public sealed class TlsInspectionPolicy : IMessage<TlsInspectionPolicy>, IEquatable<TlsInspectionPolicy>, IDeepCloneable<TlsInspectionPolicy>, IBufferMessage, IMessageReference documentation and code samples for the Network Security v1 API class TlsInspectionPolicy.
The TlsInspectionPolicy resource contains references to CA pools in Certificate Authority Service and associated metadata.
Implements
IMessageTlsInspectionPolicy, IEquatableTlsInspectionPolicy, IDeepCloneableTlsInspectionPolicy, IBufferMessage, IMessageNamespace
Google.Cloud.NetworkSecurity.V1Assembly
Google.Cloud.NetworkSecurity.V1.dll
Constructors
TlsInspectionPolicy()
public TlsInspectionPolicy()TlsInspectionPolicy(TlsInspectionPolicy)
public TlsInspectionPolicy(TlsInspectionPolicy other)| Parameter | |
|---|---|
| Name | Description |
other |
TlsInspectionPolicy |
Properties
CaPool
public string CaPool { get; set; }Required. A CA pool resource used to issue interception certificates. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".
| Property Value | |
|---|---|
| Type | Description |
string |
|
CaPoolAsCaPoolName
public CaPoolName CaPoolAsCaPoolName { get; set; }CaPoolName-typed view over the CaPool resource name property.
| Property Value | |
|---|---|
| Type | Description |
CaPoolName |
|
CreateTime
public Timestamp CreateTime { get; set; }Output only. The timestamp when the resource was created.
| Property Value | |
|---|---|
| Type | Description |
Timestamp |
|
CustomTlsFeatures
public RepeatedField<string> CustomTlsFeatures { get; }Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldstring |
|
Description
public string Description { get; set; }Optional. Free-text description of the resource.
| Property Value | |
|---|---|
| Type | Description |
string |
|
ExcludePublicCaSet
public bool ExcludePublicCaSet { get; set; }Optional. If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config. These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is not recommended unless the traffic in question is outbound to public web servers. When possible, prefer setting this to "false" and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this field.
| Property Value | |
|---|---|
| Type | Description |
bool |
|
HasExcludePublicCaSet
public bool HasExcludePublicCaSet { get; }Gets whether the "exclude_public_ca_set" field is set
| Property Value | |
|---|---|
| Type | Description |
bool |
|
MinTlsVersion
public TlsInspectionPolicy.Types.TlsVersion MinTlsVersion { get; set; }Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.
| Property Value | |
|---|---|
| Type | Description |
TlsInspectionPolicyTypesTlsVersion |
|
Name
public string Name { get; set; }Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the pattern:(^a-z?$).
| Property Value | |
|---|---|
| Type | Description |
string |
|
TlsFeatureProfile
public TlsInspectionPolicy.Types.Profile TlsFeatureProfile { get; set; }Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.
| Property Value | |
|---|---|
| Type | Description |
TlsInspectionPolicyTypesProfile |
|
TlsInspectionPolicyName
public TlsInspectionPolicyName TlsInspectionPolicyName { get; set; }TlsInspectionPolicyName-typed view over the Name resource name property.
| Property Value | |
|---|---|
| Type | Description |
TlsInspectionPolicyName |
|
TrustConfig
public string TrustConfig { get; set; }Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Note that Secure Web Proxy does not yet honor this field.
| Property Value | |
|---|---|
| Type | Description |
string |
|
TrustConfigAsTrustConfigName
public TrustConfigName TrustConfigAsTrustConfigName { get; set; }TrustConfigName-typed view over the TrustConfig resource name property.
| Property Value | |
|---|---|
| Type | Description |
TrustConfigName |
|
UpdateTime
public Timestamp UpdateTime { get; set; }Output only. The timestamp when the resource was updated.
| Property Value | |
|---|---|
| Type | Description |
Timestamp |
|