AppServiceIPSecurityRestriction Class

  • Reference

Definition

Namespace:
Azure.ResourceManager.AppService.Models
Assembly:
Azure.ResourceManager.AppService.dll
Package:
Azure.ResourceManager.AppService v1.2.0
Package:
Azure.ResourceManager.AppService v1.3.0-beta.1
Source:
AppServiceIPSecurityRestriction.cs
Source:
AppServiceIPSecurityRestriction.cs

IP security restriction on an app.

public class AppServiceIPSecurityRestriction : System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.AppService.Models.AppServiceIPSecurityRestriction>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.AppService.Models.AppServiceIPSecurityRestriction>
type AppServiceIPSecurityRestriction = class
    interface IJsonModel<AppServiceIPSecurityRestriction>
    interface IPersistableModel<AppServiceIPSecurityRestriction>
Public Class AppServiceIPSecurityRestriction
Implements IJsonModel(Of AppServiceIPSecurityRestriction), IPersistableModel(Of AppServiceIPSecurityRestriction)
Inheritance
Object
AppServiceIPSecurityRestriction
Implements
IJsonModel<AppServiceIPSecurityRestriction> IPersistableModel<AppServiceIPSecurityRestriction> IPersistableModel<T>

Constructors

AppServiceIPSecurityRestriction()

Initializes a new instance of AppServiceIPSecurityRestriction.

Properties

Action

Allow or Deny access for this IP range.
Description

IP restriction rule description.
Headers

IP restriction rule headers. X-Forwarded-Host (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Host#Examples). The matching logic is ..

  • If the property is null or empty (default), all hosts(or lack of) are allowed.
  • A value is compared using ordinal-ignore-case (excluding port number).
  • Subdomain wildcards are permitted but don't match the root domain. For example, *.contoso.com matches the subdomain foo.contoso.com but not the root domain contoso.com or multi-level foo.bar.contoso.com
  • Unicode host names are allowed but are converted to Punycode for matching.

X-Forwarded-For (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For#Examples). The matching logic is ..

  • If the property is null or empty (default), any forwarded-for chains (or lack of) are allowed.
  • If any address (excluding port number) in the chain (comma separated) matches the CIDR defined by the property.

X-Azure-FDID and X-FD-HealthProbe. The matching logic is exact match.
IPAddressOrCidr

IP address the security restriction is valid for. It can be in form of pure ipv4 address (required SubnetMask property) or CIDR notation such as ipv4/mask (leading bit match). For CIDR, SubnetMask property must not be specified.
Name

IP restriction rule name.
Priority

Priority of IP restriction rule.
SubnetMask

Subnet mask for the range of IP addresses the restriction is valid for.
SubnetTrafficTag

(internal) Subnet traffic tag.
Tag

Defines what this IP filter will be used for. This is to support IP filtering on proxies.
VnetSubnetResourceId

Virtual network resource id.
VnetTrafficTag

(internal) Vnet traffic tag.

Methods

JsonModelWriteCore(Utf8JsonWriter, ModelReaderWriterOptions)

Explicit Interface Implementations

IJsonModel<AppServiceIPSecurityRestriction>.Create(Utf8JsonReader, ModelReaderWriterOptions)

Reads one JSON value (including objects or arrays) from the provided reader and converts it to a model.
IJsonModel<AppServiceIPSecurityRestriction>.Write(Utf8JsonWriter, ModelReaderWriterOptions)

Writes the model to the provided Utf8JsonWriter.
IPersistableModel<AppServiceIPSecurityRestriction>.Create(BinaryData, ModelReaderWriterOptions)

Converts the provided BinaryData into a model.
IPersistableModel<AppServiceIPSecurityRestriction>.GetFormatFromOptions(ModelReaderWriterOptions)

Gets the data interchange format (JSON, Xml, etc) that the model uses when communicating with the service.
IPersistableModel<AppServiceIPSecurityRestriction>.Write(ModelReaderWriterOptions)

Writes the model into a BinaryData.

Applies to