HeaderRegion

Fields

name	type	nullable	description
ipv4Src	Bag<IpSubnet>	false	--
ipv4Dst	Bag<IpSubnet>	false	--
ipv6Src	Bag<IpSubnet>	false	--
ipv6Dst	Bag<IpSubnet>	false	--
ipProtocol	Bag<IntRange>	false	--
tpSrc	Bag<IntRange>	false	Source transport ports
tpDst	Bag<IntRange>	false	Destination transport ports
icmpType	Bag<IntRange>	false	--
icmpCode	Bag<IntRange>	false	--
overApproximated	Bool	false	Whether any header field is overapproximated. In this case, the value for each overapproximated header field will be the set of all possible values for the field.
domains	Bag<String>	false	L7 domain matches. Example members include "google.com" and ".aws.com". There are no restrictions when empty. Always empty when the CloudType is not AWS.

Used by

network → devices → aclEntries → headerMatches

See also

Data model path

• network: Network
  • devices: Bag<Device>
    • aclEntries: Bag<AclEntry>
      • headerMatches: HeaderRegion

network → devices → natEntries → headerMatches

See also

Data model path

• network: Network
  • devices: Bag<Device>
    • natEntries: Bag<NatEntry>
      • headerMatches: HeaderRegion

network → cloudAccounts → vpcs → securityGroups → ingressRules → match

See also

Data model path

• network: Network
  • cloudAccounts: Bag<CloudAccount>
    • vpcs: Bag<VpcData>
      • securityGroups: Bag<SecurityGroup>
        • ingressRules: Bag<SecurityRule>
          • match: HeaderRegion

network → cloudAccounts → vpcs → securityGroups → egressRules → match

See also

Data model path

• network: Network
  • cloudAccounts: Bag<CloudAccount>
    • vpcs: Bag<VpcData>
      • securityGroups: Bag<SecurityGroup>
        • egressRules: Bag<SecurityRule>
          • match: HeaderRegion

network → cloudAccounts → vpcs → networkAcls → ingressRules → match

See also

Data model path

• network: Network
  • cloudAccounts: Bag<CloudAccount>
    • vpcs: Bag<VpcData>
      • networkAcls: Bag<NetworkAcl>
        • ingressRules: Bag<SecurityRule>
          • match: HeaderRegion

network → cloudAccounts → vpcs → networkAcls → egressRules → match

See also

Data model path

• network: Network
  • cloudAccounts: Bag<CloudAccount>
    • vpcs: Bag<VpcData>
      • networkAcls: Bag<NetworkAcl>
        • egressRules: Bag<SecurityRule>
          • match: HeaderRegion

network → cloudAccounts → vpcs → firewalls → rules → match

See also

Data model path

• network: Network
  • cloudAccounts: Bag<CloudAccount>
    • vpcs: Bag<VpcData>
      • firewalls: Bag<CloudFirewall>
        • rules: Bag<CloudFirewallRule>
          • match: HeaderRegion

network → cloudAccounts → firewallRules → securityRule → match

See also

Data model path

• network: Network
  • cloudAccounts: Bag<CloudAccount>
    • firewallRules: Bag<FirewallRule>
      • securityRule: SecurityRule
        • match: HeaderRegion