Class CfnRuleGroup.TCPFlagFieldProperty
TCP flags and masks to inspect packets for. This is used in the RuleGroup.MatchAttributes
specification.
Inheritance
Implements
Namespace: Amazon.CDK.AWS.NetworkFirewall
Assembly: Amazon.CDK.Lib.dll
Syntax (csharp)
public class TCPFlagFieldProperty : Object, CfnRuleGroup.ITCPFlagFieldProperty
Syntax (vb)
Public Class TCPFlagFieldProperty
Inherits Object
Implements CfnRuleGroup.ITCPFlagFieldProperty
Remarks
For example:
"TCPFlags": [ { "Flags": [ "ECE", "SYN" ], "Masks": [ "SYN", "ECE" ] } ]
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.NetworkFirewall;
var tCPFlagFieldProperty = new TCPFlagFieldProperty {
Flags = new [] { "flags" },
// the properties below are optional
Masks = new [] { "masks" }
};
Synopsis
Constructors
TCPFlagFieldProperty() |
Properties
Flags | Used in conjunction with the |
Masks | The set of flags to consider in the inspection. |
Constructors
TCPFlagFieldProperty()
public TCPFlagFieldProperty()
Properties
Flags
Used in conjunction with the Masks
setting to define the flags that must be set and flags that must not be set in order for the packet to match.
public string[] Flags { get; set; }
Property Value
System.String[]
Remarks
This setting can only specify values that are also specified in the Masks
setting.
For the flags that are specified in the masks setting, the following must be true for the packet to match:
Masks
The set of flags to consider in the inspection.
public string[] Masks { get; set; }
Property Value
System.String[]
Remarks
To inspect all flags in the valid values list, leave this with no setting.