Enforcement_Service_Chain_Endpoint (object)

Configures service chain endpoint definitions for the Policy Enforcement Manager (PEM)

Properties (* = required):

name type(s) default allowed values description
class* string   “Enforcement_Service_Chain_Endpoint”  
label string   “^[^x00-x1fx22#&*<>?x5b-x5d`x7f]*$” Optional friendly name for this object. Allows 0-64 chars, excluding a few likely to cause trouble with string searching, JS, TCL, or HTML
remark string   “^[^x00-x1fx22x5cx7f]*$” Arbitrary (brief) text pertaining to this object. Allows 0-64 chars, excluding only control characters, double-quote, and backslash. This is permissive enough that you should worry about XSS attacks
serviceEndpoints array     Specifies a list of forwarding endpoints that define where to send traffic on the way to its final destination. This way, the system can route traffic to other servers that can provide value-added services. Traffic goes to the endpoints in the order in which they are listed.

Enforcement_Service_Chain_Endpoint_Service_Endpoint (object)

Configures an individual service chain endpoint

Properties (* = required):

name type(s) default allowed values description
forwardingEndpoint object     Reference to a forwarding endpoint
internalService object     Specifies the internal ICAP virtual server,Reference to a service
internalServiceICAPType string   “request”, “response”, “both”, “none” Specifies the ICAP adaptation type. Select “request” to send only HTTP requests to ICAP server. Select “response” to send only HTTP responses to ICAP server. Select “both” to have both requests and responses.
name string     Specify the name of the service endpoint where the traffic is going to
serviceOption string “mandatory” “mandatory”, “optional” Specifies the service option in case the service endpoint is not accessible through the network, for forwarding endpoint. For ICAP service endpoint, the service endpoint works as a fallback action for non-HTTP traffic. Select “optional” if you want to skip the service endpoint. Select “mandatory” if you want all traffic flows dropped.
sourceVLAN* object     Reference to a VLAN
steeringPolicy object     Reference to a enforcement policy

Enforcement_Service_Chain_Endpoint_Service_Endpoint.forwardingEndpoint (object)

Reference to a forwarding endpoint

Properties (* = required):

name type(s) default allowed values description
bigip string   “f5bigip” formatted string Pathname of existing BIG-IP forwarding endpoint
use string     AS3 pointer to forwarding endpoint declaration

Enforcement_Service_Chain_Endpoint_Service_Endpoint.internalService (object)

Specifies the internal ICAP virtual server Reference to a service

Properties (* = required):

name type(s) default allowed values description
bigip string   “f5bigip” formatted string Pathname of existing BIG-IP virtual server
use string     AS3 pointer to service declaration

Enforcement_Service_Chain_Endpoint_Service_Endpoint.sourceVLAN (object)

Reference to a VLAN

Properties (* = required):

name type(s) default allowed values description
bigip string   “f5bigip” formatted string Pathname of existing BIG-IP VLAN

Enforcement_Service_Chain_Endpoint_Service_Endpoint.steeringPolicy (object)

Reference to a enforcement policy

Properties (* = required):

name type(s) default allowed values description
bigip string   “f5bigip” formatted string Pathname of existing BIG-IP PEM policy
use string     AS3 pointer to enforcement policy declaration