Compute V1 Client - Class FirewallPolicyRuleMatcher (1.19.0)

Reference documentation and code samples for the Compute V1 Client class FirewallPolicyRuleMatcher.

Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.

Generated from protobuf message google.cloud.compute.v1.FirewallPolicyRuleMatcher

Namespace

Google \ Cloud \ Compute \ V1

Methods

__construct

Constructor.

Parameters
Name Description
data array

Optional. Data for populating the Message object.

↳ dest_address_groups array

Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.

↳ dest_fqdns array

Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.

↳ dest_ip_ranges array

CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.

↳ dest_region_codes array

Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.

↳ dest_threat_intelligences array

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.

↳ layer4_configs array<Google\Cloud\Compute\V1\FirewallPolicyRuleMatcherLayer4Config>

Pairs of IP protocols and ports that the rule should match.

↳ src_address_groups array

Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.

↳ src_fqdns array

Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.

↳ src_ip_ranges array

CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.

↳ src_region_codes array

Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.

↳ src_secure_tags array<Google\Cloud\Compute\V1\FirewallPolicyRuleSecureTag>

List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.

↳ src_threat_intelligences array

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.

getDestAddressGroups

Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setDestAddressGroups

Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getDestFqdns

Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setDestFqdns

Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getDestIpRanges

CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setDestIpRanges

CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getDestRegionCodes

Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setDestRegionCodes

Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getDestThreatIntelligences

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setDestThreatIntelligences

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getLayer4Configs

Pairs of IP protocols and ports that the rule should match.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setLayer4Configs

Pairs of IP protocols and ports that the rule should match.

Parameter
Name Description
var array<Google\Cloud\Compute\V1\FirewallPolicyRuleMatcherLayer4Config>
Returns
Type Description
$this

getSrcAddressGroups

Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setSrcAddressGroups

Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getSrcFqdns

Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setSrcFqdns

Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getSrcIpRanges

CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setSrcIpRanges

CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getSrcRegionCodes

Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setSrcRegionCodes

Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.

Parameter
Name Description
var string[]
Returns
Type Description
$this

getSrcSecureTags

List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setSrcSecureTags

List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.

Parameter
Name Description
var array<Google\Cloud\Compute\V1\FirewallPolicyRuleSecureTag>
Returns
Type Description
$this

getSrcThreatIntelligences

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setSrcThreatIntelligences

Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.

Parameter
Name Description
var string[]
Returns
Type Description
$this