Alibaba Cloud v3.76.0, Apr 8 25

Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi

alicloud.ddos.BgpPolicy

Explore with Pulumi AI

Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi

Example Usage

Basic Usage

TypeScript
Python
Go
C#
Java
YAML

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const config = new pulumi.Config();
const name = config.get("name") || "tf_exampleacc_bgp32594";
const policyName = config.get("policyName") || "example_l4_policy";
const _default = new alicloud.ddos.BgpPolicy("default", {
    content: {
        enableDefense: false,
        layer4RuleLists: [{
            method: "hex",
            match: "1",
            action: "1",
            limited: 0,
            conditionLists: [{
                arg: "3C",
                position: 1,
                depth: 2,
            }],
            name: "11",
            priority: 10,
        }],
    },
    type: "l4",
    policyName: "tf_exampleacc_bgp32594",
});

import pulumi
import pulumi_alicloud as alicloud

config = pulumi.Config()
name = config.get("name")
if name is None:
    name = "tf_exampleacc_bgp32594"
policy_name = config.get("policyName")
if policy_name is None:
    policy_name = "example_l4_policy"
default = alicloud.ddos.BgpPolicy("default",
    content={
        "enable_defense": False,
        "layer4_rule_lists": [{
            "method": "hex",
            "match": "1",
            "action": "1",
            "limited": 0,
            "condition_lists": [{
                "arg": "3C",
                "position": 1,
                "depth": 2,
            }],
            "name": "11",
            "priority": 10,
        }],
    },
    type="l4",
    policy_name="tf_exampleacc_bgp32594")

package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/ddos"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		name := "tf_exampleacc_bgp32594"
		if param := cfg.Get("name"); param != "" {
			name = param
		}
		policyName := "example_l4_policy"
		if param := cfg.Get("policyName"); param != "" {
			policyName = param
		}
		_, err := ddos.NewBgpPolicy(ctx, "default", &ddos.BgpPolicyArgs{
			Content: &ddos.BgpPolicyContentArgs{
				EnableDefense: pulumi.Bool(false),
				Layer4RuleLists: ddos.BgpPolicyContentLayer4RuleListArray{
					&ddos.BgpPolicyContentLayer4RuleListArgs{
						Method:  pulumi.String("hex"),
						Match:   pulumi.String("1"),
						Action:  pulumi.String("1"),
						Limited: pulumi.Int(0),
						ConditionLists: ddos.BgpPolicyContentLayer4RuleListConditionListArray{
							&ddos.BgpPolicyContentLayer4RuleListConditionListArgs{
								Arg:      pulumi.String("3C"),
								Position: pulumi.Int(1),
								Depth:    pulumi.Int(2),
							},
						},
						Name:     pulumi.String("11"),
						Priority: pulumi.Int(10),
					},
				},
			},
			Type:       pulumi.String("l4"),
			PolicyName: pulumi.String("tf_exampleacc_bgp32594"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var name = config.Get("name") ?? "tf_exampleacc_bgp32594";
    var policyName = config.Get("policyName") ?? "example_l4_policy";
    var @default = new AliCloud.Ddos.BgpPolicy("default", new()
    {
        Content = new AliCloud.Ddos.Inputs.BgpPolicyContentArgs
        {
            EnableDefense = false,
            Layer4RuleLists = new[]
            {
                new AliCloud.Ddos.Inputs.BgpPolicyContentLayer4RuleListArgs
                {
                    Method = "hex",
                    Match = "1",
                    Action = "1",
                    Limited = 0,
                    ConditionLists = new[]
                    {
                        new AliCloud.Ddos.Inputs.BgpPolicyContentLayer4RuleListConditionListArgs
                        {
                            Arg = "3C",
                            Position = 1,
                            Depth = 2,
                        },
                    },
                    Name = "11",
                    Priority = 10,
                },
            },
        },
        Type = "l4",
        PolicyName = "tf_exampleacc_bgp32594",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.ddos.BgpPolicy;
import com.pulumi.alicloud.ddos.BgpPolicyArgs;
import com.pulumi.alicloud.ddos.inputs.BgpPolicyContentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var name = config.get("name").orElse("tf_exampleacc_bgp32594");
        final var policyName = config.get("policyName").orElse("example_l4_policy");
        var default_ = new BgpPolicy("default", BgpPolicyArgs.builder()
            .content(BgpPolicyContentArgs.builder()
                .enableDefense("false")
                .layer4RuleLists(BgpPolicyContentLayer4RuleListArgs.builder()
                    .method("hex")
                    .match("1")
                    .action("1")
                    .limited("0")
                    .conditionLists(BgpPolicyContentLayer4RuleListConditionListArgs.builder()
                        .arg("3C")
                        .position("1")
                        .depth("2")
                        .build())
                    .name("11")
                    .priority("10")
                    .build())
                .build())
            .type("l4")
            .policyName("tf_exampleacc_bgp32594")
            .build());

    }
}

configuration:
  name:
    type: string
    default: tf_exampleacc_bgp32594
  policyName:
    type: string
    default: example_l4_policy
resources:
  default:
    type: alicloud:ddos:BgpPolicy
    properties:
      content:
        enableDefense: 'false'
        layer4RuleLists:
          - method: hex
            match: '1'
            action: '1'
            limited: '0'
            conditionLists:
              - arg: 3C
                position: '1'
                depth: '2'
            name: '11'
            priority: '10'
      type: l4
      policyName: tf_exampleacc_bgp32594

Create BgpPolicy Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

new BgpPolicy(name: string, args: BgpPolicyArgs, opts?: CustomResourceOptions);

@overload
def BgpPolicy(resource_name: str,
              args: BgpPolicyArgs,
              opts: Optional[ResourceOptions] = None)

@overload
def BgpPolicy(resource_name: str,
              opts: Optional[ResourceOptions] = None,
              policy_name: Optional[str] = None,
              type: Optional[str] = None,
              content: Optional[BgpPolicyContentArgs] = None)

func NewBgpPolicy(ctx *Context, name string, args BgpPolicyArgs, opts ...ResourceOption) (*BgpPolicy, error)

public BgpPolicy(string name, BgpPolicyArgs args, CustomResourceOptions? opts = null)

public BgpPolicy(String name, BgpPolicyArgs args)
public BgpPolicy(String name, BgpPolicyArgs args, CustomResourceOptions options)

type: alicloud:ddos:BgpPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args BgpPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args BgpPolicyArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args BgpPolicyArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args BgpPolicyArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args BgpPolicyArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

TypeScript
Python
Go
C#
Java
YAML

var bgpPolicyResource = new AliCloud.Ddos.BgpPolicy("bgpPolicyResource", new()
{
    PolicyName = "string",
    Type = "string",
    Content = new AliCloud.Ddos.Inputs.BgpPolicyContentArgs
    {
        BlackIpListExpireAt = 0,
        EnableDefense = false,
        EnableDropIcmp = false,
        EnableIntelligence = false,
        FingerPrintRuleLists = new[]
        {
            new AliCloud.Ddos.Inputs.BgpPolicyContentFingerPrintRuleListArgs
            {
                SeqNo = 0,
                DstPortStart = 0,
                SrcPortStart = 0,
                MatchAction = "string",
                MaxPktLen = 0,
                MinPktLen = 0,
                DstPortEnd = 0,
                SrcPortEnd = 0,
                Protocol = "string",
                Offset = 0,
                RateValue = 0,
                PayloadBytes = "string",
                FingerPrintRuleId = "string",
            },
        },
        IntelligenceLevel = "string",
        Layer4RuleLists = new[]
        {
            new AliCloud.Ddos.Inputs.BgpPolicyContentLayer4RuleListArgs
            {
                Action = "string",
                ConditionLists = new[]
                {
                    new AliCloud.Ddos.Inputs.BgpPolicyContentLayer4RuleListConditionListArgs
                    {
                        Arg = "string",
                        Depth = 0,
                        Position = 0,
                    },
                },
                Limited = 0,
                Match = "string",
                Method = "string",
                Name = "string",
                Priority = 0,
            },
        },
        PortRuleLists = new[]
        {
            new AliCloud.Ddos.Inputs.BgpPolicyContentPortRuleListArgs
            {
                DstPortEnd = 0,
                DstPortStart = 0,
                MatchAction = "string",
                Protocol = "string",
                SeqNo = 0,
                SrcPortEnd = 0,
                SrcPortStart = 0,
                PortRuleId = "string",
            },
        },
        ReflectBlockUdpPortLists = new[]
        {
            0,
        },
        RegionBlockCountryLists = new[]
        {
            0,
        },
        RegionBlockProvinceLists = new[]
        {
            0,
        },
        SourceBlockLists = new[]
        {
            new AliCloud.Ddos.Inputs.BgpPolicyContentSourceBlockListArgs
            {
                BlockExpireSeconds = 0,
                EverySeconds = 0,
                ExceedLimitTimes = 0,
                Type = 0,
            },
        },
        SourceLimit = new AliCloud.Ddos.Inputs.BgpPolicyContentSourceLimitArgs
        {
            Bps = 0,
            Pps = 0,
            SynBps = 0,
            SynPps = 0,
        },
        WhitenGfbrNets = false,
    },
});

example, err := ddos.NewBgpPolicy(ctx, "bgpPolicyResource", &ddos.BgpPolicyArgs{
	PolicyName: pulumi.String("string"),
	Type:       pulumi.String("string"),
	Content: &ddos.BgpPolicyContentArgs{
		BlackIpListExpireAt: pulumi.Int(0),
		EnableDefense:       pulumi.Bool(false),
		EnableDropIcmp:      pulumi.Bool(false),
		EnableIntelligence:  pulumi.Bool(false),
		FingerPrintRuleLists: ddos.BgpPolicyContentFingerPrintRuleListArray{
			&ddos.BgpPolicyContentFingerPrintRuleListArgs{
				SeqNo:             pulumi.Int(0),
				DstPortStart:      pulumi.Int(0),
				SrcPortStart:      pulumi.Int(0),
				MatchAction:       pulumi.String("string"),
				MaxPktLen:         pulumi.Int(0),
				MinPktLen:         pulumi.Int(0),
				DstPortEnd:        pulumi.Int(0),
				SrcPortEnd:        pulumi.Int(0),
				Protocol:          pulumi.String("string"),
				Offset:            pulumi.Int(0),
				RateValue:         pulumi.Int(0),
				PayloadBytes:      pulumi.String("string"),
				FingerPrintRuleId: pulumi.String("string"),
			},
		},
		IntelligenceLevel: pulumi.String("string"),
		Layer4RuleLists: ddos.BgpPolicyContentLayer4RuleListArray{
			&ddos.BgpPolicyContentLayer4RuleListArgs{
				Action: pulumi.String("string"),
				ConditionLists: ddos.BgpPolicyContentLayer4RuleListConditionListArray{
					&ddos.BgpPolicyContentLayer4RuleListConditionListArgs{
						Arg:      pulumi.String("string"),
						Depth:    pulumi.Int(0),
						Position: pulumi.Int(0),
					},
				},
				Limited:  pulumi.Int(0),
				Match:    pulumi.String("string"),
				Method:   pulumi.String("string"),
				Name:     pulumi.String("string"),
				Priority: pulumi.Int(0),
			},
		},
		PortRuleLists: ddos.BgpPolicyContentPortRuleListArray{
			&ddos.BgpPolicyContentPortRuleListArgs{
				DstPortEnd:   pulumi.Int(0),
				DstPortStart: pulumi.Int(0),
				MatchAction:  pulumi.String("string"),
				Protocol:     pulumi.String("string"),
				SeqNo:        pulumi.Int(0),
				SrcPortEnd:   pulumi.Int(0),
				SrcPortStart: pulumi.Int(0),
				PortRuleId:   pulumi.String("string"),
			},
		},
		ReflectBlockUdpPortLists: pulumi.IntArray{
			pulumi.Int(0),
		},
		RegionBlockCountryLists: pulumi.IntArray{
			pulumi.Int(0),
		},
		RegionBlockProvinceLists: pulumi.IntArray{
			pulumi.Int(0),
		},
		SourceBlockLists: ddos.BgpPolicyContentSourceBlockListArray{
			&ddos.BgpPolicyContentSourceBlockListArgs{
				BlockExpireSeconds: pulumi.Int(0),
				EverySeconds:       pulumi.Int(0),
				ExceedLimitTimes:   pulumi.Int(0),
				Type:               pulumi.Int(0),
			},
		},
		SourceLimit: &ddos.BgpPolicyContentSourceLimitArgs{
			Bps:    pulumi.Int(0),
			Pps:    pulumi.Int(0),
			SynBps: pulumi.Int(0),
			SynPps: pulumi.Int(0),
		},
		WhitenGfbrNets: pulumi.Bool(false),
	},
})

var bgpPolicyResource = new BgpPolicy("bgpPolicyResource", BgpPolicyArgs.builder()
    .policyName("string")
    .type("string")
    .content(BgpPolicyContentArgs.builder()
        .blackIpListExpireAt(0)
        .enableDefense(false)
        .enableDropIcmp(false)
        .enableIntelligence(false)
        .fingerPrintRuleLists(BgpPolicyContentFingerPrintRuleListArgs.builder()
            .seqNo(0)
            .dstPortStart(0)
            .srcPortStart(0)
            .matchAction("string")
            .maxPktLen(0)
            .minPktLen(0)
            .dstPortEnd(0)
            .srcPortEnd(0)
            .protocol("string")
            .offset(0)
            .rateValue(0)
            .payloadBytes("string")
            .fingerPrintRuleId("string")
            .build())
        .intelligenceLevel("string")
        .layer4RuleLists(BgpPolicyContentLayer4RuleListArgs.builder()
            .action("string")
            .conditionLists(BgpPolicyContentLayer4RuleListConditionListArgs.builder()
                .arg("string")
                .depth(0)
                .position(0)
                .build())
            .limited(0)
            .match("string")
            .method("string")
            .name("string")
            .priority(0)
            .build())
        .portRuleLists(BgpPolicyContentPortRuleListArgs.builder()
            .dstPortEnd(0)
            .dstPortStart(0)
            .matchAction("string")
            .protocol("string")
            .seqNo(0)
            .srcPortEnd(0)
            .srcPortStart(0)
            .portRuleId("string")
            .build())
        .reflectBlockUdpPortLists(0)
        .regionBlockCountryLists(0)
        .regionBlockProvinceLists(0)
        .sourceBlockLists(BgpPolicyContentSourceBlockListArgs.builder()
            .blockExpireSeconds(0)
            .everySeconds(0)
            .exceedLimitTimes(0)
            .type(0)
            .build())
        .sourceLimit(BgpPolicyContentSourceLimitArgs.builder()
            .bps(0)
            .pps(0)
            .synBps(0)
            .synPps(0)
            .build())
        .whitenGfbrNets(false)
        .build())
    .build());

bgp_policy_resource = alicloud.ddos.BgpPolicy("bgpPolicyResource",
    policy_name="string",
    type="string",
    content={
        "black_ip_list_expire_at": 0,
        "enable_defense": False,
        "enable_drop_icmp": False,
        "enable_intelligence": False,
        "finger_print_rule_lists": [{
            "seq_no": 0,
            "dst_port_start": 0,
            "src_port_start": 0,
            "match_action": "string",
            "max_pkt_len": 0,
            "min_pkt_len": 0,
            "dst_port_end": 0,
            "src_port_end": 0,
            "protocol": "string",
            "offset": 0,
            "rate_value": 0,
            "payload_bytes": "string",
            "finger_print_rule_id": "string",
        }],
        "intelligence_level": "string",
        "layer4_rule_lists": [{
            "action": "string",
            "condition_lists": [{
                "arg": "string",
                "depth": 0,
                "position": 0,
            }],
            "limited": 0,
            "match": "string",
            "method": "string",
            "name": "string",
            "priority": 0,
        }],
        "port_rule_lists": [{
            "dst_port_end": 0,
            "dst_port_start": 0,
            "match_action": "string",
            "protocol": "string",
            "seq_no": 0,
            "src_port_end": 0,
            "src_port_start": 0,
            "port_rule_id": "string",
        }],
        "reflect_block_udp_port_lists": [0],
        "region_block_country_lists": [0],
        "region_block_province_lists": [0],
        "source_block_lists": [{
            "block_expire_seconds": 0,
            "every_seconds": 0,
            "exceed_limit_times": 0,
            "type": 0,
        }],
        "source_limit": {
            "bps": 0,
            "pps": 0,
            "syn_bps": 0,
            "syn_pps": 0,
        },
        "whiten_gfbr_nets": False,
    })

const bgpPolicyResource = new alicloud.ddos.BgpPolicy("bgpPolicyResource", {
    policyName: "string",
    type: "string",
    content: {
        blackIpListExpireAt: 0,
        enableDefense: false,
        enableDropIcmp: false,
        enableIntelligence: false,
        fingerPrintRuleLists: [{
            seqNo: 0,
            dstPortStart: 0,
            srcPortStart: 0,
            matchAction: "string",
            maxPktLen: 0,
            minPktLen: 0,
            dstPortEnd: 0,
            srcPortEnd: 0,
            protocol: "string",
            offset: 0,
            rateValue: 0,
            payloadBytes: "string",
            fingerPrintRuleId: "string",
        }],
        intelligenceLevel: "string",
        layer4RuleLists: [{
            action: "string",
            conditionLists: [{
                arg: "string",
                depth: 0,
                position: 0,
            }],
            limited: 0,
            match: "string",
            method: "string",
            name: "string",
            priority: 0,
        }],
        portRuleLists: [{
            dstPortEnd: 0,
            dstPortStart: 0,
            matchAction: "string",
            protocol: "string",
            seqNo: 0,
            srcPortEnd: 0,
            srcPortStart: 0,
            portRuleId: "string",
        }],
        reflectBlockUdpPortLists: [0],
        regionBlockCountryLists: [0],
        regionBlockProvinceLists: [0],
        sourceBlockLists: [{
            blockExpireSeconds: 0,
            everySeconds: 0,
            exceedLimitTimes: 0,
            type: 0,
        }],
        sourceLimit: {
            bps: 0,
            pps: 0,
            synBps: 0,
            synPps: 0,
        },
        whitenGfbrNets: false,
    },
});

type: alicloud:ddos:BgpPolicy
properties:
    content:
        blackIpListExpireAt: 0
        enableDefense: false
        enableDropIcmp: false
        enableIntelligence: false
        fingerPrintRuleLists:
            - dstPortEnd: 0
              dstPortStart: 0
              fingerPrintRuleId: string
              matchAction: string
              maxPktLen: 0
              minPktLen: 0
              offset: 0
              payloadBytes: string
              protocol: string
              rateValue: 0
              seqNo: 0
              srcPortEnd: 0
              srcPortStart: 0
        intelligenceLevel: string
        layer4RuleLists:
            - action: string
              conditionLists:
                - arg: string
                  depth: 0
                  position: 0
              limited: 0
              match: string
              method: string
              name: string
              priority: 0
        portRuleLists:
            - dstPortEnd: 0
              dstPortStart: 0
              matchAction: string
              portRuleId: string
              protocol: string
              seqNo: 0
              srcPortEnd: 0
              srcPortStart: 0
        reflectBlockUdpPortLists:
            - 0
        regionBlockCountryLists:
            - 0
        regionBlockProvinceLists:
            - 0
        sourceBlockLists:
            - blockExpireSeconds: 0
              everySeconds: 0
              exceedLimitTimes: 0
              type: 0
        sourceLimit:
            bps: 0
            pps: 0
            synBps: 0
            synPps: 0
        whitenGfbrNets: false
    policyName: string
    type: string

BgpPolicy Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The BgpPolicy resource accepts the following input properties:

PolicyName string: The name of the resource
Type string: Type
Content Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContent: Configuration Content See content below.

PolicyName string: The name of the resource
Type string: Type
Content BgpPolicyContentArgs: Configuration Content See content below.

policyName String: The name of the resource
type String: Type
content BgpPolicyContent: Configuration Content See content below.

policyName string: The name of the resource
type string: Type
content BgpPolicyContent: Configuration Content See content below.

policy_name str: The name of the resource
type str: Type
content BgpPolicyContentArgs: Configuration Content See content below.

policyName String: The name of the resource
type String: Type
content Property Map: Configuration Content See content below.

Outputs

All input properties are implicitly available as output properties. Additionally, the BgpPolicy resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing BgpPolicy Resource

Get an existing BgpPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

TypeScript
Python
Go
C#
Java
YAML

public static get(name: string, id: Input<ID>, state?: BgpPolicyState, opts?: CustomResourceOptions): BgpPolicy

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        content: Optional[BgpPolicyContentArgs] = None,
        policy_name: Optional[str] = None,
        type: Optional[str] = None) -> BgpPolicy

func GetBgpPolicy(ctx *Context, name string, id IDInput, state *BgpPolicyState, opts ...ResourceOption) (*BgpPolicy, error)

public static BgpPolicy Get(string name, Input<string> id, BgpPolicyState? state, CustomResourceOptions? opts = null)

public static BgpPolicy get(String name, Output<String> id, BgpPolicyState state, CustomResourceOptions options)

resources:  _:    type: alicloud:ddos:BgpPolicy    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

Content Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContent: Configuration Content See content below.
PolicyName string: The name of the resource
Type string: Type

Content BgpPolicyContentArgs: Configuration Content See content below.
PolicyName string: The name of the resource
Type string: Type

content BgpPolicyContent: Configuration Content See content below.
policyName String: The name of the resource
type String: Type

content BgpPolicyContent: Configuration Content See content below.
policyName string: The name of the resource
type string: Type

content BgpPolicyContentArgs: Configuration Content See content below.
policy_name str: The name of the resource
type str: Type

content Property Map: Configuration Content See content below.
policyName String: The name of the resource
type String: Type

Supporting Types

BgpPolicyContent
, BgpPolicyContentArgs

BlackIpListExpireAt int: Blacklist and whitelist timeout.
EnableDefense bool: Whether to enable L4 protection.
EnableDropIcmp bool: Switch to discard ICMP.
EnableIntelligence bool: Whether the intelligent switch is on.
FingerPrintRuleLists List<Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContentFingerPrintRuleList>: Fingerprint Rules. See finger_print_rule_list below.
IntelligenceLevel string: Smart mode. Valid values: weak, hard, and default.
Layer4RuleLists List<Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContentLayer4RuleList>: L4 protection rules. See layer4_rule_list below.
PortRuleLists List<Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContentPortRuleList>: Port Rule List. See port_rule_list below.
ReflectBlockUdpPortLists List<int>: Reflective port filtering.
RegionBlockCountryLists List<int>: List of Regional Banned Countries.
RegionBlockProvinceLists List<int>: List of Prohibited Provinces by Region.
SourceBlockLists List<Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContentSourceBlockList>: Source pull Black. See source_block_list below.
SourceLimit Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContentSourceLimit: Do not fill in when the source speed limit is deleted. See source_limit below.
WhitenGfbrNets bool: Add white high protection back to source network segment switch.

BlackIpListExpireAt int: Blacklist and whitelist timeout.
EnableDefense bool: Whether to enable L4 protection.
EnableDropIcmp bool: Switch to discard ICMP.
EnableIntelligence bool: Whether the intelligent switch is on.
FingerPrintRuleLists []BgpPolicyContentFingerPrintRuleList: Fingerprint Rules. See finger_print_rule_list below.
IntelligenceLevel string: Smart mode. Valid values: weak, hard, and default.
Layer4RuleLists []BgpPolicyContentLayer4RuleList: L4 protection rules. See layer4_rule_list below.
PortRuleLists []BgpPolicyContentPortRuleList: Port Rule List. See port_rule_list below.
ReflectBlockUdpPortLists []int: Reflective port filtering.
RegionBlockCountryLists []int: List of Regional Banned Countries.
RegionBlockProvinceLists []int: List of Prohibited Provinces by Region.
SourceBlockLists []BgpPolicyContentSourceBlockList: Source pull Black. See source_block_list below.
SourceLimit BgpPolicyContentSourceLimit: Do not fill in when the source speed limit is deleted. See source_limit below.
WhitenGfbrNets bool: Add white high protection back to source network segment switch.

blackIpListExpireAt Integer: Blacklist and whitelist timeout.
enableDefense Boolean: Whether to enable L4 protection.
enableDropIcmp Boolean: Switch to discard ICMP.
enableIntelligence Boolean: Whether the intelligent switch is on.
fingerPrintRuleLists List<BgpPolicyContentFingerPrintRuleList>: Fingerprint Rules. See finger_print_rule_list below.
intelligenceLevel String: Smart mode. Valid values: weak, hard, and default.
layer4RuleLists List<BgpPolicyContentLayer4RuleList>: L4 protection rules. See layer4_rule_list below.
portRuleLists List<BgpPolicyContentPortRuleList>: Port Rule List. See port_rule_list below.
reflectBlockUdpPortLists List<Integer>: Reflective port filtering.
regionBlockCountryLists List<Integer>: List of Regional Banned Countries.
regionBlockProvinceLists List<Integer>: List of Prohibited Provinces by Region.
sourceBlockLists List<BgpPolicyContentSourceBlockList>: Source pull Black. See source_block_list below.
sourceLimit BgpPolicyContentSourceLimit: Do not fill in when the source speed limit is deleted. See source_limit below.
whitenGfbrNets Boolean: Add white high protection back to source network segment switch.

blackIpListExpireAt number: Blacklist and whitelist timeout.
enableDefense boolean: Whether to enable L4 protection.
enableDropIcmp boolean: Switch to discard ICMP.
enableIntelligence boolean: Whether the intelligent switch is on.
fingerPrintRuleLists BgpPolicyContentFingerPrintRuleList[]: Fingerprint Rules. See finger_print_rule_list below.
intelligenceLevel string: Smart mode. Valid values: weak, hard, and default.
layer4RuleLists BgpPolicyContentLayer4RuleList[]: L4 protection rules. See layer4_rule_list below.
portRuleLists BgpPolicyContentPortRuleList[]: Port Rule List. See port_rule_list below.
reflectBlockUdpPortLists number[]: Reflective port filtering.
regionBlockCountryLists number[]: List of Regional Banned Countries.
regionBlockProvinceLists number[]: List of Prohibited Provinces by Region.
sourceBlockLists BgpPolicyContentSourceBlockList[]: Source pull Black. See source_block_list below.
sourceLimit BgpPolicyContentSourceLimit: Do not fill in when the source speed limit is deleted. See source_limit below.
whitenGfbrNets boolean: Add white high protection back to source network segment switch.

black_ip_list_expire_at int: Blacklist and whitelist timeout.
enable_defense bool: Whether to enable L4 protection.
enable_drop_icmp bool: Switch to discard ICMP.
enable_intelligence bool: Whether the intelligent switch is on.
finger_print_rule_lists Sequence[BgpPolicyContentFingerPrintRuleList]: Fingerprint Rules. See finger_print_rule_list below.
intelligence_level str: Smart mode. Valid values: weak, hard, and default.
layer4_rule_lists Sequence[BgpPolicyContentLayer4RuleList]: L4 protection rules. See layer4_rule_list below.
port_rule_lists Sequence[BgpPolicyContentPortRuleList]: Port Rule List. See port_rule_list below.
reflect_block_udp_port_lists Sequence[int]: Reflective port filtering.
region_block_country_lists Sequence[int]: List of Regional Banned Countries.
region_block_province_lists Sequence[int]: List of Prohibited Provinces by Region.
source_block_lists Sequence[BgpPolicyContentSourceBlockList]: Source pull Black. See source_block_list below.
source_limit BgpPolicyContentSourceLimit: Do not fill in when the source speed limit is deleted. See source_limit below.
whiten_gfbr_nets bool: Add white high protection back to source network segment switch.

blackIpListExpireAt Number: Blacklist and whitelist timeout.
enableDefense Boolean: Whether to enable L4 protection.
enableDropIcmp Boolean: Switch to discard ICMP.
enableIntelligence Boolean: Whether the intelligent switch is on.
fingerPrintRuleLists List<Property Map>: Fingerprint Rules. See finger_print_rule_list below.
intelligenceLevel String: Smart mode. Valid values: weak, hard, and default.
layer4RuleLists List<Property Map>: L4 protection rules. See layer4_rule_list below.
portRuleLists List<Property Map>: Port Rule List. See port_rule_list below.
reflectBlockUdpPortLists List<Number>: Reflective port filtering.
regionBlockCountryLists List<Number>: List of Regional Banned Countries.
regionBlockProvinceLists List<Number>: List of Prohibited Provinces by Region.
sourceBlockLists List<Property Map>: Source pull Black. See source_block_list below.
sourceLimit Property Map: Do not fill in when the source speed limit is deleted. See source_limit below.
whitenGfbrNets Boolean: Add white high protection back to source network segment switch.

BgpPolicyContentFingerPrintRuleList
, BgpPolicyContentFingerPrintRuleListArgs

DstPortEnd int: End of destination port 0-65535.
DstPortStart int: Destination Port start 0-65535.
MatchAction string: Action. Currently, only drop is supported.
MaxPktLen int: Maximum bag length.
MinPktLen int: Minimum package length.
Protocol string: Protocol, tcp or udp.
SeqNo int: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
SrcPortEnd int: Source Port end 0-65535.
SrcPortStart int: Source port start 0-65535.
FingerPrintRuleId string: The UUID of the rule is required to be deleted and modified, and it is not required to be created.
Offset int: Offset.
PayloadBytes string: Load match, hexadecimal string; Similar to 'abcd'.
RateValue int: Speed limit value 1-100000.

DstPortEnd int: End of destination port 0-65535.
DstPortStart int: Destination Port start 0-65535.
MatchAction string: Action. Currently, only drop is supported.
MaxPktLen int: Maximum bag length.
MinPktLen int: Minimum package length.
Protocol string: Protocol, tcp or udp.
SeqNo int: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
SrcPortEnd int: Source Port end 0-65535.
SrcPortStart int: Source port start 0-65535.
FingerPrintRuleId string: The UUID of the rule is required to be deleted and modified, and it is not required to be created.
Offset int: Offset.
PayloadBytes string: Load match, hexadecimal string; Similar to 'abcd'.
RateValue int: Speed limit value 1-100000.

dstPortEnd Integer: End of destination port 0-65535.
dstPortStart Integer: Destination Port start 0-65535.
matchAction String: Action. Currently, only drop is supported.
maxPktLen Integer: Maximum bag length.
minPktLen Integer: Minimum package length.
protocol String: Protocol, tcp or udp.
seqNo Integer: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
srcPortEnd Integer: Source Port end 0-65535.
srcPortStart Integer: Source port start 0-65535.
fingerPrintRuleId String: The UUID of the rule is required to be deleted and modified, and it is not required to be created.
offset Integer: Offset.
payloadBytes String: Load match, hexadecimal string; Similar to 'abcd'.
rateValue Integer: Speed limit value 1-100000.

dstPortEnd number: End of destination port 0-65535.
dstPortStart number: Destination Port start 0-65535.
matchAction string: Action. Currently, only drop is supported.
maxPktLen number: Maximum bag length.
minPktLen number: Minimum package length.
protocol string: Protocol, tcp or udp.
seqNo number: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
srcPortEnd number: Source Port end 0-65535.
srcPortStart number: Source port start 0-65535.
fingerPrintRuleId string: The UUID of the rule is required to be deleted and modified, and it is not required to be created.
offset number: Offset.
payloadBytes string: Load match, hexadecimal string; Similar to 'abcd'.
rateValue number: Speed limit value 1-100000.

dst_port_end int: End of destination port 0-65535.
dst_port_start int: Destination Port start 0-65535.
match_action str: Action. Currently, only drop is supported.
max_pkt_len int: Maximum bag length.
min_pkt_len int: Minimum package length.
protocol str: Protocol, tcp or udp.
seq_no int: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
src_port_end int: Source Port end 0-65535.
src_port_start int: Source port start 0-65535.
finger_print_rule_id str: The UUID of the rule is required to be deleted and modified, and it is not required to be created.
offset int: Offset.
payload_bytes str: Load match, hexadecimal string; Similar to 'abcd'.
rate_value int: Speed limit value 1-100000.

dstPortEnd Number: End of destination port 0-65535.
dstPortStart Number: Destination Port start 0-65535.
matchAction String: Action. Currently, only drop is supported.
maxPktLen Number: Maximum bag length.
minPktLen Number: Minimum package length.
protocol String: Protocol, tcp or udp.
seqNo Number: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
srcPortEnd Number: Source Port end 0-65535.
srcPortStart Number: Source port start 0-65535.
fingerPrintRuleId String: The UUID of the rule is required to be deleted and modified, and it is not required to be created.
offset Number: Offset.
payloadBytes String: Load match, hexadecimal string; Similar to 'abcd'.
rateValue Number: Speed limit value 1-100000.

BgpPolicyContentLayer4RuleList
, BgpPolicyContentLayer4RuleListArgs

Action string: 1 for observation 2 for blocking.
ConditionLists List<Pulumi.AliCloud.Ddos.Inputs.BgpPolicyContentLayer4RuleListConditionList>: Matching Condition. See condition_list below.
Limited int: .
Match string: 0 indicates that the condition is not met 1 indicates that the condition is met.
Method string: Char indicates a string match hex match.
Name string: Rule Name.
Priority int: 1-100, priority, the lower the number, the higher the priority.

Action string: 1 for observation 2 for blocking.
ConditionLists []BgpPolicyContentLayer4RuleListConditionList: Matching Condition. See condition_list below.
Limited int: .
Match string: 0 indicates that the condition is not met 1 indicates that the condition is met.
Method string: Char indicates a string match hex match.
Name string: Rule Name.
Priority int: 1-100, priority, the lower the number, the higher the priority.

action String: 1 for observation 2 for blocking.
conditionLists List<BgpPolicyContentLayer4RuleListConditionList>: Matching Condition. See condition_list below.
limited Integer: .
match String: 0 indicates that the condition is not met 1 indicates that the condition is met.
method String: Char indicates a string match hex match.
name String: Rule Name.
priority Integer: 1-100, priority, the lower the number, the higher the priority.

action string: 1 for observation 2 for blocking.
conditionLists BgpPolicyContentLayer4RuleListConditionList[]: Matching Condition. See condition_list below.
limited number: .
match string: 0 indicates that the condition is not met 1 indicates that the condition is met.
method string: Char indicates a string match hex match.
name string: Rule Name.
priority number: 1-100, priority, the lower the number, the higher the priority.

action str: 1 for observation 2 for blocking.
condition_lists Sequence[BgpPolicyContentLayer4RuleListConditionList]: Matching Condition. See condition_list below.
limited int: .
match str: 0 indicates that the condition is not met 1 indicates that the condition is met.
method str: Char indicates a string match hex match.
name str: Rule Name.
priority int: 1-100, priority, the lower the number, the higher the priority.

action String: 1 for observation 2 for blocking.
conditionLists List<Property Map>: Matching Condition. See condition_list below.
limited Number: .
match String: 0 indicates that the condition is not met 1 indicates that the condition is met.
method String: Char indicates a string match hex match.
name String: Rule Name.
priority Number: 1-100, priority, the lower the number, the higher the priority.

BgpPolicyContentLayer4RuleListConditionList
, BgpPolicyContentLayer4RuleListConditionListArgs

Arg string: Matching target character.
Depth int: Depth of Matching.
Position int: Position to start matching, starting from 0.

Arg string: Matching target character.
Depth int: Depth of Matching.
Position int: Position to start matching, starting from 0.

arg String: Matching target character.
depth Integer: Depth of Matching.
position Integer: Position to start matching, starting from 0.

arg string: Matching target character.
depth number: Depth of Matching.
position number: Position to start matching, starting from 0.

arg str: Matching target character.
depth int: Depth of Matching.
position int: Position to start matching, starting from 0.

arg String: Matching target character.
depth Number: Depth of Matching.
position Number: Position to start matching, starting from 0.

BgpPolicyContentPortRuleList
, BgpPolicyContentPortRuleListArgs

DstPortEnd int: End of destination port 0-65535.
DstPortStart int: Destination Port start 0-65535.
MatchAction string: Action. Currently, only drop is supported.
Protocol string: Protocol, tcp or udp.
SeqNo int: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
SrcPortEnd int: Source Port end 0-65535.
SrcPortStart int: Source port start 0-65535.
PortRuleId string: Rule UUID is required to be deleted and modified, and is not required to be created.

DstPortEnd int: End of destination port 0-65535.
DstPortStart int: Destination Port start 0-65535.
MatchAction string: Action. Currently, only drop is supported.
Protocol string: Protocol, tcp or udp.
SeqNo int: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
SrcPortEnd int: Source Port end 0-65535.
SrcPortStart int: Source port start 0-65535.
PortRuleId string: Rule UUID is required to be deleted and modified, and is not required to be created.

dstPortEnd Integer: End of destination port 0-65535.
dstPortStart Integer: Destination Port start 0-65535.
matchAction String: Action. Currently, only drop is supported.
protocol String: Protocol, tcp or udp.
seqNo Integer: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
srcPortEnd Integer: Source Port end 0-65535.
srcPortStart Integer: Source port start 0-65535.
portRuleId String: Rule UUID is required to be deleted and modified, and is not required to be created.

dstPortEnd number: End of destination port 0-65535.
dstPortStart number: Destination Port start 0-65535.
matchAction string: Action. Currently, only drop is supported.
protocol string: Protocol, tcp or udp.
seqNo number: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
srcPortEnd number: Source Port end 0-65535.
srcPortStart number: Source port start 0-65535.
portRuleId string: Rule UUID is required to be deleted and modified, and is not required to be created.

dst_port_end int: End of destination port 0-65535.
dst_port_start int: Destination Port start 0-65535.
match_action str: Action. Currently, only drop is supported.
protocol str: Protocol, tcp or udp.
seq_no int: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
src_port_end int: Source Port end 0-65535.
src_port_start int: Source port start 0-65535.
port_rule_id str: Rule UUID is required to be deleted and modified, and is not required to be created.

dstPortEnd Number: End of destination port 0-65535.
dstPortStart Number: Destination Port start 0-65535.
matchAction String: Action. Currently, only drop is supported.
protocol String: Protocol, tcp or udp.
seqNo Number: Serial number 1-100 ● Affects the order issued by the bottom layer ● The larger the number, the lower it is.
srcPortEnd Number: Source Port end 0-65535.
srcPortStart Number: Source port start 0-65535.
portRuleId String: Rule UUID is required to be deleted and modified, and is not required to be created.

BgpPolicyContentSourceBlockList
, BgpPolicyContentSourceBlockListArgs

BlockExpireSeconds int: Statistical cycle range 60-1200.
EverySeconds int: The time (unit second) for automatically releasing the black after triggering the speed limit is 60~2592000.
ExceedLimitTimes int: The number of times the speed limit is exceeded in a statistical period ranges from 1 to 1200.
Type int: Type

BlockExpireSeconds int: Statistical cycle range 60-1200.
EverySeconds int: The time (unit second) for automatically releasing the black after triggering the speed limit is 60~2592000.
ExceedLimitTimes int: The number of times the speed limit is exceeded in a statistical period ranges from 1 to 1200.
Type int: Type

blockExpireSeconds Integer: Statistical cycle range 60-1200.
everySeconds Integer: The time (unit second) for automatically releasing the black after triggering the speed limit is 60~2592000.
exceedLimitTimes Integer: The number of times the speed limit is exceeded in a statistical period ranges from 1 to 1200.
type Integer: Type

blockExpireSeconds number: Statistical cycle range 60-1200.
everySeconds number: The time (unit second) for automatically releasing the black after triggering the speed limit is 60~2592000.
exceedLimitTimes number: The number of times the speed limit is exceeded in a statistical period ranges from 1 to 1200.
type number: Type

block_expire_seconds int: Statistical cycle range 60-1200.
every_seconds int: The time (unit second) for automatically releasing the black after triggering the speed limit is 60~2592000.
exceed_limit_times int: The number of times the speed limit is exceeded in a statistical period ranges from 1 to 1200.
type int: Type

blockExpireSeconds Number: Statistical cycle range 60-1200.
everySeconds Number: The time (unit second) for automatically releasing the black after triggering the speed limit is 60~2592000.
exceedLimitTimes Number: The number of times the speed limit is exceeded in a statistical period ranges from 1 to 1200.
type Number: Type

BgpPolicyContentSourceLimit
, BgpPolicyContentSourceLimitArgs

Bps int: bps range 1024~268435456.
Pps int: Pps range 32~500000.
SynBps int: SynBps range 1024~268435456.
SynPps int: SynPps range 1~100000.

Bps int: bps range 1024~268435456.
Pps int: Pps range 32~500000.
SynBps int: SynBps range 1024~268435456.
SynPps int: SynPps range 1~100000.

bps Integer: bps range 1024~268435456.
pps Integer: Pps range 32~500000.
synBps Integer: SynBps range 1024~268435456.
synPps Integer: SynPps range 1~100000.

bps number: bps range 1024~268435456.
pps number: Pps range 32~500000.
synBps number: SynBps range 1024~268435456.
synPps number: SynPps range 1~100000.

bps int: bps range 1024~268435456.
pps int: Pps range 32~500000.
syn_bps int: SynBps range 1024~268435456.
syn_pps int: SynPps range 1~100000.

bps Number: bps range 1024~268435456.
pps Number: Pps range 32~500000.
synBps Number: SynBps range 1024~268435456.
synPps Number: SynPps range 1~100000.

Import

Ddos Bgp Policy can be imported using the id, e.g.

$ pulumi import alicloud:ddos/bgpPolicy:BgpPolicy example <id>

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Alibaba Cloud pulumi/pulumi-alicloud
License: Apache-2.0
Notes: This Pulumi package is based on the alicloud Terraform Provider.

Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi

pulumi/pulumi-alicloud

alicloud.ddos.BgpPolicy

On this page

On this page

Example Usage

Create BgpPolicy Resource

Constructor syntax

Parameters

Constructor example

BgpPolicy Resource Properties

Inputs

Outputs

Look up Existing BgpPolicy Resource

Supporting Types

BgpPolicyContent
, BgpPolicyContentArgs

BgpPolicyContentFingerPrintRuleList
, BgpPolicyContentFingerPrintRuleListArgs

BgpPolicyContentLayer4RuleList
, BgpPolicyContentLayer4RuleListArgs

BgpPolicyContentLayer4RuleListConditionList
, BgpPolicyContentLayer4RuleListConditionListArgs

BgpPolicyContentPortRuleList
, BgpPolicyContentPortRuleListArgs

BgpPolicyContentSourceBlockList
, BgpPolicyContentSourceBlockListArgs

BgpPolicyContentSourceLimit
, BgpPolicyContentSourceLimitArgs

Import

Package Details

On this page

On this page

alicloud.ddos.BgpPolicy

On this page

On this page

Example Usage

Create BgpPolicy Resource

Constructor syntax

Parameters

Constructor example

BgpPolicy Resource Properties

Inputs

Outputs

Look up Existing BgpPolicy Resource

Supporting Types

BgpPolicyContent, BgpPolicyContentArgs

BgpPolicyContentFingerPrintRuleList, BgpPolicyContentFingerPrintRuleListArgs

BgpPolicyContentLayer4RuleList, BgpPolicyContentLayer4RuleListArgs

BgpPolicyContentLayer4RuleListConditionList, BgpPolicyContentLayer4RuleListConditionListArgs

BgpPolicyContentPortRuleList, BgpPolicyContentPortRuleListArgs

BgpPolicyContentSourceBlockList, BgpPolicyContentSourceBlockListArgs

BgpPolicyContentSourceLimit, BgpPolicyContentSourceLimitArgs

Import

Package Details

On this page

On this page

BgpPolicyContent
, BgpPolicyContentArgs

BgpPolicyContentFingerPrintRuleList
, BgpPolicyContentFingerPrintRuleListArgs

BgpPolicyContentLayer4RuleList
, BgpPolicyContentLayer4RuleListArgs

BgpPolicyContentLayer4RuleListConditionList
, BgpPolicyContentLayer4RuleListConditionListArgs

BgpPolicyContentPortRuleList
, BgpPolicyContentPortRuleListArgs

BgpPolicyContentSourceBlockList
, BgpPolicyContentSourceBlockListArgs

BgpPolicyContentSourceLimit
, BgpPolicyContentSourceLimitArgs