Struct aws_sdk_networkfirewall::model::MatchAttributes

#[non_exhaustive]
pub struct MatchAttributes {
    pub sources: Option<Vec<Address>>,
    pub destinations: Option<Vec<Address>>,
    pub source_ports: Option<Vec<PortRange>>,
    pub destination_ports: Option<Vec<PortRange>>,
    pub protocols: Option<Vec<i32>>,
    pub tcp_flags: Option<Vec<TcpFlagField>>,
}

Criteria for Network Firewall to use to inspect an individual packet in stateless rule inspection. Each match attributes set can include one or more items such as IP address, CIDR range, port number, protocol, and TCP flags.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

sources: Option<Vec<Address>>

The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address.

destinations: Option<Vec<Address>>

The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address.

source_ports: Option<Vec<PortRange>>

The source ports to inspect for. If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).

You can specify individual ports, for example 1994 and you can specify port ranges, for example 1990:1994.

destination_ports: Option<Vec<PortRange>>

The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).

You can specify individual ports, for example 1994 and you can specify port ranges, for example 1990:1994.

protocols: Option<Vec<i32>>

The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.

tcp_flags: Option<Vec<TcpFlagField>>

The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP).

Implementations

impl MatchAttributes

pub fn sources(&self) -> Option<&[Address]>

The source IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any source address.

pub fn destinations(&self) -> Option<&[Address]>

The destination IP addresses and address ranges to inspect for, in CIDR notation. If not specified, this matches with any destination address.

pub fn source_ports(&self) -> Option<&[PortRange]>

The source ports to inspect for. If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).

You can specify individual ports, for example 1994 and you can specify port ranges, for example 1990:1994.

pub fn destination_ports(&self) -> Option<&[PortRange]>

The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).

You can specify individual ports, for example 1994 and you can specify port ranges, for example 1990:1994.

pub fn protocols(&self) -> Option<&[i32]>

The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.

pub fn tcp_flags(&self) -> Option<&[TcpFlagField]>

The TCP flags and masks to inspect for. If not specified, this matches with any settings. This setting is only used for protocol 6 (TCP).

impl MatchAttributes

pub fn builder() -> Builder

Creates a new builder-style object to manufacture MatchAttributes

Trait Implementations

impl Clone for MatchAttributes

fn clone(&self) -> MatchAttributes

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MatchAttributes

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<MatchAttributes> for MatchAttributes

fn eq(&self, other: &MatchAttributes) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &MatchAttributes) -> bool

This method tests for !=.

impl StructuralPartialEq for MatchAttributes