Skip to content

IpGroups reference in AzureFirewall #7807

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lirenhe merged 9 commits into from
Nov 27, 2019
+758 −29
Merged

IpGroups reference in AzureFirewall #7807

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
ec626aa
IpGroups reference in AzureFirewall
ssripadham Nov 20, 2019
6b38344
Fixed examples
ssripadham Nov 20, 2019
dd5697e
Committing changes to remove verbs from Swagger descriptions (#7788)
v-shhatt Nov 21, 2019
c9dd44f
committing changes to fix java sdk timeout issue (#7802)
v-shhatt Nov 21, 2019
63b83ff
IpGroups reference in AzureFirewall
ssripadham Nov 20, 2019
cf72d8a
Fixed examples
ssripadham Nov 20, 2019
708ea47
Merge branch 'ipgroups_version_branch' of https://github.com/ssripadh…
ssripadham Nov 21, 2019
a152af8
prettier fix
ssripadham Nov 22, 2019
09fe08d
prettier --write
ssripadham Nov 22, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion ...on/network/resource-manager/Microsoft.Network/stable/2019-11-01/availableDelegations.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -169,7 +169,7 @@
"items": {
"type": "string"
},
"description": "Describes the actions permitted to the service upon delegation."
"description": "The actions permitted to the service upon delegation."
}
},
"description": "The serviceName of an AvailableDelegation indicates a possible delegation for a subnet."
Expand Down
33 changes: 33 additions & 0 deletions ...ification/network/resource-manager/Microsoft.Network/stable/2019-11-01/azureFirewall.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -141,6 +141,9 @@
},
"Get Azure Firewall With Additional Properties": {
"$ref": "./examples/AzureFirewallGetWithAdditionalProperties.json"
},
"Get Azure Firewall With IpGroups": {
"$ref": "./examples/AzureFirewallGetWithIpGroups.json"
}
}
},
Expand Down Expand Up @@ -213,6 +216,9 @@
},
"Create Azure Firewall With Additional Properties": {
"$ref": "./examples/AzureFirewallPutWithAdditionalProperties.json"
},
"Create Azure Firewall With IpGroups": {
"$ref": "./examples/AzureFirewallPutWithIpGroups.json"
}
},
"x-ms-long-running-operation": true,
Expand Down Expand Up @@ -421,6 +427,21 @@
},
"description": "Public IP Address associated with azure firewall."
},
"AzureFirewallIpGroups": {
"properties": {
"id": {
"type": "string",
"readOnly": true,
"description": "Resource ID."
},
"changeNumber": {
"type": "string",
"readOnly": true,
"description": "The iteration number."
}
},
"description": "IpGroups associated with azure firewall."
},
"HubIPAddresses": {
"properties": {
"publicIPAddresses": {
Expand All @@ -437,6 +458,13 @@
},
"description": "IP addresses associated with azure firewall."
},
"IpGroups": {
"type": "array",
"description": "List of IpGroups associated with azure firewall.",
"items": {
"$ref": "#/definitions/AzureFirewallIpGroups"
}
},
"AzureFirewallPropertiesFormat": {
"properties": {
"applicationRuleCollections": {
Expand Down Expand Up @@ -489,6 +517,11 @@
"description": "IP addresses associated with AzureFirewall.",
"$ref": "#/definitions/HubIPAddresses"
},
"ipGroups": {
"readOnly": true,
"description": "IpGroups associated with AzureFirewall.",
"$ref": "#/definitions/IpGroups"
},
"sku": {
"description": "The Azure Firewall Resource SKU.",
"$ref": "#/definitions/AzureFirewallSku"
Expand Down
1 change: 1 addition & 0 deletions ...twork/resource-manager/Microsoft.Network/stable/2019-11-01/examples/AzureFirewallGet.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,6 +168,7 @@
}
}
],
"ipGroups": [],
"additionalProperties": {}
}
}
Expand Down
189 changes: 189 additions & 0 deletions ...ce-manager/Microsoft.Network/stable/2019-11-01/examples/AzureFirewallGetWithIpGroups.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,189 @@
{
"parameters": {
"api-version": "2019-11-01",
"subscriptionId": "subid",
"resourceGroupName": "rg1",
"azureFirewallName": "azurefirewall"
},
"responses": {
"200": {
"body": {
"name": "azurefirewall",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/azureFirewalls/azurefirewall",
"type": "Microsoft.Network/azureFirewalls",
"etag": "w/\\00000000-0000-0000-0000-000000000000\\",
"location": "West US",
"zones": [],
"tags": {
"key1": "value1"
},
"properties": {
"provisioningState": "Succeeded",
"sku": {
"name": "AZFW_VNet",
"tier": "Standard"
},
"threatIntelMode": "Alert",
"ipConfigurations": [
{
"name": "azureFirewallIpConfiguration",
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/azureFirewalls/azurefirewallgw/ipConfigurations/azureFirewallIpConfiguration",
"etag": "w/\\00000000-0000-0000-0000-000000000000\\",
"properties": {
"provisioningState": "Succeeded",
"privateIPAddress": "10.0.0.0",
"subnet": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/virtualNetworks/vnet2/subnets/AzureFirewallSubnet"
},
"publicIPAddress": {
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/publicIPAddresses/pipName"
}
}
}
],
"applicationRuleCollections": [
{
"name": "apprulecoll",
"properties": {
"priority": 110,
"action": {
"type": "Deny"
},
"rules": [
{
"name": "rule1",
"description": "Deny inbound rule",
"protocols": [
{
"protocolType": "Https",
"port": 443
}
],
"targetFqdns": [
"www.test.com"
],
"sourceIpGroups": [
"/subscriptions/subId/providers/Microsoft.Network/resourceGroup/myResourceGroup/ipGroups/ipGroups1"
]
}
]
}
}
],
"natRuleCollections": [
{
"name": "natrulecoll",
"properties": {
"priority": 112,
"action": {
"type": "Dnat"
},
"rules": [
{
"name": "DNAT-HTTPS-traffic",
"description": "D-NAT all outbound web traffic for inspection",
"sourceAddresses": [
"*"
],
"destinationAddresses": [
"1.2.3.4"
],
"destinationPorts": [
"443"
],
"protocols": [
"TCP"
],
"translatedAddress": "1.2.3.5",
"translatedPort": "8443"
},
{
"name": "DNAT-HTTP-traffic-With-FQDN",
"description": "D-NAT all inbound web traffic for inspection",
"sourceIpGroups": [
"/subscriptions/subId/providers/Microsoft.Network/resourceGroup/myResourceGroup/ipGroups/ipGroups1"
],
"destinationAddresses": [
"1.2.3.4"
],
"destinationPorts": [
"80"
],
"protocols": [
"TCP"
],
"translatedFqdn": "internalhttpserver",
"translatedPort": "880"
}
]
}
}
],
"networkRuleCollections": [
{
"name": "netrulecoll",
"properties": {
"priority": 112,
"action": {
"type": "Deny"
},
"rules": [
{
"name": "L4-traffic",
"description": "Block traffic based on source IPs and ports",
"sourceAddresses": [
"192.168.1.1-192.168.1.12",
"10.1.4.12-10.1.4.255"
],
"destinationPorts": [
"443-444",
"8443"
],
"destinationIpGroups": [
"/subscriptions/subId/providers/Microsoft.Network/resourceGroup/myResourceGroup/ipGroups/ipGroups2"
],
"protocols": [
"TCP"
]
},
{
"name": "L4-traffic-with-FQDN",
"description": "Block traffic based on source IPs and ports to amazon",
"sourceIpGroups": [
"/subscriptions/subId/providers/Microsoft.Network/resourceGroup/myResourceGroup/ipGroups/ipGroups3"
],
"destinationPorts": [
"443-444",
"8443"
],
"destinationFqdns": [
"www.amazon.com"
],
"protocols": [
"TCP"
]
}
]
}
}
],
"ipGroups": [
{
"id": "/subscriptions/subId/providers/Microsoft.Network/resourceGroup/myResourceGroup/ipGroups/ipGroups1",
"changeNumber": "5"
},
{
"id": "/subscriptions/subId/providers/Microsoft.Network/resourceGroup/myResourceGroup/ipGroups/ipGroups2",
"changeNumber": "4"
},
{
"id": "/subscriptions/subId/providers/Microsoft.Network/resourceGroup/myResourceGroup/ipGroups/ipGroups3",
"changeNumber": "1"
}
],
"additionalProperties": {}
}
}
}
}
}
1 change: 1 addition & 0 deletions ...ource-manager/Microsoft.Network/stable/2019-11-01/examples/AzureFirewallGetWithZones.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -172,6 +172,7 @@
}
}
],
"ipGroups": [],
"additionalProperties": {}
}
}
Expand Down
1 change: 1 addition & 0 deletions ...anager/Microsoft.Network/stable/2019-11-01/examples/AzureFirewallListByResourceGroup.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -165,6 +165,7 @@
}
}
],
"ipGroups": [],
"additionalProperties": {
"key1": "value1",
"key2": "value2"
Expand Down
1 change: 1 addition & 0 deletions ...manager/Microsoft.Network/stable/2019-11-01/examples/AzureFirewallListBySubscription.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -164,6 +164,7 @@
}
}
],
"ipGroups": [],
"additionalProperties": {
"key1": "value1",
"key2": "value2"
Expand Down
1 change: 1 addition & 0 deletions ...twork/resource-manager/Microsoft.Network/stable/2019-11-01/examples/AzureFirewallPut.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -322,6 +322,7 @@
}
}
],
"ipGroups": [],
"additionalProperties": {}
}
}
Expand Down
1 change: 1 addition & 0 deletions .../resource-manager/Microsoft.Network/stable/2019-11-01/examples/AzureFirewallPutInHub.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,6 +94,7 @@
],
"privateIPAddress": "10.0.0.0"
},
"ipGroups": [],
"additionalProperties": {}
}
}
Expand Down
1 change: 1 addition & 0 deletions ...icrosoft.Network/stable/2019-11-01/examples/AzureFirewallPutWithAdditionalProperties.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -156,6 +156,7 @@
}
}
],
"ipGroups": [],
"additionalProperties": {
"key1": "value1",
"key2": "value2"
Expand Down
Loading