Struct aws_sdk_networkfirewall::model::StatefulEngineOptions

#[non_exhaustive]
pub struct StatefulEngineOptions { /* private fields */ }

Configuration settings for the handling of the stateful rule groups in a firewall policy.

Implementations

impl StatefulEngineOptions

pub fn rule_order(&self) -> Option<&RuleOrder>

Indicates how to manage the order of stateful rule evaluation for the policy. DEFAULT_ACTION_ORDER is the default behavior. Stateful rules are provided to the rule engine as Suricata compatible strings, and Suricata evaluates them based on certain settings. For more information, see Evaluation order for stateful rules in the Network Firewall Developer Guide.

pub fn stream_exception_policy(&self) -> Option<&StreamExceptionPolicy>

Configures how Network Firewall processes traffic when a network connection breaks midstream. Network connections can break due to disruptions in external networks or within the firewall itself.

• DROP - Network Firewall fails closed and drops all subsequent traffic going to the firewall. This is the default behavior.

• CONTINUE - Network Firewall continues to apply rules to the subsequent traffic without context from traffic before the break. This impacts the behavior of rules that depend on this context. For example, if you have a stateful rule to drop http traffic, Network Firewall won't match the traffic for this rule because the service won't have the context from session initialization defining the application layer protocol as HTTP. However, this behavior is rule dependent—a TCP-layer rule using a flow:stateless rule would still match, as would the aws:drop_strict default action.

impl StatefulEngineOptions

pub fn builder() -> Builder

Creates a new builder-style object to manufacture StatefulEngineOptions.

Trait Implementations

impl Clone for StatefulEngineOptions

fn clone(&self) -> StatefulEngineOptions

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StatefulEngineOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<StatefulEngineOptions> for StatefulEngineOptions

fn eq(&self, other: &StatefulEngineOptions) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for StatefulEngineOptions