F5BigCneAddresslist

Overview

Function

Declares an address list for a CNE instance, defining a reusable set of IPv4 or IPv6 addresses. An address list can also reference other address lists to build nested or aggregated lists.

Use this resource to define larger, more complex lists of IP addresses. You can then reference the address list from an F5BigDdosGlobal resource for DoS/DDoS detection and mitigation, or from an F5BigFwPolicy resource or F5BigFwRulelist resource for access control list (ACL) policies.

Note

To define a reusable set of ports, use a F5BigCnePortlist resource.

Names

Singular name	Plural name	Short name
f5-big-cne-addresslist	f5-big-cne-addresslists	—

API group and version

k8s.f5net.com/v1

Scope

Namespace

Specification

spec

Field	Required	Default	Description
addresses array	No	[]	IPv4 or IPv6 addresses in the address list. Each item is a host address, a subnet, or an address range, for example 192.0.2.10, 192.0.2.0/24, or 192.0.2.10-192.0.2.20. Each item is 2 to 79 characters.
addressLists array	No	[]	List of F5BigCneAddresslist resource names to include in this address list. Use this to build nested or aggregated address lists. Each name is up to 255 characters.

Example manifests

The following manifests create two address lists. The fw-drop-ipaddresses list includes individual IPv4 addresses and references the drop-ipaddresses-ipv6 list, which defines IPv6 addresses.

apiVersion: k8s.f5net.com/v1
kind: F5BigCneAddresslist
metadata:
  name: fw-drop-ipaddresses
  namespace: f5-bnk
spec:
  addresses:
    - "192.0.2.6"
    - "192.0.2.7"
  addressLists:
    - "drop-ipaddresses-ipv6"
---
apiVersion: k8s.f5net.com/v1
kind: F5BigCneAddresslist
metadata:
  name: drop-ipaddresses-ipv6
  namespace: f5-bnk
spec:
  addresses:
    - "2001:db8::19:10:6"
    - "2001:db8::19:10:7"