HeaderRegion
Fields
| name | type | nullable | description |
|---|---|---|---|
ipv4Src | List<IpSubnet> | false | -- |
ipv4Dst | List<IpSubnet> | false | -- |
ipv6Src | List<IpSubnet> | false | -- |
ipv6Dst | List<IpSubnet> | false | -- |
ipProtocol | List<IntRange> | false | -- |
tpSrc | List<IntRange> | false | Source transport ports |
tpDst | List<IntRange> | false | Destination transport ports |
icmpType | List<IntRange> | false | -- |
icmpCode | List<IntRange> | false | -- |
overApproximated | Bool | false | Whether any header field is overapproximated. In this case, the value for each overapproximated header field will be the set of all possible values for the field. |
domains | List<String> | false | L7 domain matches. Example members include "google.com" and ".aws.com". There are no restrictions when empty. Always empty when the CloudType is not AWS. |
Used by
network → devices → aclEntries → headerMatches
See also
Data model path
- network:
Network- devices: List<
Device>- aclEntries: List<
AclEntry>- headerMatches:
HeaderRegion
- headerMatches:
- aclEntries: List<
- devices: List<
network → devices → natEntries → headerMatches
See also
Data model path
- network:
Network- devices: List<
Device>- natEntries: List<
NatEntry>- headerMatches:
HeaderRegion
- headerMatches:
- natEntries: List<
- devices: List<
network → cloudAccounts → vpcs → securityGroups → ingressRules → match
See also
Data model path
- network:
Network- cloudAccounts: List<
CloudAccount>- vpcs: List<
VpcData>- securityGroups: List<
SecurityGroup>- ingressRules: List<
SecurityRule>- match:
HeaderRegion
- match:
- ingressRules: List<
- securityGroups: List<
- vpcs: List<
- cloudAccounts: List<
network → cloudAccounts → vpcs → securityGroups → egressRules → match
See also
Data model path
- network:
Network- cloudAccounts: List<
CloudAccount>- vpcs: List<
VpcData>- securityGroups: List<
SecurityGroup>- egressRules: List<
SecurityRule>- match:
HeaderRegion
- match:
- egressRules: List<
- securityGroups: List<
- vpcs: List<
- cloudAccounts: List<
network → cloudAccounts → vpcs → networkAcls → ingressRules → match
See also
Data model path
- network:
Network- cloudAccounts: List<
CloudAccount>- vpcs: List<
VpcData>- networkAcls: List<
NetworkAcl>- ingressRules: List<
SecurityRule>- match:
HeaderRegion
- match:
- ingressRules: List<
- networkAcls: List<
- vpcs: List<
- cloudAccounts: List<
network → cloudAccounts → vpcs → networkAcls → egressRules → match
See also
Data model path
- network:
Network- cloudAccounts: List<
CloudAccount>- vpcs: List<
VpcData>- networkAcls: List<
NetworkAcl>- egressRules: List<
SecurityRule>- match:
HeaderRegion
- match:
- egressRules: List<
- networkAcls: List<
- vpcs: List<
- cloudAccounts: List<
network → cloudAccounts → firewallRules → securityRule → match
See also
Data model path
- network:
Network- cloudAccounts: List<
CloudAccount>- firewallRules: List<
FirewallRule>- securityRule:
SecurityRule- match:
HeaderRegion
- match:
- securityRule:
- firewallRules: List<
- cloudAccounts: List<