Mention support for all protocols in firewall (#769)

Fixes #750
This commit is contained in:
Vincent Roseberry 2017-11-20 16:39:37 -08:00 committed by GitHub
parent 3a945770e5
commit 75a633cf28
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -42,10 +42,14 @@ The following arguments are supported:
* `network` - (Required) The name or self_link of the network to attach this firewall to.
- - -
* `allow` - (Required) Can be specified multiple times for each allow
rule. Each allow block supports fields documented below.
- - -
* `deny` - (Optional) Can be specified multiple times for each deny
rule. Each deny block supports fields documented below. Can be specified
instead of allow.
* `description` - (Optional) Textual description field.
@ -63,12 +67,6 @@ The following arguments are supported:
* `target_tags` - (Optional) A list of target tags for this firewall.
- - -
* `deny` - (Optional) Can be specified multiple times for each deny
rule. Each deny block supports fields documented below. Can be specified
instead of allow.
* `direction` - (Optional) Direction of traffic to which this firewall applies;
One of `INGRESS` or `EGRESS`. Defaults to `INGRESS`.
@ -90,14 +88,16 @@ The following arguments are supported:
The `allow` block supports:
* `protocol` - (Required) The name of the protocol to allow.
* `protocol` - (Required) The name of the protocol to allow. This value can either be one of the following well
known protocol strings (tcp, udp, icmp, esp, ah, sctp), or the IP protocol number, or `all`.
* `ports` - (Optional) List of ports and/or port ranges to allow. This can
only be specified if the protocol is TCP or UDP.
The `deny` block supports:
* `protocol` - (Required) The name of the protocol to allow.
* `protocol` - (Required) The name of the protocol to allow. This value can either be one of the following well
known protocol strings (tcp, udp, icmp, esp, ah, sctp), or the IP protocol number, or `all`.
* `ports` - (Optional) List of ports and/or port ranges to allow. This can
only be specified if the protocol is TCP or UDP.