Class: AWSCDK::NetworkFirewall::CfnFirewallPolicy::FlowTimeoutsProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::NetworkFirewall::CfnFirewallPolicy::FlowTimeoutsProperty

Defined in:

network_firewall/cfn_firewall_policy.rb

Overview

Describes the amount of time that can pass without any traffic sent through the firewall before the firewall determines that the connection is idle and Network Firewall removes the flow entry from its flow table.

Existing connections and flows are not impacted when you update this value. Only new connections after you update this value are impacted.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.html

Instance Attribute Summary

• #tcp_idle_timeout_seconds ⇒ Numeric^? readonly

  The number of seconds that can pass without any TCP traffic sent through the firewall before the firewall determines that the connection is idle.

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(tcp_idle_timeout_seconds: nil) ⇒ FlowTimeoutsProperty constructor

  A new instance of FlowTimeoutsProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(tcp_idle_timeout_seconds: nil) ⇒ FlowTimeoutsProperty

Returns a new instance of FlowTimeoutsProperty.

Parameters:

• tcp_idle_timeout_seconds (Numeric, nil) (defaults to: nil) —

  The number of seconds that can pass without any TCP traffic sent through the firewall before the firewall determines that the connection is idle.

# File 'network_firewall/cfn_firewall_policy.rb', line 855

def initialize(tcp_idle_timeout_seconds: nil)
  @tcp_idle_timeout_seconds = tcp_idle_timeout_seconds
  Jsii::Type.check_type(@tcp_idle_timeout_seconds, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJudW1iZXIifQ==")), "tcpIdleTimeoutSeconds") unless @tcp_idle_timeout_seconds.nil?
end

Instance Attribute Details

#tcp_idle_timeout_seconds ⇒ Numeric^? (readonly)

The number of seconds that can pass without any TCP traffic sent through the firewall before the firewall determines that the connection is idle.

After the idle timeout passes, data packets are dropped, however, the next TCP SYN packet is considered a new flow and is processed by the firewall. Clients or targets can use TCP keepalive packets to reset the idle timeout.

You can define the TcpIdleTimeoutSeconds value to be between 60 and 6000 seconds. If no value is provided, it defaults to 350 seconds.

Returns:

• (Numeric, nil)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-networkfirewall-firewallpolicy-flowtimeouts.html#cfn-networkfirewall-firewallpolicy-flowtimeouts-tcpidletimeoutseconds

# File 'network_firewall/cfn_firewall_policy.rb', line 868

def tcp_idle_timeout_seconds
  @tcp_idle_timeout_seconds
end

Class Method Details

.jsii_properties ⇒ Object

# File 'network_firewall/cfn_firewall_policy.rb', line 870

def self.jsii_properties
  {
    :tcp_idle_timeout_seconds => "tcpIdleTimeoutSeconds",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'network_firewall/cfn_firewall_policy.rb', line 876

def to_jsii
  result = {}
  result.merge!({
    "tcpIdleTimeoutSeconds" => @tcp_idle_timeout_seconds,
  })
  result.compact
end