published on Thursday, Apr 23, 2026 by Volcengine
published on Thursday, Apr 23, 2026 by Volcengine
Filtering conditions are composed of filtering rules, divided into inbound filtering rules and outbound filtering rules.
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as volcenginecc from "@volcengine/pulumi-volcenginecc";
const vPCTrafficMirrorFilterRuleDemo = new volcenginecc.vpc.TrafficMirrorFilterRule("VPCTrafficMirrorFilterRuleDemo", {
description: "test",
destinationCidrBlock: "10.*.*.0/24",
destinationPortRange: "80/80",
policy: "accept",
priority: 1,
protocol: "tcp",
sourceCidrBlock: "10.*.*.0/24",
sourcePortRange: "80/80",
trafficDirection: "ingress",
trafficMirrorFilterId: "tmf-3nqp5bt6a3dog931exxxxx",
});
import pulumi
import pulumi_volcenginecc as volcenginecc
v_pc_traffic_mirror_filter_rule_demo = volcenginecc.vpc.TrafficMirrorFilterRule("VPCTrafficMirrorFilterRuleDemo",
description="test",
destination_cidr_block="10.*.*.0/24",
destination_port_range="80/80",
policy="accept",
priority=1,
protocol="tcp",
source_cidr_block="10.*.*.0/24",
source_port_range="80/80",
traffic_direction="ingress",
traffic_mirror_filter_id="tmf-3nqp5bt6a3dog931exxxxx")
package main
import (
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/volcengine/pulumi-volcenginecc/sdk/go/volcenginecc/vpc"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := vpc.NewTrafficMirrorFilterRule(ctx, "VPCTrafficMirrorFilterRuleDemo", &vpc.TrafficMirrorFilterRuleArgs{
Description: pulumi.String("test"),
DestinationCidrBlock: pulumi.String("10.*.*.0/24"),
DestinationPortRange: pulumi.String("80/80"),
Policy: pulumi.String("accept"),
Priority: pulumi.Int(1),
Protocol: pulumi.String("tcp"),
SourceCidrBlock: pulumi.String("10.*.*.0/24"),
SourcePortRange: pulumi.String("80/80"),
TrafficDirection: pulumi.String("ingress"),
TrafficMirrorFilterId: pulumi.String("tmf-3nqp5bt6a3dog931exxxxx"),
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Volcenginecc = Volcengine.Pulumi.Volcenginecc;
return await Deployment.RunAsync(() =>
{
var vPCTrafficMirrorFilterRuleDemo = new Volcenginecc.Vpc.TrafficMirrorFilterRule("VPCTrafficMirrorFilterRuleDemo", new()
{
Description = "test",
DestinationCidrBlock = "10.*.*.0/24",
DestinationPortRange = "80/80",
Policy = "accept",
Priority = 1,
Protocol = "tcp",
SourceCidrBlock = "10.*.*.0/24",
SourcePortRange = "80/80",
TrafficDirection = "ingress",
TrafficMirrorFilterId = "tmf-3nqp5bt6a3dog931exxxxx",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.volcengine.volcenginecc.vpc.TrafficMirrorFilterRule;
import com.volcengine.volcenginecc.vpc.TrafficMirrorFilterRuleArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var vPCTrafficMirrorFilterRuleDemo = new TrafficMirrorFilterRule("vPCTrafficMirrorFilterRuleDemo", TrafficMirrorFilterRuleArgs.builder()
.description("test")
.destinationCidrBlock("10.*.*.0/24")
.destinationPortRange("80/80")
.policy("accept")
.priority(1)
.protocol("tcp")
.sourceCidrBlock("10.*.*.0/24")
.sourcePortRange("80/80")
.trafficDirection("ingress")
.trafficMirrorFilterId("tmf-3nqp5bt6a3dog931exxxxx")
.build());
}
}
resources:
vPCTrafficMirrorFilterRuleDemo:
type: volcenginecc:vpc:TrafficMirrorFilterRule
name: VPCTrafficMirrorFilterRuleDemo
properties:
description: test
destinationCidrBlock: 10.*.*.0/24
destinationPortRange: 80/80
policy: accept
priority: 1
protocol: tcp
sourceCidrBlock: 10.*.*.0/24
sourcePortRange: 80/80
trafficDirection: ingress
trafficMirrorFilterId: tmf-3nqp5bt6a3dog931exxxxx
Create TrafficMirrorFilterRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new TrafficMirrorFilterRule(name: string, args: TrafficMirrorFilterRuleArgs, opts?: CustomResourceOptions);@overload
def TrafficMirrorFilterRule(resource_name: str,
args: TrafficMirrorFilterRuleArgs,
opts: Optional[ResourceOptions] = None)
@overload
def TrafficMirrorFilterRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
destination_cidr_block: Optional[str] = None,
policy: Optional[str] = None,
protocol: Optional[str] = None,
source_cidr_block: Optional[str] = None,
traffic_direction: Optional[str] = None,
traffic_mirror_filter_id: Optional[str] = None,
description: Optional[str] = None,
destination_port_range: Optional[str] = None,
priority: Optional[int] = None,
source_port_range: Optional[str] = None)func NewTrafficMirrorFilterRule(ctx *Context, name string, args TrafficMirrorFilterRuleArgs, opts ...ResourceOption) (*TrafficMirrorFilterRule, error)public TrafficMirrorFilterRule(string name, TrafficMirrorFilterRuleArgs args, CustomResourceOptions? opts = null)
public TrafficMirrorFilterRule(String name, TrafficMirrorFilterRuleArgs args)
public TrafficMirrorFilterRule(String name, TrafficMirrorFilterRuleArgs args, CustomResourceOptions options)
type: volcenginecc:vpc:TrafficMirrorFilterRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args TrafficMirrorFilterRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args TrafficMirrorFilterRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args TrafficMirrorFilterRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args TrafficMirrorFilterRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args TrafficMirrorFilterRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
TrafficMirrorFilterRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The TrafficMirrorFilterRule resource accepts the following input properties:
- Destination
Cidr stringBlock - Destination network segment.
- Policy string
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- Protocol string
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- Source
Cidr stringBlock - Source network segment.
- Traffic
Direction string - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- Traffic
Mirror stringFilter Id - Filtering condition ID.
- Description string
- Description of the filtering rule.
- Destination
Port stringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- Priority int
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- Source
Port stringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- Destination
Cidr stringBlock - Destination network segment.
- Policy string
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- Protocol string
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- Source
Cidr stringBlock - Source network segment.
- Traffic
Direction string - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- Traffic
Mirror stringFilter Id - Filtering condition ID.
- Description string
- Description of the filtering rule.
- Destination
Port stringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- Priority int
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- Source
Port stringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- destination
Cidr StringBlock - Destination network segment.
- policy String
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- protocol String
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source
Cidr StringBlock - Source network segment.
- traffic
Direction String - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic
Mirror StringFilter Id - Filtering condition ID.
- description String
- Description of the filtering rule.
- destination
Port StringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- priority Integer
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- source
Port StringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- destination
Cidr stringBlock - Destination network segment.
- policy string
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- protocol string
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source
Cidr stringBlock - Source network segment.
- traffic
Direction string - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic
Mirror stringFilter Id - Filtering condition ID.
- description string
- Description of the filtering rule.
- destination
Port stringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- priority number
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- source
Port stringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- destination_
cidr_ strblock - Destination network segment.
- policy str
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- protocol str
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source_
cidr_ strblock - Source network segment.
- traffic_
direction str - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic_
mirror_ strfilter_ id - Filtering condition ID.
- description str
- Description of the filtering rule.
- destination_
port_ strrange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- priority int
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- source_
port_ strrange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- destination
Cidr StringBlock - Destination network segment.
- policy String
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- protocol String
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source
Cidr StringBlock - Source network segment.
- traffic
Direction String - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic
Mirror StringFilter Id - Filtering condition ID.
- description String
- Description of the filtering rule.
- destination
Port StringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- priority Number
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- source
Port StringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
Outputs
All input properties are implicitly available as output properties. Additionally, the TrafficMirrorFilterRule resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Status string
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- Traffic
Mirror stringFilter Rule Id - Filtering rule ID.
- Id string
- The provider-assigned unique ID for this managed resource.
- Status string
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- Traffic
Mirror stringFilter Rule Id - Filtering rule ID.
- id String
- The provider-assigned unique ID for this managed resource.
- status String
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic
Mirror StringFilter Rule Id - Filtering rule ID.
- id string
- The provider-assigned unique ID for this managed resource.
- status string
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic
Mirror stringFilter Rule Id - Filtering rule ID.
- id str
- The provider-assigned unique ID for this managed resource.
- status str
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic_
mirror_ strfilter_ rule_ id - Filtering rule ID.
- id String
- The provider-assigned unique ID for this managed resource.
- status String
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic
Mirror StringFilter Rule Id - Filtering rule ID.
Look up Existing TrafficMirrorFilterRule Resource
Get an existing TrafficMirrorFilterRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: TrafficMirrorFilterRuleState, opts?: CustomResourceOptions): TrafficMirrorFilterRule@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
description: Optional[str] = None,
destination_cidr_block: Optional[str] = None,
destination_port_range: Optional[str] = None,
policy: Optional[str] = None,
priority: Optional[int] = None,
protocol: Optional[str] = None,
source_cidr_block: Optional[str] = None,
source_port_range: Optional[str] = None,
status: Optional[str] = None,
traffic_direction: Optional[str] = None,
traffic_mirror_filter_id: Optional[str] = None,
traffic_mirror_filter_rule_id: Optional[str] = None) -> TrafficMirrorFilterRulefunc GetTrafficMirrorFilterRule(ctx *Context, name string, id IDInput, state *TrafficMirrorFilterRuleState, opts ...ResourceOption) (*TrafficMirrorFilterRule, error)public static TrafficMirrorFilterRule Get(string name, Input<string> id, TrafficMirrorFilterRuleState? state, CustomResourceOptions? opts = null)public static TrafficMirrorFilterRule get(String name, Output<String> id, TrafficMirrorFilterRuleState state, CustomResourceOptions options)resources: _: type: volcenginecc:vpc:TrafficMirrorFilterRule get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Description string
- Description of the filtering rule.
- Destination
Cidr stringBlock - Destination network segment.
- Destination
Port stringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- Policy string
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- Priority int
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- Protocol string
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- Source
Cidr stringBlock - Source network segment.
- Source
Port stringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- Status string
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- Traffic
Direction string - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- Traffic
Mirror stringFilter Id - Filtering condition ID.
- Traffic
Mirror stringFilter Rule Id - Filtering rule ID.
- Description string
- Description of the filtering rule.
- Destination
Cidr stringBlock - Destination network segment.
- Destination
Port stringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- Policy string
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- Priority int
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- Protocol string
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- Source
Cidr stringBlock - Source network segment.
- Source
Port stringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- Status string
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- Traffic
Direction string - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- Traffic
Mirror stringFilter Id - Filtering condition ID.
- Traffic
Mirror stringFilter Rule Id - Filtering rule ID.
- description String
- Description of the filtering rule.
- destination
Cidr StringBlock - Destination network segment.
- destination
Port StringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- policy String
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- priority Integer
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- protocol String
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source
Cidr StringBlock - Source network segment.
- source
Port StringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- status String
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic
Direction String - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic
Mirror StringFilter Id - Filtering condition ID.
- traffic
Mirror StringFilter Rule Id - Filtering rule ID.
- description string
- Description of the filtering rule.
- destination
Cidr stringBlock - Destination network segment.
- destination
Port stringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- policy string
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- priority number
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- protocol string
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source
Cidr stringBlock - Source network segment.
- source
Port stringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- status string
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic
Direction string - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic
Mirror stringFilter Id - Filtering condition ID.
- traffic
Mirror stringFilter Rule Id - Filtering rule ID.
- description str
- Description of the filtering rule.
- destination_
cidr_ strblock - Destination network segment.
- destination_
port_ strrange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- policy str
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- priority int
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- protocol str
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source_
cidr_ strblock - Source network segment.
- source_
port_ strrange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- status str
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic_
direction str - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic_
mirror_ strfilter_ id - Filtering condition ID.
- traffic_
mirror_ strfilter_ rule_ id - Filtering rule ID.
- description String
- Description of the filtering rule.
- destination
Cidr StringBlock - Destination network segment.
- destination
Port StringRange - Destination port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- policy String
- Traffic capture policy. accept: allow. When traffic from the mirror source matches this rule, the traffic is copied to the mirror target for monitoring and analysis. reject: reject. When traffic from the mirror source matches this rule, the traffic is not copied and monitoring and analysis are not performed.
- priority Number
- Priority of the filtering rule, ranging from 1 to 1000. The smaller the value, the higher the priority. Default is 1, which is the highest priority. For the same filtering condition and direction, the priority must be unique.
- protocol String
- Traffic protocol. Valid values: all: includes TCP, UDP, and ICMP protocols. tcp: TCP protocol. udp: UDP protocol. icmp: ICMP protocol.
- source
Cidr StringBlock - Source network segment.
- source
Port StringRange - Source port range for traffic. When Protocol is all or icmp, this parameter is not required. The default value is -1/-1, which means no port restriction. When Protocol is tcp or udp, this parameter is required. Valid range is 1–65535. Use a forward slash (/) to separate the start and end ports, such as 1/50, 80/80.
- status String
- Status of the filtering rule. Available: available. Deleting: deleting. Creating: creating. Pending: modifying.
- traffic
Direction String - Traffic direction. Valid values: ingress: inbound rule. egress: outbound rule.
- traffic
Mirror StringFilter Id - Filtering condition ID.
- traffic
Mirror StringFilter Rule Id - Filtering rule ID.
Import
$ pulumi import volcenginecc:vpc/trafficMirrorFilterRule:TrafficMirrorFilterRule example "traffic_mirror_filter_id|traffic_mirror_filter_rule_id"
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- volcenginecc volcengine/pulumi-volcenginecc
- License
- MPL-2.0
- Notes
- This Pulumi package is based on the
volcengineccTerraform Provider.
published on Thursday, Apr 23, 2026 by Volcengine
