imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 14:56:05 +00:00
Code Activity

gcloud: Thu Apr 6 10:23:36 UTC 2023

Browse source
This commit is contained in:
Automated 2023-04-06 10:23:36 +00:00
parent 5fabf24be7
commit 32e56b8b99
209 changed files with 5396 additions and 561 deletions
Download patch file Download diff file Expand all files Collapse all files

49
gcloud/alpha/compute/security-policies/rules/create
View file

@ -5,7 +5,15 @@ NAME
SYNOPSIS
gcloud alpha compute security-policies rules create PRIORITY
--action=ACTION
(--expression=EXPRESSION | --src-ip-ranges=[SRC_IP_RANGE,...])
(--expression=EXPRESSION --network-dest-ip-ranges=[DEST_IP_RANGE,...]
--network-dest-ports=[DEST_PORT,...]
--network-ip-protocols=[IP_PROTOCOL,...]
--network-src-asns=[SRC_ASN,...]
--network-src-ip-ranges=[SRC_IP_RANGE,...]
--network-src-ports=[SRC_PORT,...]
--network-src-region-codes=[SRC_REGION_CODE,...]
--network-user-defined-fields=[NAME;VALUE:VALUE:...,...]
--src-ip-ranges=[SRC_IP_RANGE,...])
[--ban-duration-sec=BAN_DURATION_SEC]
[--ban-threshold-count=BAN_THRESHOLD_COUNT]
[--ban-threshold-interval-sec=BAN_THRESHOLD_INTERVAL_SEC]
@ -81,11 +89,48 @@ REQUIRED FLAGS
Security policy rule matcher.
Exactly one of these must be specified:
At least one of these must be specified:
--expression=EXPRESSION
The Cloud Armor rules language expression to match for this rule.
--network-dest-ip-ranges=[DEST_IP_RANGE,...]
The destination IPs/IP ranges to match for this rule. To match all
IPs specify *.
--network-dest-ports=[DEST_PORT,...]
The destination ports to match for this rule. Each element can be an
16-bit unsigned decimal number (e.g. "80") or range (e.g."0-1023"),
To match all destination ports specify *.
--network-ip-protocols=[IP_PROTOCOL,...]
The IP protocols to match for this rule. Each element can be an 8-bit
unsigned decimal number (e.g. "6"), range (e.g."253-254"), or one of
the following protocol names: "tcp", "udp", "icmp", "esp", "ah",
"ipip", or "sctp". To match all protocols specify *.
--network-src-asns=[SRC_ASN,...]
BGP Autonomous System Number associated with the source IP address to
match for this rule.
--network-src-ip-ranges=[SRC_IP_RANGE,...]
The source IPs/IP ranges to match for this rule. To match all IPs
specify *.
--network-src-ports=[SRC_PORT,...]
The source ports to match for this rule. Each element can be an
16-bit unsigned decimal number (e.g. "80") or range (e.g."0-1023"),
To match all source ports specify *.
--network-src-region-codes=[SRC_REGION_CODE,...]
The two letter ISO 3166-1 alpha-2 country code associated with the
source IP address to match for this rule. To match all region codes
specify *.
--network-user-defined-fields=[NAME;VALUE:VALUE:...,...]
Each element names a defined field and lists the matching values for
that field.
--src-ip-ranges=[SRC_IP_RANGE,...]
The source IPs/IP ranges to match for this rule. To match all IPs
specify *.