Provides a VPC Traffic Mirror Filter Ingress Rule resource. Traffic mirror entry rule.
For information about VPC Traffic Mirror Filter Ingress Rule and how to use it, see What is Traffic Mirror Filter Ingress Rule.
Basic Usage
resource "alicloud_vpc_traffic_mirror_filter" "example" {
traffic_mirror_filter_name = "example_value"
}
resource "alicloud_vpc_traffic_mirror_filter_ingress_rule" "example" {
traffic_mirror_filter_id = alicloud_vpc_traffic_mirror_filter.example.id
priority = "1"
rule_action = "accept"
protocol = "UDP"
destination_cidr_block = "10.0.0.0/24"
source_cidr_block = "10.0.0.0/24"
destination_port_range = "1/120"
source_port_range = "1/120"
}
The following arguments are supported:
action
- (Optional, Available since v1.211.0) The collection policy of the inbound rule. Valid values: accept
or drop
. accept
: collects network traffic. drop
: does not collect network traffic.destination_cidr_block
- (Required) The destination CIDR block of the inbound traffic.destination_port_range
- (Optional, Computed) The destination CIDR block of the inbound traffic. Valid values: 1
to 65535
. Separate the first port and last port with a forward slash (/), for example, 1/200
or 80/80
. A value of -1/-1
indicates that all ports are available. Therefore, do not set the value to -1/-1
. NOTE: When protocol
is ICMP
, this parameter is invalid.dry_run
- (Optional) Whether to PreCheck this request only. Value:
priority
- (Required) The priority of the inbound rule. A smaller value indicates a higher priority. The maximum value is 10
, which indicates that you can configure at most 10 inbound rules for a filter.protocol
- (Required) The transport protocol used by inbound traffic that needs to be mirrored. Valid values: ALL
, ICMP
, TCP
, UDP
.source_cidr_block
- (Required) The source CIDR block of the inbound traffic.source_port_range
- (Optional, Computed) The source port range of the inbound traffic. Valid values: 1
to 65535
. Separate the first port and last port with a forward slash (/), for example, 1/200
or 80/80
. A value of -1/-1
indicates that all ports are available. Therefore, do not set the value to -1/-1
. NOTE: When protocol
is ICMP
, this parameter is invalid.traffic_mirror_filter_id
- (Required, ForceNew) The ID of the filter.The following arguments will be discarded. Please use new fields as soon as possible:
rule_action
- (Deprecated since v1.211.0). Field 'rule_action' has been deprecated from provider version 1.211.0. New field 'action' instead.The following attributes are exported:
id
- The ID of the resource supplied above.The value is formulated as <traffic_mirror_filter_id>:<traffic_mirror_filter_ingress_rule_id>
.status
- The state of the inbound rule. Creating
, Created
, Modifying
and Deleting
.traffic_mirror_filter_ingress_rule_id
- The ID of the outbound rule.The timeouts
block allows you to specify timeouts for certain actions:
create
- (Defaults to 5 mins) Used when create the Traffic Mirror Filter Ingress Rule.delete
- (Defaults to 5 mins) Used when delete the Traffic Mirror Filter Ingress Rule.update
- (Defaults to 5 mins) Used when update the Traffic Mirror Filter Ingress Rule.VPC Traffic Mirror Filter Ingress Rule can be imported using the id, e.g.
$ terraform import alicloud_vpc_traffic_mirror_filter_ingress_rule.example <traffic_mirror_filter_id>:<traffic_mirror_filter_ingress_rule_id>