Amazonka.NetworkFirewall.Types.Header

Documentation

data Header

The basic rule criteria for Network Firewall to use to inspect packet headers in stateful traffic flow inspection. Traffic flows that match the criteria are a match for the corresponding StatefulRule.

See: newHeader smart constructor.

Constructors

Header'

Fields

• protocol :: StatefulRuleProtocol

  The protocol to inspect for. To specify all, you can use IP, because all traffic on Amazon Web Services and on the internet is IP.

• source :: Text

  The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY.

  Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

  Examples:

  • To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32.
  • To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.

  For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing.

• sourcePort :: Text

  The source port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.

• direction :: StatefulRuleDirection

  The direction of traffic flow to inspect. If set to ANY, the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to FORWARD, the inspection only matches traffic going from the source to the destination.

• destination :: Text

  The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY.

  Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

  Examples:

  • To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32.
  • To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.

  For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing.

• destinationPort :: Text

  The destination port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.

Instances

FromJSON Header

Defined in Amazonka.NetworkFirewall.Types.Header

Methods

parseJSON :: Value -> Parser Header

parseJSONList :: Value -> Parser [Header]

ToJSON Header

Defined in Amazonka.NetworkFirewall.Types.Header

Methods

toJSON :: Header -> Value

toEncoding :: Header -> Encoding

toJSONList :: [Header] -> Value

toEncodingList :: [Header] -> Encoding

Generic Header

Defined in Amazonka.NetworkFirewall.Types.Header

Associated Types

type Rep Header :: Type -> Type

Methods

from :: Header -> Rep Header x

to :: Rep Header x -> Header

Read Header

Defined in Amazonka.NetworkFirewall.Types.Header

Methods

readsPrec :: Int -> ReadS Header

readList :: ReadS [Header]

readPrec :: ReadPrec Header

readListPrec :: ReadPrec [Header]

Show Header

Defined in Amazonka.NetworkFirewall.Types.Header

Methods

showsPrec :: Int -> Header -> ShowS

show :: Header -> String

showList :: [Header] -> ShowS

NFData Header

Defined in Amazonka.NetworkFirewall.Types.Header

Methods

rnf :: Header -> ()

Eq Header

Defined in Amazonka.NetworkFirewall.Types.Header

Methods

(==) :: Header -> Header -> Bool

(/=) :: Header -> Header -> Bool

Hashable Header

Defined in Amazonka.NetworkFirewall.Types.Header

Methods

hashWithSalt :: Int -> Header -> Int

hash :: Header -> Int

type Rep Header

Defined in Amazonka.NetworkFirewall.Types.Header

type Rep Header = D1 ('MetaData "Header" "Amazonka.NetworkFirewall.Types.Header" "amazonka-network-firewall-2.0-4y6HybZBSNcEwGPO5AYVfm" 'False) (C1 ('MetaCons "Header'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "protocol") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 StatefulRuleProtocol) :*: (S1 ('MetaSel ('Just "source") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "sourcePort") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))) :*: (S1 ('MetaSel ('Just "direction") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 StatefulRuleDirection) :*: (S1 ('MetaSel ('Just "destination") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "destinationPort") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))

newHeader

Arguments

:: StatefulRuleProtocol

$sel:protocol:Header'

-> Text

$sel:source:Header'

-> Text

$sel:sourcePort:Header'

-> StatefulRuleDirection

$sel:direction:Header'

-> Text

$sel:destination:Header'

-> Text

$sel:destinationPort:Header'

-> Header

Create a value of Header with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:protocol:Header', header_protocol - The protocol to inspect for. To specify all, you can use IP, because all traffic on Amazon Web Services and on the internet is IP.

$sel:source:Header', header_source - The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY.

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

Examples:

• To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32.
• To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.

For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing.

$sel:sourcePort:Header', header_sourcePort - The source port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.

$sel:direction:Header', header_direction - The direction of traffic flow to inspect. If set to ANY, the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to FORWARD, the inspection only matches traffic going from the source to the destination.

$sel:destination:Header', header_destination - The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY.

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

Examples:

• To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32.
• To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.

For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing.

$sel:destinationPort:Header', header_destinationPort - The destination port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.

header_protocol :: Lens' Header StatefulRuleProtocol

The protocol to inspect for. To specify all, you can use IP, because all traffic on Amazon Web Services and on the internet is IP.

header_source :: Lens' Header Text

The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY.

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

Examples:

• To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32.
• To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.

For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing.

header_sourcePort :: Lens' Header Text

The source port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.

header_direction :: Lens' Header StatefulRuleDirection

The direction of traffic flow to inspect. If set to ANY, the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to FORWARD, the inspection only matches traffic going from the source to the destination.

header_destination :: Lens' Header Text

The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY.

Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4.

Examples:

• To configure Network Firewall to inspect for the IP address 192.0.2.44, specify 192.0.2.44/32.
• To configure Network Firewall to inspect for IP addresses from 192.0.2.0 to 192.0.2.255, specify 192.0.2.0/24.

For more information about CIDR notation, see the Wikipedia entry Classless Inter-Domain Routing.

header_destinationPort :: Lens' Header Text

The destination port to inspect for. You can specify an individual port, for example 1994 and you can specify a port range, for example 1990:1994. To match with any port, specify ANY.