
}
resources:
example:
type: tencentcloud:WafSaasDomain
properties:
domain: tf.example.com
instanceId: waf_2kxtlbky01b3wceb
ports:
- port: '80'
protocol: http
upstreamPort: '80'
upstreamProtocol: http
srcLists:
- 1.1.1.1
Create a load balancing strategy is weighted polling saas domain
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.WafSaasDomain("example", {
domain: "tf.example.com",
instanceId: "waf_2kxtlbky01b3wceb",
loadBalance: "2",
ports: [{
port: "80",
protocol: "http",
upstreamPort: "80",
upstreamProtocol: "http",
}],
srcLists: [
"1.1.1.1",
"2.2.2.2",
],
weights: [
30,
50,
],
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.WafSaasDomain("example",
domain="tf.example.com",
instance_id="waf_2kxtlbky01b3wceb",
load_balance="2",
ports=[{
"port": "80",
"protocol": "http",
"upstream_port": "80",
"upstream_protocol": "http",
}],
src_lists=[
"1.1.1.1",
"2.2.2.2",
],
weights=[
30,
50,
])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewWafSaasDomain(ctx, "example", &tencentcloud.WafSaasDomainArgs{
Domain: pulumi.String("tf.example.com"),
InstanceId: pulumi.String("waf_2kxtlbky01b3wceb"),
LoadBalance: pulumi.String("2"),
Ports: tencentcloud.WafSaasDomainPortArray{
&tencentcloud.WafSaasDomainPortArgs{
Port: pulumi.String("80"),
Protocol: pulumi.String("http"),
UpstreamPort: pulumi.String("80"),
UpstreamProtocol: pulumi.String("http"),
},
},
SrcLists: pulumi.StringArray{
pulumi.String("1.1.1.1"),
pulumi.String("2.2.2.2"),
},
Weights: pulumi.Float64Array{
pulumi.Float64(30),
pulumi.Float64(50),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.WafSaasDomain("example", new()
{
Domain = "tf.example.com",
InstanceId = "waf_2kxtlbky01b3wceb",
LoadBalance = "2",
Ports = new[]
{
new Tencentcloud.Inputs.WafSaasDomainPortArgs
{
Port = "80",
Protocol = "http",
UpstreamPort = "80",
UpstreamProtocol = "http",
},
},
SrcLists = new[]
{
"1.1.1.1",
"2.2.2.2",
},
Weights = new[]
{
30,
50,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.WafSaasDomain;
import com.pulumi.tencentcloud.WafSaasDomainArgs;
import com.pulumi.tencentcloud.inputs.WafSaasDomainPortArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new WafSaasDomain("example", WafSaasDomainArgs.builder()
.domain("tf.example.com")
.instanceId("waf_2kxtlbky01b3wceb")
.loadBalance("2")
.ports(WafSaasDomainPortArgs.builder()
.port("80")
.protocol("http")
.upstreamPort("80")
.upstreamProtocol("http")
.build())
.srcLists(
"1.1.1.1",
"2.2.2.2")
.weights(
30,
50)
.build());
}
}
resources:
example:
type: tencentcloud:WafSaasDomain
properties:
domain: tf.example.com
instanceId: waf_2kxtlbky01b3wceb
loadBalance: '2'
ports:
- port: '80'
protocol: http
upstreamPort: '80'
upstreamProtocol: http
srcLists:
- 1.1.1.1
- 2.2.2.2
weights:
- 30
- 50
If upstream_type is 1
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.WafSaasDomain("example", {
domain: "tf.example.com",
instanceId: "waf_2kxtlbky01b3wceb",
ports: [{
port: "80",
protocol: "http",
upstreamPort: "80",
upstreamProtocol: "http",
}],
upstreamDomain: "test.com",
upstreamType: 1,
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.WafSaasDomain("example",
domain="tf.example.com",
instance_id="waf_2kxtlbky01b3wceb",
ports=[{
"port": "80",
"protocol": "http",
"upstream_port": "80",
"upstream_protocol": "http",
}],
upstream_domain="test.com",
upstream_type=1)
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewWafSaasDomain(ctx, "example", &tencentcloud.WafSaasDomainArgs{
Domain: pulumi.String("tf.example.com"),
InstanceId: pulumi.String("waf_2kxtlbky01b3wceb"),
Ports: tencentcloud.WafSaasDomainPortArray{
&tencentcloud.WafSaasDomainPortArgs{
Port: pulumi.String("80"),
Protocol: pulumi.String("http"),
UpstreamPort: pulumi.String("80"),
UpstreamProtocol: pulumi.String("http"),
},
},
UpstreamDomain: pulumi.String("test.com"),
UpstreamType: pulumi.Float64(1),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.WafSaasDomain("example", new()
{
Domain = "tf.example.com",
InstanceId = "waf_2kxtlbky01b3wceb",
Ports = new[]
{
new Tencentcloud.Inputs.WafSaasDomainPortArgs
{
Port = "80",
Protocol = "http",
UpstreamPort = "80",
UpstreamProtocol = "http",
},
},
UpstreamDomain = "test.com",
UpstreamType = 1,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.WafSaasDomain;
import com.pulumi.tencentcloud.WafSaasDomainArgs;
import com.pulumi.tencentcloud.inputs.WafSaasDomainPortArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new WafSaasDomain("example", WafSaasDomainArgs.builder()
.domain("tf.example.com")
.instanceId("waf_2kxtlbky01b3wceb")
.ports(WafSaasDomainPortArgs.builder()
.port("80")
.protocol("http")
.upstreamPort("80")
.upstreamProtocol("http")
.build())
.upstreamDomain("test.com")
.upstreamType(1)
.build());
}
}
resources:
example:
type: tencentcloud:WafSaasDomain
properties:
domain: tf.example.com
instanceId: waf_2kxtlbky01b3wceb
ports:
- port: '80'
protocol: http
upstreamPort: '80'
upstreamProtocol: http
upstreamDomain: test.com
upstreamType: 1
Create a waf saas domain with set Http&Https
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.WafSaasDomain("example", {
certType: 2,
domain: "tf.example.com",
httpsRewrite: 1,
instanceId: "waf_2kxtlbky01b3wceb",
ipHeaders: [
"headers_1",
"headers_2",
"headers_3",
],
isCdn: 3,
loadBalance: "2",
ports: [
{
port: "80",
protocol: "http",
upstreamPort: "80",
upstreamProtocol: "http",
},
{
port: "443",
protocol: "https",
upstreamPort: "443",
upstreamProtocol: "https",
},
],
srcLists: [
"1.1.1.1",
"2.2.2.2",
],
sslId: "3a6B5y8v",
upstreamScheme: "https",
weights: [
50,
60,
],
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.WafSaasDomain("example",
cert_type=2,
domain="tf.example.com",
https_rewrite=1,
instance_id="waf_2kxtlbky01b3wceb",
ip_headers=[
"headers_1",
"headers_2",
"headers_3",
],
is_cdn=3,
load_balance="2",
ports=[
{
"port": "80",
"protocol": "http",
"upstream_port": "80",
"upstream_protocol": "http",
},
{
"port": "443",
"protocol": "https",
"upstream_port": "443",
"upstream_protocol": "https",
},
],
src_lists=[
"1.1.1.1",
"2.2.2.2",
],
ssl_id="3a6B5y8v",
upstream_scheme="https",
weights=[
50,
60,
])
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewWafSaasDomain(ctx, "example", &tencentcloud.WafSaasDomainArgs{
CertType: pulumi.Float64(2),
Domain: pulumi.String("tf.example.com"),
HttpsRewrite: pulumi.Float64(1),
InstanceId: pulumi.String("waf_2kxtlbky01b3wceb"),
IpHeaders: pulumi.StringArray{
pulumi.String("headers_1"),
pulumi.String("headers_2"),
pulumi.String("headers_3"),
},
IsCdn: pulumi.Float64(3),
LoadBalance: pulumi.String("2"),
Ports: tencentcloud.WafSaasDomainPortArray{
&tencentcloud.WafSaasDomainPortArgs{
Port: pulumi.String("80"),
Protocol: pulumi.String("http"),
UpstreamPort: pulumi.String("80"),
UpstreamProtocol: pulumi.String("http"),
},
&tencentcloud.WafSaasDomainPortArgs{
Port: pulumi.String("443"),
Protocol: pulumi.String("https"),
UpstreamPort: pulumi.String("443"),
UpstreamProtocol: pulumi.String("https"),
},
},
SrcLists: pulumi.StringArray{
pulumi.String("1.1.1.1"),
pulumi.String("2.2.2.2"),
},
SslId: pulumi.String("3a6B5y8v"),
UpstreamScheme: pulumi.String("https"),
Weights: pulumi.Float64Array{
pulumi.Float64(50),
pulumi.Float64(60),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.WafSaasDomain("example", new()
{
CertType = 2,
Domain = "tf.example.com",
HttpsRewrite = 1,
InstanceId = "waf_2kxtlbky01b3wceb",
IpHeaders = new[]
{
"headers_1",
"headers_2",
"headers_3",
},
IsCdn = 3,
LoadBalance = "2",
Ports = new[]
{
new Tencentcloud.Inputs.WafSaasDomainPortArgs
{
Port = "80",
Protocol = "http",
UpstreamPort = "80",
UpstreamProtocol = "http",
},
new Tencentcloud.Inputs.WafSaasDomainPortArgs
{
Port = "443",
Protocol = "https",
UpstreamPort = "443",
UpstreamProtocol = "https",
},
},
SrcLists = new[]
{
"1.1.1.1",
"2.2.2.2",
},
SslId = "3a6B5y8v",
UpstreamScheme = "https",
Weights = new[]
{
50,
60,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.WafSaasDomain;
import com.pulumi.tencentcloud.WafSaasDomainArgs;
import com.pulumi.tencentcloud.inputs.WafSaasDomainPortArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new WafSaasDomain("example", WafSaasDomainArgs.builder()
.certType(2)
.domain("tf.example.com")
.httpsRewrite(1)
.instanceId("waf_2kxtlbky01b3wceb")
.ipHeaders(
"headers_1",
"headers_2",
"headers_3")
.isCdn(3)
.loadBalance("2")
.ports(
WafSaasDomainPortArgs.builder()
.port("80")
.protocol("http")
.upstreamPort("80")
.upstreamProtocol("http")
.build(),
WafSaasDomainPortArgs.builder()
.port("443")
.protocol("https")
.upstreamPort("443")
.upstreamProtocol("https")
.build())
.srcLists(
"1.1.1.1",
"2.2.2.2")
.sslId("3a6B5y8v")
.upstreamScheme("https")
.weights(
50,
60)
.build());
}
}
resources:
example:
type: tencentcloud:WafSaasDomain
properties:
certType: 2
domain: tf.example.com
httpsRewrite: 1
instanceId: waf_2kxtlbky01b3wceb
ipHeaders:
- headers_1
- headers_2
- headers_3
isCdn: 3
loadBalance: '2'
ports:
- port: '80'
protocol: http
upstreamPort: '80'
upstreamProtocol: http
- port: '443'
protocol: https
upstreamPort: '443'
upstreamProtocol: https
srcLists:
- 1.1.1.1
- 2.2.2.2
sslId: 3a6B5y8v
upstreamScheme: https
weights:
- 50
- 60
Create a complete waf saas domain
import * as pulumi from "@pulumi/pulumi";
import * as tencentcloud from "@pulumi/tencentcloud";
const example = new tencentcloud.WafSaasDomain("example", {
activeCheck: 1,
apiSafeStatus: 1,
botStatus: 1,
certType: 2,
cipherTemplate: 1,
domain: "tf.example.com",
httpsRewrite: 1,
instanceId: "waf_2kxtlbky01b3wceb",
ipHeaders: [
"headers_1",
"headers_2",
"headers_3",
],
isCdn: 3,
isHttp2: 1,
isKeepAlive: "1",
loadBalance: "2",
ports: [
{
port: "80",
protocol: "http",
upstreamPort: "80",
upstreamProtocol: "http",
},
{
port: "443",
protocol: "https",
upstreamPort: "443",
upstreamProtocol: "https",
},
],
proxyReadTimeout: 500,
proxySendTimeout: 500,
sniHost: "3.3.3.3",
sniType: 3,
srcLists: [
"1.1.1.1",
"2.2.2.2",
],
sslId: "3a6B5y8v",
tlsVersion: 3,
upstreamScheme: "https",
weights: [
50,
60,
],
xffReset: 1,
});
import pulumi
import pulumi_tencentcloud as tencentcloud
example = tencentcloud.WafSaasDomain("example",
active_check=1,
api_safe_status=1,
bot_status=1,
cert_type=2,
cipher_template=1,
domain="tf.example.com",
https_rewrite=1,
instance_id="waf_2kxtlbky01b3wceb",
ip_headers=[
"headers_1",
"headers_2",
"headers_3",
],
is_cdn=3,
is_http2=1,
is_keep_alive="1",
load_balance="2",
ports=[
{
"port": "80",
"protocol": "http",
"upstream_port": "80",
"upstream_protocol": "http",
},
{
"port": "443",
"protocol": "https",
"upstream_port": "443",
"upstream_protocol": "https",
},
],
proxy_read_timeout=500,
proxy_send_timeout=500,
sni_host="3.3.3.3",
sni_type=3,
src_lists=[
"1.1.1.1",
"2.2.2.2",
],
ssl_id="3a6B5y8v",
tls_version=3,
upstream_scheme="https",
weights=[
50,
60,
],
xff_reset=1)
package main
import (
"github.com/pulumi/pulumi-terraform-provider/sdks/go/tencentcloud/tencentcloud"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := tencentcloud.NewWafSaasDomain(ctx, "example", &tencentcloud.WafSaasDomainArgs{
ActiveCheck: pulumi.Float64(1),
ApiSafeStatus: pulumi.Float64(1),
BotStatus: pulumi.Float64(1),
CertType: pulumi.Float64(2),
CipherTemplate: pulumi.Float64(1),
Domain: pulumi.String("tf.example.com"),
HttpsRewrite: pulumi.Float64(1),
InstanceId: pulumi.String("waf_2kxtlbky01b3wceb"),
IpHeaders: pulumi.StringArray{
pulumi.String("headers_1"),
pulumi.String("headers_2"),
pulumi.String("headers_3"),
},
IsCdn: pulumi.Float64(3),
IsHttp2: pulumi.Float64(1),
IsKeepAlive: pulumi.String("1"),
LoadBalance: pulumi.String("2"),
Ports: tencentcloud.WafSaasDomainPortArray{
&tencentcloud.WafSaasDomainPortArgs{
Port: pulumi.String("80"),
Protocol: pulumi.String("http"),
UpstreamPort: pulumi.String("80"),
UpstreamProtocol: pulumi.String("http"),
},
&tencentcloud.WafSaasDomainPortArgs{
Port: pulumi.String("443"),
Protocol: pulumi.String("https"),
UpstreamPort: pulumi.String("443"),
UpstreamProtocol: pulumi.String("https"),
},
},
ProxyReadTimeout: pulumi.Float64(500),
ProxySendTimeout: pulumi.Float64(500),
SniHost: pulumi.String("3.3.3.3"),
SniType: pulumi.Float64(3),
SrcLists: pulumi.StringArray{
pulumi.String("1.1.1.1"),
pulumi.String("2.2.2.2"),
},
SslId: pulumi.String("3a6B5y8v"),
TlsVersion: pulumi.Float64(3),
UpstreamScheme: pulumi.String("https"),
Weights: pulumi.Float64Array{
pulumi.Float64(50),
pulumi.Float64(60),
},
XffReset: pulumi.Float64(1),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Tencentcloud = Pulumi.Tencentcloud;
return await Deployment.RunAsync(() =>
{
var example = new Tencentcloud.WafSaasDomain("example", new()
{
ActiveCheck = 1,
ApiSafeStatus = 1,
BotStatus = 1,
CertType = 2,
CipherTemplate = 1,
Domain = "tf.example.com",
HttpsRewrite = 1,
InstanceId = "waf_2kxtlbky01b3wceb",
IpHeaders = new[]
{
"headers_1",
"headers_2",
"headers_3",
},
IsCdn = 3,
IsHttp2 = 1,
IsKeepAlive = "1",
LoadBalance = "2",
Ports = new[]
{
new Tencentcloud.Inputs.WafSaasDomainPortArgs
{
Port = "80",
Protocol = "http",
UpstreamPort = "80",
UpstreamProtocol = "http",
},
new Tencentcloud.Inputs.WafSaasDomainPortArgs
{
Port = "443",
Protocol = "https",
UpstreamPort = "443",
UpstreamProtocol = "https",
},
},
ProxyReadTimeout = 500,
ProxySendTimeout = 500,
SniHost = "3.3.3.3",
SniType = 3,
SrcLists = new[]
{
"1.1.1.1",
"2.2.2.2",
},
SslId = "3a6B5y8v",
TlsVersion = 3,
UpstreamScheme = "https",
Weights = new[]
{
50,
60,
},
XffReset = 1,
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.tencentcloud.WafSaasDomain;
import com.pulumi.tencentcloud.WafSaasDomainArgs;
import com.pulumi.tencentcloud.inputs.WafSaasDomainPortArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new WafSaasDomain("example", WafSaasDomainArgs.builder()
.activeCheck(1)
.apiSafeStatus(1)
.botStatus(1)
.certType(2)
.cipherTemplate(1)
.domain("tf.example.com")
.httpsRewrite(1)
.instanceId("waf_2kxtlbky01b3wceb")
.ipHeaders(
"headers_1",
"headers_2",
"headers_3")
.isCdn(3)
.isHttp2(1)
.isKeepAlive("1")
.loadBalance("2")
.ports(
WafSaasDomainPortArgs.builder()
.port("80")
.protocol("http")
.upstreamPort("80")
.upstreamProtocol("http")
.build(),
WafSaasDomainPortArgs.builder()
.port("443")
.protocol("https")
.upstreamPort("443")
.upstreamProtocol("https")
.build())
.proxyReadTimeout(500)
.proxySendTimeout(500)
.sniHost("3.3.3.3")
.sniType(3)
.srcLists(
"1.1.1.1",
"2.2.2.2")
.sslId("3a6B5y8v")
.tlsVersion(3)
.upstreamScheme("https")
.weights(
50,
60)
.xffReset(1)
.build());
}
}
resources:
example:
type: tencentcloud:WafSaasDomain
properties:
activeCheck: 1
apiSafeStatus: 1
botStatus: 1
certType: 2
cipherTemplate: 1
domain: tf.example.com
httpsRewrite: 1
instanceId: waf_2kxtlbky01b3wceb
ipHeaders:
- headers_1
- headers_2
- headers_3
isCdn: 3
isHttp2: 1
isKeepAlive: '1'
loadBalance: '2'
ports:
- port: '80'
protocol: http
upstreamPort: '80'
upstreamProtocol: http
- port: '443'
protocol: https
upstreamPort: '443'
upstreamProtocol: https
proxyReadTimeout: 500
proxySendTimeout: 500
sniHost: 3.3.3.3
sniType: 3
srcLists:
- 1.1.1.1
- 2.2.2.2
sslId: 3a6B5y8v
tlsVersion: 3
upstreamScheme: https
weights:
- 50
- 60
xffReset: 1
Create WafSaasDomain Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new WafSaasDomain(name: string, args: WafSaasDomainArgs, opts?: CustomResourceOptions);
@overload
def WafSaasDomain(resource_name: str,
args: WafSaasDomainArgs,
opts: Optional[ResourceOptions] = None)
@overload
def WafSaasDomain(resource_name: str,
opts: Optional[ResourceOptions] = None,
domain: Optional[str] = None,
ports: Optional[Sequence[WafSaasDomainPortArgs]] = None,
instance_id: Optional[str] = None,
is_websocket: Optional[float] = None,
private_key: Optional[str] = None,
cipher_template: Optional[float] = None,
ciphers: Optional[Sequence[float]] = None,
cls_status: Optional[float] = None,
cert: Optional[str] = None,
https_rewrite: Optional[float] = None,
https_upstream_port: Optional[str] = None,
bot_status: Optional[float] = None,
ip_headers: Optional[Sequence[str]] = None,
is_cdn: Optional[float] = None,
is_http2: Optional[float] = None,
is_keep_alive: Optional[str] = None,
active_check: Optional[float] = None,
cert_type: Optional[float] = None,
load_balance: Optional[str] = None,
proxy_send_timeout: Optional[float] = None,
proxy_read_timeout: Optional[float] = None,
api_safe_status: Optional[float] = None,
sni_host: Optional[str] = None,
sni_type: Optional[float] = None,
src_lists: Optional[Sequence[str]] = None,
ssl_id: Optional[str] = None,
status: Optional[float] = None,
tls_version: Optional[float] = None,
upstream_domain: Optional[str] = None,
upstream_scheme: Optional[str] = None,
upstream_type: Optional[float] = None,
waf_saas_domain_id: Optional[str] = None,
weights: Optional[Sequence[float]] = None,
xff_reset: Optional[float] = None)
func NewWafSaasDomain(ctx *Context, name string, args WafSaasDomainArgs, opts ...ResourceOption) (*WafSaasDomain, error)
public WafSaasDomain(string name, WafSaasDomainArgs args, CustomResourceOptions? opts = null)
public WafSaasDomain(String name, WafSaasDomainArgs args)
public WafSaasDomain(String name, WafSaasDomainArgs args, CustomResourceOptions options)
type: tencentcloud:WafSaasDomain
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args WafSaasDomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args WafSaasDomainArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args WafSaasDomainArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args WafSaasDomainArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args WafSaasDomainArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
WafSaasDomain Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The WafSaasDomain resource accepts the following input properties:
- Domain string
- Domain names that require defense.
- Instance
Id string - Unique ID of Instance.
- Ports
List<Waf
Saas Domain Port> - This field needs to be set for multiple ports in the upstream server.
- Active
Check double - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- Api
Safe doubleStatus - Whether to enable api safe, 1 enable, 0 disable.
- Bot
Status double - Whether to enable bot, 1 enable, 0 disable.
- Cert string
- Certificate content, When CertType=1, this parameter needs to be filled.
- Cert
Type double - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- Cipher
Template double - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- Ciphers List<double>
- Encryption Suite Information.
- Cls
Status double - Whether to enable access logs, 1 enable, 0 disable.
- Https
Rewrite double - Whether redirect to https, 1 will redirect and 0 will not.
- Https
Upstream stringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- Ip
Headers List<string> - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- Is
Cdn double - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- Is
Http2 double - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- Is
Keep stringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- Is
Websocket double - Is WebSocket support enabled. 1 means enabled, 0 does not.
- Load
Balance string - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- Private
Key string - Certificate key, When CertType=1, this parameter needs to be filled.
- Proxy
Read doubleTimeout - 300s.
- Proxy
Send doubleTimeout - 300s.
- Sni
Host string - When SniType=3, this parameter needs to be filled in to represent a custom host.
- Sni
Type double - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- Src
Lists List<string> - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- Ssl
Id string - Certificate ID, When CertType=2, this parameter needs to be filled.
- Status double
- Binding status between waf and LB, 0:not bind, 1:binding.
- Tls
Version double - Version of TLS Protocol.
- Upstream
Domain string - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- Upstream
Scheme string - Upstream scheme for https, http or https.
- Upstream
Type double - Upstream type, 0 represents IP, 1 represents domain name.
- Waf
Saas stringDomain Id - ID of the resource.
- Weights List<double>
- Weight of each upstream.
- Xff
Reset double - 0:disable xff reset; 1:enable xff reset.
- Domain string
- Domain names that require defense.
- Instance
Id string - Unique ID of Instance.
- Ports
[]Waf
Saas Domain Port Args - This field needs to be set for multiple ports in the upstream server.
- Active
Check float64 - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- Api
Safe float64Status - Whether to enable api safe, 1 enable, 0 disable.
- Bot
Status float64 - Whether to enable bot, 1 enable, 0 disable.
- Cert string
- Certificate content, When CertType=1, this parameter needs to be filled.
- Cert
Type float64 - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- Cipher
Template float64 - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- Ciphers []float64
- Encryption Suite Information.
- Cls
Status float64 - Whether to enable access logs, 1 enable, 0 disable.
- Https
Rewrite float64 - Whether redirect to https, 1 will redirect and 0 will not.
- Https
Upstream stringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- Ip
Headers []string - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- Is
Cdn float64 - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- Is
Http2 float64 - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- Is
Keep stringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- Is
Websocket float64 - Is WebSocket support enabled. 1 means enabled, 0 does not.
- Load
Balance string - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- Private
Key string - Certificate key, When CertType=1, this parameter needs to be filled.
- Proxy
Read float64Timeout - 300s.
- Proxy
Send float64Timeout - 300s.
- Sni
Host string - When SniType=3, this parameter needs to be filled in to represent a custom host.
- Sni
Type float64 - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- Src
Lists []string - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- Ssl
Id string - Certificate ID, When CertType=2, this parameter needs to be filled.
- Status float64
- Binding status between waf and LB, 0:not bind, 1:binding.
- Tls
Version float64 - Version of TLS Protocol.
- Upstream
Domain string - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- Upstream
Scheme string - Upstream scheme for https, http or https.
- Upstream
Type float64 - Upstream type, 0 represents IP, 1 represents domain name.
- Waf
Saas stringDomain Id - ID of the resource.
- Weights []float64
- Weight of each upstream.
- Xff
Reset float64 - 0:disable xff reset; 1:enable xff reset.
- domain String
- Domain names that require defense.
- instance
Id String - Unique ID of Instance.
- ports
List<Waf
Saas Domain Port> - This field needs to be set for multiple ports in the upstream server.
- active
Check Double - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api
Safe DoubleStatus - Whether to enable api safe, 1 enable, 0 disable.
- bot
Status Double - Whether to enable bot, 1 enable, 0 disable.
- cert String
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert
Type Double - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher
Template Double - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers List<Double>
- Encryption Suite Information.
- cls
Status Double - Whether to enable access logs, 1 enable, 0 disable.
- https
Rewrite Double - Whether redirect to https, 1 will redirect and 0 will not.
- https
Upstream StringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- ip
Headers List<String> - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is
Cdn Double - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is
Http2 Double - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is
Keep StringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- is
Websocket Double - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load
Balance String - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- private
Key String - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy
Read DoubleTimeout - 300s.
- proxy
Send DoubleTimeout - 300s.
- sni
Host String - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni
Type Double - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src
Lists List<String> - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl
Id String - Certificate ID, When CertType=2, this parameter needs to be filled.
- status Double
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls
Version Double - Version of TLS Protocol.
- upstream
Domain String - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream
Scheme String - Upstream scheme for https, http or https.
- upstream
Type Double - Upstream type, 0 represents IP, 1 represents domain name.
- waf
Saas StringDomain Id - ID of the resource.
- weights List<Double>
- Weight of each upstream.
- xff
Reset Double - 0:disable xff reset; 1:enable xff reset.
- domain string
- Domain names that require defense.
- instance
Id string - Unique ID of Instance.
- ports
Waf
Saas Domain Port[] - This field needs to be set for multiple ports in the upstream server.
- active
Check number - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api
Safe numberStatus - Whether to enable api safe, 1 enable, 0 disable.
- bot
Status number - Whether to enable bot, 1 enable, 0 disable.
- cert string
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert
Type number - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher
Template number - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers number[]
- Encryption Suite Information.
- cls
Status number - Whether to enable access logs, 1 enable, 0 disable.
- https
Rewrite number - Whether redirect to https, 1 will redirect and 0 will not.
- https
Upstream stringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- ip
Headers string[] - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is
Cdn number - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is
Http2 number - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is
Keep stringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- is
Websocket number - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load
Balance string - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- private
Key string - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy
Read numberTimeout - 300s.
- proxy
Send numberTimeout - 300s.
- sni
Host string - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni
Type number - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src
Lists string[] - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl
Id string - Certificate ID, When CertType=2, this parameter needs to be filled.
- status number
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls
Version number - Version of TLS Protocol.
- upstream
Domain string - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream
Scheme string - Upstream scheme for https, http or https.
- upstream
Type number - Upstream type, 0 represents IP, 1 represents domain name.
- waf
Saas stringDomain Id - ID of the resource.
- weights number[]
- Weight of each upstream.
- xff
Reset number - 0:disable xff reset; 1:enable xff reset.
- domain str
- Domain names that require defense.
- instance_
id str - Unique ID of Instance.
- ports
Sequence[Waf
Saas Domain Port Args] - This field needs to be set for multiple ports in the upstream server.
- active_
check float - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api_
safe_ floatstatus - Whether to enable api safe, 1 enable, 0 disable.
- bot_
status float - Whether to enable bot, 1 enable, 0 disable.
- cert str
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert_
type float - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher_
template float - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers Sequence[float]
- Encryption Suite Information.
- cls_
status float - Whether to enable access logs, 1 enable, 0 disable.
- https_
rewrite float - Whether redirect to https, 1 will redirect and 0 will not.
- https_
upstream_ strport - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- ip_
headers Sequence[str] - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is_
cdn float - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is_
http2 float - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is_
keep_ stralive - Whether to enable keep-alive, 0 disable, 1 enable.
- is_
websocket float - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load_
balance str - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- private_
key str - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy_
read_ floattimeout - 300s.
- proxy_
send_ floattimeout - 300s.
- sni_
host str - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni_
type float - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src_
lists Sequence[str] - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl_
id str - Certificate ID, When CertType=2, this parameter needs to be filled.
- status float
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls_
version float - Version of TLS Protocol.
- upstream_
domain str - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream_
scheme str - Upstream scheme for https, http or https.
- upstream_
type float - Upstream type, 0 represents IP, 1 represents domain name.
- waf_
saas_ strdomain_ id - ID of the resource.
- weights Sequence[float]
- Weight of each upstream.
- xff_
reset float - 0:disable xff reset; 1:enable xff reset.
- domain String
- Domain names that require defense.
- instance
Id String - Unique ID of Instance.
- ports List<Property Map>
- This field needs to be set for multiple ports in the upstream server.
- active
Check Number - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api
Safe NumberStatus - Whether to enable api safe, 1 enable, 0 disable.
- bot
Status Number - Whether to enable bot, 1 enable, 0 disable.
- cert String
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert
Type Number - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher
Template Number - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers List<Number>
- Encryption Suite Information.
- cls
Status Number - Whether to enable access logs, 1 enable, 0 disable.
- https
Rewrite Number - Whether redirect to https, 1 will redirect and 0 will not.
- https
Upstream StringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- ip
Headers List<String> - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is
Cdn Number - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is
Http2 Number - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is
Keep StringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- is
Websocket Number - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load
Balance String - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- private
Key String - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy
Read NumberTimeout - 300s.
- proxy
Send NumberTimeout - 300s.
- sni
Host String - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni
Type Number - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src
Lists List<String> - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl
Id String - Certificate ID, When CertType=2, this parameter needs to be filled.
- status Number
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls
Version Number - Version of TLS Protocol.
- upstream
Domain String - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream
Scheme String - Upstream scheme for https, http or https.
- upstream
Type Number - Upstream type, 0 represents IP, 1 represents domain name.
- waf
Saas StringDomain Id - ID of the resource.
- weights List<Number>
- Weight of each upstream.
- xff
Reset Number - 0:disable xff reset; 1:enable xff reset.
Outputs
All input properties are implicitly available as output properties. Additionally, the WafSaasDomain resource produces the following output properties:
Look up Existing WafSaasDomain Resource
Get an existing WafSaasDomain resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: WafSaasDomainState, opts?: CustomResourceOptions): WafSaasDomain
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
active_check: Optional[float] = None,
api_safe_status: Optional[float] = None,
bot_status: Optional[float] = None,
cert: Optional[str] = None,
cert_type: Optional[float] = None,
cipher_template: Optional[float] = None,
ciphers: Optional[Sequence[float]] = None,
cls_status: Optional[float] = None,
domain: Optional[str] = None,
domain_id: Optional[str] = None,
https_rewrite: Optional[float] = None,
https_upstream_port: Optional[str] = None,
instance_id: Optional[str] = None,
ip_headers: Optional[Sequence[str]] = None,
is_cdn: Optional[float] = None,
is_http2: Optional[float] = None,
is_keep_alive: Optional[str] = None,
is_websocket: Optional[float] = None,
load_balance: Optional[str] = None,
ports: Optional[Sequence[WafSaasDomainPortArgs]] = None,
private_key: Optional[str] = None,
proxy_read_timeout: Optional[float] = None,
proxy_send_timeout: Optional[float] = None,
sni_host: Optional[str] = None,
sni_type: Optional[float] = None,
src_lists: Optional[Sequence[str]] = None,
ssl_id: Optional[str] = None,
status: Optional[float] = None,
tls_version: Optional[float] = None,
upstream_domain: Optional[str] = None,
upstream_scheme: Optional[str] = None,
upstream_type: Optional[float] = None,
waf_saas_domain_id: Optional[str] = None,
weights: Optional[Sequence[float]] = None,
xff_reset: Optional[float] = None) -> WafSaasDomain
func GetWafSaasDomain(ctx *Context, name string, id IDInput, state *WafSaasDomainState, opts ...ResourceOption) (*WafSaasDomain, error)
public static WafSaasDomain Get(string name, Input<string> id, WafSaasDomainState? state, CustomResourceOptions? opts = null)
public static WafSaasDomain get(String name, Output<String> id, WafSaasDomainState state, CustomResourceOptions options)
resources: _: type: tencentcloud:WafSaasDomain get: id: ${id}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Active
Check double - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- Api
Safe doubleStatus - Whether to enable api safe, 1 enable, 0 disable.
- Bot
Status double - Whether to enable bot, 1 enable, 0 disable.
- Cert string
- Certificate content, When CertType=1, this parameter needs to be filled.
- Cert
Type double - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- Cipher
Template double - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- Ciphers List<double>
- Encryption Suite Information.
- Cls
Status double - Whether to enable access logs, 1 enable, 0 disable.
- Domain string
- Domain names that require defense.
- Domain
Id string - Domain id.
- Https
Rewrite double - Whether redirect to https, 1 will redirect and 0 will not.
- Https
Upstream stringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- Instance
Id string - Unique ID of Instance.
- Ip
Headers List<string> - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- Is
Cdn double - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- Is
Http2 double - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- Is
Keep stringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- Is
Websocket double - Is WebSocket support enabled. 1 means enabled, 0 does not.
- Load
Balance string - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- Ports
List<Waf
Saas Domain Port> - This field needs to be set for multiple ports in the upstream server.
- Private
Key string - Certificate key, When CertType=1, this parameter needs to be filled.
- Proxy
Read doubleTimeout - 300s.
- Proxy
Send doubleTimeout - 300s.
- Sni
Host string - When SniType=3, this parameter needs to be filled in to represent a custom host.
- Sni
Type double - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- Src
Lists List<string> - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- Ssl
Id string - Certificate ID, When CertType=2, this parameter needs to be filled.
- Status double
- Binding status between waf and LB, 0:not bind, 1:binding.
- Tls
Version double - Version of TLS Protocol.
- Upstream
Domain string - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- Upstream
Scheme string - Upstream scheme for https, http or https.
- Upstream
Type double - Upstream type, 0 represents IP, 1 represents domain name.
- Waf
Saas stringDomain Id - ID of the resource.
- Weights List<double>
- Weight of each upstream.
- Xff
Reset double - 0:disable xff reset; 1:enable xff reset.
- Active
Check float64 - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- Api
Safe float64Status - Whether to enable api safe, 1 enable, 0 disable.
- Bot
Status float64 - Whether to enable bot, 1 enable, 0 disable.
- Cert string
- Certificate content, When CertType=1, this parameter needs to be filled.
- Cert
Type float64 - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- Cipher
Template float64 - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- Ciphers []float64
- Encryption Suite Information.
- Cls
Status float64 - Whether to enable access logs, 1 enable, 0 disable.
- Domain string
- Domain names that require defense.
- Domain
Id string - Domain id.
- Https
Rewrite float64 - Whether redirect to https, 1 will redirect and 0 will not.
- Https
Upstream stringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- Instance
Id string - Unique ID of Instance.
- Ip
Headers []string - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- Is
Cdn float64 - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- Is
Http2 float64 - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- Is
Keep stringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- Is
Websocket float64 - Is WebSocket support enabled. 1 means enabled, 0 does not.
- Load
Balance string - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- Ports
[]Waf
Saas Domain Port Args - This field needs to be set for multiple ports in the upstream server.
- Private
Key string - Certificate key, When CertType=1, this parameter needs to be filled.
- Proxy
Read float64Timeout - 300s.
- Proxy
Send float64Timeout - 300s.
- Sni
Host string - When SniType=3, this parameter needs to be filled in to represent a custom host.
- Sni
Type float64 - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- Src
Lists []string - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- Ssl
Id string - Certificate ID, When CertType=2, this parameter needs to be filled.
- Status float64
- Binding status between waf and LB, 0:not bind, 1:binding.
- Tls
Version float64 - Version of TLS Protocol.
- Upstream
Domain string - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- Upstream
Scheme string - Upstream scheme for https, http or https.
- Upstream
Type float64 - Upstream type, 0 represents IP, 1 represents domain name.
- Waf
Saas stringDomain Id - ID of the resource.
- Weights []float64
- Weight of each upstream.
- Xff
Reset float64 - 0:disable xff reset; 1:enable xff reset.
- active
Check Double - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api
Safe DoubleStatus - Whether to enable api safe, 1 enable, 0 disable.
- bot
Status Double - Whether to enable bot, 1 enable, 0 disable.
- cert String
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert
Type Double - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher
Template Double - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers List<Double>
- Encryption Suite Information.
- cls
Status Double - Whether to enable access logs, 1 enable, 0 disable.
- domain String
- Domain names that require defense.
- domain
Id String - Domain id.
- https
Rewrite Double - Whether redirect to https, 1 will redirect and 0 will not.
- https
Upstream StringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- instance
Id String - Unique ID of Instance.
- ip
Headers List<String> - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is
Cdn Double - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is
Http2 Double - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is
Keep StringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- is
Websocket Double - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load
Balance String - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- ports
List<Waf
Saas Domain Port> - This field needs to be set for multiple ports in the upstream server.
- private
Key String - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy
Read DoubleTimeout - 300s.
- proxy
Send DoubleTimeout - 300s.
- sni
Host String - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni
Type Double - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src
Lists List<String> - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl
Id String - Certificate ID, When CertType=2, this parameter needs to be filled.
- status Double
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls
Version Double - Version of TLS Protocol.
- upstream
Domain String - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream
Scheme String - Upstream scheme for https, http or https.
- upstream
Type Double - Upstream type, 0 represents IP, 1 represents domain name.
- waf
Saas StringDomain Id - ID of the resource.
- weights List<Double>
- Weight of each upstream.
- xff
Reset Double - 0:disable xff reset; 1:enable xff reset.
- active
Check number - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api
Safe numberStatus - Whether to enable api safe, 1 enable, 0 disable.
- bot
Status number - Whether to enable bot, 1 enable, 0 disable.
- cert string
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert
Type number - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher
Template number - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers number[]
- Encryption Suite Information.
- cls
Status number - Whether to enable access logs, 1 enable, 0 disable.
- domain string
- Domain names that require defense.
- domain
Id string - Domain id.
- https
Rewrite number - Whether redirect to https, 1 will redirect and 0 will not.
- https
Upstream stringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- instance
Id string - Unique ID of Instance.
- ip
Headers string[] - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is
Cdn number - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is
Http2 number - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is
Keep stringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- is
Websocket number - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load
Balance string - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- ports
Waf
Saas Domain Port[] - This field needs to be set for multiple ports in the upstream server.
- private
Key string - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy
Read numberTimeout - 300s.
- proxy
Send numberTimeout - 300s.
- sni
Host string - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni
Type number - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src
Lists string[] - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl
Id string - Certificate ID, When CertType=2, this parameter needs to be filled.
- status number
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls
Version number - Version of TLS Protocol.
- upstream
Domain string - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream
Scheme string - Upstream scheme for https, http or https.
- upstream
Type number - Upstream type, 0 represents IP, 1 represents domain name.
- waf
Saas stringDomain Id - ID of the resource.
- weights number[]
- Weight of each upstream.
- xff
Reset number - 0:disable xff reset; 1:enable xff reset.
- active_
check float - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api_
safe_ floatstatus - Whether to enable api safe, 1 enable, 0 disable.
- bot_
status float - Whether to enable bot, 1 enable, 0 disable.
- cert str
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert_
type float - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher_
template float - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers Sequence[float]
- Encryption Suite Information.
- cls_
status float - Whether to enable access logs, 1 enable, 0 disable.
- domain str
- Domain names that require defense.
- domain_
id str - Domain id.
- https_
rewrite float - Whether redirect to https, 1 will redirect and 0 will not.
- https_
upstream_ strport - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- instance_
id str - Unique ID of Instance.
- ip_
headers Sequence[str] - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is_
cdn float - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is_
http2 float - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is_
keep_ stralive - Whether to enable keep-alive, 0 disable, 1 enable.
- is_
websocket float - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load_
balance str - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- ports
Sequence[Waf
Saas Domain Port Args] - This field needs to be set for multiple ports in the upstream server.
- private_
key str - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy_
read_ floattimeout - 300s.
- proxy_
send_ floattimeout - 300s.
- sni_
host str - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni_
type float - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src_
lists Sequence[str] - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl_
id str - Certificate ID, When CertType=2, this parameter needs to be filled.
- status float
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls_
version float - Version of TLS Protocol.
- upstream_
domain str - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream_
scheme str - Upstream scheme for https, http or https.
- upstream_
type float - Upstream type, 0 represents IP, 1 represents domain name.
- waf_
saas_ strdomain_ id - ID of the resource.
- weights Sequence[float]
- Weight of each upstream.
- xff_
reset float - 0:disable xff reset; 1:enable xff reset.
- active
Check Number - Whether to enable active health detection, 0 represents disable and 1 represents enable.
- api
Safe NumberStatus - Whether to enable api safe, 1 enable, 0 disable.
- bot
Status Number - Whether to enable bot, 1 enable, 0 disable.
- cert String
- Certificate content, When CertType=1, this parameter needs to be filled.
- cert
Type Number - Certificate type, 0 represents no certificate, CertType=1 represents self owned certificate, and 2 represents managed certificate.
- cipher
Template Number - Encryption Suite Template, 0:default 1:Universal template 2:Security template 3:Custom template.
- ciphers List<Number>
- Encryption Suite Information.
- cls
Status Number - Whether to enable access logs, 1 enable, 0 disable.
- domain String
- Domain names that require defense.
- domain
Id String - Domain id.
- https
Rewrite Number - Whether redirect to https, 1 will redirect and 0 will not.
- https
Upstream StringPort - Upstream port for https, When listen ports has https port and UpstreamScheme is HTTP, the current field needs to be filled.
- instance
Id String - Unique ID of Instance.
- ip
Headers List<String> - When is_cdn=3, this parameter needs to be filled in to indicate a custom header.
- is
Cdn Number - Whether a proxy has been enabled before WAF, 0 no deployment, 1 deployment and use first IP in X-Forwarded-For as client IP, 2 deployment and use remote_addr as client IP, 3 deployment and use values of custom headers as client IP.
- is
Http2 Number - Whether enable HTTP2, Enabling HTTP2 requires HTTPS support, 1 means enabled, 0 does not.
- is
Keep StringAlive - Whether to enable keep-alive, 0 disable, 1 enable.
- is
Websocket Number - Is WebSocket support enabled. 1 means enabled, 0 does not.
- load
Balance String - Load balancing strategy, where 0 represents polling and 1 represents IP hash and 2 weighted round robin.
- ports List<Property Map>
- This field needs to be set for multiple ports in the upstream server.
- private
Key String - Certificate key, When CertType=1, this parameter needs to be filled.
- proxy
Read NumberTimeout - 300s.
- proxy
Send NumberTimeout - 300s.
- sni
Host String - When SniType=3, this parameter needs to be filled in to represent a custom host.
- sni
Type Number - Sni type fo upstream, 0:disable SNI; 1:enable SNI and SNI equal original request host; 2:and SNI equal upstream host 3:enable SNI and equal customize host.
- src
Lists List<String> - Upstream IP List, When UpstreamType=0, this parameter needs to be filled.
- ssl
Id String - Certificate ID, When CertType=2, this parameter needs to be filled.
- status Number
- Binding status between waf and LB, 0:not bind, 1:binding.
- tls
Version Number - Version of TLS Protocol.
- upstream
Domain String - Upstream domain, When UpstreamType=1, this parameter needs to be filled.
- upstream
Scheme String - Upstream scheme for https, http or https.
- upstream
Type Number - Upstream type, 0 represents IP, 1 represents domain name.
- waf
Saas StringDomain Id - ID of the resource.
- weights List<Number>
- Weight of each upstream.
- xff
Reset Number - 0:disable xff reset; 1:enable xff reset.
Supporting Types
WafSaasDomainPort, WafSaasDomainPortArgs
- Port string
- Listening port.
- Protocol string
- The listening protocol of listening port.
- Upstream
Port string - The upstream port for listening port.
- Upstream
Protocol string - The upstream protocol for listening port.
- Nginx
Server stringId - Nginx server ID.
- Port string
- Listening port.
- Protocol string
- The listening protocol of listening port.
- Upstream
Port string - The upstream port for listening port.
- Upstream
Protocol string - The upstream protocol for listening port.
- Nginx
Server stringId - Nginx server ID.
- port String
- Listening port.
- protocol String
- The listening protocol of listening port.
- upstream
Port String - The upstream port for listening port.
- upstream
Protocol String - The upstream protocol for listening port.
- nginx
Server StringId - Nginx server ID.
- port string
- Listening port.
- protocol string
- The listening protocol of listening port.
- upstream
Port string - The upstream port for listening port.
- upstream
Protocol string - The upstream protocol for listening port.
- nginx
Server stringId - Nginx server ID.
- port str
- Listening port.
- protocol str
- The listening protocol of listening port.
- upstream_
port str - The upstream port for listening port.
- upstream_
protocol str - The upstream protocol for listening port.
- nginx_
server_ strid - Nginx server ID.
- port String
- Listening port.
- protocol String
- The listening protocol of listening port.
- upstream
Port String - The upstream port for listening port.
- upstream
Protocol String - The upstream protocol for listening port.
- nginx
Server StringId - Nginx server ID.
Import
waf saas_domain can be imported using the id, e.g.
$ pulumi import tencentcloud:index/wafSaasDomain:WafSaasDomain example waf_2kxtlbky01b3wceb#tf.example.com#9647c91da0aa5f5aaa49d0ca40e2af24
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- tencentcloud tencentcloudstack/terraform-provider-tencentcloud
- License
- Notes
- This Pulumi package is based on the
tencentcloud
Terraform Provider.