Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectFirewallAccessproxy
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectFirewallAccessproxy

Explore with Pulumi AI

fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

Configure Access Proxy.

The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.

  • api_gateway: fortimanager.ObjectFirewallAccessproxyApigateway
  • api_gateway6: fortimanager.ObjectFirewallAccessproxyApigateway6
  • realservers: fortimanager.ObjectFirewallAccessproxyRealservers
  • server_pubkey_auth_settings: fortimanager.ObjectFirewallAccessproxyServerpubkeyauthsettings

Create ObjectFirewallAccessproxy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ObjectFirewallAccessproxy(name: string, args?: ObjectFirewallAccessproxyArgs, opts?: CustomResourceOptions);
@overload
def ObjectFirewallAccessproxy(resource_name: str,
                              args: Optional[ObjectFirewallAccessproxyArgs] = None,
                              opts: Optional[ResourceOptions] = None)

@overload
def ObjectFirewallAccessproxy(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              add_vhost_domain_to_dnsdb: Optional[str] = None,
                              adom: Optional[str] = None,
                              api_gateway6s: Optional[Sequence[ObjectFirewallAccessproxyApiGateway6Args]] = None,
                              api_gateways: Optional[Sequence[ObjectFirewallAccessproxyApiGatewayArgs]] = None,
                              auth_portal: Optional[str] = None,
                              auth_virtual_host: Optional[str] = None,
                              client_cert: Optional[str] = None,
                              decrypted_traffic_mirror: Optional[str] = None,
                              dynamic_sort_subtable: Optional[str] = None,
                              empty_cert_action: Optional[str] = None,
                              http_supported_max_version: Optional[str] = None,
                              ldb_method: Optional[str] = None,
                              log_blocked_traffic: Optional[str] = None,
                              name: Optional[str] = None,
                              object_firewall_accessproxy_id: Optional[str] = None,
                              realservers: Optional[Sequence[ObjectFirewallAccessproxyRealserverArgs]] = None,
                              scopetype: Optional[str] = None,
                              server_pubkey_auth: Optional[str] = None,
                              server_pubkey_auth_settings: Optional[ObjectFirewallAccessproxyServerPubkeyAuthSettingsArgs] = None,
                              svr_pool_multiplex: Optional[str] = None,
                              svr_pool_server_max_concurrent_request: Optional[float] = None,
                              svr_pool_server_max_request: Optional[float] = None,
                              svr_pool_ttl: Optional[float] = None,
                              user_agent_detect: Optional[str] = None,
                              vip: Optional[str] = None)
func NewObjectFirewallAccessproxy(ctx *Context, name string, args *ObjectFirewallAccessproxyArgs, opts ...ResourceOption) (*ObjectFirewallAccessproxy, error)
public ObjectFirewallAccessproxy(string name, ObjectFirewallAccessproxyArgs? args = null, CustomResourceOptions? opts = null)
public ObjectFirewallAccessproxy(String name, ObjectFirewallAccessproxyArgs args)
public ObjectFirewallAccessproxy(String name, ObjectFirewallAccessproxyArgs args, CustomResourceOptions options)

type: fortimanager:ObjectFirewallAccessproxy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args ObjectFirewallAccessproxyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args ObjectFirewallAccessproxyArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args ObjectFirewallAccessproxyArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args ObjectFirewallAccessproxyArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. ObjectFirewallAccessproxyArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var objectFirewallAccessproxyResource = new Fortimanager.ObjectFirewallAccessproxy("objectFirewallAccessproxyResource", new()
{
    AddVhostDomainToDnsdb = "string",
    Adom = "string",
    ApiGateway6s = new[]
    {
        new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGateway6Args
        {
            Applications = new[]
            {
                "string",
            },
            H2Support = "string",
            H3Support = "string",
            HttpCookieAge = 0,
            HttpCookieDomain = "string",
            HttpCookieDomainFromHost = "string",
            HttpCookieGeneration = 0,
            HttpCookiePath = "string",
            HttpCookieShare = "string",
            HttpsCookieSecure = "string",
            Id = 0,
            LdbMethod = "string",
            Persistence = "string",
            Quic = new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGateway6QuicArgs
            {
                AckDelayExponent = 0,
                ActiveConnectionIdLimit = 0,
                ActiveMigration = "string",
                GreaseQuicBit = "string",
                MaxAckDelay = 0,
                MaxDatagramFrameSize = 0,
                MaxIdleTimeout = 0,
                MaxUdpPayloadSize = 0,
            },
            Realservers = new[]
            {
                new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGateway6RealserverArgs
                {
                    AddrType = "string",
                    Address = "string",
                    Domain = "string",
                    ExternalAuth = "string",
                    HealthCheck = "string",
                    HealthCheckProto = "string",
                    HolddownInterval = "string",
                    HttpHost = "string",
                    Id = 0,
                    Ip = "string",
                    Mappedport = "string",
                    Port = 0,
                    SshClientCert = "string",
                    SshHostKey = "string",
                    SshHostKeyValidation = "string",
                    Status = "string",
                    TranslateHost = "string",
                    TunnelEncryption = "string",
                    Type = "string",
                    Weight = 0,
                },
            },
            SamlRedirect = "string",
            SamlServer = "string",
            Service = "string",
            SslAlgorithm = "string",
            SslCipherSuites = new[]
            {
                new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGateway6SslCipherSuiteArgs
                {
                    Cipher = "string",
                    Priority = 0,
                    Versions = new[]
                    {
                        "string",
                    },
                },
            },
            SslDhBits = "string",
            SslMaxVersion = "string",
            SslMinVersion = "string",
            SslRenegotiation = "string",
            SslVpnWebPortal = "string",
            UrlMap = "string",
            UrlMapType = "string",
            VirtualHost = "string",
        },
    },
    ApiGateways = new[]
    {
        new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGatewayArgs
        {
            Applications = new[]
            {
                "string",
            },
            H2Support = "string",
            H3Support = "string",
            HttpCookieAge = 0,
            HttpCookieDomain = "string",
            HttpCookieDomainFromHost = "string",
            HttpCookieGeneration = 0,
            HttpCookiePath = "string",
            HttpCookieShare = "string",
            HttpsCookieSecure = "string",
            Id = 0,
            LdbMethod = "string",
            Persistence = "string",
            Quic = new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGatewayQuicArgs
            {
                AckDelayExponent = 0,
                ActiveConnectionIdLimit = 0,
                ActiveMigration = "string",
                GreaseQuicBit = "string",
                MaxAckDelay = 0,
                MaxDatagramFrameSize = 0,
                MaxIdleTimeout = 0,
                MaxUdpPayloadSize = 0,
            },
            Realservers = new[]
            {
                new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGatewayRealserverArgs
                {
                    AddrType = "string",
                    Address = "string",
                    Domain = "string",
                    ExternalAuth = "string",
                    HealthCheck = "string",
                    HealthCheckProto = "string",
                    HolddownInterval = "string",
                    HttpHost = "string",
                    Id = 0,
                    Ip = "string",
                    Mappedport = "string",
                    Port = 0,
                    SshClientCert = "string",
                    SshHostKey = "string",
                    SshHostKeyValidation = "string",
                    Status = "string",
                    TranslateHost = "string",
                    TunnelEncryption = "string",
                    Type = "string",
                    Weight = 0,
                },
            },
            SamlRedirect = "string",
            SamlServer = "string",
            Service = "string",
            SslAlgorithm = "string",
            SslCipherSuites = new[]
            {
                new Fortimanager.Inputs.ObjectFirewallAccessproxyApiGatewaySslCipherSuiteArgs
                {
                    Cipher = "string",
                    Priority = 0,
                    Versions = new[]
                    {
                        "string",
                    },
                },
            },
            SslDhBits = "string",
            SslMaxVersion = "string",
            SslMinVersion = "string",
            SslRenegotiation = "string",
            SslVpnWebPortal = "string",
            UrlMap = "string",
            UrlMapType = "string",
            VirtualHost = "string",
        },
    },
    AuthPortal = "string",
    AuthVirtualHost = "string",
    ClientCert = "string",
    DecryptedTrafficMirror = "string",
    DynamicSortSubtable = "string",
    EmptyCertAction = "string",
    HttpSupportedMaxVersion = "string",
    LdbMethod = "string",
    LogBlockedTraffic = "string",
    Name = "string",
    ObjectFirewallAccessproxyId = "string",
    Realservers = new[]
    {
        new Fortimanager.Inputs.ObjectFirewallAccessproxyRealserverArgs
        {
            Id = 0,
            Ip = "string",
            Port = 0,
            Status = "string",
            Weight = 0,
        },
    },
    Scopetype = "string",
    ServerPubkeyAuth = "string",
    ServerPubkeyAuthSettings = new Fortimanager.Inputs.ObjectFirewallAccessproxyServerPubkeyAuthSettingsArgs
    {
        AuthCa = "string",
        CertExtensions = new[]
        {
            new Fortimanager.Inputs.ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtensionArgs
            {
                Critical = "string",
                Data = "string",
                Name = "string",
                Type = "string",
            },
        },
        PermitAgentForwarding = "string",
        PermitPortForwarding = "string",
        PermitPty = "string",
        PermitUserRc = "string",
        PermitX11Forwarding = "string",
        SourceAddress = "string",
    },
    SvrPoolMultiplex = "string",
    SvrPoolServerMaxConcurrentRequest = 0,
    SvrPoolServerMaxRequest = 0,
    SvrPoolTtl = 0,
    UserAgentDetect = "string",
    Vip = "string",
});
Copy
example, err := fortimanager.NewObjectFirewallAccessproxy(ctx, "objectFirewallAccessproxyResource", &fortimanager.ObjectFirewallAccessproxyArgs{
AddVhostDomainToDnsdb: pulumi.String("string"),
Adom: pulumi.String("string"),
ApiGateway6s: .ObjectFirewallAccessproxyApiGateway6TypeArray{
&.ObjectFirewallAccessproxyApiGateway6TypeArgs{
Applications: pulumi.StringArray{
pulumi.String("string"),
},
H2Support: pulumi.String("string"),
H3Support: pulumi.String("string"),
HttpCookieAge: pulumi.Float64(0),
HttpCookieDomain: pulumi.String("string"),
HttpCookieDomainFromHost: pulumi.String("string"),
HttpCookieGeneration: pulumi.Float64(0),
HttpCookiePath: pulumi.String("string"),
HttpCookieShare: pulumi.String("string"),
HttpsCookieSecure: pulumi.String("string"),
Id: pulumi.Float64(0),
LdbMethod: pulumi.String("string"),
Persistence: pulumi.String("string"),
Quic: &.ObjectFirewallAccessproxyApiGateway6QuicTypeArgs{
AckDelayExponent: pulumi.Float64(0),
ActiveConnectionIdLimit: pulumi.Float64(0),
ActiveMigration: pulumi.String("string"),
GreaseQuicBit: pulumi.String("string"),
MaxAckDelay: pulumi.Float64(0),
MaxDatagramFrameSize: pulumi.Float64(0),
MaxIdleTimeout: pulumi.Float64(0),
MaxUdpPayloadSize: pulumi.Float64(0),
},
Realservers: .ObjectFirewallAccessproxyApiGateway6RealserverArray{
&.ObjectFirewallAccessproxyApiGateway6RealserverArgs{
AddrType: pulumi.String("string"),
Address: pulumi.String("string"),
Domain: pulumi.String("string"),
ExternalAuth: pulumi.String("string"),
HealthCheck: pulumi.String("string"),
HealthCheckProto: pulumi.String("string"),
HolddownInterval: pulumi.String("string"),
HttpHost: pulumi.String("string"),
Id: pulumi.Float64(0),
Ip: pulumi.String("string"),
Mappedport: pulumi.String("string"),
Port: pulumi.Float64(0),
SshClientCert: pulumi.String("string"),
SshHostKey: pulumi.String("string"),
SshHostKeyValidation: pulumi.String("string"),
Status: pulumi.String("string"),
TranslateHost: pulumi.String("string"),
TunnelEncryption: pulumi.String("string"),
Type: pulumi.String("string"),
Weight: pulumi.Float64(0),
},
},
SamlRedirect: pulumi.String("string"),
SamlServer: pulumi.String("string"),
Service: pulumi.String("string"),
SslAlgorithm: pulumi.String("string"),
SslCipherSuites: .ObjectFirewallAccessproxyApiGateway6SslCipherSuiteArray{
&.ObjectFirewallAccessproxyApiGateway6SslCipherSuiteArgs{
Cipher: pulumi.String("string"),
Priority: pulumi.Float64(0),
Versions: pulumi.StringArray{
pulumi.String("string"),
},
},
},
SslDhBits: pulumi.String("string"),
SslMaxVersion: pulumi.String("string"),
SslMinVersion: pulumi.String("string"),
SslRenegotiation: pulumi.String("string"),
SslVpnWebPortal: pulumi.String("string"),
UrlMap: pulumi.String("string"),
UrlMapType: pulumi.String("string"),
VirtualHost: pulumi.String("string"),
},
},
ApiGateways: .ObjectFirewallAccessproxyApiGatewayTypeArray{
&.ObjectFirewallAccessproxyApiGatewayTypeArgs{
Applications: pulumi.StringArray{
pulumi.String("string"),
},
H2Support: pulumi.String("string"),
H3Support: pulumi.String("string"),
HttpCookieAge: pulumi.Float64(0),
HttpCookieDomain: pulumi.String("string"),
HttpCookieDomainFromHost: pulumi.String("string"),
HttpCookieGeneration: pulumi.Float64(0),
HttpCookiePath: pulumi.String("string"),
HttpCookieShare: pulumi.String("string"),
HttpsCookieSecure: pulumi.String("string"),
Id: pulumi.Float64(0),
LdbMethod: pulumi.String("string"),
Persistence: pulumi.String("string"),
Quic: &.ObjectFirewallAccessproxyApiGatewayQuicTypeArgs{
AckDelayExponent: pulumi.Float64(0),
ActiveConnectionIdLimit: pulumi.Float64(0),
ActiveMigration: pulumi.String("string"),
GreaseQuicBit: pulumi.String("string"),
MaxAckDelay: pulumi.Float64(0),
MaxDatagramFrameSize: pulumi.Float64(0),
MaxIdleTimeout: pulumi.Float64(0),
MaxUdpPayloadSize: pulumi.Float64(0),
},
Realservers: .ObjectFirewallAccessproxyApiGatewayRealserverArray{
&.ObjectFirewallAccessproxyApiGatewayRealserverArgs{
AddrType: pulumi.String("string"),
Address: pulumi.String("string"),
Domain: pulumi.String("string"),
ExternalAuth: pulumi.String("string"),
HealthCheck: pulumi.String("string"),
HealthCheckProto: pulumi.String("string"),
HolddownInterval: pulumi.String("string"),
HttpHost: pulumi.String("string"),
Id: pulumi.Float64(0),
Ip: pulumi.String("string"),
Mappedport: pulumi.String("string"),
Port: pulumi.Float64(0),
SshClientCert: pulumi.String("string"),
SshHostKey: pulumi.String("string"),
SshHostKeyValidation: pulumi.String("string"),
Status: pulumi.String("string"),
TranslateHost: pulumi.String("string"),
TunnelEncryption: pulumi.String("string"),
Type: pulumi.String("string"),
Weight: pulumi.Float64(0),
},
},
SamlRedirect: pulumi.String("string"),
SamlServer: pulumi.String("string"),
Service: pulumi.String("string"),
SslAlgorithm: pulumi.String("string"),
SslCipherSuites: .ObjectFirewallAccessproxyApiGatewaySslCipherSuiteArray{
&.ObjectFirewallAccessproxyApiGatewaySslCipherSuiteArgs{
Cipher: pulumi.String("string"),
Priority: pulumi.Float64(0),
Versions: pulumi.StringArray{
pulumi.String("string"),
},
},
},
SslDhBits: pulumi.String("string"),
SslMaxVersion: pulumi.String("string"),
SslMinVersion: pulumi.String("string"),
SslRenegotiation: pulumi.String("string"),
SslVpnWebPortal: pulumi.String("string"),
UrlMap: pulumi.String("string"),
UrlMapType: pulumi.String("string"),
VirtualHost: pulumi.String("string"),
},
},
AuthPortal: pulumi.String("string"),
AuthVirtualHost: pulumi.String("string"),
ClientCert: pulumi.String("string"),
DecryptedTrafficMirror: pulumi.String("string"),
DynamicSortSubtable: pulumi.String("string"),
EmptyCertAction: pulumi.String("string"),
HttpSupportedMaxVersion: pulumi.String("string"),
LdbMethod: pulumi.String("string"),
LogBlockedTraffic: pulumi.String("string"),
Name: pulumi.String("string"),
ObjectFirewallAccessproxyId: pulumi.String("string"),
Realservers: .ObjectFirewallAccessproxyRealserverArray{
&.ObjectFirewallAccessproxyRealserverArgs{
Id: pulumi.Float64(0),
Ip: pulumi.String("string"),
Port: pulumi.Float64(0),
Status: pulumi.String("string"),
Weight: pulumi.Float64(0),
},
},
Scopetype: pulumi.String("string"),
ServerPubkeyAuth: pulumi.String("string"),
ServerPubkeyAuthSettings: &.ObjectFirewallAccessproxyServerPubkeyAuthSettingsTypeArgs{
AuthCa: pulumi.String("string"),
CertExtensions: .ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtensionArray{
&.ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtensionArgs{
Critical: pulumi.String("string"),
Data: pulumi.String("string"),
Name: pulumi.String("string"),
Type: pulumi.String("string"),
},
},
PermitAgentForwarding: pulumi.String("string"),
PermitPortForwarding: pulumi.String("string"),
PermitPty: pulumi.String("string"),
PermitUserRc: pulumi.String("string"),
PermitX11Forwarding: pulumi.String("string"),
SourceAddress: pulumi.String("string"),
},
SvrPoolMultiplex: pulumi.String("string"),
SvrPoolServerMaxConcurrentRequest: pulumi.Float64(0),
SvrPoolServerMaxRequest: pulumi.Float64(0),
SvrPoolTtl: pulumi.Float64(0),
UserAgentDetect: pulumi.String("string"),
Vip: pulumi.String("string"),
})
Copy
var objectFirewallAccessproxyResource = new ObjectFirewallAccessproxy("objectFirewallAccessproxyResource", ObjectFirewallAccessproxyArgs.builder()
    .addVhostDomainToDnsdb("string")
    .adom("string")
    .apiGateway6s(ObjectFirewallAccessproxyApiGateway6Args.builder()
        .applications("string")
        .h2Support("string")
        .h3Support("string")
        .httpCookieAge(0)
        .httpCookieDomain("string")
        .httpCookieDomainFromHost("string")
        .httpCookieGeneration(0)
        .httpCookiePath("string")
        .httpCookieShare("string")
        .httpsCookieSecure("string")
        .id(0)
        .ldbMethod("string")
        .persistence("string")
        .quic(ObjectFirewallAccessproxyApiGateway6QuicArgs.builder()
            .ackDelayExponent(0)
            .activeConnectionIdLimit(0)
            .activeMigration("string")
            .greaseQuicBit("string")
            .maxAckDelay(0)
            .maxDatagramFrameSize(0)
            .maxIdleTimeout(0)
            .maxUdpPayloadSize(0)
            .build())
        .realservers(ObjectFirewallAccessproxyApiGateway6RealserverArgs.builder()
            .addrType("string")
            .address("string")
            .domain("string")
            .externalAuth("string")
            .healthCheck("string")
            .healthCheckProto("string")
            .holddownInterval("string")
            .httpHost("string")
            .id(0)
            .ip("string")
            .mappedport("string")
            .port(0)
            .sshClientCert("string")
            .sshHostKey("string")
            .sshHostKeyValidation("string")
            .status("string")
            .translateHost("string")
            .tunnelEncryption("string")
            .type("string")
            .weight(0)
            .build())
        .samlRedirect("string")
        .samlServer("string")
        .service("string")
        .sslAlgorithm("string")
        .sslCipherSuites(ObjectFirewallAccessproxyApiGateway6SslCipherSuiteArgs.builder()
            .cipher("string")
            .priority(0)
            .versions("string")
            .build())
        .sslDhBits("string")
        .sslMaxVersion("string")
        .sslMinVersion("string")
        .sslRenegotiation("string")
        .sslVpnWebPortal("string")
        .urlMap("string")
        .urlMapType("string")
        .virtualHost("string")
        .build())
    .apiGateways(ObjectFirewallAccessproxyApiGatewayArgs.builder()
        .applications("string")
        .h2Support("string")
        .h3Support("string")
        .httpCookieAge(0)
        .httpCookieDomain("string")
        .httpCookieDomainFromHost("string")
        .httpCookieGeneration(0)
        .httpCookiePath("string")
        .httpCookieShare("string")
        .httpsCookieSecure("string")
        .id(0)
        .ldbMethod("string")
        .persistence("string")
        .quic(ObjectFirewallAccessproxyApiGatewayQuicArgs.builder()
            .ackDelayExponent(0)
            .activeConnectionIdLimit(0)
            .activeMigration("string")
            .greaseQuicBit("string")
            .maxAckDelay(0)
            .maxDatagramFrameSize(0)
            .maxIdleTimeout(0)
            .maxUdpPayloadSize(0)
            .build())
        .realservers(ObjectFirewallAccessproxyApiGatewayRealserverArgs.builder()
            .addrType("string")
            .address("string")
            .domain("string")
            .externalAuth("string")
            .healthCheck("string")
            .healthCheckProto("string")
            .holddownInterval("string")
            .httpHost("string")
            .id(0)
            .ip("string")
            .mappedport("string")
            .port(0)
            .sshClientCert("string")
            .sshHostKey("string")
            .sshHostKeyValidation("string")
            .status("string")
            .translateHost("string")
            .tunnelEncryption("string")
            .type("string")
            .weight(0)
            .build())
        .samlRedirect("string")
        .samlServer("string")
        .service("string")
        .sslAlgorithm("string")
        .sslCipherSuites(ObjectFirewallAccessproxyApiGatewaySslCipherSuiteArgs.builder()
            .cipher("string")
            .priority(0)
            .versions("string")
            .build())
        .sslDhBits("string")
        .sslMaxVersion("string")
        .sslMinVersion("string")
        .sslRenegotiation("string")
        .sslVpnWebPortal("string")
        .urlMap("string")
        .urlMapType("string")
        .virtualHost("string")
        .build())
    .authPortal("string")
    .authVirtualHost("string")
    .clientCert("string")
    .decryptedTrafficMirror("string")
    .dynamicSortSubtable("string")
    .emptyCertAction("string")
    .httpSupportedMaxVersion("string")
    .ldbMethod("string")
    .logBlockedTraffic("string")
    .name("string")
    .objectFirewallAccessproxyId("string")
    .realservers(ObjectFirewallAccessproxyRealserverArgs.builder()
        .id(0)
        .ip("string")
        .port(0)
        .status("string")
        .weight(0)
        .build())
    .scopetype("string")
    .serverPubkeyAuth("string")
    .serverPubkeyAuthSettings(ObjectFirewallAccessproxyServerPubkeyAuthSettingsArgs.builder()
        .authCa("string")
        .certExtensions(ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtensionArgs.builder()
            .critical("string")
            .data("string")
            .name("string")
            .type("string")
            .build())
        .permitAgentForwarding("string")
        .permitPortForwarding("string")
        .permitPty("string")
        .permitUserRc("string")
        .permitX11Forwarding("string")
        .sourceAddress("string")
        .build())
    .svrPoolMultiplex("string")
    .svrPoolServerMaxConcurrentRequest(0)
    .svrPoolServerMaxRequest(0)
    .svrPoolTtl(0)
    .userAgentDetect("string")
    .vip("string")
    .build());
Copy
object_firewall_accessproxy_resource = fortimanager.ObjectFirewallAccessproxy("objectFirewallAccessproxyResource",
    add_vhost_domain_to_dnsdb="string",
    adom="string",
    api_gateway6s=[{
        "applications": ["string"],
        "h2_support": "string",
        "h3_support": "string",
        "http_cookie_age": 0,
        "http_cookie_domain": "string",
        "http_cookie_domain_from_host": "string",
        "http_cookie_generation": 0,
        "http_cookie_path": "string",
        "http_cookie_share": "string",
        "https_cookie_secure": "string",
        "id": 0,
        "ldb_method": "string",
        "persistence": "string",
        "quic": {
            "ack_delay_exponent": 0,
            "active_connection_id_limit": 0,
            "active_migration": "string",
            "grease_quic_bit": "string",
            "max_ack_delay": 0,
            "max_datagram_frame_size": 0,
            "max_idle_timeout": 0,
            "max_udp_payload_size": 0,
        },
        "realservers": [{
            "addr_type": "string",
            "address": "string",
            "domain": "string",
            "external_auth": "string",
            "health_check": "string",
            "health_check_proto": "string",
            "holddown_interval": "string",
            "http_host": "string",
            "id": 0,
            "ip": "string",
            "mappedport": "string",
            "port": 0,
            "ssh_client_cert": "string",
            "ssh_host_key": "string",
            "ssh_host_key_validation": "string",
            "status": "string",
            "translate_host": "string",
            "tunnel_encryption": "string",
            "type": "string",
            "weight": 0,
        }],
        "saml_redirect": "string",
        "saml_server": "string",
        "service": "string",
        "ssl_algorithm": "string",
        "ssl_cipher_suites": [{
            "cipher": "string",
            "priority": 0,
            "versions": ["string"],
        }],
        "ssl_dh_bits": "string",
        "ssl_max_version": "string",
        "ssl_min_version": "string",
        "ssl_renegotiation": "string",
        "ssl_vpn_web_portal": "string",
        "url_map": "string",
        "url_map_type": "string",
        "virtual_host": "string",
    }],
    api_gateways=[{
        "applications": ["string"],
        "h2_support": "string",
        "h3_support": "string",
        "http_cookie_age": 0,
        "http_cookie_domain": "string",
        "http_cookie_domain_from_host": "string",
        "http_cookie_generation": 0,
        "http_cookie_path": "string",
        "http_cookie_share": "string",
        "https_cookie_secure": "string",
        "id": 0,
        "ldb_method": "string",
        "persistence": "string",
        "quic": {
            "ack_delay_exponent": 0,
            "active_connection_id_limit": 0,
            "active_migration": "string",
            "grease_quic_bit": "string",
            "max_ack_delay": 0,
            "max_datagram_frame_size": 0,
            "max_idle_timeout": 0,
            "max_udp_payload_size": 0,
        },
        "realservers": [{
            "addr_type": "string",
            "address": "string",
            "domain": "string",
            "external_auth": "string",
            "health_check": "string",
            "health_check_proto": "string",
            "holddown_interval": "string",
            "http_host": "string",
            "id": 0,
            "ip": "string",
            "mappedport": "string",
            "port": 0,
            "ssh_client_cert": "string",
            "ssh_host_key": "string",
            "ssh_host_key_validation": "string",
            "status": "string",
            "translate_host": "string",
            "tunnel_encryption": "string",
            "type": "string",
            "weight": 0,
        }],
        "saml_redirect": "string",
        "saml_server": "string",
        "service": "string",
        "ssl_algorithm": "string",
        "ssl_cipher_suites": [{
            "cipher": "string",
            "priority": 0,
            "versions": ["string"],
        }],
        "ssl_dh_bits": "string",
        "ssl_max_version": "string",
        "ssl_min_version": "string",
        "ssl_renegotiation": "string",
        "ssl_vpn_web_portal": "string",
        "url_map": "string",
        "url_map_type": "string",
        "virtual_host": "string",
    }],
    auth_portal="string",
    auth_virtual_host="string",
    client_cert="string",
    decrypted_traffic_mirror="string",
    dynamic_sort_subtable="string",
    empty_cert_action="string",
    http_supported_max_version="string",
    ldb_method="string",
    log_blocked_traffic="string",
    name="string",
    object_firewall_accessproxy_id="string",
    realservers=[{
        "id": 0,
        "ip": "string",
        "port": 0,
        "status": "string",
        "weight": 0,
    }],
    scopetype="string",
    server_pubkey_auth="string",
    server_pubkey_auth_settings={
        "auth_ca": "string",
        "cert_extensions": [{
            "critical": "string",
            "data": "string",
            "name": "string",
            "type": "string",
        }],
        "permit_agent_forwarding": "string",
        "permit_port_forwarding": "string",
        "permit_pty": "string",
        "permit_user_rc": "string",
        "permit_x11_forwarding": "string",
        "source_address": "string",
    },
    svr_pool_multiplex="string",
    svr_pool_server_max_concurrent_request=0,
    svr_pool_server_max_request=0,
    svr_pool_ttl=0,
    user_agent_detect="string",
    vip="string")
Copy
const objectFirewallAccessproxyResource = new fortimanager.ObjectFirewallAccessproxy("objectFirewallAccessproxyResource", {
    addVhostDomainToDnsdb: "string",
    adom: "string",
    apiGateway6s: [{
        applications: ["string"],
        h2Support: "string",
        h3Support: "string",
        httpCookieAge: 0,
        httpCookieDomain: "string",
        httpCookieDomainFromHost: "string",
        httpCookieGeneration: 0,
        httpCookiePath: "string",
        httpCookieShare: "string",
        httpsCookieSecure: "string",
        id: 0,
        ldbMethod: "string",
        persistence: "string",
        quic: {
            ackDelayExponent: 0,
            activeConnectionIdLimit: 0,
            activeMigration: "string",
            greaseQuicBit: "string",
            maxAckDelay: 0,
            maxDatagramFrameSize: 0,
            maxIdleTimeout: 0,
            maxUdpPayloadSize: 0,
        },
        realservers: [{
            addrType: "string",
            address: "string",
            domain: "string",
            externalAuth: "string",
            healthCheck: "string",
            healthCheckProto: "string",
            holddownInterval: "string",
            httpHost: "string",
            id: 0,
            ip: "string",
            mappedport: "string",
            port: 0,
            sshClientCert: "string",
            sshHostKey: "string",
            sshHostKeyValidation: "string",
            status: "string",
            translateHost: "string",
            tunnelEncryption: "string",
            type: "string",
            weight: 0,
        }],
        samlRedirect: "string",
        samlServer: "string",
        service: "string",
        sslAlgorithm: "string",
        sslCipherSuites: [{
            cipher: "string",
            priority: 0,
            versions: ["string"],
        }],
        sslDhBits: "string",
        sslMaxVersion: "string",
        sslMinVersion: "string",
        sslRenegotiation: "string",
        sslVpnWebPortal: "string",
        urlMap: "string",
        urlMapType: "string",
        virtualHost: "string",
    }],
    apiGateways: [{
        applications: ["string"],
        h2Support: "string",
        h3Support: "string",
        httpCookieAge: 0,
        httpCookieDomain: "string",
        httpCookieDomainFromHost: "string",
        httpCookieGeneration: 0,
        httpCookiePath: "string",
        httpCookieShare: "string",
        httpsCookieSecure: "string",
        id: 0,
        ldbMethod: "string",
        persistence: "string",
        quic: {
            ackDelayExponent: 0,
            activeConnectionIdLimit: 0,
            activeMigration: "string",
            greaseQuicBit: "string",
            maxAckDelay: 0,
            maxDatagramFrameSize: 0,
            maxIdleTimeout: 0,
            maxUdpPayloadSize: 0,
        },
        realservers: [{
            addrType: "string",
            address: "string",
            domain: "string",
            externalAuth: "string",
            healthCheck: "string",
            healthCheckProto: "string",
            holddownInterval: "string",
            httpHost: "string",
            id: 0,
            ip: "string",
            mappedport: "string",
            port: 0,
            sshClientCert: "string",
            sshHostKey: "string",
            sshHostKeyValidation: "string",
            status: "string",
            translateHost: "string",
            tunnelEncryption: "string",
            type: "string",
            weight: 0,
        }],
        samlRedirect: "string",
        samlServer: "string",
        service: "string",
        sslAlgorithm: "string",
        sslCipherSuites: [{
            cipher: "string",
            priority: 0,
            versions: ["string"],
        }],
        sslDhBits: "string",
        sslMaxVersion: "string",
        sslMinVersion: "string",
        sslRenegotiation: "string",
        sslVpnWebPortal: "string",
        urlMap: "string",
        urlMapType: "string",
        virtualHost: "string",
    }],
    authPortal: "string",
    authVirtualHost: "string",
    clientCert: "string",
    decryptedTrafficMirror: "string",
    dynamicSortSubtable: "string",
    emptyCertAction: "string",
    httpSupportedMaxVersion: "string",
    ldbMethod: "string",
    logBlockedTraffic: "string",
    name: "string",
    objectFirewallAccessproxyId: "string",
    realservers: [{
        id: 0,
        ip: "string",
        port: 0,
        status: "string",
        weight: 0,
    }],
    scopetype: "string",
    serverPubkeyAuth: "string",
    serverPubkeyAuthSettings: {
        authCa: "string",
        certExtensions: [{
            critical: "string",
            data: "string",
            name: "string",
            type: "string",
        }],
        permitAgentForwarding: "string",
        permitPortForwarding: "string",
        permitPty: "string",
        permitUserRc: "string",
        permitX11Forwarding: "string",
        sourceAddress: "string",
    },
    svrPoolMultiplex: "string",
    svrPoolServerMaxConcurrentRequest: 0,
    svrPoolServerMaxRequest: 0,
    svrPoolTtl: 0,
    userAgentDetect: "string",
    vip: "string",
});
Copy
type: fortimanager:ObjectFirewallAccessproxy
properties:
    addVhostDomainToDnsdb: string
    adom: string
    apiGateway6s:
        - applications:
            - string
          h2Support: string
          h3Support: string
          httpCookieAge: 0
          httpCookieDomain: string
          httpCookieDomainFromHost: string
          httpCookieGeneration: 0
          httpCookiePath: string
          httpCookieShare: string
          httpsCookieSecure: string
          id: 0
          ldbMethod: string
          persistence: string
          quic:
            ackDelayExponent: 0
            activeConnectionIdLimit: 0
            activeMigration: string
            greaseQuicBit: string
            maxAckDelay: 0
            maxDatagramFrameSize: 0
            maxIdleTimeout: 0
            maxUdpPayloadSize: 0
          realservers:
            - addrType: string
              address: string
              domain: string
              externalAuth: string
              healthCheck: string
              healthCheckProto: string
              holddownInterval: string
              httpHost: string
              id: 0
              ip: string
              mappedport: string
              port: 0
              sshClientCert: string
              sshHostKey: string
              sshHostKeyValidation: string
              status: string
              translateHost: string
              tunnelEncryption: string
              type: string
              weight: 0
          samlRedirect: string
          samlServer: string
          service: string
          sslAlgorithm: string
          sslCipherSuites:
            - cipher: string
              priority: 0
              versions:
                - string
          sslDhBits: string
          sslMaxVersion: string
          sslMinVersion: string
          sslRenegotiation: string
          sslVpnWebPortal: string
          urlMap: string
          urlMapType: string
          virtualHost: string
    apiGateways:
        - applications:
            - string
          h2Support: string
          h3Support: string
          httpCookieAge: 0
          httpCookieDomain: string
          httpCookieDomainFromHost: string
          httpCookieGeneration: 0
          httpCookiePath: string
          httpCookieShare: string
          httpsCookieSecure: string
          id: 0
          ldbMethod: string
          persistence: string
          quic:
            ackDelayExponent: 0
            activeConnectionIdLimit: 0
            activeMigration: string
            greaseQuicBit: string
            maxAckDelay: 0
            maxDatagramFrameSize: 0
            maxIdleTimeout: 0
            maxUdpPayloadSize: 0
          realservers:
            - addrType: string
              address: string
              domain: string
              externalAuth: string
              healthCheck: string
              healthCheckProto: string
              holddownInterval: string
              httpHost: string
              id: 0
              ip: string
              mappedport: string
              port: 0
              sshClientCert: string
              sshHostKey: string
              sshHostKeyValidation: string
              status: string
              translateHost: string
              tunnelEncryption: string
              type: string
              weight: 0
          samlRedirect: string
          samlServer: string
          service: string
          sslAlgorithm: string
          sslCipherSuites:
            - cipher: string
              priority: 0
              versions:
                - string
          sslDhBits: string
          sslMaxVersion: string
          sslMinVersion: string
          sslRenegotiation: string
          sslVpnWebPortal: string
          urlMap: string
          urlMapType: string
          virtualHost: string
    authPortal: string
    authVirtualHost: string
    clientCert: string
    decryptedTrafficMirror: string
    dynamicSortSubtable: string
    emptyCertAction: string
    httpSupportedMaxVersion: string
    ldbMethod: string
    logBlockedTraffic: string
    name: string
    objectFirewallAccessproxyId: string
    realservers:
        - id: 0
          ip: string
          port: 0
          status: string
          weight: 0
    scopetype: string
    serverPubkeyAuth: string
    serverPubkeyAuthSettings:
        authCa: string
        certExtensions:
            - critical: string
              data: string
              name: string
              type: string
        permitAgentForwarding: string
        permitPortForwarding: string
        permitPty: string
        permitUserRc: string
        permitX11Forwarding: string
        sourceAddress: string
    svrPoolMultiplex: string
    svrPoolServerMaxConcurrentRequest: 0
    svrPoolServerMaxRequest: 0
    svrPoolTtl: 0
    userAgentDetect: string
    vip: string
Copy

ObjectFirewallAccessproxy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ObjectFirewallAccessproxy resource accepts the following input properties:

AddVhostDomainToDnsdb string
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
ApiGateway6s List<ObjectFirewallAccessproxyApiGateway6>
Api-Gateway6. The structure of api_gateway6 block is documented below.
ApiGateways List<ObjectFirewallAccessproxyApiGateway>
Api-Gateway. The structure of api_gateway block is documented below.
AuthPortal string
Enable/disable authentication portal. Valid values: disable, enable.
AuthVirtualHost string
Virtual host for authentication portal.
ClientCert string
Enable/disable to request client certificate. Valid values: disable, enable.
DecryptedTrafficMirror string
Decrypted traffic mirror.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EmptyCertAction string
Action of an empty client certificate. Valid values: block, accept.
HttpSupportedMaxVersion string
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
LdbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
LogBlockedTraffic string
Enable/disable logging of blocked traffic. Valid values: disable, enable.
Name string
Access Proxy name.
ObjectFirewallAccessproxyId string
an identifier for the resource with format {{name}}.
Realservers List<ObjectFirewallAccessproxyRealserver>
Realservers. The structure of realservers block is documented below.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
ServerPubkeyAuth string
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
ServerPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettings
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
SvrPoolMultiplex string
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
SvrPoolServerMaxConcurrentRequest double
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
SvrPoolServerMaxRequest double
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
SvrPoolTtl double
Time-to-live in the server pool for idle connections to servers.
UserAgentDetect string
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
Vip string
Virtual IP name.
AddVhostDomainToDnsdb string
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
ApiGateway6s []ObjectFirewallAccessproxyApiGateway6TypeArgs
Api-Gateway6. The structure of api_gateway6 block is documented below.
ApiGateways []ObjectFirewallAccessproxyApiGatewayTypeArgs
Api-Gateway. The structure of api_gateway block is documented below.
AuthPortal string
Enable/disable authentication portal. Valid values: disable, enable.
AuthVirtualHost string
Virtual host for authentication portal.
ClientCert string
Enable/disable to request client certificate. Valid values: disable, enable.
DecryptedTrafficMirror string
Decrypted traffic mirror.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EmptyCertAction string
Action of an empty client certificate. Valid values: block, accept.
HttpSupportedMaxVersion string
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
LdbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
LogBlockedTraffic string
Enable/disable logging of blocked traffic. Valid values: disable, enable.
Name string
Access Proxy name.
ObjectFirewallAccessproxyId string
an identifier for the resource with format {{name}}.
Realservers []ObjectFirewallAccessproxyRealserverArgs
Realservers. The structure of realservers block is documented below.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
ServerPubkeyAuth string
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
ServerPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettingsTypeArgs
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
SvrPoolMultiplex string
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
SvrPoolServerMaxConcurrentRequest float64
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
SvrPoolServerMaxRequest float64
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
SvrPoolTtl float64
Time-to-live in the server pool for idle connections to servers.
UserAgentDetect string
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
Vip string
Virtual IP name.
addVhostDomainToDnsdb String
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
apiGateway6s List<ObjectFirewallAccessproxyApiGateway6>
Api-Gateway6. The structure of api_gateway6 block is documented below.
apiGateways List<ObjectFirewallAccessproxyApiGateway>
Api-Gateway. The structure of api_gateway block is documented below.
authPortal String
Enable/disable authentication portal. Valid values: disable, enable.
authVirtualHost String
Virtual host for authentication portal.
clientCert String
Enable/disable to request client certificate. Valid values: disable, enable.
decryptedTrafficMirror String
Decrypted traffic mirror.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
emptyCertAction String
Action of an empty client certificate. Valid values: block, accept.
httpSupportedMaxVersion String
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldbMethod String
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
logBlockedTraffic String
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name String
Access Proxy name.
objectFirewallAccessproxyId String
an identifier for the resource with format {{name}}.
realservers List<ObjectFirewallAccessproxyRealserver>
Realservers. The structure of realservers block is documented below.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
serverPubkeyAuth String
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
serverPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettings
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svrPoolMultiplex String
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svrPoolServerMaxConcurrentRequest Double
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svrPoolServerMaxRequest Double
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svrPoolTtl Double
Time-to-live in the server pool for idle connections to servers.
userAgentDetect String
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip String
Virtual IP name.
addVhostDomainToDnsdb string
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
apiGateway6s ObjectFirewallAccessproxyApiGateway6[]
Api-Gateway6. The structure of api_gateway6 block is documented below.
apiGateways ObjectFirewallAccessproxyApiGateway[]
Api-Gateway. The structure of api_gateway block is documented below.
authPortal string
Enable/disable authentication portal. Valid values: disable, enable.
authVirtualHost string
Virtual host for authentication portal.
clientCert string
Enable/disable to request client certificate. Valid values: disable, enable.
decryptedTrafficMirror string
Decrypted traffic mirror.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
emptyCertAction string
Action of an empty client certificate. Valid values: block, accept.
httpSupportedMaxVersion string
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
logBlockedTraffic string
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name string
Access Proxy name.
objectFirewallAccessproxyId string
an identifier for the resource with format {{name}}.
realservers ObjectFirewallAccessproxyRealserver[]
Realservers. The structure of realservers block is documented below.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
serverPubkeyAuth string
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
serverPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettings
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svrPoolMultiplex string
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svrPoolServerMaxConcurrentRequest number
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svrPoolServerMaxRequest number
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svrPoolTtl number
Time-to-live in the server pool for idle connections to servers.
userAgentDetect string
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip string
Virtual IP name.
add_vhost_domain_to_dnsdb str
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
api_gateway6s Sequence[ObjectFirewallAccessproxyApiGateway6Args]
Api-Gateway6. The structure of api_gateway6 block is documented below.
api_gateways Sequence[ObjectFirewallAccessproxyApiGatewayArgs]
Api-Gateway. The structure of api_gateway block is documented below.
auth_portal str
Enable/disable authentication portal. Valid values: disable, enable.
auth_virtual_host str
Virtual host for authentication portal.
client_cert str
Enable/disable to request client certificate. Valid values: disable, enable.
decrypted_traffic_mirror str
Decrypted traffic mirror.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
empty_cert_action str
Action of an empty client certificate. Valid values: block, accept.
http_supported_max_version str
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldb_method str
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
log_blocked_traffic str
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name str
Access Proxy name.
object_firewall_accessproxy_id str
an identifier for the resource with format {{name}}.
realservers Sequence[ObjectFirewallAccessproxyRealserverArgs]
Realservers. The structure of realservers block is documented below.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
server_pubkey_auth str
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
server_pubkey_auth_settings ObjectFirewallAccessproxyServerPubkeyAuthSettingsArgs
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svr_pool_multiplex str
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svr_pool_server_max_concurrent_request float
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svr_pool_server_max_request float
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svr_pool_ttl float
Time-to-live in the server pool for idle connections to servers.
user_agent_detect str
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip str
Virtual IP name.
addVhostDomainToDnsdb String
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
apiGateway6s List<Property Map>
Api-Gateway6. The structure of api_gateway6 block is documented below.
apiGateways List<Property Map>
Api-Gateway. The structure of api_gateway block is documented below.
authPortal String
Enable/disable authentication portal. Valid values: disable, enable.
authVirtualHost String
Virtual host for authentication portal.
clientCert String
Enable/disable to request client certificate. Valid values: disable, enable.
decryptedTrafficMirror String
Decrypted traffic mirror.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
emptyCertAction String
Action of an empty client certificate. Valid values: block, accept.
httpSupportedMaxVersion String
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldbMethod String
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
logBlockedTraffic String
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name String
Access Proxy name.
objectFirewallAccessproxyId String
an identifier for the resource with format {{name}}.
realservers List<Property Map>
Realservers. The structure of realservers block is documented below.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
serverPubkeyAuth String
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
serverPubkeyAuthSettings Property Map
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svrPoolMultiplex String
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svrPoolServerMaxConcurrentRequest Number
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svrPoolServerMaxRequest Number
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svrPoolTtl Number
Time-to-live in the server pool for idle connections to servers.
userAgentDetect String
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip String
Virtual IP name.

Outputs

All input properties are implicitly available as output properties. Additionally, the ObjectFirewallAccessproxy resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing ObjectFirewallAccessproxy Resource

Get an existing ObjectFirewallAccessproxy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ObjectFirewallAccessproxyState, opts?: CustomResourceOptions): ObjectFirewallAccessproxy
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        add_vhost_domain_to_dnsdb: Optional[str] = None,
        adom: Optional[str] = None,
        api_gateway6s: Optional[Sequence[ObjectFirewallAccessproxyApiGateway6Args]] = None,
        api_gateways: Optional[Sequence[ObjectFirewallAccessproxyApiGatewayArgs]] = None,
        auth_portal: Optional[str] = None,
        auth_virtual_host: Optional[str] = None,
        client_cert: Optional[str] = None,
        decrypted_traffic_mirror: Optional[str] = None,
        dynamic_sort_subtable: Optional[str] = None,
        empty_cert_action: Optional[str] = None,
        http_supported_max_version: Optional[str] = None,
        ldb_method: Optional[str] = None,
        log_blocked_traffic: Optional[str] = None,
        name: Optional[str] = None,
        object_firewall_accessproxy_id: Optional[str] = None,
        realservers: Optional[Sequence[ObjectFirewallAccessproxyRealserverArgs]] = None,
        scopetype: Optional[str] = None,
        server_pubkey_auth: Optional[str] = None,
        server_pubkey_auth_settings: Optional[ObjectFirewallAccessproxyServerPubkeyAuthSettingsArgs] = None,
        svr_pool_multiplex: Optional[str] = None,
        svr_pool_server_max_concurrent_request: Optional[float] = None,
        svr_pool_server_max_request: Optional[float] = None,
        svr_pool_ttl: Optional[float] = None,
        user_agent_detect: Optional[str] = None,
        vip: Optional[str] = None) -> ObjectFirewallAccessproxy
func GetObjectFirewallAccessproxy(ctx *Context, name string, id IDInput, state *ObjectFirewallAccessproxyState, opts ...ResourceOption) (*ObjectFirewallAccessproxy, error)
public static ObjectFirewallAccessproxy Get(string name, Input<string> id, ObjectFirewallAccessproxyState? state, CustomResourceOptions? opts = null)
public static ObjectFirewallAccessproxy get(String name, Output<String> id, ObjectFirewallAccessproxyState state, CustomResourceOptions options)
resources:  _:    type: fortimanager:ObjectFirewallAccessproxy    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AddVhostDomainToDnsdb string
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
ApiGateway6s List<ObjectFirewallAccessproxyApiGateway6>
Api-Gateway6. The structure of api_gateway6 block is documented below.
ApiGateways List<ObjectFirewallAccessproxyApiGateway>
Api-Gateway. The structure of api_gateway block is documented below.
AuthPortal string
Enable/disable authentication portal. Valid values: disable, enable.
AuthVirtualHost string
Virtual host for authentication portal.
ClientCert string
Enable/disable to request client certificate. Valid values: disable, enable.
DecryptedTrafficMirror string
Decrypted traffic mirror.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EmptyCertAction string
Action of an empty client certificate. Valid values: block, accept.
HttpSupportedMaxVersion string
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
LdbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
LogBlockedTraffic string
Enable/disable logging of blocked traffic. Valid values: disable, enable.
Name string
Access Proxy name.
ObjectFirewallAccessproxyId string
an identifier for the resource with format {{name}}.
Realservers List<ObjectFirewallAccessproxyRealserver>
Realservers. The structure of realservers block is documented below.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
ServerPubkeyAuth string
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
ServerPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettings
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
SvrPoolMultiplex string
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
SvrPoolServerMaxConcurrentRequest double
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
SvrPoolServerMaxRequest double
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
SvrPoolTtl double
Time-to-live in the server pool for idle connections to servers.
UserAgentDetect string
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
Vip string
Virtual IP name.
AddVhostDomainToDnsdb string
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
Adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
ApiGateway6s []ObjectFirewallAccessproxyApiGateway6TypeArgs
Api-Gateway6. The structure of api_gateway6 block is documented below.
ApiGateways []ObjectFirewallAccessproxyApiGatewayTypeArgs
Api-Gateway. The structure of api_gateway block is documented below.
AuthPortal string
Enable/disable authentication portal. Valid values: disable, enable.
AuthVirtualHost string
Virtual host for authentication portal.
ClientCert string
Enable/disable to request client certificate. Valid values: disable, enable.
DecryptedTrafficMirror string
Decrypted traffic mirror.
DynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
EmptyCertAction string
Action of an empty client certificate. Valid values: block, accept.
HttpSupportedMaxVersion string
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
LdbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
LogBlockedTraffic string
Enable/disable logging of blocked traffic. Valid values: disable, enable.
Name string
Access Proxy name.
ObjectFirewallAccessproxyId string
an identifier for the resource with format {{name}}.
Realservers []ObjectFirewallAccessproxyRealserverArgs
Realservers. The structure of realservers block is documented below.
Scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
ServerPubkeyAuth string
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
ServerPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettingsTypeArgs
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
SvrPoolMultiplex string
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
SvrPoolServerMaxConcurrentRequest float64
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
SvrPoolServerMaxRequest float64
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
SvrPoolTtl float64
Time-to-live in the server pool for idle connections to servers.
UserAgentDetect string
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
Vip string
Virtual IP name.
addVhostDomainToDnsdb String
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
apiGateway6s List<ObjectFirewallAccessproxyApiGateway6>
Api-Gateway6. The structure of api_gateway6 block is documented below.
apiGateways List<ObjectFirewallAccessproxyApiGateway>
Api-Gateway. The structure of api_gateway block is documented below.
authPortal String
Enable/disable authentication portal. Valid values: disable, enable.
authVirtualHost String
Virtual host for authentication portal.
clientCert String
Enable/disable to request client certificate. Valid values: disable, enable.
decryptedTrafficMirror String
Decrypted traffic mirror.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
emptyCertAction String
Action of an empty client certificate. Valid values: block, accept.
httpSupportedMaxVersion String
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldbMethod String
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
logBlockedTraffic String
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name String
Access Proxy name.
objectFirewallAccessproxyId String
an identifier for the resource with format {{name}}.
realservers List<ObjectFirewallAccessproxyRealserver>
Realservers. The structure of realservers block is documented below.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
serverPubkeyAuth String
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
serverPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettings
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svrPoolMultiplex String
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svrPoolServerMaxConcurrentRequest Double
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svrPoolServerMaxRequest Double
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svrPoolTtl Double
Time-to-live in the server pool for idle connections to servers.
userAgentDetect String
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip String
Virtual IP name.
addVhostDomainToDnsdb string
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom string
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
apiGateway6s ObjectFirewallAccessproxyApiGateway6[]
Api-Gateway6. The structure of api_gateway6 block is documented below.
apiGateways ObjectFirewallAccessproxyApiGateway[]
Api-Gateway. The structure of api_gateway block is documented below.
authPortal string
Enable/disable authentication portal. Valid values: disable, enable.
authVirtualHost string
Virtual host for authentication portal.
clientCert string
Enable/disable to request client certificate. Valid values: disable, enable.
decryptedTrafficMirror string
Decrypted traffic mirror.
dynamicSortSubtable string
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
emptyCertAction string
Action of an empty client certificate. Valid values: block, accept.
httpSupportedMaxVersion string
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
logBlockedTraffic string
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name string
Access Proxy name.
objectFirewallAccessproxyId string
an identifier for the resource with format {{name}}.
realservers ObjectFirewallAccessproxyRealserver[]
Realservers. The structure of realservers block is documented below.
scopetype string
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
serverPubkeyAuth string
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
serverPubkeyAuthSettings ObjectFirewallAccessproxyServerPubkeyAuthSettings
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svrPoolMultiplex string
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svrPoolServerMaxConcurrentRequest number
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svrPoolServerMaxRequest number
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svrPoolTtl number
Time-to-live in the server pool for idle connections to servers.
userAgentDetect string
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip string
Virtual IP name.
add_vhost_domain_to_dnsdb str
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom str
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
api_gateway6s Sequence[ObjectFirewallAccessproxyApiGateway6Args]
Api-Gateway6. The structure of api_gateway6 block is documented below.
api_gateways Sequence[ObjectFirewallAccessproxyApiGatewayArgs]
Api-Gateway. The structure of api_gateway block is documented below.
auth_portal str
Enable/disable authentication portal. Valid values: disable, enable.
auth_virtual_host str
Virtual host for authentication portal.
client_cert str
Enable/disable to request client certificate. Valid values: disable, enable.
decrypted_traffic_mirror str
Decrypted traffic mirror.
dynamic_sort_subtable str
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
empty_cert_action str
Action of an empty client certificate. Valid values: block, accept.
http_supported_max_version str
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldb_method str
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
log_blocked_traffic str
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name str
Access Proxy name.
object_firewall_accessproxy_id str
an identifier for the resource with format {{name}}.
realservers Sequence[ObjectFirewallAccessproxyRealserverArgs]
Realservers. The structure of realservers block is documented below.
scopetype str
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
server_pubkey_auth str
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
server_pubkey_auth_settings ObjectFirewallAccessproxyServerPubkeyAuthSettingsArgs
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svr_pool_multiplex str
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svr_pool_server_max_concurrent_request float
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svr_pool_server_max_request float
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svr_pool_ttl float
Time-to-live in the server pool for idle connections to servers.
user_agent_detect str
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip str
Virtual IP name.
addVhostDomainToDnsdb String
Enable/disable adding vhost/domain to dnsdb for ztna dox tunnel. Valid values: disable, enable.
adom String
Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
apiGateway6s List<Property Map>
Api-Gateway6. The structure of api_gateway6 block is documented below.
apiGateways List<Property Map>
Api-Gateway. The structure of api_gateway block is documented below.
authPortal String
Enable/disable authentication portal. Valid values: disable, enable.
authVirtualHost String
Virtual host for authentication portal.
clientCert String
Enable/disable to request client certificate. Valid values: disable, enable.
decryptedTrafficMirror String
Decrypted traffic mirror.
dynamicSortSubtable String
true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
emptyCertAction String
Action of an empty client certificate. Valid values: block, accept.
httpSupportedMaxVersion String
Maximum supported HTTP versions. default = HTTP2 Valid values: http1, http2.
ldbMethod String
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
logBlockedTraffic String
Enable/disable logging of blocked traffic. Valid values: disable, enable.
name String
Access Proxy name.
objectFirewallAccessproxyId String
an identifier for the resource with format {{name}}.
realservers List<Property Map>
Realservers. The structure of realservers block is documented below.
scopetype String
The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
serverPubkeyAuth String
Enable/disable SSH real server public key authentication. Valid values: disable, enable.
serverPubkeyAuthSettings Property Map
Server-Pubkey-Auth-Settings. The structure of server_pubkey_auth_settings block is documented below.
svrPoolMultiplex String
Enable/disable server pool multiplexing. Share connected server in HTTP, HTTPS, and web-portal api-gateway. Valid values: disable, enable.
svrPoolServerMaxConcurrentRequest Number
Maximum number of concurrent requests that servers in server pool could handle (default = unlimited).
svrPoolServerMaxRequest Number
Maximum number of requests that servers in server pool handle before disconnecting (default = unlimited).
svrPoolTtl Number
Time-to-live in the server pool for idle connections to servers.
userAgentDetect String
Enable/disable to detect device type by HTTP user-agent if no client certificate provided. Valid values: disable, enable.
vip String
Virtual IP name.

Supporting Types

ObjectFirewallAccessproxyApiGateway
, ObjectFirewallAccessproxyApiGatewayArgs

Applications List<string>
SaaS application controlled by this Access Proxy.
H2Support string
HTTP2 support, default=Enable. Valid values: disable, enable.
H3Support string
HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
HttpCookieAge double
Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
HttpCookieDomain string
Domain that HTTP cookie persistence should apply to.
HttpCookieDomainFromHost string
Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
HttpCookieGeneration double
Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
HttpCookiePath string
Limit HTTP cookie persistence to the specified path.
HttpCookieShare string
Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
HttpsCookieSecure string
Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
Id double
API Gateway ID.
LdbMethod string
Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
Persistence string
Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
Quic ObjectFirewallAccessproxyApiGatewayQuic
Quic. The structure of quic block is documented below.
Realservers List<ObjectFirewallAccessproxyApiGatewayRealserver>
Realservers. The structure of realservers block is documented below.
SamlRedirect string
Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
SamlServer string
SAML service provider configuration for VIP authentication.
Service string
Service. Valid values: http, https, tcp-forwarding, samlsp.
SslAlgorithm string
Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
SslCipherSuites List<ObjectFirewallAccessproxyApiGatewaySslCipherSuite>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslDhBits string
Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
SslMaxVersion string
Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslMinVersion string
Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslRenegotiation string
Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
SslVpnWebPortal string
SSL-VPN web portal.
UrlMap string
URL pattern to match.
UrlMapType string
Type of url-map. Valid values: sub-string, wildcard, regex.
VirtualHost string
Virtual host.
Applications []string
SaaS application controlled by this Access Proxy.
H2Support string
HTTP2 support, default=Enable. Valid values: disable, enable.
H3Support string
HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
HttpCookieAge float64
Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
HttpCookieDomain string
Domain that HTTP cookie persistence should apply to.
HttpCookieDomainFromHost string
Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
HttpCookieGeneration float64
Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
HttpCookiePath string
Limit HTTP cookie persistence to the specified path.
HttpCookieShare string
Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
HttpsCookieSecure string
Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
Id float64
API Gateway ID.
LdbMethod string
Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
Persistence string
Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
Quic ObjectFirewallAccessproxyApiGatewayQuicType
Quic. The structure of quic block is documented below.
Realservers []ObjectFirewallAccessproxyApiGatewayRealserver
Realservers. The structure of realservers block is documented below.
SamlRedirect string
Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
SamlServer string
SAML service provider configuration for VIP authentication.
Service string
Service. Valid values: http, https, tcp-forwarding, samlsp.
SslAlgorithm string
Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
SslCipherSuites []ObjectFirewallAccessproxyApiGatewaySslCipherSuite
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslDhBits string
Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
SslMaxVersion string
Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslMinVersion string
Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslRenegotiation string
Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
SslVpnWebPortal string
SSL-VPN web portal.
UrlMap string
URL pattern to match.
UrlMapType string
Type of url-map. Valid values: sub-string, wildcard, regex.
VirtualHost string
Virtual host.
applications List<String>
SaaS application controlled by this Access Proxy.
h2Support String
HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support String
HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge Double
Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain String
Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost String
Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration Double
Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath String
Limit HTTP cookie persistence to the specified path.
httpCookieShare String
Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure String
Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
id Double
API Gateway ID.
ldbMethod String
Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
persistence String
Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApiGatewayQuic
Quic. The structure of quic block is documented below.
realservers List<ObjectFirewallAccessproxyApiGatewayRealserver>
Realservers. The structure of realservers block is documented below.
samlRedirect String
Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer String
SAML service provider configuration for VIP authentication.
service String
Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm String
Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites List<ObjectFirewallAccessproxyApiGatewaySslCipherSuite>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits String
Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion String
Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion String
Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation String
Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal String
SSL-VPN web portal.
urlMap String
URL pattern to match.
urlMapType String
Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost String
Virtual host.
applications string[]
SaaS application controlled by this Access Proxy.
h2Support string
HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support string
HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge number
Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain string
Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost string
Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration number
Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath string
Limit HTTP cookie persistence to the specified path.
httpCookieShare string
Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure string
Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
id number
API Gateway ID.
ldbMethod string
Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
persistence string
Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApiGatewayQuic
Quic. The structure of quic block is documented below.
realservers ObjectFirewallAccessproxyApiGatewayRealserver[]
Realservers. The structure of realservers block is documented below.
samlRedirect string
Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer string
SAML service provider configuration for VIP authentication.
service string
Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm string
Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites ObjectFirewallAccessproxyApiGatewaySslCipherSuite[]
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits string
Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion string
Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion string
Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation string
Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal string
SSL-VPN web portal.
urlMap string
URL pattern to match.
urlMapType string
Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost string
Virtual host.
applications Sequence[str]
SaaS application controlled by this Access Proxy.
h2_support str
HTTP2 support, default=Enable. Valid values: disable, enable.
h3_support str
HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
http_cookie_age float
Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
http_cookie_domain str
Domain that HTTP cookie persistence should apply to.
http_cookie_domain_from_host str
Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
http_cookie_generation float
Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
http_cookie_path str
Limit HTTP cookie persistence to the specified path.
http_cookie_share str
Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
https_cookie_secure str
Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
id float
API Gateway ID.
ldb_method str
Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
persistence str
Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApiGatewayQuic
Quic. The structure of quic block is documented below.
realservers Sequence[ObjectFirewallAccessproxyApiGatewayRealserver]
Realservers. The structure of realservers block is documented below.
saml_redirect str
Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
saml_server str
SAML service provider configuration for VIP authentication.
service str
Service. Valid values: http, https, tcp-forwarding, samlsp.
ssl_algorithm str
Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
ssl_cipher_suites Sequence[ObjectFirewallAccessproxyApiGatewaySslCipherSuite]
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
ssl_dh_bits str
Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
ssl_max_version str
Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
ssl_min_version str
Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
ssl_renegotiation str
Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
ssl_vpn_web_portal str
SSL-VPN web portal.
url_map str
URL pattern to match.
url_map_type str
Type of url-map. Valid values: sub-string, wildcard, regex.
virtual_host str
Virtual host.
applications List<String>
SaaS application controlled by this Access Proxy.
h2Support String
HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support String
HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge Number
Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain String
Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost String
Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration Number
Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath String
Limit HTTP cookie persistence to the specified path.
httpCookieShare String
Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure String
Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
id Number
API Gateway ID.
ldbMethod String
Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
persistence String
Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic Property Map
Quic. The structure of quic block is documented below.
realservers List<Property Map>
Realservers. The structure of realservers block is documented below.
samlRedirect String
Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer String
SAML service provider configuration for VIP authentication.
service String
Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm String
Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites List<Property Map>
Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits String
Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion String
Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion String
Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation String
Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal String
SSL-VPN web portal.
urlMap String
URL pattern to match.
urlMapType String
Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost String
Virtual host.

ObjectFirewallAccessproxyApiGateway6
, ObjectFirewallAccessproxyApiGateway6Args

Applications List<string>
H2Support string
H3Support string
HttpCookieAge double
HttpCookieDomain string
HttpCookieDomainFromHost string
HttpCookieGeneration double
HttpCookiePath string
HttpCookieShare string
HttpsCookieSecure string
Id double
an identifier for the resource with format {{name}}.
LdbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
Persistence string
Quic ObjectFirewallAccessproxyApiGateway6Quic
Realservers List<ObjectFirewallAccessproxyApiGateway6Realserver>
Realservers. The structure of realservers block is documented below.
SamlRedirect string
SamlServer string
Service string
SslAlgorithm string
SslCipherSuites List<ObjectFirewallAccessproxyApiGateway6SslCipherSuite>
SslDhBits string
SslMaxVersion string
SslMinVersion string
SslRenegotiation string
SslVpnWebPortal string
UrlMap string
UrlMapType string
VirtualHost string
Applications []string
H2Support string
H3Support string
HttpCookieAge float64
HttpCookieDomain string
HttpCookieDomainFromHost string
HttpCookieGeneration float64
HttpCookiePath string
HttpCookieShare string
HttpsCookieSecure string
Id float64
an identifier for the resource with format {{name}}.
LdbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
Persistence string
Quic ObjectFirewallAccessproxyApiGateway6QuicType
Realservers []ObjectFirewallAccessproxyApiGateway6Realserver
Realservers. The structure of realservers block is documented below.
SamlRedirect string
SamlServer string
Service string
SslAlgorithm string
SslCipherSuites []ObjectFirewallAccessproxyApiGateway6SslCipherSuite
SslDhBits string
SslMaxVersion string
SslMinVersion string
SslRenegotiation string
SslVpnWebPortal string
UrlMap string
UrlMapType string
VirtualHost string
applications List<String>
h2Support String
h3Support String
httpCookieAge Double
httpCookieDomain String
httpCookieDomainFromHost String
httpCookieGeneration Double
httpCookiePath String
httpCookieShare String
httpsCookieSecure String
id Double
an identifier for the resource with format {{name}}.
ldbMethod String
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
persistence String
quic ObjectFirewallAccessproxyApiGateway6Quic
realservers List<ObjectFirewallAccessproxyApiGateway6Realserver>
Realservers. The structure of realservers block is documented below.
samlRedirect String
samlServer String
service String
sslAlgorithm String
sslCipherSuites List<ObjectFirewallAccessproxyApiGateway6SslCipherSuite>
sslDhBits String
sslMaxVersion String
sslMinVersion String
sslRenegotiation String
sslVpnWebPortal String
urlMap String
urlMapType String
virtualHost String
applications string[]
h2Support string
h3Support string
httpCookieAge number
httpCookieDomain string
httpCookieDomainFromHost string
httpCookieGeneration number
httpCookiePath string
httpCookieShare string
httpsCookieSecure string
id number
an identifier for the resource with format {{name}}.
ldbMethod string
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
persistence string
quic ObjectFirewallAccessproxyApiGateway6Quic
realservers ObjectFirewallAccessproxyApiGateway6Realserver[]
Realservers. The structure of realservers block is documented below.
samlRedirect string
samlServer string
service string
sslAlgorithm string
sslCipherSuites ObjectFirewallAccessproxyApiGateway6SslCipherSuite[]
sslDhBits string
sslMaxVersion string
sslMinVersion string
sslRenegotiation string
sslVpnWebPortal string
urlMap string
urlMapType string
virtualHost string
applications Sequence[str]
h2_support str
h3_support str
http_cookie_age float
http_cookie_domain str
http_cookie_domain_from_host str
http_cookie_generation float
http_cookie_path str
http_cookie_share str
https_cookie_secure str
id float
an identifier for the resource with format {{name}}.
ldb_method str
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
persistence str
quic ObjectFirewallAccessproxyApiGateway6Quic
realservers Sequence[ObjectFirewallAccessproxyApiGateway6Realserver]
Realservers. The structure of realservers block is documented below.
saml_redirect str
saml_server str
service str
ssl_algorithm str
ssl_cipher_suites Sequence[ObjectFirewallAccessproxyApiGateway6SslCipherSuite]
ssl_dh_bits str
ssl_max_version str
ssl_min_version str
ssl_renegotiation str
ssl_vpn_web_portal str
url_map str
url_map_type str
virtual_host str
applications List<String>
h2Support String
h3Support String
httpCookieAge Number
httpCookieDomain String
httpCookieDomainFromHost String
httpCookieGeneration Number
httpCookiePath String
httpCookieShare String
httpsCookieSecure String
id Number
an identifier for the resource with format {{name}}.
ldbMethod String
Method used to distribute sessions to SSL real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive.
persistence String
quic Property Map
realservers List<Property Map>
Realservers. The structure of realservers block is documented below.
samlRedirect String
samlServer String
service String
sslAlgorithm String
sslCipherSuites List<Property Map>
sslDhBits String
sslMaxVersion String
sslMinVersion String
sslRenegotiation String
sslVpnWebPortal String
urlMap String
urlMapType String
virtualHost String

ObjectFirewallAccessproxyApiGateway6Quic
, ObjectFirewallAccessproxyApiGateway6QuicArgs

AckDelayExponent double
ACK delay exponent (1 - 20, default = 3).
ActiveConnectionIdLimit double
Active connection ID limit (1 - 8, default = 2).
ActiveMigration string
Enable/disable active migration (default = disable). Valid values: disable, enable.
GreaseQuicBit string
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
MaxAckDelay double
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
MaxDatagramFrameSize double
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
MaxIdleTimeout double
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
MaxUdpPayloadSize double
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
AckDelayExponent float64
ACK delay exponent (1 - 20, default = 3).
ActiveConnectionIdLimit float64
Active connection ID limit (1 - 8, default = 2).
ActiveMigration string
Enable/disable active migration (default = disable). Valid values: disable, enable.
GreaseQuicBit string
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
MaxAckDelay float64
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
MaxDatagramFrameSize float64
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
MaxIdleTimeout float64
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
MaxUdpPayloadSize float64
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ackDelayExponent Double
ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit Double
Active connection ID limit (1 - 8, default = 2).
activeMigration String
Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit String
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay Double
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize Double
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout Double
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize Double
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ackDelayExponent number
ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit number
Active connection ID limit (1 - 8, default = 2).
activeMigration string
Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit string
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay number
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize number
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout number
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize number
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ack_delay_exponent float
ACK delay exponent (1 - 20, default = 3).
active_connection_id_limit float
Active connection ID limit (1 - 8, default = 2).
active_migration str
Enable/disable active migration (default = disable). Valid values: disable, enable.
grease_quic_bit str
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
max_ack_delay float
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
max_datagram_frame_size float
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
max_idle_timeout float
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
max_udp_payload_size float
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ackDelayExponent Number
ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit Number
Active connection ID limit (1 - 8, default = 2).
activeMigration String
Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit String
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay Number
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize Number
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout Number
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize Number
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

ObjectFirewallAccessproxyApiGateway6Realserver
, ObjectFirewallAccessproxyApiGateway6RealserverArgs

AddrType string
Type of address. Valid values: fqdn, ip.
Address string
Address or address group of the real server.
Domain string
Wildcard domain name of the real server.
ExternalAuth string
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
HealthCheck string
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
HealthCheckProto string
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
HolddownInterval string
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
HttpHost string
HTTP server domain name in HTTP header.
Id double
Real server ID.
Ip string
IP address of the real server.
Mappedport string
Port for communicating with the real server.
Port double
Port for communicating with the real server.
SshClientCert string
Set access-proxy SSH client certificate profile.
SshHostKey string
One or more server host key.
SshHostKeyValidation string
Enable/disable SSH real server host key validation. Valid values: disable, enable.
Status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
TranslateHost string
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
TunnelEncryption string
Tunnel encryption. Valid values: disable, enable.
Type string
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
Weight double
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
AddrType string
Type of address. Valid values: fqdn, ip.
Address string
Address or address group of the real server.
Domain string
Wildcard domain name of the real server.
ExternalAuth string
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
HealthCheck string
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
HealthCheckProto string
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
HolddownInterval string
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
HttpHost string
HTTP server domain name in HTTP header.
Id float64
Real server ID.
Ip string
IP address of the real server.
Mappedport string
Port for communicating with the real server.
Port float64
Port for communicating with the real server.
SshClientCert string
Set access-proxy SSH client certificate profile.
SshHostKey string
One or more server host key.
SshHostKeyValidation string
Enable/disable SSH real server host key validation. Valid values: disable, enable.
Status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
TranslateHost string
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
TunnelEncryption string
Tunnel encryption. Valid values: disable, enable.
Type string
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
Weight float64
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addrType String
Type of address. Valid values: fqdn, ip.
address String
Address or address group of the real server.
domain String
Wildcard domain name of the real server.
externalAuth String
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck String
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto String
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval String
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost String
HTTP server domain name in HTTP header.
id Double
Real server ID.
ip String
IP address of the real server.
mappedport String
Port for communicating with the real server.
port Double
Port for communicating with the real server.
sshClientCert String
Set access-proxy SSH client certificate profile.
sshHostKey String
One or more server host key.
sshHostKeyValidation String
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status String
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost String
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption String
Tunnel encryption. Valid values: disable, enable.
type String
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight Double
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addrType string
Type of address. Valid values: fqdn, ip.
address string
Address or address group of the real server.
domain string
Wildcard domain name of the real server.
externalAuth string
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck string
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto string
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval string
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost string
HTTP server domain name in HTTP header.
id number
Real server ID.
ip string
IP address of the real server.
mappedport string
Port for communicating with the real server.
port number
Port for communicating with the real server.
sshClientCert string
Set access-proxy SSH client certificate profile.
sshHostKey string
One or more server host key.
sshHostKeyValidation string
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost string
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption string
Tunnel encryption. Valid values: disable, enable.
type string
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight number
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addr_type str
Type of address. Valid values: fqdn, ip.
address str
Address or address group of the real server.
domain str
Wildcard domain name of the real server.
external_auth str
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
health_check str
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
health_check_proto str
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddown_interval str
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
http_host str
HTTP server domain name in HTTP header.
id float
Real server ID.
ip str
IP address of the real server.
mappedport str
Port for communicating with the real server.
port float
Port for communicating with the real server.
ssh_client_cert str
Set access-proxy SSH client certificate profile.
ssh_host_key str
One or more server host key.
ssh_host_key_validation str
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status str
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translate_host str
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnel_encryption str
Tunnel encryption. Valid values: disable, enable.
type str
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight float
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addrType String
Type of address. Valid values: fqdn, ip.
address String
Address or address group of the real server.
domain String
Wildcard domain name of the real server.
externalAuth String
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck String
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto String
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval String
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost String
HTTP server domain name in HTTP header.
id Number
Real server ID.
ip String
IP address of the real server.
mappedport String
Port for communicating with the real server.
port Number
Port for communicating with the real server.
sshClientCert String
Set access-proxy SSH client certificate profile.
sshHostKey String
One or more server host key.
sshHostKeyValidation String
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status String
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost String
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption String
Tunnel encryption. Valid values: disable, enable.
type String
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight Number
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

ObjectFirewallAccessproxyApiGateway6SslCipherSuite
, ObjectFirewallAccessproxyApiGateway6SslCipherSuiteArgs

Cipher string
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
Priority double
SSL/TLS cipher suites priority.
Versions List<string>
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
Cipher string
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
Priority float64
SSL/TLS cipher suites priority.
Versions []string
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher String
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority Double
SSL/TLS cipher suites priority.
versions List<String>
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher string
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority number
SSL/TLS cipher suites priority.
versions string[]
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher str
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority float
SSL/TLS cipher suites priority.
versions Sequence[str]
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher String
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority Number
SSL/TLS cipher suites priority.
versions List<String>
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

ObjectFirewallAccessproxyApiGatewayQuic
, ObjectFirewallAccessproxyApiGatewayQuicArgs

AckDelayExponent double
ACK delay exponent (1 - 20, default = 3).
ActiveConnectionIdLimit double
Active connection ID limit (1 - 8, default = 2).
ActiveMigration string
Enable/disable active migration (default = disable). Valid values: disable, enable.
GreaseQuicBit string
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
MaxAckDelay double
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
MaxDatagramFrameSize double
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
MaxIdleTimeout double
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
MaxUdpPayloadSize double
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
AckDelayExponent float64
ACK delay exponent (1 - 20, default = 3).
ActiveConnectionIdLimit float64
Active connection ID limit (1 - 8, default = 2).
ActiveMigration string
Enable/disable active migration (default = disable). Valid values: disable, enable.
GreaseQuicBit string
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
MaxAckDelay float64
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
MaxDatagramFrameSize float64
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
MaxIdleTimeout float64
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
MaxUdpPayloadSize float64
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ackDelayExponent Double
ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit Double
Active connection ID limit (1 - 8, default = 2).
activeMigration String
Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit String
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay Double
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize Double
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout Double
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize Double
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ackDelayExponent number
ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit number
Active connection ID limit (1 - 8, default = 2).
activeMigration string
Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit string
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay number
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize number
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout number
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize number
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ack_delay_exponent float
ACK delay exponent (1 - 20, default = 3).
active_connection_id_limit float
Active connection ID limit (1 - 8, default = 2).
active_migration str
Enable/disable active migration (default = disable). Valid values: disable, enable.
grease_quic_bit str
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
max_ack_delay float
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
max_datagram_frame_size float
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
max_idle_timeout float
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
max_udp_payload_size float
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).
ackDelayExponent Number
ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit Number
Active connection ID limit (1 - 8, default = 2).
activeMigration String
Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit String
Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay Number
Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize Number
Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout Number
Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize Number
Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

ObjectFirewallAccessproxyApiGatewayRealserver
, ObjectFirewallAccessproxyApiGatewayRealserverArgs

AddrType string
Type of address. Valid values: fqdn, ip.
Address string
Address or address group of the real server.
Domain string
Wildcard domain name of the real server.
ExternalAuth string
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
HealthCheck string
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
HealthCheckProto string
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
HolddownInterval string
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
HttpHost string
HTTP server domain name in HTTP header.
Id double
Real server ID.
Ip string
IP address of the real server.
Mappedport string
Port for communicating with the real server.
Port double
Port for communicating with the real server.
SshClientCert string
Set access-proxy SSH client certificate profile.
SshHostKey string
One or more server host key.
SshHostKeyValidation string
Enable/disable SSH real server host key validation. Valid values: disable, enable.
Status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
TranslateHost string
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
TunnelEncryption string
Tunnel encryption. Valid values: disable, enable.
Type string
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
Weight double
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
AddrType string
Type of address. Valid values: fqdn, ip.
Address string
Address or address group of the real server.
Domain string
Wildcard domain name of the real server.
ExternalAuth string
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
HealthCheck string
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
HealthCheckProto string
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
HolddownInterval string
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
HttpHost string
HTTP server domain name in HTTP header.
Id float64
Real server ID.
Ip string
IP address of the real server.
Mappedport string
Port for communicating with the real server.
Port float64
Port for communicating with the real server.
SshClientCert string
Set access-proxy SSH client certificate profile.
SshHostKey string
One or more server host key.
SshHostKeyValidation string
Enable/disable SSH real server host key validation. Valid values: disable, enable.
Status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
TranslateHost string
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
TunnelEncryption string
Tunnel encryption. Valid values: disable, enable.
Type string
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
Weight float64
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addrType String
Type of address. Valid values: fqdn, ip.
address String
Address or address group of the real server.
domain String
Wildcard domain name of the real server.
externalAuth String
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck String
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto String
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval String
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost String
HTTP server domain name in HTTP header.
id Double
Real server ID.
ip String
IP address of the real server.
mappedport String
Port for communicating with the real server.
port Double
Port for communicating with the real server.
sshClientCert String
Set access-proxy SSH client certificate profile.
sshHostKey String
One or more server host key.
sshHostKeyValidation String
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status String
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost String
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption String
Tunnel encryption. Valid values: disable, enable.
type String
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight Double
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addrType string
Type of address. Valid values: fqdn, ip.
address string
Address or address group of the real server.
domain string
Wildcard domain name of the real server.
externalAuth string
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck string
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto string
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval string
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost string
HTTP server domain name in HTTP header.
id number
Real server ID.
ip string
IP address of the real server.
mappedport string
Port for communicating with the real server.
port number
Port for communicating with the real server.
sshClientCert string
Set access-proxy SSH client certificate profile.
sshHostKey string
One or more server host key.
sshHostKeyValidation string
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost string
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption string
Tunnel encryption. Valid values: disable, enable.
type string
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight number
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addr_type str
Type of address. Valid values: fqdn, ip.
address str
Address or address group of the real server.
domain str
Wildcard domain name of the real server.
external_auth str
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
health_check str
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
health_check_proto str
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddown_interval str
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
http_host str
HTTP server domain name in HTTP header.
id float
Real server ID.
ip str
IP address of the real server.
mappedport str
Port for communicating with the real server.
port float
Port for communicating with the real server.
ssh_client_cert str
Set access-proxy SSH client certificate profile.
ssh_host_key str
One or more server host key.
ssh_host_key_validation str
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status str
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translate_host str
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnel_encryption str
Tunnel encryption. Valid values: disable, enable.
type str
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight float
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
addrType String
Type of address. Valid values: fqdn, ip.
address String
Address or address group of the real server.
domain String
Wildcard domain name of the real server.
externalAuth String
Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck String
Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto String
Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval String
Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost String
HTTP server domain name in HTTP header.
id Number
Real server ID.
ip String
IP address of the real server.
mappedport String
Port for communicating with the real server.
port Number
Port for communicating with the real server.
sshClientCert String
Set access-proxy SSH client certificate profile.
sshHostKey String
One or more server host key.
sshHostKeyValidation String
Enable/disable SSH real server host key validation. Valid values: disable, enable.
status String
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost String
Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption String
Tunnel encryption. Valid values: disable, enable.
type String
TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight Number
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

ObjectFirewallAccessproxyApiGatewaySslCipherSuite
, ObjectFirewallAccessproxyApiGatewaySslCipherSuiteArgs

Cipher string
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
Priority double
SSL/TLS cipher suites priority.
Versions List<string>
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
Cipher string
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
Priority float64
SSL/TLS cipher suites priority.
Versions []string
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher String
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority Double
SSL/TLS cipher suites priority.
versions List<String>
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher string
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority number
SSL/TLS cipher suites priority.
versions string[]
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher str
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority float
SSL/TLS cipher suites priority.
versions Sequence[str]
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
cipher String
Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA.
priority Number
SSL/TLS cipher suites priority.
versions List<String>
SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

ObjectFirewallAccessproxyRealserver
, ObjectFirewallAccessproxyRealserverArgs

Id double
Real server ID.
Ip string
IP address of the real server.
Port double
Port for communicating with the real server.
Status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
Weight double
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
Id float64
Real server ID.
Ip string
IP address of the real server.
Port float64
Port for communicating with the real server.
Status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
Weight float64
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
id Double
Real server ID.
ip String
IP address of the real server.
port Double
Port for communicating with the real server.
status String
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
weight Double
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
id number
Real server ID.
ip string
IP address of the real server.
port number
Port for communicating with the real server.
status string
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
weight number
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
id float
Real server ID.
ip str
IP address of the real server.
port float
Port for communicating with the real server.
status str
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
weight float
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.
id Number
Real server ID.
ip String
IP address of the real server.
port Number
Port for communicating with the real server.
status String
Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
weight Number
Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

ObjectFirewallAccessproxyServerPubkeyAuthSettings
, ObjectFirewallAccessproxyServerPubkeyAuthSettingsArgs

AuthCa string
Name of the SSH server public key authentication CA.
CertExtensions List<ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtension>
Cert-Extension. The structure of cert_extension block is documented below.
PermitAgentForwarding string
Enable/disable appending permit-agent-forwarding certificate extension. Valid values: disable, enable.
PermitPortForwarding string
Enable/disable appending permit-port-forwarding certificate extension. Valid values: disable, enable.
PermitPty string
Enable/disable appending permit-pty certificate extension. Valid values: disable, enable.
PermitUserRc string
Enable/disable appending permit-user-rc certificate extension. Valid values: disable, enable.
PermitX11Forwarding string
Enable/disable appending permit-x11-forwarding certificate extension. Valid values: disable, enable.
SourceAddress string
Enable/disable appending source-address certificate critical option. This option ensure certificate only accepted from FortiGate source address. Valid values: disable, enable.
AuthCa string
Name of the SSH server public key authentication CA.
CertExtensions []ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtension
Cert-Extension. The structure of cert_extension block is documented below.
PermitAgentForwarding string
Enable/disable appending permit-agent-forwarding certificate extension. Valid values: disable, enable.
PermitPortForwarding string
Enable/disable appending permit-port-forwarding certificate extension. Valid values: disable, enable.
PermitPty string
Enable/disable appending permit-pty certificate extension. Valid values: disable, enable.
PermitUserRc string
Enable/disable appending permit-user-rc certificate extension. Valid values: disable, enable.
PermitX11Forwarding string
Enable/disable appending permit-x11-forwarding certificate extension. Valid values: disable, enable.
SourceAddress string
Enable/disable appending source-address certificate critical option. This option ensure certificate only accepted from FortiGate source address. Valid values: disable, enable.
authCa String
Name of the SSH server public key authentication CA.
certExtensions List<ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtension>
Cert-Extension. The structure of cert_extension block is documented below.
permitAgentForwarding String
Enable/disable appending permit-agent-forwarding certificate extension. Valid values: disable, enable.
permitPortForwarding String
Enable/disable appending permit-port-forwarding certificate extension. Valid values: disable, enable.
permitPty String
Enable/disable appending permit-pty certificate extension. Valid values: disable, enable.
permitUserRc String
Enable/disable appending permit-user-rc certificate extension. Valid values: disable, enable.
permitX11Forwarding String
Enable/disable appending permit-x11-forwarding certificate extension. Valid values: disable, enable.
sourceAddress String
Enable/disable appending source-address certificate critical option. This option ensure certificate only accepted from FortiGate source address. Valid values: disable, enable.
authCa string
Name of the SSH server public key authentication CA.
certExtensions ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtension[]
Cert-Extension. The structure of cert_extension block is documented below.
permitAgentForwarding string
Enable/disable appending permit-agent-forwarding certificate extension. Valid values: disable, enable.
permitPortForwarding string
Enable/disable appending permit-port-forwarding certificate extension. Valid values: disable, enable.
permitPty string
Enable/disable appending permit-pty certificate extension. Valid values: disable, enable.
permitUserRc string
Enable/disable appending permit-user-rc certificate extension. Valid values: disable, enable.
permitX11Forwarding string
Enable/disable appending permit-x11-forwarding certificate extension. Valid values: disable, enable.
sourceAddress string
Enable/disable appending source-address certificate critical option. This option ensure certificate only accepted from FortiGate source address. Valid values: disable, enable.
auth_ca str
Name of the SSH server public key authentication CA.
cert_extensions Sequence[ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtension]
Cert-Extension. The structure of cert_extension block is documented below.
permit_agent_forwarding str
Enable/disable appending permit-agent-forwarding certificate extension. Valid values: disable, enable.
permit_port_forwarding str
Enable/disable appending permit-port-forwarding certificate extension. Valid values: disable, enable.
permit_pty str
Enable/disable appending permit-pty certificate extension. Valid values: disable, enable.
permit_user_rc str
Enable/disable appending permit-user-rc certificate extension. Valid values: disable, enable.
permit_x11_forwarding str
Enable/disable appending permit-x11-forwarding certificate extension. Valid values: disable, enable.
source_address str
Enable/disable appending source-address certificate critical option. This option ensure certificate only accepted from FortiGate source address. Valid values: disable, enable.
authCa String
Name of the SSH server public key authentication CA.
certExtensions List<Property Map>
Cert-Extension. The structure of cert_extension block is documented below.
permitAgentForwarding String
Enable/disable appending permit-agent-forwarding certificate extension. Valid values: disable, enable.
permitPortForwarding String
Enable/disable appending permit-port-forwarding certificate extension. Valid values: disable, enable.
permitPty String
Enable/disable appending permit-pty certificate extension. Valid values: disable, enable.
permitUserRc String
Enable/disable appending permit-user-rc certificate extension. Valid values: disable, enable.
permitX11Forwarding String
Enable/disable appending permit-x11-forwarding certificate extension. Valid values: disable, enable.
sourceAddress String
Enable/disable appending source-address certificate critical option. This option ensure certificate only accepted from FortiGate source address. Valid values: disable, enable.

ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtension
, ObjectFirewallAccessproxyServerPubkeyAuthSettingsCertExtensionArgs

Critical string
Critical option. Valid values: no, yes.
Data string
Name of certificate extension.
Name string
Name of certificate extension.
Type string
Type of certificate extension. Valid values: fixed, user.
Critical string
Critical option. Valid values: no, yes.
Data string
Name of certificate extension.
Name string
Name of certificate extension.
Type string
Type of certificate extension. Valid values: fixed, user.
critical String
Critical option. Valid values: no, yes.
data String
Name of certificate extension.
name String
Name of certificate extension.
type String
Type of certificate extension. Valid values: fixed, user.
critical string
Critical option. Valid values: no, yes.
data string
Name of certificate extension.
name string
Name of certificate extension.
type string
Type of certificate extension. Valid values: fixed, user.
critical str
Critical option. Valid values: no, yes.
data str
Name of certificate extension.
name str
Name of certificate extension.
type str
Type of certificate extension. Valid values: fixed, user.
critical String
Critical option. Valid values: no, yes.
data String
Name of certificate extension.
name String
Name of certificate extension.
type String
Type of certificate extension. Valid values: fixed, user.

Import

ObjectFirewall AccessProxy can be imported using any of these accepted formats:

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/objectFirewallAccessproxy:ObjectFirewallAccessproxy labelname {{name}}
Copy

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes
This Pulumi package is based on the fortimanager Terraform Provider.
fortimanager 1.14.0 published on Tuesday, Apr 15, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager