mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-17 22:36:52 +00:00
101 lines
4 KiB
Text
101 lines
4 KiB
Text
NAME
|
|
gcloud compute network-firewall-policies mirroring-rules update - updates a
|
|
Compute Engine network firewall policy packet mirroring rule
|
|
|
|
SYNOPSIS
|
|
gcloud compute network-firewall-policies mirroring-rules update PRIORITY
|
|
--firewall-policy=FIREWALL_POLICY --global-firewall-policy
|
|
[--action=ACTION] [--description=DESCRIPTION]
|
|
[--dest-ip-ranges=[DEST_IP_RANGE,...]] [--direction=DIRECTION]
|
|
[--[no-]disabled] [--layer4-configs=[LAYER4_CONFIG,...]]
|
|
[--new-priority=NEW_PRIORITY]
|
|
[--security-profile-group=SECURITY_PROFILE_GROUP]
|
|
[--src-ip-ranges=[SRC_IP_RANGE,...]]
|
|
[--target-secure-tags=[TARGET_SECURE_TAGS,...]] [GCLOUD_WIDE_FLAG ...]
|
|
|
|
DESCRIPTION
|
|
gcloud compute network-firewall-policies mirroring-rules update is used to
|
|
update network firewall policy packet mirroring rules.
|
|
|
|
EXAMPLES
|
|
To update a rule with priority 10 in a global network firewall policy with
|
|
name my-policy to change the action to mirror and description to new
|
|
example rule, run:
|
|
|
|
$ gcloud compute network-firewall-policies mirroring-rules update \
|
|
10 --firewall-policy=my-policy --action=mirror \
|
|
--description="new example rule"
|
|
|
|
POSITIONAL ARGUMENTS
|
|
PRIORITY
|
|
Priority of the rule to be updated. Valid in [0, 65535].
|
|
|
|
REQUIRED FLAGS
|
|
--firewall-policy=FIREWALL_POLICY
|
|
Firewall policy ID with which to update rule.
|
|
|
|
--global-firewall-policy
|
|
Use this flag to indicate that firewall policy is global.
|
|
|
|
OPTIONAL FLAGS
|
|
--action=ACTION
|
|
Action to take if the request matches the match condition. ACTION must
|
|
be one of: mirror, do_not_mirror, goto_next.
|
|
|
|
--description=DESCRIPTION
|
|
An optional, textual description for the rule.
|
|
|
|
--dest-ip-ranges=[DEST_IP_RANGE,...]
|
|
Destination IP ranges to match for this rule.
|
|
|
|
--direction=DIRECTION
|
|
Direction of the traffic the rule is applied. The default is to apply
|
|
on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS.
|
|
|
|
--[no-]disabled
|
|
Use this flag to disable the rule. Disabled rules will not affect
|
|
traffic. Use --disabled to enable and --no-disabled to disable.
|
|
|
|
--layer4-configs=[LAYER4_CONFIG,...]
|
|
A list of destination protocols and ports to which the firewall rule
|
|
will apply.
|
|
|
|
--new-priority=NEW_PRIORITY
|
|
New priority for the rule to update. Valid in [0, 65535].
|
|
|
|
--security-profile-group=SECURITY_PROFILE_GROUP
|
|
A security profile group to be used with mirror action.
|
|
|
|
--src-ip-ranges=[SRC_IP_RANGE,...]
|
|
A list of IP address blocks that are allowed to make inbound
|
|
connections that match the firewall rule to the instances on the
|
|
network. The IP address blocks must be specified in CIDR format:
|
|
http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing.Either
|
|
--src-ip-ranges or --src-secure-tags must be specified for INGRESS
|
|
traffic. If both --src-ip-ranges and --src-secure-tags are specified,
|
|
the rule matches if either the range of the source matches
|
|
--src-ip-ranges or the secure tag of the source matches
|
|
--src-secure-tags.Multiple IP address blocks can be specified if they
|
|
are separated by commas.
|
|
|
|
--target-secure-tags=[TARGET_SECURE_TAGS,...]
|
|
An optional, list of target secure tags with a name of the format
|
|
tagValues/ or full namespaced name
|
|
|
|
GCLOUD WIDE FLAGS
|
|
These flags are available to all commands: --access-token-file, --account,
|
|
--billing-project, --configuration, --flags-file, --flatten, --format,
|
|
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
|
--trace-token, --user-output-enabled, --verbosity.
|
|
|
|
Run $ gcloud help for details.
|
|
|
|
NOTES
|
|
These variants are also available:
|
|
|
|
$ gcloud alpha compute network-firewall-policies mirroring-rules \
|
|
update
|
|
|
|
$ gcloud beta compute network-firewall-policies mirroring-rules \
|
|
update
|
|
|