Struct rusoto_ec2::VpnTunnelOptionsSpecification
source · [−]pub struct VpnTunnelOptionsSpecification {Show 18 fields
pub dpd_timeout_action: Option<String>,
pub dpd_timeout_seconds: Option<i64>,
pub ike_versions: Option<Vec<IKEVersionsRequestListValue>>,
pub phase_1dh_group_numbers: Option<Vec<Phase1DHGroupNumbersRequestListValue>>,
pub phase_1_encryption_algorithms: Option<Vec<Phase1EncryptionAlgorithmsRequestListValue>>,
pub phase_1_integrity_algorithms: Option<Vec<Phase1IntegrityAlgorithmsRequestListValue>>,
pub phase_1_lifetime_seconds: Option<i64>,
pub phase_2dh_group_numbers: Option<Vec<Phase2DHGroupNumbersRequestListValue>>,
pub phase_2_encryption_algorithms: Option<Vec<Phase2EncryptionAlgorithmsRequestListValue>>,
pub phase_2_integrity_algorithms: Option<Vec<Phase2IntegrityAlgorithmsRequestListValue>>,
pub phase_2_lifetime_seconds: Option<i64>,
pub pre_shared_key: Option<String>,
pub rekey_fuzz_percentage: Option<i64>,
pub rekey_margin_time_seconds: Option<i64>,
pub replay_window_size: Option<i64>,
pub startup_action: Option<String>,
pub tunnel_inside_cidr: Option<String>,
pub tunnel_inside_ipv_6_cidr: Option<String>,
}
Expand description
The tunnel options for a single VPN tunnel.
Fields
dpd_timeout_action: Option<String>
The action to take after DPD timeout occurs. Specify restart
to restart the IKE initiation. Specify clear
to end the IKE session.
Valid Values: clear
| none
| restart
Default: clear
dpd_timeout_seconds: Option<i64>
The number of seconds after which a DPD timeout occurs.
Constraints: A value between 0 and 30.
Default: 30
ike_versions: Option<Vec<IKEVersionsRequestListValue>>
The IKE versions that are permitted for the VPN tunnel.
Valid values: ikev1
| ikev2
phase_1dh_group_numbers: Option<Vec<Phase1DHGroupNumbersRequestListValue>>
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: 2
| 14
| 15
| 16
| 17
| 18
| 19
| 20
| 21
| 22
| 23
| 24
phase_1_encryption_algorithms: Option<Vec<Phase1EncryptionAlgorithmsRequestListValue>>
One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: AES128
| AES256
| AES128-GCM-16
| AES256-GCM-16
phase_1_integrity_algorithms: Option<Vec<Phase1IntegrityAlgorithmsRequestListValue>>
One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
Valid values: SHA1
| SHA2-256
| SHA2-384
| SHA2-512
phase_1_lifetime_seconds: Option<i64>
The lifetime for phase 1 of the IKE negotiation, in seconds.
Constraints: A value between 900 and 28,800.
Default: 28800
phase_2dh_group_numbers: Option<Vec<Phase2DHGroupNumbersRequestListValue>>
One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: 2
| 5
| 14
| 15
| 16
| 17
| 18
| 19
| 20
| 21
| 22
| 23
| 24
phase_2_encryption_algorithms: Option<Vec<Phase2EncryptionAlgorithmsRequestListValue>>
One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: AES128
| AES256
| AES128-GCM-16
| AES256-GCM-16
phase_2_integrity_algorithms: Option<Vec<Phase2IntegrityAlgorithmsRequestListValue>>
One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
Valid values: SHA1
| SHA2-256
| SHA2-384
| SHA2-512
phase_2_lifetime_seconds: Option<i64>
The lifetime for phase 2 of the IKE negotiation, in seconds.
Constraints: A value between 900 and 3,600. The value must be less than the value for Phase1LifetimeSeconds
.
Default: 3600
The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.
Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).
rekey_fuzz_percentage: Option<i64>
The percentage of the rekey window (determined by RekeyMarginTimeSeconds
) during which the rekey time is randomly selected.
Constraints: A value between 0 and 100.
Default: 100
rekey_margin_time_seconds: Option<i64>
The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for RekeyFuzzPercentage
.
Constraints: A value between 60 and half of Phase2LifetimeSeconds
.
Default: 540
replay_window_size: Option<i64>
The number of packets in an IKE replay window.
Constraints: A value between 64 and 2048.
Default: 1024
startup_action: Option<String>
The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify start
for AWS to initiate the IKE negotiation.
Valid Values: add
| start
Default: add
tunnel_inside_cidr: Option<String>
The range of inside IPv4 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.
Constraints: A size /30 CIDR block from the 169.254.0.0/16
range. The following CIDR blocks are reserved and cannot be used:
-
169.254.0.0/30
-
169.254.1.0/30
-
169.254.2.0/30
-
169.254.3.0/30
-
169.254.4.0/30
-
169.254.5.0/30
-
169.254.169.252/30
tunnel_inside_ipv_6_cidr: Option<String>
The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.
Constraints: A size /126 CIDR block from the local fd00::/8
range.
Trait Implementations
sourceimpl Clone for VpnTunnelOptionsSpecification
impl Clone for VpnTunnelOptionsSpecification
sourcefn clone(&self) -> VpnTunnelOptionsSpecification
fn clone(&self) -> VpnTunnelOptionsSpecification
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl Debug for VpnTunnelOptionsSpecification
impl Debug for VpnTunnelOptionsSpecification
sourceimpl Default for VpnTunnelOptionsSpecification
impl Default for VpnTunnelOptionsSpecification
sourcefn default() -> VpnTunnelOptionsSpecification
fn default() -> VpnTunnelOptionsSpecification
Returns the “default value” for a type. Read more
sourceimpl PartialEq<VpnTunnelOptionsSpecification> for VpnTunnelOptionsSpecification
impl PartialEq<VpnTunnelOptionsSpecification> for VpnTunnelOptionsSpecification
sourcefn eq(&self, other: &VpnTunnelOptionsSpecification) -> bool
fn eq(&self, other: &VpnTunnelOptionsSpecification) -> bool
This method tests for self
and other
values to be equal, and is used
by ==
. Read more
sourcefn ne(&self, other: &VpnTunnelOptionsSpecification) -> bool
fn ne(&self, other: &VpnTunnelOptionsSpecification) -> bool
This method tests for !=
.
impl StructuralPartialEq for VpnTunnelOptionsSpecification
Auto Trait Implementations
impl RefUnwindSafe for VpnTunnelOptionsSpecification
impl Send for VpnTunnelOptionsSpecification
impl Sync for VpnTunnelOptionsSpecification
impl Unpin for VpnTunnelOptionsSpecification
impl UnwindSafe for VpnTunnelOptionsSpecification
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcefn clone_into(&self, target: &mut T)
fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber
to this type, returning a
WithDispatch
wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber
to this type, returning a
WithDispatch
wrapper. Read more