fortimanager 1.13.0, Mar 13 25

fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev

fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectFirewallAccessproxyApigateway

Explore with Pulumi AI

fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev

fortinetdev/terraform-provider-fortimanager

This resource is a sub resource for variable api_gateway of resource fortimanager.ObjectFirewallAccessproxy. Conflict and overwrite may occur if use both of them. The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.
quic: fortimanager.ObjectFirewallAccessproxyApigatewayQuic
realservers: fortimanager.ObjectFirewallAccessproxyApigatewayRealservers
ssl_cipher_suites: fortimanager.ObjectFirewallAccessproxyApigatewaySslciphersuites

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trnameObjectFirewallAccessproxy = new fortimanager.ObjectFirewallAccessproxy("trnameObjectFirewallAccessproxy", {});
const trnameObjectFirewallAccessproxyApigateway = new fortimanager.ObjectFirewallAccessproxyApigateway("trnameObjectFirewallAccessproxyApigateway", {
    accessProxy: trnameObjectFirewallAccessproxy.name,
    fosid: 1,
    httpCookieAge: 70,
    httpCookieDomain: "domin",
    httpCookieDomainFromHost: "enable",
}, {
    dependsOn: [trnameObjectFirewallAccessproxy],
});

import pulumi
import pulumi_fortimanager as fortimanager

trname_object_firewall_accessproxy = fortimanager.ObjectFirewallAccessproxy("trnameObjectFirewallAccessproxy")
trname_object_firewall_accessproxy_apigateway = fortimanager.ObjectFirewallAccessproxyApigateway("trnameObjectFirewallAccessproxyApigateway",
    access_proxy=trname_object_firewall_accessproxy.name,
    fosid=1,
    http_cookie_age=70,
    http_cookie_domain="domin",
    http_cookie_domain_from_host="enable",
    opts = pulumi.ResourceOptions(depends_on=[trname_object_firewall_accessproxy]))

package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		trnameObjectFirewallAccessproxy, err := fortimanager.NewObjectFirewallAccessproxy(ctx, "trnameObjectFirewallAccessproxy", nil)
		if err != nil {
			return err
		}
		_, err = fortimanager.NewObjectFirewallAccessproxyApigateway(ctx, "trnameObjectFirewallAccessproxyApigateway", &fortimanager.ObjectFirewallAccessproxyApigatewayArgs{
			AccessProxy:              trnameObjectFirewallAccessproxy.Name,
			Fosid:                    pulumi.Float64(1),
			HttpCookieAge:            pulumi.Float64(70),
			HttpCookieDomain:         pulumi.String("domin"),
			HttpCookieDomainFromHost: pulumi.String("enable"),
		}, pulumi.DependsOn([]pulumi.Resource{
			trnameObjectFirewallAccessproxy,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trnameObjectFirewallAccessproxy = new Fortimanager.ObjectFirewallAccessproxy("trnameObjectFirewallAccessproxy");

    var trnameObjectFirewallAccessproxyApigateway = new Fortimanager.ObjectFirewallAccessproxyApigateway("trnameObjectFirewallAccessproxyApigateway", new()
    {
        AccessProxy = trnameObjectFirewallAccessproxy.Name,
        Fosid = 1,
        HttpCookieAge = 70,
        HttpCookieDomain = "domin",
        HttpCookieDomainFromHost = "enable",
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            trnameObjectFirewallAccessproxy,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectFirewallAccessproxy;
import com.pulumi.fortimanager.ObjectFirewallAccessproxyApigateway;
import com.pulumi.fortimanager.ObjectFirewallAccessproxyApigatewayArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trnameObjectFirewallAccessproxy = new ObjectFirewallAccessproxy("trnameObjectFirewallAccessproxy");

        var trnameObjectFirewallAccessproxyApigateway = new ObjectFirewallAccessproxyApigateway("trnameObjectFirewallAccessproxyApigateway", ObjectFirewallAccessproxyApigatewayArgs.builder()
            .accessProxy(trnameObjectFirewallAccessproxy.name())
            .fosid(1)
            .httpCookieAge(70)
            .httpCookieDomain("domin")
            .httpCookieDomainFromHost("enable")
            .build(), CustomResourceOptions.builder()
                .dependsOn(trnameObjectFirewallAccessproxy)
                .build());

    }
}

resources:
  trnameObjectFirewallAccessproxyApigateway:
    type: fortimanager:ObjectFirewallAccessproxyApigateway
    properties:
      accessProxy: ${trnameObjectFirewallAccessproxy.name}
      fosid: 1
      httpCookieAge: 70
      httpCookieDomain: domin
      httpCookieDomainFromHost: enable
    options:
      dependsOn:
        - ${trnameObjectFirewallAccessproxy}
  trnameObjectFirewallAccessproxy:
    type: fortimanager:ObjectFirewallAccessproxy

Create ObjectFirewallAccessproxyApigateway Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new ObjectFirewallAccessproxyApigateway(name: string, args: ObjectFirewallAccessproxyApigatewayArgs, opts?: CustomResourceOptions);

@overload
def ObjectFirewallAccessproxyApigateway(resource_name: str,
                                        args: ObjectFirewallAccessproxyApigatewayArgs,
                                        opts: Optional[ResourceOptions] = None)

@overload
def ObjectFirewallAccessproxyApigateway(resource_name: str,
                                        opts: Optional[ResourceOptions] = None,
                                        access_proxy: Optional[str] = None,
                                        adom: Optional[str] = None,
                                        applications: Optional[Sequence[str]] = None,
                                        dynamic_sort_subtable: Optional[str] = None,
                                        fosid: Optional[float] = None,
                                        h2_support: Optional[str] = None,
                                        h3_support: Optional[str] = None,
                                        http_cookie_age: Optional[float] = None,
                                        http_cookie_domain: Optional[str] = None,
                                        http_cookie_domain_from_host: Optional[str] = None,
                                        http_cookie_generation: Optional[float] = None,
                                        http_cookie_path: Optional[str] = None,
                                        http_cookie_share: Optional[str] = None,
                                        https_cookie_secure: Optional[str] = None,
                                        ldb_method: Optional[str] = None,
                                        object_firewall_accessproxy_apigateway_id: Optional[str] = None,
                                        persistence: Optional[str] = None,
                                        quic: Optional[ObjectFirewallAccessproxyApigatewayQuicArgs] = None,
                                        realservers: Optional[Sequence[ObjectFirewallAccessproxyApigatewayRealserverArgs]] = None,
                                        saml_redirect: Optional[str] = None,
                                        saml_server: Optional[str] = None,
                                        scopetype: Optional[str] = None,
                                        service: Optional[str] = None,
                                        ssl_algorithm: Optional[str] = None,
                                        ssl_cipher_suites: Optional[Sequence[ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs]] = None,
                                        ssl_dh_bits: Optional[str] = None,
                                        ssl_max_version: Optional[str] = None,
                                        ssl_min_version: Optional[str] = None,
                                        ssl_renegotiation: Optional[str] = None,
                                        ssl_vpn_web_portal: Optional[str] = None,
                                        url_map: Optional[str] = None,
                                        url_map_type: Optional[str] = None,
                                        virtual_host: Optional[str] = None)

func NewObjectFirewallAccessproxyApigateway(ctx *Context, name string, args ObjectFirewallAccessproxyApigatewayArgs, opts ...ResourceOption) (*ObjectFirewallAccessproxyApigateway, error)

public ObjectFirewallAccessproxyApigateway(string name, ObjectFirewallAccessproxyApigatewayArgs args, CustomResourceOptions? opts = null)

public ObjectFirewallAccessproxyApigateway(String name, ObjectFirewallAccessproxyApigatewayArgs args)
public ObjectFirewallAccessproxyApigateway(String name, ObjectFirewallAccessproxyApigatewayArgs args, CustomResourceOptions options)

type: fortimanager:ObjectFirewallAccessproxyApigateway
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ObjectFirewallAccessproxyApigatewayArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ObjectFirewallAccessproxyApigatewayArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ObjectFirewallAccessproxyApigatewayArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ObjectFirewallAccessproxyApigatewayArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ObjectFirewallAccessproxyApigatewayArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var objectFirewallAccessproxyApigatewayResource = new Fortimanager.ObjectFirewallAccessproxyApigateway("objectFirewallAccessproxyApigatewayResource", new()
{
    AccessProxy = "string",
    Adom = "string",
    Applications = new[]
    {
        "string",
    },
    DynamicSortSubtable = "string",
    Fosid = 0,
    H2Support = "string",
    H3Support = "string",
    HttpCookieAge = 0,
    HttpCookieDomain = "string",
    HttpCookieDomainFromHost = "string",
    HttpCookieGeneration = 0,
    HttpCookiePath = "string",
    HttpCookieShare = "string",
    HttpsCookieSecure = "string",
    LdbMethod = "string",
    ObjectFirewallAccessproxyApigatewayId = "string",
    Persistence = "string",
    Quic = new Fortimanager.Inputs.ObjectFirewallAccessproxyApigatewayQuicArgs
    {
        AckDelayExponent = 0,
        ActiveConnectionIdLimit = 0,
        ActiveMigration = "string",
        GreaseQuicBit = "string",
        MaxAckDelay = 0,
        MaxDatagramFrameSize = 0,
        MaxIdleTimeout = 0,
        MaxUdpPayloadSize = 0,
    },
    Realservers = new[]
    {
        new Fortimanager.Inputs.ObjectFirewallAccessproxyApigatewayRealserverArgs
        {
            AddrType = "string",
            Address = "string",
            Domain = "string",
            ExternalAuth = "string",
            HealthCheck = "string",
            HealthCheckProto = "string",
            HolddownInterval = "string",
            HttpHost = "string",
            Id = 0,
            Ip = "string",
            Mappedport = "string",
            Port = 0,
            SshClientCert = "string",
            SshHostKey = "string",
            SshHostKeyValidation = "string",
            Status = "string",
            TranslateHost = "string",
            TunnelEncryption = "string",
            Type = "string",
            Weight = 0,
        },
    },
    SamlRedirect = "string",
    SamlServer = "string",
    Scopetype = "string",
    Service = "string",
    SslAlgorithm = "string",
    SslCipherSuites = new[]
    {
        new Fortimanager.Inputs.ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs
        {
            Cipher = "string",
            Priority = 0,
            Versions = new[]
            {
                "string",
            },
        },
    },
    SslDhBits = "string",
    SslMaxVersion = "string",
    SslMinVersion = "string",
    SslRenegotiation = "string",
    SslVpnWebPortal = "string",
    UrlMap = "string",
    UrlMapType = "string",
    VirtualHost = "string",
});

example, err := fortimanager.NewObjectFirewallAccessproxyApigateway(ctx, "objectFirewallAccessproxyApigatewayResource", &fortimanager.ObjectFirewallAccessproxyApigatewayArgs{
AccessProxy: pulumi.String("string"),
Adom: pulumi.String("string"),
Applications: pulumi.StringArray{
pulumi.String("string"),
},
DynamicSortSubtable: pulumi.String("string"),
Fosid: pulumi.Float64(0),
H2Support: pulumi.String("string"),
H3Support: pulumi.String("string"),
HttpCookieAge: pulumi.Float64(0),
HttpCookieDomain: pulumi.String("string"),
HttpCookieDomainFromHost: pulumi.String("string"),
HttpCookieGeneration: pulumi.Float64(0),
HttpCookiePath: pulumi.String("string"),
HttpCookieShare: pulumi.String("string"),
HttpsCookieSecure: pulumi.String("string"),
LdbMethod: pulumi.String("string"),
ObjectFirewallAccessproxyApigatewayId: pulumi.String("string"),
Persistence: pulumi.String("string"),
Quic: &.ObjectFirewallAccessproxyApigatewayQuicTypeArgs{
AckDelayExponent: pulumi.Float64(0),
ActiveConnectionIdLimit: pulumi.Float64(0),
ActiveMigration: pulumi.String("string"),
GreaseQuicBit: pulumi.String("string"),
MaxAckDelay: pulumi.Float64(0),
MaxDatagramFrameSize: pulumi.Float64(0),
MaxIdleTimeout: pulumi.Float64(0),
MaxUdpPayloadSize: pulumi.Float64(0),
},
Realservers: .ObjectFirewallAccessproxyApigatewayRealserverArray{
&.ObjectFirewallAccessproxyApigatewayRealserverArgs{
AddrType: pulumi.String("string"),
Address: pulumi.String("string"),
Domain: pulumi.String("string"),
ExternalAuth: pulumi.String("string"),
HealthCheck: pulumi.String("string"),
HealthCheckProto: pulumi.String("string"),
HolddownInterval: pulumi.String("string"),
HttpHost: pulumi.String("string"),
Id: pulumi.Float64(0),
Ip: pulumi.String("string"),
Mappedport: pulumi.String("string"),
Port: pulumi.Float64(0),
SshClientCert: pulumi.String("string"),
SshHostKey: pulumi.String("string"),
SshHostKeyValidation: pulumi.String("string"),
Status: pulumi.String("string"),
TranslateHost: pulumi.String("string"),
TunnelEncryption: pulumi.String("string"),
Type: pulumi.String("string"),
Weight: pulumi.Float64(0),
},
},
SamlRedirect: pulumi.String("string"),
SamlServer: pulumi.String("string"),
Scopetype: pulumi.String("string"),
Service: pulumi.String("string"),
SslAlgorithm: pulumi.String("string"),
SslCipherSuites: .ObjectFirewallAccessproxyApigatewaySslCipherSuiteArray{
&.ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs{
Cipher: pulumi.String("string"),
Priority: pulumi.Float64(0),
Versions: pulumi.StringArray{
pulumi.String("string"),
},
},
},
SslDhBits: pulumi.String("string"),
SslMaxVersion: pulumi.String("string"),
SslMinVersion: pulumi.String("string"),
SslRenegotiation: pulumi.String("string"),
SslVpnWebPortal: pulumi.String("string"),
UrlMap: pulumi.String("string"),
UrlMapType: pulumi.String("string"),
VirtualHost: pulumi.String("string"),
})

var objectFirewallAccessproxyApigatewayResource = new ObjectFirewallAccessproxyApigateway("objectFirewallAccessproxyApigatewayResource", ObjectFirewallAccessproxyApigatewayArgs.builder()
    .accessProxy("string")
    .adom("string")
    .applications("string")
    .dynamicSortSubtable("string")
    .fosid(0)
    .h2Support("string")
    .h3Support("string")
    .httpCookieAge(0)
    .httpCookieDomain("string")
    .httpCookieDomainFromHost("string")
    .httpCookieGeneration(0)
    .httpCookiePath("string")
    .httpCookieShare("string")
    .httpsCookieSecure("string")
    .ldbMethod("string")
    .objectFirewallAccessproxyApigatewayId("string")
    .persistence("string")
    .quic(ObjectFirewallAccessproxyApigatewayQuicArgs.builder()
        .ackDelayExponent(0)
        .activeConnectionIdLimit(0)
        .activeMigration("string")
        .greaseQuicBit("string")
        .maxAckDelay(0)
        .maxDatagramFrameSize(0)
        .maxIdleTimeout(0)
        .maxUdpPayloadSize(0)
        .build())
    .realservers(ObjectFirewallAccessproxyApigatewayRealserverArgs.builder()
        .addrType("string")
        .address("string")
        .domain("string")
        .externalAuth("string")
        .healthCheck("string")
        .healthCheckProto("string")
        .holddownInterval("string")
        .httpHost("string")
        .id(0)
        .ip("string")
        .mappedport("string")
        .port(0)
        .sshClientCert("string")
        .sshHostKey("string")
        .sshHostKeyValidation("string")
        .status("string")
        .translateHost("string")
        .tunnelEncryption("string")
        .type("string")
        .weight(0)
        .build())
    .samlRedirect("string")
    .samlServer("string")
    .scopetype("string")
    .service("string")
    .sslAlgorithm("string")
    .sslCipherSuites(ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs.builder()
        .cipher("string")
        .priority(0)
        .versions("string")
        .build())
    .sslDhBits("string")
    .sslMaxVersion("string")
    .sslMinVersion("string")
    .sslRenegotiation("string")
    .sslVpnWebPortal("string")
    .urlMap("string")
    .urlMapType("string")
    .virtualHost("string")
    .build());

object_firewall_accessproxy_apigateway_resource = fortimanager.ObjectFirewallAccessproxyApigateway("objectFirewallAccessproxyApigatewayResource",
    access_proxy="string",
    adom="string",
    applications=["string"],
    dynamic_sort_subtable="string",
    fosid=0,
    h2_support="string",
    h3_support="string",
    http_cookie_age=0,
    http_cookie_domain="string",
    http_cookie_domain_from_host="string",
    http_cookie_generation=0,
    http_cookie_path="string",
    http_cookie_share="string",
    https_cookie_secure="string",
    ldb_method="string",
    object_firewall_accessproxy_apigateway_id="string",
    persistence="string",
    quic={
        "ack_delay_exponent": 0,
        "active_connection_id_limit": 0,
        "active_migration": "string",
        "grease_quic_bit": "string",
        "max_ack_delay": 0,
        "max_datagram_frame_size": 0,
        "max_idle_timeout": 0,
        "max_udp_payload_size": 0,
    },
    realservers=[{
        "addr_type": "string",
        "address": "string",
        "domain": "string",
        "external_auth": "string",
        "health_check": "string",
        "health_check_proto": "string",
        "holddown_interval": "string",
        "http_host": "string",
        "id": 0,
        "ip": "string",
        "mappedport": "string",
        "port": 0,
        "ssh_client_cert": "string",
        "ssh_host_key": "string",
        "ssh_host_key_validation": "string",
        "status": "string",
        "translate_host": "string",
        "tunnel_encryption": "string",
        "type": "string",
        "weight": 0,
    }],
    saml_redirect="string",
    saml_server="string",
    scopetype="string",
    service="string",
    ssl_algorithm="string",
    ssl_cipher_suites=[{
        "cipher": "string",
        "priority": 0,
        "versions": ["string"],
    }],
    ssl_dh_bits="string",
    ssl_max_version="string",
    ssl_min_version="string",
    ssl_renegotiation="string",
    ssl_vpn_web_portal="string",
    url_map="string",
    url_map_type="string",
    virtual_host="string")

const objectFirewallAccessproxyApigatewayResource = new fortimanager.ObjectFirewallAccessproxyApigateway("objectFirewallAccessproxyApigatewayResource", {
    accessProxy: "string",
    adom: "string",
    applications: ["string"],
    dynamicSortSubtable: "string",
    fosid: 0,
    h2Support: "string",
    h3Support: "string",
    httpCookieAge: 0,
    httpCookieDomain: "string",
    httpCookieDomainFromHost: "string",
    httpCookieGeneration: 0,
    httpCookiePath: "string",
    httpCookieShare: "string",
    httpsCookieSecure: "string",
    ldbMethod: "string",
    objectFirewallAccessproxyApigatewayId: "string",
    persistence: "string",
    quic: {
        ackDelayExponent: 0,
        activeConnectionIdLimit: 0,
        activeMigration: "string",
        greaseQuicBit: "string",
        maxAckDelay: 0,
        maxDatagramFrameSize: 0,
        maxIdleTimeout: 0,
        maxUdpPayloadSize: 0,
    },
    realservers: [{
        addrType: "string",
        address: "string",
        domain: "string",
        externalAuth: "string",
        healthCheck: "string",
        healthCheckProto: "string",
        holddownInterval: "string",
        httpHost: "string",
        id: 0,
        ip: "string",
        mappedport: "string",
        port: 0,
        sshClientCert: "string",
        sshHostKey: "string",
        sshHostKeyValidation: "string",
        status: "string",
        translateHost: "string",
        tunnelEncryption: "string",
        type: "string",
        weight: 0,
    }],
    samlRedirect: "string",
    samlServer: "string",
    scopetype: "string",
    service: "string",
    sslAlgorithm: "string",
    sslCipherSuites: [{
        cipher: "string",
        priority: 0,
        versions: ["string"],
    }],
    sslDhBits: "string",
    sslMaxVersion: "string",
    sslMinVersion: "string",
    sslRenegotiation: "string",
    sslVpnWebPortal: "string",
    urlMap: "string",
    urlMapType: "string",
    virtualHost: "string",
});

type: fortimanager:ObjectFirewallAccessproxyApigateway
properties:
    accessProxy: string
    adom: string
    applications:
        - string
    dynamicSortSubtable: string
    fosid: 0
    h2Support: string
    h3Support: string
    httpCookieAge: 0
    httpCookieDomain: string
    httpCookieDomainFromHost: string
    httpCookieGeneration: 0
    httpCookiePath: string
    httpCookieShare: string
    httpsCookieSecure: string
    ldbMethod: string
    objectFirewallAccessproxyApigatewayId: string
    persistence: string
    quic:
        ackDelayExponent: 0
        activeConnectionIdLimit: 0
        activeMigration: string
        greaseQuicBit: string
        maxAckDelay: 0
        maxDatagramFrameSize: 0
        maxIdleTimeout: 0
        maxUdpPayloadSize: 0
    realservers:
        - addrType: string
          address: string
          domain: string
          externalAuth: string
          healthCheck: string
          healthCheckProto: string
          holddownInterval: string
          httpHost: string
          id: 0
          ip: string
          mappedport: string
          port: 0
          sshClientCert: string
          sshHostKey: string
          sshHostKeyValidation: string
          status: string
          translateHost: string
          tunnelEncryption: string
          type: string
          weight: 0
    samlRedirect: string
    samlServer: string
    scopetype: string
    service: string
    sslAlgorithm: string
    sslCipherSuites:
        - cipher: string
          priority: 0
          versions:
            - string
    sslDhBits: string
    sslMaxVersion: string
    sslMinVersion: string
    sslRenegotiation: string
    sslVpnWebPortal: string
    urlMap: string
    urlMapType: string
    virtualHost: string

ObjectFirewallAccessproxyApigateway Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The ObjectFirewallAccessproxyApigateway resource accepts the following input properties:

AccessProxy string: Access Proxy.
Adom string: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Applications List<string>: SaaS application controlled by this Access Proxy.
DynamicSortSubtable string: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Fosid double: API Gateway ID.
H2Support string: HTTP2 support, default=Enable. Valid values: disable, enable.
H3Support string: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
HttpCookieAge double: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
HttpCookieDomain string: Domain that HTTP cookie persistence should apply to.
HttpCookieDomainFromHost string: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
HttpCookieGeneration double: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
HttpCookiePath string: Limit HTTP cookie persistence to the specified path.
HttpCookieShare string: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
HttpsCookieSecure string: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
LdbMethod string: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
ObjectFirewallAccessproxyApigatewayId string: an identifier for the resource with format {{fosid}}.
Persistence string: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
Quic ObjectFirewallAccessproxyApigatewayQuic: Quic. The structure of quic block is documented below.
Realservers List<ObjectFirewallAccessproxyApigatewayRealserver>: Realservers. The structure of realservers block is documented below.
SamlRedirect string: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
SamlServer string: SAML service provider configuration for VIP authentication.
Scopetype string: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string: Service. Valid values: http, https, tcp-forwarding, samlsp.
SslAlgorithm string: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
SslCipherSuites List<ObjectFirewallAccessproxyApigatewaySslCipherSuite>: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslDhBits string: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
SslMaxVersion string: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslMinVersion string: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslRenegotiation string: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
SslVpnWebPortal string: SSL-VPN web portal.
UrlMap string: URL pattern to match.
UrlMapType string: Type of url-map. Valid values: sub-string, wildcard, regex.
VirtualHost string: Virtual host.

AccessProxy string: Access Proxy.
Adom string: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Applications []string: SaaS application controlled by this Access Proxy.
DynamicSortSubtable string: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Fosid float64: API Gateway ID.
H2Support string: HTTP2 support, default=Enable. Valid values: disable, enable.
H3Support string: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
HttpCookieAge float64: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
HttpCookieDomain string: Domain that HTTP cookie persistence should apply to.
HttpCookieDomainFromHost string: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
HttpCookieGeneration float64: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
HttpCookiePath string: Limit HTTP cookie persistence to the specified path.
HttpCookieShare string: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
HttpsCookieSecure string: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
LdbMethod string: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
ObjectFirewallAccessproxyApigatewayId string: an identifier for the resource with format {{fosid}}.
Persistence string: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
Quic ObjectFirewallAccessproxyApigatewayQuicTypeArgs: Quic. The structure of quic block is documented below.
Realservers []ObjectFirewallAccessproxyApigatewayRealserverArgs: Realservers. The structure of realservers block is documented below.
SamlRedirect string: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
SamlServer string: SAML service provider configuration for VIP authentication.
Scopetype string: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string: Service. Valid values: http, https, tcp-forwarding, samlsp.
SslAlgorithm string: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
SslCipherSuites []ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslDhBits string: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
SslMaxVersion string: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslMinVersion string: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslRenegotiation string: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
SslVpnWebPortal string: SSL-VPN web portal.
UrlMap string: URL pattern to match.
UrlMapType string: Type of url-map. Valid values: sub-string, wildcard, regex.
VirtualHost string: Virtual host.

accessProxy String: Access Proxy.
adom String: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications List<String>: SaaS application controlled by this Access Proxy.
dynamicSortSubtable String: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid Double: API Gateway ID.
h2Support String: HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support String: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge Double: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain String: Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost String: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration Double: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath String: Limit HTTP cookie persistence to the specified path.
httpCookieShare String: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure String: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldbMethod String: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
objectFirewallAccessproxyApigatewayId String: an identifier for the resource with format {{fosid}}.
persistence String: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApigatewayQuic: Quic. The structure of quic block is documented below.
realservers List<ObjectFirewallAccessproxyApigatewayRealserver>: Realservers. The structure of realservers block is documented below.
samlRedirect String: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer String: SAML service provider configuration for VIP authentication.
scopetype String: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String: Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm String: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites List<ObjectFirewallAccessproxyApigatewaySslCipherSuite>: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits String: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion String: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion String: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation String: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal String: SSL-VPN web portal.
urlMap String: URL pattern to match.
urlMapType String: Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost String: Virtual host.

accessProxy string: Access Proxy.
adom string: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications string[]: SaaS application controlled by this Access Proxy.
dynamicSortSubtable string: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid number: API Gateway ID.
h2Support string: HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support string: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge number: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain string: Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost string: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration number: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath string: Limit HTTP cookie persistence to the specified path.
httpCookieShare string: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure string: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldbMethod string: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
objectFirewallAccessproxyApigatewayId string: an identifier for the resource with format {{fosid}}.
persistence string: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApigatewayQuic: Quic. The structure of quic block is documented below.
realservers ObjectFirewallAccessproxyApigatewayRealserver[]: Realservers. The structure of realservers block is documented below.
samlRedirect string: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer string: SAML service provider configuration for VIP authentication.
scopetype string: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service string: Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm string: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites ObjectFirewallAccessproxyApigatewaySslCipherSuite[]: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits string: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion string: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion string: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation string: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal string: SSL-VPN web portal.
urlMap string: URL pattern to match.
urlMapType string: Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost string: Virtual host.

access_proxy str: Access Proxy.
adom str: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications Sequence[str]: SaaS application controlled by this Access Proxy.
dynamic_sort_subtable str: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid float: API Gateway ID.
h2_support str: HTTP2 support, default=Enable. Valid values: disable, enable.
h3_support str: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
http_cookie_age float: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
http_cookie_domain str: Domain that HTTP cookie persistence should apply to.
http_cookie_domain_from_host str: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
http_cookie_generation float: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
http_cookie_path str: Limit HTTP cookie persistence to the specified path.
http_cookie_share str: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
https_cookie_secure str: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldb_method str: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
object_firewall_accessproxy_apigateway_id str: an identifier for the resource with format {{fosid}}.
persistence str: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApigatewayQuicArgs: Quic. The structure of quic block is documented below.
realservers Sequence[ObjectFirewallAccessproxyApigatewayRealserverArgs]: Realservers. The structure of realservers block is documented below.
saml_redirect str: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
saml_server str: SAML service provider configuration for VIP authentication.
scopetype str: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service str: Service. Valid values: http, https, tcp-forwarding, samlsp.
ssl_algorithm str: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
ssl_cipher_suites Sequence[ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs]: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
ssl_dh_bits str: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
ssl_max_version str: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
ssl_min_version str: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
ssl_renegotiation str: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
ssl_vpn_web_portal str: SSL-VPN web portal.
url_map str: URL pattern to match.
url_map_type str: Type of url-map. Valid values: sub-string, wildcard, regex.
virtual_host str: Virtual host.

accessProxy String: Access Proxy.
adom String: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications List<String>: SaaS application controlled by this Access Proxy.
dynamicSortSubtable String: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid Number: API Gateway ID.
h2Support String: HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support String: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge Number: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain String: Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost String: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration Number: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath String: Limit HTTP cookie persistence to the specified path.
httpCookieShare String: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure String: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldbMethod String: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
objectFirewallAccessproxyApigatewayId String: an identifier for the resource with format {{fosid}}.
persistence String: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic Property Map: Quic. The structure of quic block is documented below.
realservers List<Property Map>: Realservers. The structure of realservers block is documented below.
samlRedirect String: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer String: SAML service provider configuration for VIP authentication.
scopetype String: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String: Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm String: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites List<Property Map>: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits String: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion String: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion String: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation String: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal String: SSL-VPN web portal.
urlMap String: URL pattern to match.
urlMapType String: Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost String: Virtual host.

Outputs

All input properties are implicitly available as output properties. Additionally, the ObjectFirewallAccessproxyApigateway resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing ObjectFirewallAccessproxyApigateway Resource

Get an existing ObjectFirewallAccessproxyApigateway resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ObjectFirewallAccessproxyApigatewayState, opts?: CustomResourceOptions): ObjectFirewallAccessproxyApigateway

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_proxy: Optional[str] = None,
        adom: Optional[str] = None,
        applications: Optional[Sequence[str]] = None,
        dynamic_sort_subtable: Optional[str] = None,
        fosid: Optional[float] = None,
        h2_support: Optional[str] = None,
        h3_support: Optional[str] = None,
        http_cookie_age: Optional[float] = None,
        http_cookie_domain: Optional[str] = None,
        http_cookie_domain_from_host: Optional[str] = None,
        http_cookie_generation: Optional[float] = None,
        http_cookie_path: Optional[str] = None,
        http_cookie_share: Optional[str] = None,
        https_cookie_secure: Optional[str] = None,
        ldb_method: Optional[str] = None,
        object_firewall_accessproxy_apigateway_id: Optional[str] = None,
        persistence: Optional[str] = None,
        quic: Optional[ObjectFirewallAccessproxyApigatewayQuicArgs] = None,
        realservers: Optional[Sequence[ObjectFirewallAccessproxyApigatewayRealserverArgs]] = None,
        saml_redirect: Optional[str] = None,
        saml_server: Optional[str] = None,
        scopetype: Optional[str] = None,
        service: Optional[str] = None,
        ssl_algorithm: Optional[str] = None,
        ssl_cipher_suites: Optional[Sequence[ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs]] = None,
        ssl_dh_bits: Optional[str] = None,
        ssl_max_version: Optional[str] = None,
        ssl_min_version: Optional[str] = None,
        ssl_renegotiation: Optional[str] = None,
        ssl_vpn_web_portal: Optional[str] = None,
        url_map: Optional[str] = None,
        url_map_type: Optional[str] = None,
        virtual_host: Optional[str] = None) -> ObjectFirewallAccessproxyApigateway

func GetObjectFirewallAccessproxyApigateway(ctx *Context, name string, id IDInput, state *ObjectFirewallAccessproxyApigatewayState, opts ...ResourceOption) (*ObjectFirewallAccessproxyApigateway, error)

public static ObjectFirewallAccessproxyApigateway Get(string name, Input<string> id, ObjectFirewallAccessproxyApigatewayState? state, CustomResourceOptions? opts = null)

public static ObjectFirewallAccessproxyApigateway get(String name, Output<String> id, ObjectFirewallAccessproxyApigatewayState state, CustomResourceOptions options)

resources:  _:    type: fortimanager:ObjectFirewallAccessproxyApigateway    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AccessProxy string: Access Proxy.
Adom string: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Applications List<string>: SaaS application controlled by this Access Proxy.
DynamicSortSubtable string: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Fosid double: API Gateway ID.
H2Support string: HTTP2 support, default=Enable. Valid values: disable, enable.
H3Support string: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
HttpCookieAge double: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
HttpCookieDomain string: Domain that HTTP cookie persistence should apply to.
HttpCookieDomainFromHost string: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
HttpCookieGeneration double: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
HttpCookiePath string: Limit HTTP cookie persistence to the specified path.
HttpCookieShare string: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
HttpsCookieSecure string: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
LdbMethod string: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
ObjectFirewallAccessproxyApigatewayId string: an identifier for the resource with format {{fosid}}.
Persistence string: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
Quic ObjectFirewallAccessproxyApigatewayQuic: Quic. The structure of quic block is documented below.
Realservers List<ObjectFirewallAccessproxyApigatewayRealserver>: Realservers. The structure of realservers block is documented below.
SamlRedirect string: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
SamlServer string: SAML service provider configuration for VIP authentication.
Scopetype string: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string: Service. Valid values: http, https, tcp-forwarding, samlsp.
SslAlgorithm string: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
SslCipherSuites List<ObjectFirewallAccessproxyApigatewaySslCipherSuite>: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslDhBits string: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
SslMaxVersion string: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslMinVersion string: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslRenegotiation string: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
SslVpnWebPortal string: SSL-VPN web portal.
UrlMap string: URL pattern to match.
UrlMapType string: Type of url-map. Valid values: sub-string, wildcard, regex.
VirtualHost string: Virtual host.

AccessProxy string: Access Proxy.
Adom string: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
Applications []string: SaaS application controlled by this Access Proxy.
DynamicSortSubtable string: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
Fosid float64: API Gateway ID.
H2Support string: HTTP2 support, default=Enable. Valid values: disable, enable.
H3Support string: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
HttpCookieAge float64: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
HttpCookieDomain string: Domain that HTTP cookie persistence should apply to.
HttpCookieDomainFromHost string: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
HttpCookieGeneration float64: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
HttpCookiePath string: Limit HTTP cookie persistence to the specified path.
HttpCookieShare string: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
HttpsCookieSecure string: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
LdbMethod string: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
ObjectFirewallAccessproxyApigatewayId string: an identifier for the resource with format {{fosid}}.
Persistence string: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
Quic ObjectFirewallAccessproxyApigatewayQuicTypeArgs: Quic. The structure of quic block is documented below.
Realservers []ObjectFirewallAccessproxyApigatewayRealserverArgs: Realservers. The structure of realservers block is documented below.
SamlRedirect string: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
SamlServer string: SAML service provider configuration for VIP authentication.
Scopetype string: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
Service string: Service. Valid values: http, https, tcp-forwarding, samlsp.
SslAlgorithm string: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
SslCipherSuites []ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
SslDhBits string: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
SslMaxVersion string: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslMinVersion string: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
SslRenegotiation string: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
SslVpnWebPortal string: SSL-VPN web portal.
UrlMap string: URL pattern to match.
UrlMapType string: Type of url-map. Valid values: sub-string, wildcard, regex.
VirtualHost string: Virtual host.

accessProxy String: Access Proxy.
adom String: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications List<String>: SaaS application controlled by this Access Proxy.
dynamicSortSubtable String: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid Double: API Gateway ID.
h2Support String: HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support String: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge Double: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain String: Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost String: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration Double: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath String: Limit HTTP cookie persistence to the specified path.
httpCookieShare String: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure String: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldbMethod String: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
objectFirewallAccessproxyApigatewayId String: an identifier for the resource with format {{fosid}}.
persistence String: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApigatewayQuic: Quic. The structure of quic block is documented below.
realservers List<ObjectFirewallAccessproxyApigatewayRealserver>: Realservers. The structure of realservers block is documented below.
samlRedirect String: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer String: SAML service provider configuration for VIP authentication.
scopetype String: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String: Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm String: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites List<ObjectFirewallAccessproxyApigatewaySslCipherSuite>: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits String: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion String: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion String: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation String: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal String: SSL-VPN web portal.
urlMap String: URL pattern to match.
urlMapType String: Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost String: Virtual host.

accessProxy string: Access Proxy.
adom string: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications string[]: SaaS application controlled by this Access Proxy.
dynamicSortSubtable string: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid number: API Gateway ID.
h2Support string: HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support string: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge number: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain string: Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost string: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration number: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath string: Limit HTTP cookie persistence to the specified path.
httpCookieShare string: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure string: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldbMethod string: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
objectFirewallAccessproxyApigatewayId string: an identifier for the resource with format {{fosid}}.
persistence string: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApigatewayQuic: Quic. The structure of quic block is documented below.
realservers ObjectFirewallAccessproxyApigatewayRealserver[]: Realservers. The structure of realservers block is documented below.
samlRedirect string: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer string: SAML service provider configuration for VIP authentication.
scopetype string: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service string: Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm string: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites ObjectFirewallAccessproxyApigatewaySslCipherSuite[]: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits string: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion string: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion string: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation string: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal string: SSL-VPN web portal.
urlMap string: URL pattern to match.
urlMapType string: Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost string: Virtual host.

access_proxy str: Access Proxy.
adom str: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications Sequence[str]: SaaS application controlled by this Access Proxy.
dynamic_sort_subtable str: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid float: API Gateway ID.
h2_support str: HTTP2 support, default=Enable. Valid values: disable, enable.
h3_support str: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
http_cookie_age float: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
http_cookie_domain str: Domain that HTTP cookie persistence should apply to.
http_cookie_domain_from_host str: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
http_cookie_generation float: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
http_cookie_path str: Limit HTTP cookie persistence to the specified path.
http_cookie_share str: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
https_cookie_secure str: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldb_method str: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
object_firewall_accessproxy_apigateway_id str: an identifier for the resource with format {{fosid}}.
persistence str: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic ObjectFirewallAccessproxyApigatewayQuicArgs: Quic. The structure of quic block is documented below.
realservers Sequence[ObjectFirewallAccessproxyApigatewayRealserverArgs]: Realservers. The structure of realservers block is documented below.
saml_redirect str: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
saml_server str: SAML service provider configuration for VIP authentication.
scopetype str: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service str: Service. Valid values: http, https, tcp-forwarding, samlsp.
ssl_algorithm str: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
ssl_cipher_suites Sequence[ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs]: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
ssl_dh_bits str: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
ssl_max_version str: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
ssl_min_version str: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
ssl_renegotiation str: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
ssl_vpn_web_portal str: SSL-VPN web portal.
url_map str: URL pattern to match.
url_map_type str: Type of url-map. Valid values: sub-string, wildcard, regex.
virtual_host str: Virtual host.

accessProxy String: Access Proxy.
adom String: Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
applications List<String>: SaaS application controlled by this Access Proxy.
dynamicSortSubtable String: true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
fosid Number: API Gateway ID.
h2Support String: HTTP2 support, default=Enable. Valid values: disable, enable.
h3Support String: HTTP3/QUIC support, default=Disable. Valid values: disable, enable.
httpCookieAge Number: Time in minutes that client web browsers should keep a cookie. Default is 60 minutes. 0 = no time limit.
httpCookieDomain String: Domain that HTTP cookie persistence should apply to.
httpCookieDomainFromHost String: Enable/disable use of HTTP cookie domain from host field in HTTP. Valid values: disable, enable.
httpCookieGeneration Number: Generation of HTTP cookie to be accepted. Changing invalidates all existing cookies.
httpCookiePath String: Limit HTTP cookie persistence to the specified path.
httpCookieShare String: Control sharing of cookies across API Gateway. same-ip means a cookie from one virtual server can be used by another. Disable stops cookie sharing. Valid values: disable, same-ip.
httpsCookieSecure String: Enable/disable verification that inserted HTTPS cookies are secure. Valid values: disable, enable.
ldbMethod String: Method used to distribute sessions to real servers. Valid values: static, round-robin, weighted, least-session, least-rtt, first-alive, http-host.
objectFirewallAccessproxyApigatewayId String: an identifier for the resource with format {{fosid}}.
persistence String: Configure how to make sure that clients connect to the same server every time they make a request that is part of the same session. Valid values: none, http-cookie.
quic Property Map: Quic. The structure of quic block is documented below.
realservers List<Property Map>: Realservers. The structure of realservers block is documented below.
samlRedirect String: Enable/disable SAML redirection after successful authentication. Valid values: disable, enable.
samlServer String: SAML service provider configuration for VIP authentication.
scopetype String: The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
service String: Service. Valid values: http, https, tcp-forwarding, samlsp.
sslAlgorithm String: Permitted encryption algorithms for the server side of SSL full mode sessions according to encryption strength. Valid values: high, medium, low, custom.
sslCipherSuites List<Property Map>: Ssl-Cipher-Suites. The structure of ssl_cipher_suites block is documented below.
sslDhBits String: Number of bits to use in the Diffie-Hellman exchange for RSA encryption of SSL sessions. Valid values: 768, 1024, 1536, 2048, 3072, 4096.
sslMaxVersion String: Highest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslMinVersion String: Lowest SSL/TLS version acceptable from a server. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.
sslRenegotiation String: Enable/disable secure renegotiation to comply with RFC 5746. Valid values: disable, enable.
sslVpnWebPortal String: SSL-VPN web portal.
urlMap String: URL pattern to match.
urlMapType String: Type of url-map. Valid values: sub-string, wildcard, regex.
virtualHost String: Virtual host.

Supporting Types

ObjectFirewallAccessproxyApigatewayQuic, ObjectFirewallAccessproxyApigatewayQuicArgs

AckDelayExponent double: ACK delay exponent (1 - 20, default = 3).
ActiveConnectionIdLimit double: Active connection ID limit (1 - 8, default = 2).
ActiveMigration string: Enable/disable active migration (default = disable). Valid values: disable, enable.
GreaseQuicBit string: Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
MaxAckDelay double: Maximum ACK delay in milliseconds (1 - 16383, default = 25).
MaxDatagramFrameSize double: Maximum datagram frame size in bytes (1 - 1500, default = 1500).
MaxIdleTimeout double: Maximum idle timeout milliseconds (1 - 60000, default = 30000).
MaxUdpPayloadSize double: Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

AckDelayExponent float64: ACK delay exponent (1 - 20, default = 3).
ActiveConnectionIdLimit float64: Active connection ID limit (1 - 8, default = 2).
ActiveMigration string: Enable/disable active migration (default = disable). Valid values: disable, enable.
GreaseQuicBit string: Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
MaxAckDelay float64: Maximum ACK delay in milliseconds (1 - 16383, default = 25).
MaxDatagramFrameSize float64: Maximum datagram frame size in bytes (1 - 1500, default = 1500).
MaxIdleTimeout float64: Maximum idle timeout milliseconds (1 - 60000, default = 30000).
MaxUdpPayloadSize float64: Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

ackDelayExponent Double: ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit Double: Active connection ID limit (1 - 8, default = 2).
activeMigration String: Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit String: Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay Double: Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize Double: Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout Double: Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize Double: Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

ackDelayExponent number: ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit number: Active connection ID limit (1 - 8, default = 2).
activeMigration string: Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit string: Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay number: Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize number: Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout number: Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize number: Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

ack_delay_exponent float: ACK delay exponent (1 - 20, default = 3).
active_connection_id_limit float: Active connection ID limit (1 - 8, default = 2).
active_migration str: Enable/disable active migration (default = disable). Valid values: disable, enable.
grease_quic_bit str: Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
max_ack_delay float: Maximum ACK delay in milliseconds (1 - 16383, default = 25).
max_datagram_frame_size float: Maximum datagram frame size in bytes (1 - 1500, default = 1500).
max_idle_timeout float: Maximum idle timeout milliseconds (1 - 60000, default = 30000).
max_udp_payload_size float: Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

ackDelayExponent Number: ACK delay exponent (1 - 20, default = 3).
activeConnectionIdLimit Number: Active connection ID limit (1 - 8, default = 2).
activeMigration String: Enable/disable active migration (default = disable). Valid values: disable, enable.
greaseQuicBit String: Enable/disable grease QUIC bit (default = enable). Valid values: disable, enable.
maxAckDelay Number: Maximum ACK delay in milliseconds (1 - 16383, default = 25).
maxDatagramFrameSize Number: Maximum datagram frame size in bytes (1 - 1500, default = 1500).
maxIdleTimeout Number: Maximum idle timeout milliseconds (1 - 60000, default = 30000).
maxUdpPayloadSize Number: Maximum UDP payload size in bytes (1200 - 1500, default = 1500).

ObjectFirewallAccessproxyApigatewayRealserver, ObjectFirewallAccessproxyApigatewayRealserverArgs

AddrType string: Type of address. Valid values: fqdn, ip.
Address string: Address or address group of the real server.
Domain string: Wildcard domain name of the real server.
ExternalAuth string: Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
HealthCheck string: Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
HealthCheckProto string: Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
HolddownInterval string: Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
HttpHost string: HTTP server domain name in HTTP header.
Id double: Real server ID.
Ip string: IP address of the real server.
Mappedport string: Port for communicating with the real server.
Port double: Port for communicating with the real server.
SshClientCert string: Set access-proxy SSH client certificate profile.
SshHostKey string: One or more server host key.
SshHostKeyValidation string: Enable/disable SSH real server host key validation. Valid values: disable, enable.
Status string: Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
TranslateHost string: Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
TunnelEncryption string: Tunnel encryption. Valid values: disable, enable.
Type string: TCP forwarding server type. Valid values: tcp-forwarding, ssh.
Weight double: Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

AddrType string: Type of address. Valid values: fqdn, ip.
Address string: Address or address group of the real server.
Domain string: Wildcard domain name of the real server.
ExternalAuth string: Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
HealthCheck string: Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
HealthCheckProto string: Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
HolddownInterval string: Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
HttpHost string: HTTP server domain name in HTTP header.
Id float64: Real server ID.
Ip string: IP address of the real server.
Mappedport string: Port for communicating with the real server.
Port float64: Port for communicating with the real server.
SshClientCert string: Set access-proxy SSH client certificate profile.
SshHostKey string: One or more server host key.
SshHostKeyValidation string: Enable/disable SSH real server host key validation. Valid values: disable, enable.
Status string: Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
TranslateHost string: Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
TunnelEncryption string: Tunnel encryption. Valid values: disable, enable.
Type string: TCP forwarding server type. Valid values: tcp-forwarding, ssh.
Weight float64: Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

addrType String: Type of address. Valid values: fqdn, ip.
address String: Address or address group of the real server.
domain String: Wildcard domain name of the real server.
externalAuth String: Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck String: Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto String: Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval String: Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost String: HTTP server domain name in HTTP header.
id Double: Real server ID.
ip String: IP address of the real server.
mappedport String: Port for communicating with the real server.
port Double: Port for communicating with the real server.
sshClientCert String: Set access-proxy SSH client certificate profile.
sshHostKey String: One or more server host key.
sshHostKeyValidation String: Enable/disable SSH real server host key validation. Valid values: disable, enable.
status String: Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost String: Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption String: Tunnel encryption. Valid values: disable, enable.
type String: TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight Double: Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

addrType string: Type of address. Valid values: fqdn, ip.
address string: Address or address group of the real server.
domain string: Wildcard domain name of the real server.
externalAuth string: Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck string: Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto string: Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval string: Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost string: HTTP server domain name in HTTP header.
id number: Real server ID.
ip string: IP address of the real server.
mappedport string: Port for communicating with the real server.
port number: Port for communicating with the real server.
sshClientCert string: Set access-proxy SSH client certificate profile.
sshHostKey string: One or more server host key.
sshHostKeyValidation string: Enable/disable SSH real server host key validation. Valid values: disable, enable.
status string: Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost string: Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption string: Tunnel encryption. Valid values: disable, enable.
type string: TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight number: Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

addr_type str: Type of address. Valid values: fqdn, ip.
address str: Address or address group of the real server.
domain str: Wildcard domain name of the real server.
external_auth str: Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
health_check str: Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
health_check_proto str: Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddown_interval str: Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
http_host str: HTTP server domain name in HTTP header.
id float: Real server ID.
ip str: IP address of the real server.
mappedport str: Port for communicating with the real server.
port float: Port for communicating with the real server.
ssh_client_cert str: Set access-proxy SSH client certificate profile.
ssh_host_key str: One or more server host key.
ssh_host_key_validation str: Enable/disable SSH real server host key validation. Valid values: disable, enable.
status str: Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translate_host str: Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnel_encryption str: Tunnel encryption. Valid values: disable, enable.
type str: TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight float: Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

addrType String: Type of address. Valid values: fqdn, ip.
address String: Address or address group of the real server.
domain String: Wildcard domain name of the real server.
externalAuth String: Enable/disable use of external browser as user-agent for SAML user authentication. Valid values: disable, enable.
healthCheck String: Enable to check the responsiveness of the real server before forwarding traffic. Valid values: disable, enable.
healthCheckProto String: Protocol of the health check monitor to use when polling to determine server's connectivity status. Valid values: ping, http, tcp-connect.
holddownInterval String: Enable/disable holddown timer. Server will be considered active and reachable once the holddown period has expired (30 seconds). Valid values: disable, enable.
httpHost String: HTTP server domain name in HTTP header.
id Number: Real server ID.
ip String: IP address of the real server.
mappedport String: Port for communicating with the real server.
port Number: Port for communicating with the real server.
sshClientCert String: Set access-proxy SSH client certificate profile.
sshHostKey String: One or more server host key.
sshHostKeyValidation String: Enable/disable SSH real server host key validation. Valid values: disable, enable.
status String: Set the status of the real server to active so that it can accept traffic, or on standby or disabled so no traffic is sent. Valid values: active, standby, disable.
translateHost String: Enable/disable translation of hostname/IP from virtual server to real server. Valid values: disable, enable.
tunnelEncryption String: Tunnel encryption. Valid values: disable, enable.
type String: TCP forwarding server type. Valid values: tcp-forwarding, ssh.
weight Number: Weight of the real server. If weighted load balancing is enabled, the server with the highest weight gets more connections.

ObjectFirewallAccessproxyApigatewaySslCipherSuite, ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs

Cipher string: Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256.
Priority double: SSL/TLS cipher suites priority.
Versions List<string>: SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

Cipher string: Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256.
Priority float64: SSL/TLS cipher suites priority.
Versions []string: SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

cipher String: Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256.
priority Double: SSL/TLS cipher suites priority.
versions List<String>: SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

cipher string: Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256.
priority number: SSL/TLS cipher suites priority.
versions string[]: SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

cipher str: Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256.
priority float: SSL/TLS cipher suites priority.
versions Sequence[str]: SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

cipher String: Cipher suite name. Valid values: TLS-RSA-WITH-RC4-128-MD5, TLS-RSA-WITH-RC4-128-SHA, TLS-RSA-WITH-DES-CBC-SHA, TLS-RSA-WITH-3DES-EDE-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA, TLS-RSA-WITH-AES-256-CBC-SHA, TLS-RSA-WITH-AES-128-CBC-SHA256, TLS-RSA-WITH-AES-256-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-RSA-WITH-SEED-CBC-SHA, TLS-RSA-WITH-ARIA-128-CBC-SHA256, TLS-RSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-RSA-WITH-DES-CBC-SHA, TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA, TLS-DHE-RSA-WITH-AES-256-CBC-SHA, TLS-DHE-RSA-WITH-AES-128-CBC-SHA256, TLS-DHE-RSA-WITH-AES-256-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-RSA-WITH-SEED-CBC-SHA, TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-RC4-128-SHA, TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA, TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256, TLS-DHE-RSA-WITH-AES-128-GCM-SHA256, TLS-DHE-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-AES-128-CBC-SHA, TLS-DHE-DSS-WITH-AES-256-CBC-SHA, TLS-DHE-DSS-WITH-AES-128-CBC-SHA256, TLS-DHE-DSS-WITH-AES-128-GCM-SHA256, TLS-DHE-DSS-WITH-AES-256-CBC-SHA256, TLS-DHE-DSS-WITH-AES-256-GCM-SHA384, TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA, TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256, TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384, TLS-RSA-WITH-AES-128-GCM-SHA256, TLS-RSA-WITH-AES-256-GCM-SHA384, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA, TLS-DHE-DSS-WITH-CAMELLIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-CAMELLIA-256-CBC-SHA256, TLS-DHE-DSS-WITH-SEED-CBC-SHA, TLS-DHE-DSS-WITH-ARIA-128-CBC-SHA256, TLS-DHE-DSS-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384, TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256, TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384, TLS-DHE-DSS-WITH-3DES-EDE-CBC-SHA, TLS-DHE-DSS-WITH-DES-CBC-SHA, TLS-AES-128-GCM-SHA256, TLS-AES-256-GCM-SHA384, TLS-CHACHA20-POLY1305-SHA256.
priority Number: SSL/TLS cipher suites priority.
versions List<String>: SSL/TLS versions that the cipher suite can be used with. Valid values: tls-1.0, tls-1.1, tls-1.2, tls-1.3.

Import

ObjectFirewall AccessProxyApiGateway can be imported using any of these accepted formats:

Set import_options = [“access_proxy=YOUR_VALUE”] in the provider section.

$ export “FORTIMANAGER_IMPORT_TABLE”=“true”

$ pulumi import fortimanager:index/objectFirewallAccessproxyApigateway:ObjectFirewallAccessproxyApigateway labelname {{fosid}}

$ unset “FORTIMANAGER_IMPORT_TABLE”

-> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: fortimanager fortinetdev/terraform-provider-fortimanager
License
Notes: This Pulumi package is based on the fortimanager Terraform Provider.

fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev

fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectFirewallAccessproxyApigateway

On this page

On this page

Example Usage

Create ObjectFirewallAccessproxyApigateway Resource

Constructor syntax

Parameters

Constructor example

ObjectFirewallAccessproxyApigateway Resource Properties

Inputs

Outputs

Look up Existing ObjectFirewallAccessproxyApigateway Resource

Supporting Types

ObjectFirewallAccessproxyApigatewayQuic, ObjectFirewallAccessproxyApigatewayQuicArgs

ObjectFirewallAccessproxyApigatewayRealserver, ObjectFirewallAccessproxyApigatewayRealserverArgs

ObjectFirewallAccessproxyApigatewaySslCipherSuite, ObjectFirewallAccessproxyApigatewaySslCipherSuiteArgs

Import

Package Details

On this page

On this page