Class NfwRuleSourceStatelessTcpFlagsConfig

NetworkConfig / CentralNetworkServicesConfig / NfwConfig / NfwRuleGroupConfig / NfwRuleGroupRuleConfig / NfwRuleSourceConfig / NfwStatelessRulesAndCustomActionsConfig / NfwRuleSourceStatelessRuleConfig / NfwRuleSourceStatelessRuleDefinitionConfig / NfwRuleSourceStatelessMatchAttributesConfig / NfwRuleSourceStatelessTcpFlagsConfig

Network Firewall stateless rule TCP flags configuration. Use this configuration to define TCP flags to inspect in stateless rules. Optional, standard TCP flag settings, which indicate which flags to inspect and the values to inspect for.

See

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-rulegroup-tcpflagfield.html

Example

- flags: ['SYN', 'ECE']
  masks: []

Hierarchy

  • NfwRuleSourceStatelessTcpFlagsConfig

Implements

Constructors

constructor

Properties

flags masks

Constructors

constructor

Properties

Readonly flags

flags: ("FIN" | "SYN" | "RST" | "PSH" | "ACK" | "URG" | "ECE" | "CWR")[] = []

An array of TCP flags.

Remarks

Used in conjunction with the Masks setting to define the flags that must be set and flags that must not be set in order for the packet to match. This setting can only specify values that are also specified in the Masks setting.

Readonly masks

masks: ("FIN" | "SYN" | "RST" | "PSH" | "ACK" | "URG" | "ECE" | "CWR")[] = []

The set of flags to consider in the inspection.

Remarks

For the flags that are specified in the masks setting, the following must be true for the packet to match: The ones that are set in this flags setting must be set in the packet. The ones that are not set in this flags setting must also not be set in the packet. To inspect all flags in the valid values list, leave this with no setting.

Settings

Member Visibility

Theme

Generated using TypeDoc