1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. NetworkFirewall
  5. getNetworkFirewallPolicyTunnelInspectionRules
Oracle Cloud Infrastructure v2.31.0 published on Thursday, Apr 17, 2025 by Pulumi

oci.NetworkFirewall.getNetworkFirewallPolicyTunnelInspectionRules

Explore with Pulumi AI

This data source provides the list of Network Firewall Policy Tunnel Inspection Rules in Oracle Cloud Infrastructure Network Firewall service.

Returns a list of tunnel inspection rules for the network firewall policy.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testNetworkFirewallPolicyTunnelInspectionRules = oci.NetworkFirewall.getNetworkFirewallPolicyTunnelInspectionRules({
    networkFirewallPolicyId: testNetworkFirewallPolicy.id,
    displayName: networkFirewallPolicyTunnelInspectionRuleDisplayName,
    tunnelInspectionRulePriorityOrder: networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder,
});
Copy
import pulumi
import pulumi_oci as oci

test_network_firewall_policy_tunnel_inspection_rules = oci.NetworkFirewall.get_network_firewall_policy_tunnel_inspection_rules(network_firewall_policy_id=test_network_firewall_policy["id"],
    display_name=network_firewall_policy_tunnel_inspection_rule_display_name,
    tunnel_inspection_rule_priority_order=network_firewall_policy_tunnel_inspection_rule_tunnel_inspection_rule_priority_order)
Copy
package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/networkfirewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRules(ctx, &networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesArgs{
			NetworkFirewallPolicyId:           testNetworkFirewallPolicy.Id,
			DisplayName:                       pulumi.StringRef(networkFirewallPolicyTunnelInspectionRuleDisplayName),
			TunnelInspectionRulePriorityOrder: pulumi.IntRef(networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testNetworkFirewallPolicyTunnelInspectionRules = Oci.NetworkFirewall.GetNetworkFirewallPolicyTunnelInspectionRules.Invoke(new()
    {
        NetworkFirewallPolicyId = testNetworkFirewallPolicy.Id,
        DisplayName = networkFirewallPolicyTunnelInspectionRuleDisplayName,
        TunnelInspectionRulePriorityOrder = networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder,
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.NetworkFirewall.NetworkFirewallFunctions;
import com.pulumi.oci.NetworkFirewall.inputs.GetNetworkFirewallPolicyTunnelInspectionRulesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testNetworkFirewallPolicyTunnelInspectionRules = NetworkFirewallFunctions.getNetworkFirewallPolicyTunnelInspectionRules(GetNetworkFirewallPolicyTunnelInspectionRulesArgs.builder()
            .networkFirewallPolicyId(testNetworkFirewallPolicy.id())
            .displayName(networkFirewallPolicyTunnelInspectionRuleDisplayName)
            .tunnelInspectionRulePriorityOrder(networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder)
            .build());

    }
}
Copy
variables:
  testNetworkFirewallPolicyTunnelInspectionRules:
    fn::invoke:
      function: oci:NetworkFirewall:getNetworkFirewallPolicyTunnelInspectionRules
      arguments:
        networkFirewallPolicyId: ${testNetworkFirewallPolicy.id}
        displayName: ${networkFirewallPolicyTunnelInspectionRuleDisplayName}
        tunnelInspectionRulePriorityOrder: ${networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder}
Copy

Using getNetworkFirewallPolicyTunnelInspectionRules

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getNetworkFirewallPolicyTunnelInspectionRules(args: GetNetworkFirewallPolicyTunnelInspectionRulesArgs, opts?: InvokeOptions): Promise<GetNetworkFirewallPolicyTunnelInspectionRulesResult>
function getNetworkFirewallPolicyTunnelInspectionRulesOutput(args: GetNetworkFirewallPolicyTunnelInspectionRulesOutputArgs, opts?: InvokeOptions): Output<GetNetworkFirewallPolicyTunnelInspectionRulesResult>
Copy
def get_network_firewall_policy_tunnel_inspection_rules(display_name: Optional[str] = None,
                                                        filters: Optional[Sequence[_networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesFilter]] = None,
                                                        network_firewall_policy_id: Optional[str] = None,
                                                        tunnel_inspection_rule_priority_order: Optional[int] = None,
                                                        opts: Optional[InvokeOptions] = None) -> GetNetworkFirewallPolicyTunnelInspectionRulesResult
def get_network_firewall_policy_tunnel_inspection_rules_output(display_name: Optional[pulumi.Input[str]] = None,
                                                        filters: Optional[pulumi.Input[Sequence[pulumi.Input[_networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesFilterArgs]]]] = None,
                                                        network_firewall_policy_id: Optional[pulumi.Input[str]] = None,
                                                        tunnel_inspection_rule_priority_order: Optional[pulumi.Input[int]] = None,
                                                        opts: Optional[InvokeOptions] = None) -> Output[GetNetworkFirewallPolicyTunnelInspectionRulesResult]
Copy
func GetNetworkFirewallPolicyTunnelInspectionRules(ctx *Context, args *GetNetworkFirewallPolicyTunnelInspectionRulesArgs, opts ...InvokeOption) (*GetNetworkFirewallPolicyTunnelInspectionRulesResult, error)
func GetNetworkFirewallPolicyTunnelInspectionRulesOutput(ctx *Context, args *GetNetworkFirewallPolicyTunnelInspectionRulesOutputArgs, opts ...InvokeOption) GetNetworkFirewallPolicyTunnelInspectionRulesResultOutput
Copy

> Note: This function is named GetNetworkFirewallPolicyTunnelInspectionRules in the Go SDK.

public static class GetNetworkFirewallPolicyTunnelInspectionRules 
{
    public static Task<GetNetworkFirewallPolicyTunnelInspectionRulesResult> InvokeAsync(GetNetworkFirewallPolicyTunnelInspectionRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetNetworkFirewallPolicyTunnelInspectionRulesResult> Invoke(GetNetworkFirewallPolicyTunnelInspectionRulesInvokeArgs args, InvokeOptions? opts = null)
}
Copy
public static CompletableFuture<GetNetworkFirewallPolicyTunnelInspectionRulesResult> getNetworkFirewallPolicyTunnelInspectionRules(GetNetworkFirewallPolicyTunnelInspectionRulesArgs args, InvokeOptions options)
public static Output<GetNetworkFirewallPolicyTunnelInspectionRulesResult> getNetworkFirewallPolicyTunnelInspectionRules(GetNetworkFirewallPolicyTunnelInspectionRulesArgs args, InvokeOptions options)
Copy
fn::invoke:
  function: oci:NetworkFirewall/getNetworkFirewallPolicyTunnelInspectionRules:getNetworkFirewallPolicyTunnelInspectionRules
  arguments:
    # arguments dictionary
Copy

The following arguments are supported:

NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
DisplayName string
A filter to return only resources that match the entire display name given.
Filters Changes to this property will trigger replacement. List<GetNetworkFirewallPolicyTunnelInspectionRulesFilter>
TunnelInspectionRulePriorityOrder int
Unique priority order for Tunnel Inspection rules in the network firewall policy.
NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
DisplayName string
A filter to return only resources that match the entire display name given.
Filters Changes to this property will trigger replacement. []GetNetworkFirewallPolicyTunnelInspectionRulesFilter
TunnelInspectionRulePriorityOrder int
Unique priority order for Tunnel Inspection rules in the network firewall policy.
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
displayName String
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. List<GetPolicyTunnelInspectionRulesFilter>
tunnelInspectionRulePriorityOrder Integer
Unique priority order for Tunnel Inspection rules in the network firewall policy.
networkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
displayName string
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. GetNetworkFirewallPolicyTunnelInspectionRulesFilter[]
tunnelInspectionRulePriorityOrder number
Unique priority order for Tunnel Inspection rules in the network firewall policy.
network_firewall_policy_id This property is required. str
Unique Network Firewall Policy identifier
display_name str
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. Sequence[networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesFilter]
tunnel_inspection_rule_priority_order int
Unique priority order for Tunnel Inspection rules in the network firewall policy.
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
displayName String
A filter to return only resources that match the entire display name given.
filters Changes to this property will trigger replacement. List<Property Map>
tunnelInspectionRulePriorityOrder Number
Unique priority order for Tunnel Inspection rules in the network firewall policy.

getNetworkFirewallPolicyTunnelInspectionRules Result

The following output properties are available:

id String
The provider-assigned unique ID for this managed resource.
networkFirewallPolicyId String
tunnelInspectionRuleSummaryCollections List<Property Map>
The list of tunnel_inspection_rule_summary_collection.
displayName String
filters List<Property Map>
tunnelInspectionRulePriorityOrder Number

Supporting Types

GetNetworkFirewallPolicyTunnelInspectionRulesFilter

Name This property is required. string
Name for the Tunnel Inspection Rule, must be unique within the policy.
Values This property is required. List<string>
Regex bool
Name This property is required. string
Name for the Tunnel Inspection Rule, must be unique within the policy.
Values This property is required. []string
Regex bool
name This property is required. String
Name for the Tunnel Inspection Rule, must be unique within the policy.
values This property is required. List<String>
regex Boolean
name This property is required. string
Name for the Tunnel Inspection Rule, must be unique within the policy.
values This property is required. string[]
regex boolean
name This property is required. str
Name for the Tunnel Inspection Rule, must be unique within the policy.
values This property is required. Sequence[str]
regex bool
name This property is required. String
Name for the Tunnel Inspection Rule, must be unique within the policy.
values This property is required. List<String>
regex Boolean

GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollection

items This property is required. List<Property Map>

GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItem

Action This property is required. string
Types of Inspect Action on the Traffic flow.

  • INSPECT - Inspect the traffic.
  • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
Condition This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
Name This property is required. string
Name for the Tunnel Inspection Rule, must be unique within the policy.
NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
ParentResourceId This property is required. string
OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
Position This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
PriorityOrder This property is required. string
The priority order in which this rule should be evaluated
Profile This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
Protocol This property is required. string
Types of Tunnel Inspection Protocol to be applied on the traffic.

  • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
Action This property is required. string
Types of Inspect Action on the Traffic flow.

  • INSPECT - Inspect the traffic.
  • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
Condition This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
Name This property is required. string
Name for the Tunnel Inspection Rule, must be unique within the policy.
NetworkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
ParentResourceId This property is required. string
OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
Position This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
PriorityOrder This property is required. string
The priority order in which this rule should be evaluated
Profile This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
Protocol This property is required. string
Types of Tunnel Inspection Protocol to be applied on the traffic.

  • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
action This property is required. String
Types of Inspect Action on the Traffic flow.

  • INSPECT - Inspect the traffic.
  • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
condition This property is required. GetPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
name This property is required. String
Name for the Tunnel Inspection Rule, must be unique within the policy.
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
parentResourceId This property is required. String
OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
position This property is required. GetPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
priorityOrder This property is required. String
The priority order in which this rule should be evaluated
profile This property is required. GetPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
protocol This property is required. String
Types of Tunnel Inspection Protocol to be applied on the traffic.

  • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
action This property is required. string
Types of Inspect Action on the Traffic flow.

  • INSPECT - Inspect the traffic.
  • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
condition This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
name This property is required. string
Name for the Tunnel Inspection Rule, must be unique within the policy.
networkFirewallPolicyId This property is required. string
Unique Network Firewall Policy identifier
parentResourceId This property is required. string
OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
position This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
priorityOrder This property is required. string
The priority order in which this rule should be evaluated
profile This property is required. GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
protocol This property is required. string
Types of Tunnel Inspection Protocol to be applied on the traffic.

  • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
action This property is required. str
Types of Inspect Action on the Traffic flow.

  • INSPECT - Inspect the traffic.
  • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
condition This property is required. networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
name This property is required. str
Name for the Tunnel Inspection Rule, must be unique within the policy.
network_firewall_policy_id This property is required. str
Unique Network Firewall Policy identifier
parent_resource_id This property is required. str
OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
position This property is required. networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
An object which defines the position of the rule.
priority_order This property is required. str
The priority order in which this rule should be evaluated
profile This property is required. networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
protocol This property is required. str
Types of Tunnel Inspection Protocol to be applied on the traffic.

  • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
action This property is required. String
Types of Inspect Action on the Traffic flow.

  • INSPECT - Inspect the traffic.
  • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
condition This property is required. Property Map
Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
name This property is required. String
Name for the Tunnel Inspection Rule, must be unique within the policy.
networkFirewallPolicyId This property is required. String
Unique Network Firewall Policy identifier
parentResourceId This property is required. String
OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
position This property is required. Property Map
An object which defines the position of the rule.
priorityOrder This property is required. String
The priority order in which this rule should be evaluated
profile This property is required. Property Map
Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
protocol This property is required. String
Types of Tunnel Inspection Protocol to be applied on the traffic.

  • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.

GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition

DestinationAddresses This property is required. List<string>
An array of address list names to be evaluated against the traffic destination address.
SourceAddresses This property is required. List<string>
An array of address list names to be evaluated against the traffic source address.
DestinationAddresses This property is required. []string
An array of address list names to be evaluated against the traffic destination address.
SourceAddresses This property is required. []string
An array of address list names to be evaluated against the traffic source address.
destinationAddresses This property is required. List<String>
An array of address list names to be evaluated against the traffic destination address.
sourceAddresses This property is required. List<String>
An array of address list names to be evaluated against the traffic source address.
destinationAddresses This property is required. string[]
An array of address list names to be evaluated against the traffic destination address.
sourceAddresses This property is required. string[]
An array of address list names to be evaluated against the traffic source address.
destination_addresses This property is required. Sequence[str]
An array of address list names to be evaluated against the traffic destination address.
source_addresses This property is required. Sequence[str]
An array of address list names to be evaluated against the traffic source address.
destinationAddresses This property is required. List<String>
An array of address list names to be evaluated against the traffic destination address.
sourceAddresses This property is required. List<String>
An array of address list names to be evaluated against the traffic source address.

GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition

AfterRule This property is required. string
Identifier for rule after which this rule lies.
BeforeRule This property is required. string
Identifier for rule before which this rule lies.
AfterRule This property is required. string
Identifier for rule after which this rule lies.
BeforeRule This property is required. string
Identifier for rule before which this rule lies.
afterRule This property is required. String
Identifier for rule after which this rule lies.
beforeRule This property is required. String
Identifier for rule before which this rule lies.
afterRule This property is required. string
Identifier for rule after which this rule lies.
beforeRule This property is required. string
Identifier for rule before which this rule lies.
after_rule This property is required. str
Identifier for rule after which this rule lies.
before_rule This property is required. str
Identifier for rule before which this rule lies.
afterRule This property is required. String
Identifier for rule after which this rule lies.
beforeRule This property is required. String
Identifier for rule before which this rule lies.

GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile

MustReturnTrafficToSource This property is required. bool
Return scanned VXLAN tunnel traffic to source.
MustReturnTrafficToSource This property is required. bool
Return scanned VXLAN tunnel traffic to source.
mustReturnTrafficToSource This property is required. Boolean
Return scanned VXLAN tunnel traffic to source.
mustReturnTrafficToSource This property is required. boolean
Return scanned VXLAN tunnel traffic to source.
must_return_traffic_to_source This property is required. bool
Return scanned VXLAN tunnel traffic to source.
mustReturnTrafficToSource This property is required. Boolean
Return scanned VXLAN tunnel traffic to source.

Package Details

Repository
oci pulumi/pulumi-oci
License
Apache-2.0
Notes
This Pulumi package is based on the oci Terraform Provider.