Package software.amazon.awscdk.services.elasticloadbalancingv2

Enum DesyncMitigationMode

java.lang.Object
java.lang.Enum<DesyncMitigationMode>
software.amazon.awscdk.services.elasticloadbalancingv2.DesyncMitigationMode
All Implemented Interfaces:
Serializable, Comparable<DesyncMitigationMode>, java.lang.constant.Constable
@Generated(value="jsii-pacmak/1.102.0 (build e354887)", date="2024-09-10T01:10:09.430Z") @Stability(Stable) public enum DesyncMitigationMode extends Enum<DesyncMitigationMode>
How the load balancer handles requests that might pose a security risk to your application.

Example: 

 Vpc vpc;
 ApplicationLoadBalancer lb = ApplicationLoadBalancer.Builder.create(this, "LB")
         .vpc(vpc)
         .internetFacing(true)
         // Whether HTTP/2 is enabled
         .http2Enabled(false)
         // The idle timeout value, in seconds
         .idleTimeout(Duration.seconds(1000))
         // Whether HTTP headers with header fields thatare not valid
         // are removed by the load balancer (true), or routed to targets
         .dropInvalidHeaderFields(true)
         // How the load balancer handles requests that might
         // pose a security risk to your application
         .desyncMitigationMode(DesyncMitigationMode.DEFENSIVE)
         // The type of IP addresses to use.
         .ipAddressType(IpAddressType.IPV4)
         // The duration of client keep-alive connections
         .clientKeepAlive(Duration.seconds(500))
         // Whether cross-zone load balancing is enabled.
         .crossZoneEnabled(true)
         // Whether the load balancer blocks traffic through the Internet Gateway (IGW).
         .denyAllIgwTraffic(false)
         // Whether to preserve host header in the request to the target
         .preserveHostHeader(true)
         // Whether to add the TLS information header to the request
         .xAmznTlsVersionAndCipherSuiteHeaders(true)
         // Whether the X-Forwarded-For header should preserve the source port
         .preserveXffClientPort(true)
         // The processing mode for X-Forwarded-For headers
         .xffHeaderProcessingMode(XffHeaderProcessingMode.APPEND)
         // Whether to allow a load balancer to route requests to targets if it is unable to forward the request to AWS WAF.
         .wafFailOpen(true)
         .build();

See Also:

  • Enum Constant Details

    • MONITOR

      @Stability(Stable) public static final DesyncMitigationMode MONITOR
      Allows all traffic.

    • DEFENSIVE

      @Stability(Stable) public static final DesyncMitigationMode DEFENSIVE
      Provides durable mitigation against HTTP desync while maintaining the availability of your application.

    • STRICTEST

      @Stability(Stable) public static final DesyncMitigationMode STRICTEST
      Receives only requests that comply with RFC 7230.

  • Method Details

    • values

      public static DesyncMitigationMode[] values()
      Returns an array containing the constants of this enum type, in the order they are declared.
      Returns:
      an array containing the constants of this enum type, in the order they are declared

    • valueOf

      public static DesyncMitigationMode valueOf(String name)
      Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)
      Parameters:
      name - the name of the enum constant to be returned.
      Returns:
      the enum constant with the specified name
      Throws:
      IllegalArgumentException - if this enum type has no constant with the specified name
      NullPointerException - if the argument is null