Package software.amazon.awscdk.services.networkfirewall

Class CfnFirewallPolicy.StatefulEngineOptionsProperty.Jsii$Proxy

java.lang.Object

software.amazon.jsii.JsiiObject

software.amazon.awscdk.services.networkfirewall.CfnFirewallPolicy.StatefulEngineOptionsProperty.Jsii$Proxy

All Implemented Interfaces:

CfnFirewallPolicy.StatefulEngineOptionsProperty, software.amazon.jsii.JsiiSerializable

Enclosing interface:

CfnFirewallPolicy.StatefulEngineOptionsProperty

@Stability(Stable)
@Internal
public static final class CfnFirewallPolicy.StatefulEngineOptionsProperty.Jsii$Proxy
extends software.amazon.jsii.JsiiObject
implements CfnFirewallPolicy.StatefulEngineOptionsProperty

An implementation for CfnFirewallPolicy.StatefulEngineOptionsProperty

Nested Class Summary

Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

software.amazon.jsii.JsiiObject.InitializationMode

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.networkfirewall.CfnFirewallPolicy.StatefulEngineOptionsProperty

CfnFirewallPolicy.StatefulEngineOptionsProperty.Builder, CfnFirewallPolicy.StatefulEngineOptionsProperty.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	Jsii$Proxy(CfnFirewallPolicy.StatefulEngineOptionsProperty.Builder builder)	Constructor that initializes the object based on literal property values passed by the CfnFirewallPolicy.StatefulEngineOptionsProperty.Builder.
protected	Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)	Constructor that initializes the object based on values retrieved from the JsiiObject.

Method Summary

Modifier and Type	Method	Description
com.fasterxml.jackson.databind.JsonNode	$jsii$toJson()
final boolean	equals(Object o)
final String	getRuleOrder()	Indicates how to manage the order of stateful rule evaluation for the policy.
final String	getStreamExceptionPolicy()	Configures how Network Firewall processes traffic when a network connection breaks midstream.
final int	hashCode()

Methods inherited from class software.amazon.jsii.JsiiObject

jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Jsii$Proxy

protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)

Constructor that initializes the object based on values retrieved from the JsiiObject.

Parameters:

objRef - Reference to the JSII managed object.

Jsii$Proxy

protected Jsii$Proxy(CfnFirewallPolicy.StatefulEngineOptionsProperty.Builder builder)

Constructor that initializes the object based on literal property values passed by the CfnFirewallPolicy.StatefulEngineOptionsProperty.Builder.

Method Details

getRuleOrder

public final String getRuleOrder()

Description copied from interface: CfnFirewallPolicy.StatefulEngineOptionsProperty

Indicates how to manage the order of stateful rule evaluation for the policy.

STRICT_ORDER is the default and recommended option. With STRICT_ORDER , provide your rules in the order that you want them to be evaluated. You can then choose one or more default actions for packets that don't match any rules. Choose STRICT_ORDER to have the stateful rules engine determine the evaluation order of your rules. The default action for this rule order is PASS , followed by DROP , REJECT , and ALERT actions. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on your settings. For more information, see Evaluation order for stateful rules in the AWS Network Firewall Developer Guide .

Specified by:

getRuleOrder in interface CfnFirewallPolicy.StatefulEngineOptionsProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulengineoptions.html#cfn-networkfirewall-firewallpolicy-statefulengineoptions-ruleorder

getStreamExceptionPolicy

public final String getStreamExceptionPolicy()

Description copied from interface: CfnFirewallPolicy.StatefulEngineOptionsProperty

Configures how Network Firewall processes traffic when a network connection breaks midstream.

Network connections can break due to disruptions in external networks or within the firewall itself.

• DROP - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior.
• CONTINUE - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to drop http traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a flow:stateless rule would still match, as would the aws:drop_strict default action.
• REJECT - Network Firewall fails closed and drops all subsequent traffic going to the firewall. Network Firewall also sends a TCP reject packet back to your client so that the client can immediately establish a new session. Network Firewall will have context about the new session and will apply rules to the subsequent traffic.

Specified by:

getStreamExceptionPolicy in interface CfnFirewallPolicy.StatefulEngineOptionsProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-statefulengineoptions.html#cfn-networkfirewall-firewallpolicy-statefulengineoptions-streamexceptionpolicy

$jsii$toJson

@Internal
public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()

Specified by:

$jsii$toJson in interface software.amazon.jsii.JsiiSerializable

equals

public final boolean equals(Object o)

Overrides:

equals in class Object

hashCode

public final int hashCode()

Overrides:

hashCode in class Object