gcloud beta compute network-policies traffic-classification-rules create

NAME: gcloud beta compute network-policies traffic-classification-rules create - creates a Compute Engine network policy rule
SYNOPSIS: gcloud beta compute network-policies traffic-classification-rules create --action=ACTION --dest-ip-ranges=[DEST_IP_RANGE,…] --dscp-mode=DSCP_MODE --layer4-configs=[LAYER4_CONFIG,…] --network-policy=NETWORK_POLICY --priority=PRIORITY --traffic-class=TRAFFIC_CLASS [--description=DESCRIPTION] [--[no-]disabled] [--dscp-value=DSCP_VALUE] [--name=NAME] [--network-policy-region=NETWORK_POLICY_REGION] [--src-ip-ranges=[SRC_IP_RANGE,…]] [--target-secure-tags=[TARGET_SECURE_TAGS,…]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,…]] [GCLOUD_WIDE_FLAG …]
DESCRIPTION: (BETA) gcloud beta compute network-policies traffic-classification-rules create is used to create network policy rules.
EXAMPLES: To create a traffic classification rule with priority 10 in a network policy with name my-policy and description example rule, in region region-a, run:
gcloud beta compute network-policies traffic-classification-rules create --priority=10 --action=apply_traffic_classification --network-policy=my-policy --network-policy-region=region-a --dest-ip-ranges=11.0.0.0/8 --description="example rule" --traffic-class tc1 --dscp-mode custom --dscp-value 3 --layer4-configs=tcp:80,udp
REQUIRED FLAGS: --action=ACTION

Action to take if the request matches the match condition. ACTION must be (only one value is supported): apply_traffic_classification.

--dest-ip-ranges=[DEST_IP_RANGE,…]

Destination IP ranges to match for this rule.

--dscp-mode=DSCP_MODE

When set to AUTO, the DSCP value will be picked automatically based on selected traffic class. Otherwise, DSCP value must be specified. DSCP_MODE must be one of: auto, custom.

--layer4-configs=[LAYER4_CONFIG,…]

A list of destination protocols and ports to which the network policy rule will apply.

--network-policy=NETWORK_POLICY

Network policy ID with which to create rule.

--priority=PRIORITY

Priority of the rule to be added. Valid in [1, 2147482647].

--traffic-class=TRAFFIC_CLASS

The traffic class that be applied to matching packet. TRAFFIC_CLASS must be one of: tc1, tc2, tc3, tc4, tc5, tc6.
OPTIONAL FLAGS: --description=DESCRIPTION

An optional, textual description for the rule.

--[no-]disabled

Use this flag to disable the rule. Disabled rules will not affect traffic. Use --disabled to enable and --no-disabled to disable.

--dscp-value=DSCP_VALUE

Custom DSCP value from 0-63 range.

--name=NAME

An optional name for the network policy rule.

--network-policy-region=NETWORK_POLICY_REGION

Region of the network policy to create. Overrides the default compute/region property value for this command invocation.

--src-ip-ranges=[SRC_IP_RANGE,…]

CIDR IP address range.

--target-secure-tags=[TARGET_SECURE_TAGS,…]

An optional, list of target secure tags with a name of the format tagValues/ or full namespaced name

--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,…]

List of target service accounts for the rule.
GCLOUD WIDE FLAGS: These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES: This command is currently in beta and might change without notice. This variant is also available:
gcloud alpha compute network-policies traffic-classification-rules create

gcloud beta compute network-policies traffic-classification-rules create Stay organized with collections Save and categorize content based on your preferences.

gcloud beta compute network-policies traffic-classification-rules create