Reference documentation and code samples for the Compute V1 Client class FirewallPolicyRuleMatcher.
Represents a match condition that incoming traffic is evaluated against. Exactly one field must be specified.
Generated from protobuf message google.cloud.compute.v1.FirewallPolicyRuleMatcher
Namespace
Google \ Cloud \ Compute \ V1Methods
__construct
Constructor.
Parameters | |
---|---|
Name | Description |
data |
array
Optional. Data for populating the Message object. |
↳ dest_address_groups |
array
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10. |
↳ dest_fqdns |
array
Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100. |
↳ dest_ip_ranges |
array
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000. |
↳ dest_region_codes |
array
Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000. |
↳ dest_threat_intelligences |
array
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination. |
↳ layer4_configs |
array<FirewallPolicyRuleMatcherLayer4Config>
Pairs of IP protocols and ports that the rule should match. |
↳ src_address_groups |
array
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10. |
↳ src_fqdns |
array
Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100. |
↳ src_ip_ranges |
array
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000. |
↳ src_region_codes |
array
Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000. |
↳ src_secure_tags |
array<FirewallPolicyRuleSecureTag>
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256. |
↳ src_threat_intelligences |
array
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source. |
getDestAddressGroups
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setDestAddressGroups
Address groups which should be matched against the traffic destination. Maximum number of destination address groups is 10.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getDestFqdns
Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setDestFqdns
Fully Qualified Domain Name (FQDN) which should be matched against traffic destination. Maximum number of destination fqdn allowed is 100.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getDestIpRanges
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setDestIpRanges
CIDR IP address range. Maximum number of destination CIDR IP ranges allowed is 5000.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getDestRegionCodes
Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setDestRegionCodes
Region codes whose IP addresses will be used to match for destination of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of dest region codes allowed is 5000.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getDestThreatIntelligences
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setDestThreatIntelligences
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic destination.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getLayer4Configs
Pairs of IP protocols and ports that the rule should match.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setLayer4Configs
Pairs of IP protocols and ports that the rule should match.
Parameter | |
---|---|
Name | Description |
var |
array<FirewallPolicyRuleMatcherLayer4Config>
|
Returns | |
---|---|
Type | Description |
$this |
getSrcAddressGroups
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setSrcAddressGroups
Address groups which should be matched against the traffic source. Maximum number of source address groups is 10.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getSrcFqdns
Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setSrcFqdns
Fully Qualified Domain Name (FQDN) which should be matched against traffic source. Maximum number of source fqdn allowed is 100.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getSrcIpRanges
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setSrcIpRanges
CIDR IP address range. Maximum number of source CIDR IP ranges allowed is 5000.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getSrcRegionCodes
Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setSrcRegionCodes
Region codes whose IP addresses will be used to match for source of traffic. Should be specified as 2 letter country code defined as per ISO 3166 alpha-2 country codes. ex."US" Maximum number of source region codes allowed is 5000.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |
getSrcSecureTags
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setSrcSecureTags
List of secure tag values, which should be matched at the source of the traffic. For INGRESS rule, if all the srcSecureTag are INEFFECTIVE, and there is no srcIpRange, this rule will be ignored. Maximum number of source tag values allowed is 256.
Parameter | |
---|---|
Name | Description |
var |
array<FirewallPolicyRuleSecureTag>
|
Returns | |
---|---|
Type | Description |
$this |
getSrcThreatIntelligences
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.
Returns | |
---|---|
Type | Description |
Google\Protobuf\Internal\RepeatedField |
setSrcThreatIntelligences
Names of Network Threat Intelligence lists. The IPs in these lists will be matched against traffic source.
Parameter | |
---|---|
Name | Description |
var |
string[]
|
Returns | |
---|---|
Type | Description |
$this |