Struct aws_sdk_networkfirewall::model::StatefulRule
source · [−]#[non_exhaustive]pub struct StatefulRule {
pub action: Option<StatefulAction>,
pub header: Option<Header>,
pub rule_options: Option<Vec<RuleOption>>,
}
Expand description
A single Suricata rules specification, for use in a stateful rule group. Use this option to specify a simple Suricata rule with protocol, source and destination, ports, direction, and rule options. For information about the Suricata Rules
format, see Rules Format.
Fields (Non-exhaustive)
This struct is marked as non-exhaustive
Struct { .. }
syntax; cannot be matched against without a wildcard ..
; and struct update syntax will not work.action: Option<StatefulAction>
Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
The actions for a stateful rule are defined as follows:
-
PASS - Permits the packets to go to the intended destination.
-
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the
Firewall
LoggingConfiguration
. -
ALERT - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the
Firewall
LoggingConfiguration
.You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with
ALERT
action, verify in the logs that the rule is filtering as you want, then change the action toDROP
.
header: Option<Header>
The stateful inspection criteria for this rule, used to inspect traffic flows.
rule_options: Option<Vec<RuleOption>>
Additional options for the rule. These are the Suricata RuleOptions
settings.
Implementations
sourceimpl StatefulRule
impl StatefulRule
sourcepub fn action(&self) -> Option<&StatefulAction>
pub fn action(&self) -> Option<&StatefulAction>
Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
The actions for a stateful rule are defined as follows:
-
PASS - Permits the packets to go to the intended destination.
-
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the
Firewall
LoggingConfiguration
. -
ALERT - Permits the packets to go to the intended destination and sends an alert log message, if alert logging is configured in the
Firewall
LoggingConfiguration
.You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with
ALERT
action, verify in the logs that the rule is filtering as you want, then change the action toDROP
.
sourcepub fn header(&self) -> Option<&Header>
pub fn header(&self) -> Option<&Header>
The stateful inspection criteria for this rule, used to inspect traffic flows.
sourcepub fn rule_options(&self) -> Option<&[RuleOption]>
pub fn rule_options(&self) -> Option<&[RuleOption]>
Additional options for the rule. These are the Suricata RuleOptions
settings.
sourceimpl StatefulRule
impl StatefulRule
sourcepub fn builder() -> Builder
pub fn builder() -> Builder
Creates a new builder-style object to manufacture StatefulRule
Trait Implementations
sourceimpl Clone for StatefulRule
impl Clone for StatefulRule
sourcefn clone(&self) -> StatefulRule
fn clone(&self) -> StatefulRule
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl Debug for StatefulRule
impl Debug for StatefulRule
sourceimpl PartialEq<StatefulRule> for StatefulRule
impl PartialEq<StatefulRule> for StatefulRule
sourcefn eq(&self, other: &StatefulRule) -> bool
fn eq(&self, other: &StatefulRule) -> bool
This method tests for self
and other
values to be equal, and is used
by ==
. Read more
sourcefn ne(&self, other: &StatefulRule) -> bool
fn ne(&self, other: &StatefulRule) -> bool
This method tests for !=
.
impl StructuralPartialEq for StatefulRule
Auto Trait Implementations
impl RefUnwindSafe for StatefulRule
impl Send for StatefulRule
impl Sync for StatefulRule
impl Unpin for StatefulRule
impl UnwindSafe for StatefulRule
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcefn clone_into(&self, target: &mut T)
fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber
to this type, returning a
WithDispatch
wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber
to this type, returning a
WithDispatch
wrapper. Read more