Enforcement_Service_Chain_Endpoint (object)¶
Configures service chain endpoint definitions for the Policy Enforcement Manager (PEM)
Properties (* = required):
name | type(s) | default | allowed values | description |
---|---|---|---|---|
class* | string | “Enforcement_Service_Chain_Endpoint” | ||
label | string | “^[^x00-x1fx22#&*<>?x5b-x5d`x7f]*$” | Optional friendly name for this object. Allows 0-64 chars, excluding a few likely to cause trouble with string searching, JS, TCL, or HTML | |
remark | string | “^[^x00-x1fx22x5cx7f]*$” | Arbitrary (brief) text pertaining to this object. Allows 0-64 chars, excluding only control characters, double-quote, and backslash. This is permissive enough that you should worry about XSS attacks | |
serviceEndpoints | array | Specifies a list of forwarding endpoints that define where to send traffic on the way to its final destination. This way, the system can route traffic to other servers that can provide value-added services. Traffic goes to the endpoints in the order in which they are listed. |
Enforcement_Service_Chain_Endpoint_Service_Endpoint (object)¶
Configures an individual service chain endpoint
Properties (* = required):
name | type(s) | default | allowed values | description |
---|---|---|---|---|
forwardingEndpoint | object | Reference to a forwarding endpoint | ||
internalService | object | Specifies the internal ICAP virtual server,Reference to a service | ||
internalServiceICAPType | string | “request”, “response”, “both”, “none” | Specifies the ICAP adaptation type. Select “request” to send only HTTP requests to ICAP server. Select “response” to send only HTTP responses to ICAP server. Select “both” to have both requests and responses. | |
name | string | Specify the name of the service endpoint where the traffic is going to | ||
serviceOption | string | “mandatory” | “mandatory”, “optional” | Specifies the service option in case the service endpoint is not accessible through the network, for forwarding endpoint. For ICAP service endpoint, the service endpoint works as a fallback action for non-HTTP traffic. Select “optional” if you want to skip the service endpoint. Select “mandatory” if you want all traffic flows dropped. |
sourceVLAN* | object | Reference to a VLAN | ||
steeringPolicy | object | Reference to a enforcement policy |
Enforcement_Service_Chain_Endpoint_Service_Endpoint.forwardingEndpoint (object)¶
Reference to a forwarding endpoint
Properties (* = required):
name | type(s) | default | allowed values | description |
---|---|---|---|---|
bigip | string | “f5bigip” formatted string | Pathname of existing BIG-IP forwarding endpoint | |
use | string | AS3 pointer to forwarding endpoint declaration |
Enforcement_Service_Chain_Endpoint_Service_Endpoint.internalService (object)¶
Specifies the internal ICAP virtual server Reference to a service
Properties (* = required):
name | type(s) | default | allowed values | description |
---|---|---|---|---|
bigip | string | “f5bigip” formatted string | Pathname of existing BIG-IP virtual server | |
use | string | AS3 pointer to service declaration |
Enforcement_Service_Chain_Endpoint_Service_Endpoint.sourceVLAN (object)¶
Reference to a VLAN
Properties (* = required):
name | type(s) | default | allowed values | description |
---|---|---|---|---|
bigip | string | “f5bigip” formatted string | Pathname of existing BIG-IP VLAN |
Enforcement_Service_Chain_Endpoint_Service_Endpoint.steeringPolicy (object)¶
Reference to a enforcement policy
Properties (* = required):
name | type(s) | default | allowed values | description |
---|---|---|---|---|
bigip | string | “f5bigip” formatted string | Pathname of existing BIG-IP PEM policy | |
use | string | AS3 pointer to enforcement policy declaration |